last executing test programs: 3m46.803670963s ago: executing program 2 (id=7778): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x5c3b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0xfffffffffffffffe}}], 0x18}, 0x40) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000f6ff001001200e01000000dc00000000060000488798aae39dc09c50755ed9b3229114d708d2c52820abf364"], 0x18}, 0xfc00) socketpair(0x1, 0x801, 0x0, &(0x7f0000000500)) syz_clone(0x188000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000002380)='devices.allow\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 3m46.364499851s ago: executing program 2 (id=7779): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x200, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r1 = socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3m46.048195813s ago: executing program 2 (id=7780): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000fd2400000000000000008500000050"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x912}, 0x60) 3m45.900839566s ago: executing program 2 (id=7781): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x0, @perf_config_ext={0x0, 0x80000000000004}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff0000, 0x9, 0x0, 0xffffffff, 0x0, 0x9ba5}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x20}, 0x200040c4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000900000000000000008000001800", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500ebff00000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) socket$kcm(0x1e, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x10, 0x3, 0x9, &(0x7f0000000800)) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 3m45.697912831s ago: executing program 2 (id=7782): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000010c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf062, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22ffff) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f0000000040), 0x44) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r3) 3m44.338630936s ago: executing program 2 (id=7783): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x5, 0x8, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) (async) close(r2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000280)="7ac534302133142e009934cecc4a38654613b6f8aea25342017365f20a5e82d7a2a128bb6eb4995d1a56c4ea94c44d691716605f66e227432e597f30b54a3c6ec45ea9fc0ad53ca70f0711999fb45485fd4daa44ec3b51a8f6394393beae68a179b0a9a1208ac94537910834f1a5ec9c9e836ebd43cd2826810c4d00a3ce75c667d4f9cfec377e1ee009b1cea66b23c8e199b0fa271729c9c78def3ee94723078a230bc79376ce9eb3fc8680dbf96835d5da705b7a6dcfc152f4adc891c79739e114ab9da366", &(0x7f0000000380)=""/121, &(0x7f0000000540)="7eb98913aeeeac17d284654532d9f66a890d9d5c74f2913a4d4fd1c316a0bcc1568a76bf1393174fd1e8316538dcf58f0768236f72ca6e363101789151fe296f4cc2aeca03921a6539893d019393b181f1a55433e47163cae7a4ffdcfb5cc9c304b9b389a9d968f7a9eb403bfdf775d84598809c6d0a", &(0x7f00000005c0)="2e1223dcc1e21887f2ba1876ea98f09500bc4160e5138812abc821a92f09cc9e687e6d3598277ba4803ffd3ec9e9108302bb408f23089d9035a45d407486a1bd4ee00574deb347dbfb505a2c14535dbb540314f813b3b53be86fc69e4f6f61231815cdadd45972de64c7d91cc1cec6beaacea840e26058333125708d42d5b009fbf6cc87965bf8582dbcc0d41b2a8d9f7e6cc6e3df7025d88a9d39072f798fe872a075164432e21e5949ad51c3db13e21fde1be6eedadcfecdf1f82ac9fbae67d22651b4361f6edbda1b568b07e0c13ab3ad555e18e19dc8f3415c17c20fa6e51cb3ba", 0x80000000, r1}, 0x38) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) (async) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r3, 0x84, 0x1f, &(0x7f0000000100), 0x120) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) 3m28.631005539s ago: executing program 32 (id=7783): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x5, 0x8, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) (async) close(r2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000280)="7ac534302133142e009934cecc4a38654613b6f8aea25342017365f20a5e82d7a2a128bb6eb4995d1a56c4ea94c44d691716605f66e227432e597f30b54a3c6ec45ea9fc0ad53ca70f0711999fb45485fd4daa44ec3b51a8f6394393beae68a179b0a9a1208ac94537910834f1a5ec9c9e836ebd43cd2826810c4d00a3ce75c667d4f9cfec377e1ee009b1cea66b23c8e199b0fa271729c9c78def3ee94723078a230bc79376ce9eb3fc8680dbf96835d5da705b7a6dcfc152f4adc891c79739e114ab9da366", &(0x7f0000000380)=""/121, &(0x7f0000000540)="7eb98913aeeeac17d284654532d9f66a890d9d5c74f2913a4d4fd1c316a0bcc1568a76bf1393174fd1e8316538dcf58f0768236f72ca6e363101789151fe296f4cc2aeca03921a6539893d019393b181f1a55433e47163cae7a4ffdcfb5cc9c304b9b389a9d968f7a9eb403bfdf775d84598809c6d0a", &(0x7f00000005c0)="2e1223dcc1e21887f2ba1876ea98f09500bc4160e5138812abc821a92f09cc9e687e6d3598277ba4803ffd3ec9e9108302bb408f23089d9035a45d407486a1bd4ee00574deb347dbfb505a2c14535dbb540314f813b3b53be86fc69e4f6f61231815cdadd45972de64c7d91cc1cec6beaacea840e26058333125708d42d5b009fbf6cc87965bf8582dbcc0d41b2a8d9f7e6cc6e3df7025d88a9d39072f798fe872a075164432e21e5949ad51c3db13e21fde1be6eedadcfecdf1f82ac9fbae67d22651b4361f6edbda1b568b07e0c13ab3ad555e18e19dc8f3415c17c20fa6e51cb3ba", 0x80000000, r1}, 0x38) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) (async) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r3, 0x84, 0x1f, &(0x7f0000000100), 0x120) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) 1m25.501821654s ago: executing program 4 (id=8376): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xe5a2b000, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) 1m22.021380054s ago: executing program 4 (id=8371): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9f, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) close(r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x828, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace220010"], 0xcfa4) 1m18.271887235s ago: executing program 4 (id=8375): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc022, 0x2}, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)}, 0x4000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x20000000) 1m17.920768194s ago: executing program 4 (id=8380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="d2ff03076003008cb29e08f088a8", 0x0, 0xe9000000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m16.752572906s ago: executing program 4 (id=8387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, @perf_bp={0x0, 0x9}, 0x40, 0x0, 0x0, 0x738964d8e6a3f73, 0x1, 0x7, 0xffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0}, 0x1000, 0x1, 0x0, 0x9, 0x9}, 0x0, 0x20000c, r2, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000070443b75e2f794c63926ad93f79f0b104c56991f997e72ba9599da0461d65d8620d579e8063646744bff7009f5c5aa3c4acc4c1ac0611665967ddffeed9db1309d95acb1b8df462584d96795bf7e8cdc5390336e22752b33ae4056754c2ae33fdc9f35ea571afb08f6cccb257d479b639b727660480bf079d19f256ab77bd422cc"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='\x00') r8 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$cgroup_int(r8, &(0x7f0000000040), 0x1) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) 1m16.087075885s ago: executing program 4 (id=8389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x685b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8a26f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x7b) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x4, @perf_bp={0x0}, 0x100b06, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4003500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x41002400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpid() 1m0.922568566s ago: executing program 33 (id=8389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x685b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8a26f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x7b) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x4, @perf_bp={0x0}, 0x100b06, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4003500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x41002400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpid() 57.557695601s ago: executing program 3 (id=8458): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x52, 0x80014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10081, 0x2, @perf_config_ext={0x8, 0x55a5}, 0x10000, 0xc8, 0xfff, 0x7, 0x4, 0x0, 0x400}, 0x0, 0x8, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r2, &(0x7f0000000000), 0x15) 57.444211576s ago: executing program 3 (id=8459): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 57.057858723s ago: executing program 3 (id=8463): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc022, 0x2}, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x20000000) 56.622889s ago: executing program 3 (id=8466): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000004000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000007000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x50, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3449, 0x8000000000000001}, 0x118818, 0x1, 0xffffffff, 0x6, 0x3, 0x2, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x50, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3449, 0x8000000000000001}, 0x118818, 0x1, 0xffffffff, 0x6, 0x3, 0x2, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) close(r1) 56.030639093s ago: executing program 3 (id=8469): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x92) 55.805798884s ago: executing program 1 (id=8470): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0xa, 0x300, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000000000003"], 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 55.672017014s ago: executing program 3 (id=8472): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 54.700653572s ago: executing program 1 (id=8473): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"]) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x0, 0x1, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffd}, 0x0, 0xc8, 0x89, 0x0, 0x3, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 52.009503655s ago: executing program 1 (id=8474): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x50, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3449, 0x8000000000000001}, 0x118818, 0x1, 0xffffffff, 0x6, 0x3, 0x2, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) 51.642556437s ago: executing program 1 (id=8478): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000019000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 51.308120383s ago: executing program 1 (id=8482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa002888"], 0xcfa4) 45.964941441s ago: executing program 1 (id=8499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 40.504122716s ago: executing program 34 (id=8472): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 30.471025426s ago: executing program 35 (id=8499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 6.364932872s ago: executing program 0 (id=8625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_to_bond\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 5.340767302s ago: executing program 6 (id=8629): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000a000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000090) 5.276012156s ago: executing program 5 (id=8630): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @multicast}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9b, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b590111080a97b960ace1cd8816", 0xffeb}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, 0x0, 0xfe33) write$cgroup_devices(r6, 0x0, 0xfffffeff) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea60860160af3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b9040220080006067c09e8fe55a1bc0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fae91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001a80), 0x0, &(0x7f0000000400)=""/166, 0xa6}, 0x40) 2.238309778s ago: executing program 0 (id=8631): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='a\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) close(r3) socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, &(0x7f0000000640)=r2, 0x4) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)}, {&(0x7f0000002b40)="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", 0x1af}], 0x2}, 0x8400) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000500feff849a09eb288e6d3d5924083574ff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000b29cfad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf", 0xd8}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r5}) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000640)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 2.120668594s ago: executing program 6 (id=8632): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x20000000) 2.027468485s ago: executing program 6 (id=8633): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/pid_for_children\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xcc, &(0x7f0000000140)=""/204}, 0x36) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x8820, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0xc8, 0x0, 0x6, 0x2, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd782}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xe) 1.903554773s ago: executing program 5 (id=8634): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400aaac94e640000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1.741734149s ago: executing program 0 (id=8635): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9f3c47ff18000000000000007000000070000000020000000400000000e3ff01050000000300000005000093010004000a000000ffff0000060000261b95e00ff3fea1000500000004000000400000000300000031e28cab08f3182c81000000100002007304000001000000060000000000000e0400000000630000000000000000000d"], 0x0, 0x3c, 0x0, 0x0, 0x6}, 0x28) socket$kcm(0x23, 0x5, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 1.613889518s ago: executing program 6 (id=8636): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 1.601509281s ago: executing program 5 (id=8637): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40002004) sendmsg$inet(r2, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001c80)=[{0x0}], 0x1}, 0x8010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0xf, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="001000"}) 1.508469052s ago: executing program 7 (id=8503): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffeee, 0x10, &(0x7f00000000c0), 0xfffffd67}, 0x48) 1.370897222s ago: executing program 0 (id=8638): r0 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36b7a8c5, 0x0, @perf_config_ext={0x2, 0x4}, 0x10b252, 0x0, 0x0, 0x0, 0x0, 0x4, 0x74b, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @local}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x1, 0x0, 0x0, 0x20000002, 0x640a9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x4002, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) openat$cgroup_procs(r6, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000600)={'virt_wifi0\x00', 0x500}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[0x0], &(0x7f00000001c0), 0x0, 0x22, &(0x7f0000000ac0), 0x0, 0x10, &(0x7f00000006c0), &(0x7f0000000300), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0xffffffffffffffff}, 0x94) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x191}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696b80093da6a97d6c4a54eca89d4979f12acbf89bca0c8cc5f490737b09fd77b8b7fcfa7b94787f81cff59ae583b5309bdb82ff76ceaf739cd254b32cc8e289541b8921aa2aedac4bf6c91c2aab801c459", 0x2ea}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410e0000001ec5bf8cafdd400890bd9cc81000000000000000100070001ac1414aae000000200000005ac141400000c3a04712aae56e4b9ea00000000000000000000000000006f7780cf5ddf8e0000000000000000bb84b023ba5790900700000050d34ea85448ca2bccaf4ef385348689e75c55dcd49e67ef7ab014bcd0769884bd1f5e1e2e7e37dd9f92cb13d5cdc47a53bacec2ec0531054a89e9d78c8d057d7e8962d6c62c3694c264342d3cd9003ddd7a3e6c8df89f6423d60ac36d13d24d1a4346c305719a6f81f7752446"], 0x58}, 0x0) 1.297226149s ago: executing program 6 (id=8639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x55, 0x5, 0x8, 0x5, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10104, 0x0, 0x401, 0x3, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x21, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185600000c0000000000000000000000b7080000000000007b8af8ff00000000b708007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000003000000183000000400000000000000000000009951c0ff01000000850000007b000000"], &(0x7f0000000740)='GPL\x00', 0xfffffff9, 0xdf, &(0x7f0000000780)=""/223, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x6}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xa, 0x773484de, 0x7fffffff}, 0x10, 0x29ed5, 0xffffffffffffffff, 0x4, &(0x7f0000000ac0)=[0xffffffffffffffff], &(0x7f0000000b00)=[{0x2, 0x4, 0xc, 0x6}, {0x0, 0x1, 0x5, 0x5}, {0x0, 0x1, 0xc, 0x5}, {0x0, 0x3, 0x3, 0xc}], 0x10, 0xbc39}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f00000009c0)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x6ee914761acbf9e2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000724fc60", 0x14}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000880)={0x1, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x49, 0x4, @perf_bp={&(0x7f0000000180), 0xe}, 0xf08c, 0x401, 0x2, 0x4, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000a100000018510000070000000000000000000000295301000100000018290000", @ANYRES32=r4, @ANYBLOB="00000000feffffff9500000000000006850000004d000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4, 0x1}, {0x0, 0x2, 0x0, 0x6}, {0x2, 0x5, 0xf, 0xb}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0xbf8}, 0x94) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x4000, 0x0, 0x0, 0x119, 0x0, 0xffffffffffffffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) 905.616737ms ago: executing program 7 (id=8640): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000a000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000090) 720.583948ms ago: executing program 8 (id=8522): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 634.543028ms ago: executing program 5 (id=8641): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdff0000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0xc00) 494.147639ms ago: executing program 0 (id=8642): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x20000000) 447.970389ms ago: executing program 8 (id=8643): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0xb22, 0x4, 0x2, 0x2, 0x7, 0x0, 0x0, 0x332}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 407.025718ms ago: executing program 5 (id=8644): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/pid_for_children\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xcc, &(0x7f0000000140)=""/204}, 0x36) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x8820, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0xc8, 0x0, 0x6, 0x2, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd782}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xe) 167.506512ms ago: executing program 0 (id=8645): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x163, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x2}, 0x2080, 0x0, 0x2, 0x1, 0x7fff, 0x200005, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x4000000) recvmsg$kcm(r1, 0x0, 0x40) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009000000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 84.624511ms ago: executing program 7 (id=8646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x80000002, r0}, 0x38) 39.404201ms ago: executing program 8 (id=8647): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) 1.63203ms ago: executing program 5 (id=8648): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) close(r0) 0s ago: executing program 6 (id=8649): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) kernel console output (not intermixed with test programs): length. [ 1351.632683][T25839] tipc: Started in network mode [ 1351.656207][T25839] tipc: Node identity 9215a268, cluster identity 4711 [ 1351.672397][T25839] tipc: Node number set to 2450891368 [ 1351.709450][T25836] delete_channel: no stack [ 1351.861274][T25848] FAULT_INJECTION: forcing a failure. [ 1351.861274][T25848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.884796][T25848] CPU: 1 PID: 25848 Comm: syz.4.6583 Not tainted syzkaller #0 [ 1351.892359][T25848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1351.902472][T25848] Call Trace: [ 1351.905845][T25848] [ 1351.908819][T25848] dump_stack_lvl+0x188/0x24e [ 1351.913569][T25848] ? show_regs_print_info+0x12/0x12 [ 1351.918825][T25848] ? load_image+0x410/0x410 [ 1351.923430][T25848] ? __lock_acquire+0x7c40/0x7c40 [ 1351.928515][T25848] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1351.934224][T25848] should_fail_ex+0x390/0x4c0 [ 1351.938982][T25848] _copy_from_user+0x2c/0x170 [ 1351.943730][T25848] ____sys_sendmsg+0x31a/0x9a0 [ 1351.948560][T25848] ? __lock_acquire+0x7c40/0x7c40 [ 1351.953654][T25848] ? __sys_sendmsg_sock+0x30/0x30 [ 1351.958750][T25848] ? __import_iovec+0x306/0x510 [ 1351.963674][T25848] ? import_iovec+0x6f/0xa0 [ 1351.968252][T25848] ___sys_sendmsg+0x2a2/0x360 [ 1351.972994][T25848] ? __sys_sendmsg+0x2a0/0x2a0 [ 1351.977834][T25848] ? __lock_acquire+0x7c40/0x7c40 [ 1351.982948][T25848] __se_sys_sendmsg+0x1c3/0x2b0 [ 1351.987852][T25848] ? ct_nmi_exit+0x145/0x1c0 [ 1351.992511][T25848] ? __x64_sys_sendmsg+0x80/0x80 [ 1351.997521][T25848] ? lockdep_hardirqs_on+0x94/0x140 [ 1352.002787][T25848] do_syscall_64+0x4c/0xa0 [ 1352.007265][T25848] ? clear_bhb_loop+0x60/0xb0 [ 1352.012086][T25848] ? clear_bhb_loop+0x60/0xb0 [ 1352.016821][T25848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.022803][T25848] RIP: 0033:0x7fa136f9e159 [ 1352.027261][T25848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.046921][T25848] RSP: 002b:00007fa137e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.055434][T25848] RAX: ffffffffffffffda RBX: 00007fa137225fa0 RCX: 00007fa136f9e159 [ 1352.063451][T25848] RDX: 0000000000000880 RSI: 0000200000000600 RDI: 0000000000000008 [ 1352.071471][T25848] RBP: 00007fa137e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.079482][T25848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.087495][T25848] R13: 00007fa137226038 R14: 00007fa137225fa0 R15: 00007ffcad37f778 [ 1352.095533][T25848] [ 1352.489570][T25859] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6587'. [ 1353.051335][T25863] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6589'. [ 1353.132458][T25863] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6589'. [ 1353.153600][T25868] FAULT_INJECTION: forcing a failure. [ 1353.153600][T25868] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.195843][T25868] CPU: 1 PID: 25868 Comm: syz.3.6591 Not tainted syzkaller #0 [ 1353.203403][T25868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1353.213570][T25868] Call Trace: [ 1353.214546][T25866] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.6590'. [ 1353.216888][T25868] [ 1353.216901][T25868] dump_stack_lvl+0x188/0x24e [ 1353.216933][T25868] ? show_regs_print_info+0x12/0x12 [ 1353.216960][T25868] ? load_image+0x410/0x410 [ 1353.217007][T25868] should_fail_ex+0x390/0x4c0 [ 1353.234469][T25866] netlink: zone id is out of range [ 1353.239197][T25868] should_failslab+0x5/0x20 [ 1353.239227][T25868] slab_pre_alloc_hook+0x59/0x300 [ 1353.239251][T25868] ? __kernel_text_address+0x9/0x30 [ 1353.239280][T25868] ? unwind_get_return_address+0x49/0x80 [ 1353.239310][T25868] kmem_cache_alloc+0x56/0x2f0 [ 1353.239339][T25868] ? skb_clone+0x1e7/0x370 [ 1353.239368][T25868] skb_clone+0x1e7/0x370 [ 1353.239394][T25868] bpf_clone_redirect+0x169/0x4a0 [ 1353.239434][T25868] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 1353.239471][T25868] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1353.239504][T25868] ? __lock_acquire+0x7c40/0x7c40 [ 1353.239536][T25868] ? lock_chain_count+0x20/0x20 [ 1353.239572][T25868] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1353.239601][T25868] ? lockdep_hardirqs_on+0x94/0x140 [ 1353.239633][T25868] ? ktime_get+0x7b/0x270 [ 1353.239658][T25868] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1353.239687][T25868] ? ktime_get_real_ts64+0x440/0x440 [ 1353.239715][T25868] ? read_lock_is_recursive+0x10/0x10 [ 1353.239767][T25868] bpf_test_run+0x4c1/0x830 [ 1353.239817][T25868] ? dst_hold+0xb0/0xb0 [ 1353.239849][T25868] ? eth_get_headlen+0x200/0x200 [ 1353.239875][T25868] ? __build_skb+0x24b/0x3b0 [ 1353.239905][T25868] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1353.239957][T25868] ? cpu_online+0xa0/0xa0 [ 1353.239988][T25868] bpf_prog_test_run+0x31c/0x390 [ 1353.240025][T25868] __sys_bpf+0x62b/0x780 [ 1353.240059][T25868] ? bpf_link_show_fdinfo+0x380/0x380 [ 1353.240107][T25868] ? lock_chain_count+0x20/0x20 [ 1353.240148][T25868] __x64_sys_bpf+0x78/0x90 [ 1353.240180][T25868] do_syscall_64+0x4c/0xa0 [ 1353.240203][T25868] ? clear_bhb_loop+0x60/0xb0 [ 1353.240225][T25868] ? clear_bhb_loop+0x60/0xb0 [ 1353.240250][T25868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1353.240285][T25868] RIP: 0033:0x7f15bb19e159 [ 1353.244972][T25866] netlink: zone id is out of range [ 1353.249498][T25868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.249519][T25868] RSP: 002b:00007f15bc0ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1353.249543][T25868] RAX: ffffffffffffffda RBX: 00007f15bb425fa0 RCX: 00007f15bb19e159 [ 1353.249561][T25868] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1353.249576][T25868] RBP: 00007f15bc0ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.249591][T25868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.249606][T25868] R13: 00007f15bb426038 R14: 00007f15bb425fa0 R15: 00007ffdc40a46a8 [ 1353.249640][T25868] [ 1353.283871][T25863] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1353.289133][T25866] netlink: zone id is out of range [ 1353.581257][T25866] netlink: zone id is out of range [ 1353.588508][T13687] Bluetooth: hci0: command 0x0406 tx timeout [ 1353.599966][T25866] netlink: zone id is out of range [ 1353.608424][T25866] netlink: zone id is out of range [ 1353.613871][T25866] netlink: zone id is out of range [ 1353.623675][T25866] netlink: zone id is out of range [ 1353.982123][T25882] netlink: 'syz.1.6595': attribute type 29 has an invalid length. [ 1354.021416][T25882] netlink: 'syz.1.6595': attribute type 29 has an invalid length. [ 1354.077323][T25882] netlink: 'syz.1.6595': attribute type 29 has an invalid length. [ 1355.532079][T25904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1355.645417][T25905] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6604'. [ 1355.872836][T25905] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1355.886012][T25905] CPU: 0 PID: 25905 Comm: syz.4.6604 Not tainted syzkaller #0 [ 1355.893582][T25905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1355.903737][T25905] Call Trace: [ 1355.907067][T25905] [ 1355.910047][T25905] dump_stack_lvl+0x188/0x24e [ 1355.914795][T25905] ? show_regs_print_info+0x12/0x12 [ 1355.920066][T25905] ? load_image+0x410/0x410 [ 1355.924654][T25905] sysfs_warn_dup+0x8a/0xa0 [ 1355.929231][T25905] sysfs_do_create_link_sd+0xc0/0x110 [ 1355.934687][T25905] device_add+0x83b/0x1050 [ 1355.939192][T25905] wiphy_register+0x1d8b/0x2aa0 [ 1355.944154][T25905] ? cfg80211_event_work+0x40/0x40 [ 1355.949328][T25905] ? minstrel_ht_alloc+0x894/0xa20 [ 1355.954517][T25905] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1355.960666][T25905] ieee80211_register_hw+0x2d48/0x39f0 [ 1355.966201][T25905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1355.972431][T25905] ? ieee80211_register_hw+0xf41/0x39f0 [ 1355.978042][T25905] ? ieee80211_register_hw+0xf41/0x39f0 [ 1355.983664][T25905] ? ieee80211_tasklet_handler+0x20/0x20 [ 1355.989360][T25905] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1355.995336][T25905] ? __debug_object_init+0xed/0x440 [ 1356.000605][T25905] ? memset+0x1e/0x40 [ 1356.004655][T25905] ? __hrtimer_init+0x189/0x270 [ 1356.009576][T25905] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1356.015391][T25905] hwsim_new_radio_nl+0xab7/0xc90 [ 1356.020510][T25905] genl_family_rcv_msg_doit+0x22f/0x350 [ 1356.026132][T25905] ? end_current_label_crit_section+0x170/0x170 [ 1356.032504][T25905] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1356.038481][T25905] ? bpf_lsm_capable+0x5/0x10 [ 1356.043232][T25905] ? security_capable+0x85/0xb0 [ 1356.048163][T25905] genl_rcv_msg+0x601/0x790 [ 1356.052753][T25905] ? genl_bind+0x360/0x360 [ 1356.057281][T25905] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1356.063736][T25905] netlink_rcv_skb+0x1ef/0x440 [ 1356.068571][T25905] ? genl_bind+0x360/0x360 [ 1356.073056][T25905] ? netlink_ack+0x1160/0x1160 [ 1356.077903][T25905] ? down_read+0x1a8/0x2d0 [ 1356.082396][T25905] genl_rcv+0x24/0x40 [ 1356.086439][T25905] netlink_unicast+0x7ad/0x920 [ 1356.091272][T25905] netlink_sendmsg+0x8ad/0xbd0 [ 1356.096117][T25905] ? netlink_getsockopt+0x550/0x550 [ 1356.101383][T25905] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1356.107048][T25905] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1356.112395][T25905] ? security_socket_sendmsg+0x7c/0xa0 [ 1356.117923][T25905] ? netlink_getsockopt+0x550/0x550 [ 1356.123201][T25905] ____sys_sendmsg+0x5ed/0x9a0 [ 1356.128042][T25905] ? lockdep_hardirqs_on+0x94/0x140 [ 1356.133314][T25905] ? __sys_sendmsg_sock+0x30/0x30 [ 1356.138416][T25905] ? ___sys_sendmsg+0x287/0x360 [ 1356.143339][T25905] ___sys_sendmsg+0x2a2/0x360 [ 1356.148082][T25905] ? __sys_sendmsg+0x2a0/0x2a0 [ 1356.152952][T25905] __se_sys_sendmsg+0x1c3/0x2b0 [ 1356.157877][T25905] ? __x64_sys_sendmsg+0x80/0x80 [ 1356.162909][T25905] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1356.168920][T25905] do_syscall_64+0x4c/0xa0 [ 1356.173486][T25905] ? clear_bhb_loop+0x60/0xb0 [ 1356.178220][T25905] ? clear_bhb_loop+0x60/0xb0 [ 1356.182987][T25905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1356.188961][T25905] RIP: 0033:0x7fa136f9e159 [ 1356.193435][T25905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.213108][T25905] RSP: 002b:00007fa137e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1356.221628][T25905] RAX: ffffffffffffffda RBX: 00007fa137225fa0 RCX: 00007fa136f9e159 [ 1356.229660][T25905] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000000000c3 [ 1356.237694][T25905] RBP: 00007fa13703506b R08: 0000000000000000 R09: 0000000000000000 [ 1356.245727][T25905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.253754][T25905] R13: 00007fa137226038 R14: 00007fa137225fa0 R15: 00007ffcad37f778 [ 1356.261917][T25905] [ 1358.842035][T25916] device syzkaller0 entered promiscuous mode [ 1358.973221][T25925] netlink: 'syz.0.6611': attribute type 3 has an invalid length. [ 1359.021935][T25925] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1359.459382][T25935] netlink: 'syz.3.6615': attribute type 3 has an invalid length. [ 1359.474329][T25935] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1360.259021][T25946] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6619'. [ 1361.669176][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.675660][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.592270][T25923] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6610'. [ 1365.601932][T25930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1365.609221][T25930] IPv6: NLM_F_CREATE should be set when creating new route [ 1365.616586][T25930] IPv6: NLM_F_CREATE should be set when creating new route [ 1365.623856][T25930] IPv6: NLM_F_CREATE should be set when creating new route [ 1365.957549][T25956] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6621'. [ 1365.989774][T25956] : renamed from caif0 [ 1366.466213][T25976] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6627'. [ 1366.514468][T25979] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6629'. [ 1366.557099][T25980] netlink: 'syz.0.6628': attribute type 25 has an invalid length. [ 1366.583025][T25980] netlink: 'syz.0.6628': attribute type 28 has an invalid length. [ 1366.702812][T25983] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6630'. [ 1366.839910][T25985] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6631'. [ 1366.861160][T25985] : renamed from caif0 [ 1369.762868][T25985] net_ratelimit: 3662 callbacks suppressed [ 1369.762877][T25985] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1370.199732][T26016] netlink: 'syz.4.6639': attribute type 16 has an invalid length. [ 1370.215552][T26016] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6639'. [ 1371.742719][T26039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6648'. [ 1371.968684][T26045] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6649'. [ 1372.693471][T26057] netlink: 'syz.1.6653': attribute type 27 has an invalid length. [ 1372.704672][T26059] netlink: 'syz.1.6653': attribute type 27 has an invalid length. [ 1372.714404][T26057] netlink: 'syz.1.6653': attribute type 3 has an invalid length. [ 1372.743462][T26059] netlink: 'syz.1.6653': attribute type 3 has an invalid length. [ 1373.976108][T13687] Bluetooth: hci1: command 0x0406 tx timeout [ 1375.944446][T26081] FAULT_INJECTION: forcing a failure. [ 1375.944446][T26081] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.996061][T26081] CPU: 1 PID: 26081 Comm: syz.0.6660 Not tainted syzkaller #0 [ 1376.003620][T26081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1376.013719][T26081] Call Trace: [ 1376.017037][T26081] [ 1376.020002][T26081] dump_stack_lvl+0x188/0x24e [ 1376.024729][T26081] ? show_regs_print_info+0x12/0x12 [ 1376.029985][T26081] ? load_image+0x410/0x410 [ 1376.034595][T26081] ? __might_sleep+0xd0/0xd0 [ 1376.039246][T26081] ? __lock_acquire+0x7c40/0x7c40 [ 1376.044343][T26081] should_fail_ex+0x390/0x4c0 [ 1376.049094][T26081] should_failslab+0x5/0x20 [ 1376.053651][T26081] slab_pre_alloc_hook+0x59/0x300 [ 1376.058735][T26081] ? kvmalloc_node+0x6c/0x180 [ 1376.063557][T26081] __kmem_cache_alloc_node+0x4f/0x270 [ 1376.068989][T26081] ? kvmalloc_node+0x6c/0x180 [ 1376.073736][T26081] __kmalloc_node+0xa2/0x240 [ 1376.078399][T26081] kvmalloc_node+0x6c/0x180 [ 1376.083005][T26081] bpf_test_run_xdp_live+0x1da/0x1a90 [ 1376.088442][T26081] ? 0xffffffffa0004440 [ 1376.092728][T26081] ? text_poke_copy+0x7b/0x90 [ 1376.097547][T26081] ? 0xffffffffa0004440 [ 1376.101752][T26081] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1376.107815][T26081] ? xdp_convert_md_to_buff+0x330/0x330 [ 1376.113473][T26081] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1376.119835][T26081] ? bpf_test_init+0x119/0x140 [ 1376.124663][T26081] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1376.130183][T26081] bpf_prog_test_run_xdp+0x757/0xf80 [ 1376.135571][T26081] ? __lock_acquire+0x7c40/0x7c40 [ 1376.140673][T26081] ? dev_put+0x80/0x80 [ 1376.144805][T26081] ? dev_put+0x80/0x80 [ 1376.148935][T26081] bpf_prog_test_run+0x31c/0x390 [ 1376.153944][T26081] __sys_bpf+0x62b/0x780 [ 1376.158256][T26081] ? bpf_link_show_fdinfo+0x380/0x380 [ 1376.163712][T26081] ? lock_chain_count+0x20/0x20 [ 1376.168629][T26081] __x64_sys_bpf+0x78/0x90 [ 1376.173108][T26081] do_syscall_64+0x4c/0xa0 [ 1376.177579][T26081] ? clear_bhb_loop+0x60/0xb0 [ 1376.182307][T26081] ? clear_bhb_loop+0x60/0xb0 [ 1376.187035][T26081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1376.193001][T26081] RIP: 0033:0x7fd86df9e159 [ 1376.197456][T26081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.217120][T26081] RSP: 002b:00007fd86ee9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1376.225593][T26081] RAX: ffffffffffffffda RBX: 00007fd86e226090 RCX: 00007fd86df9e159 [ 1376.233613][T26081] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1376.241634][T26081] RBP: 00007fd86ee9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.249658][T26081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.257777][T26081] R13: 00007fd86e226128 R14: 00007fd86e226090 R15: 00007ffc314353a8 [ 1376.265809][T26081] [ 1376.299873][T26084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6662'. [ 1376.320009][T26084] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6662'. [ 1376.662402][T26090] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.720608][T26092] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6663'. [ 1377.007232][T26096] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6665'. [ 1377.032296][T26100] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6666'. [ 1377.311486][T26110] netlink: 'syz.4.6669': attribute type 29 has an invalid length. [ 1377.397345][T26110] netlink: 'syz.4.6669': attribute type 29 has an invalid length. [ 1377.436815][T26113] FAULT_INJECTION: forcing a failure. [ 1377.436815][T26113] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.452039][T26112] netlink: 'syz.4.6669': attribute type 29 has an invalid length. [ 1377.482776][T26113] CPU: 0 PID: 26113 Comm: syz.3.6670 Not tainted syzkaller #0 [ 1377.490343][T26113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1377.500473][T26113] Call Trace: [ 1377.503796][T26113] [ 1377.506754][T26113] dump_stack_lvl+0x188/0x24e [ 1377.511474][T26113] ? show_regs_print_info+0x12/0x12 [ 1377.516711][T26113] ? load_image+0x410/0x410 [ 1377.521253][T26113] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1377.527312][T26113] ? __lock_acquire+0x7c40/0x7c40 [ 1377.532381][T26113] should_fail_ex+0x390/0x4c0 [ 1377.537108][T26113] should_failslab+0x5/0x20 [ 1377.541822][T26113] slab_pre_alloc_hook+0x59/0x300 [ 1377.546889][T26113] kmem_cache_alloc+0x56/0x2f0 [ 1377.551686][T26113] ? __build_skb+0x27/0x3b0 [ 1377.556223][T26113] __build_skb+0x27/0x3b0 [ 1377.560587][T26113] ? build_skb+0x14/0x230 [ 1377.564981][T26113] build_skb+0x1e/0x230 [ 1377.569173][T26113] bpf_prog_test_run_skb+0x38d/0x18e0 [ 1377.574591][T26113] ? __fget_files+0x28/0x460 [ 1377.579220][T26113] ? __fget_files+0x3fc/0x460 [ 1377.583953][T26113] ? cpu_online+0xa0/0xa0 [ 1377.588311][T26113] bpf_prog_test_run+0x31c/0x390 [ 1377.593295][T26113] __sys_bpf+0x62b/0x780 [ 1377.597581][T26113] ? bpf_link_show_fdinfo+0x380/0x380 [ 1377.603015][T26113] ? lock_chain_count+0x20/0x20 [ 1377.607939][T26113] __x64_sys_bpf+0x78/0x90 [ 1377.612409][T26113] do_syscall_64+0x4c/0xa0 [ 1377.616858][T26113] ? clear_bhb_loop+0x60/0xb0 [ 1377.621566][T26113] ? clear_bhb_loop+0x60/0xb0 [ 1377.626315][T26113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1377.632258][T26113] RIP: 0033:0x7f15bb19e159 [ 1377.636729][T26113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.656377][T26113] RSP: 002b:00007f15bc0ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1377.664834][T26113] RAX: ffffffffffffffda RBX: 00007f15bb425fa0 RCX: 00007f15bb19e159 [ 1377.672836][T26113] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1377.680840][T26113] RBP: 00007f15bc0ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.688866][T26113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.696972][T26113] R13: 00007f15bb426038 R14: 00007f15bb425fa0 R15: 00007ffdc40a46a8 [ 1377.705003][T26113] [ 1377.892520][T26116] netlink: 'syz.4.6669': attribute type 29 has an invalid length. [ 1377.947404][T26116] netlink: 'syz.4.6669': attribute type 29 has an invalid length. [ 1377.981286][T26114] can: request_module (can-proto-0) failed. [ 1377.990681][T26116] netlink: 'syz.4.6669': attribute type 29 has an invalid length. [ 1378.265904][T26119] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.6671'. [ 1380.395298][T26127] FAULT_INJECTION: forcing a failure. [ 1380.395298][T26127] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.430901][T26127] CPU: 0 PID: 26127 Comm: syz.1.6673 Not tainted syzkaller #0 [ 1380.438462][T26127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1380.448610][T26127] Call Trace: [ 1380.451950][T26127] [ 1380.454937][T26127] dump_stack_lvl+0x188/0x24e [ 1380.459689][T26127] ? show_regs_print_info+0x12/0x12 [ 1380.464955][T26127] ? load_image+0x410/0x410 [ 1380.469542][T26127] ? __lock_acquire+0x7c40/0x7c40 [ 1380.474655][T26127] should_fail_ex+0x390/0x4c0 [ 1380.479412][T26127] should_failslab+0x5/0x20 [ 1380.483972][T26127] slab_pre_alloc_hook+0x59/0x300 [ 1380.489075][T26127] kmem_cache_alloc_node+0x5a/0x310 [ 1380.494378][T26127] ? __alloc_skb+0xf9/0x7d0 [ 1380.498947][T26127] __alloc_skb+0xf9/0x7d0 [ 1380.503342][T26127] tipc_msg_build+0xc9/0xde0 [ 1380.508076][T26127] ? lockdep_hardirqs_on+0x94/0x140 [ 1380.513324][T26127] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1380.519535][T26127] tipc_send_group_msg+0x263/0x550 [ 1380.524771][T26127] ? tipc_send_group_unicast+0x550/0x550 [ 1380.530454][T26127] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1380.536535][T26127] ? lockdep_hardirqs_on+0x94/0x140 [ 1380.541800][T26127] tipc_send_group_unicast+0x4d9/0x550 [ 1380.547320][T26127] ? tipc_send_group_bcast+0xad0/0xad0 [ 1380.552828][T26127] ? wait_woken+0x1c0/0x1c0 [ 1380.557375][T26127] ? __kmem_cache_free+0xb6/0x200 [ 1380.562450][T26127] ? tipc_dest_pop+0x198/0x230 [ 1380.567286][T26127] __tipc_sendmsg+0x14f2/0x2c00 [ 1380.572201][T26127] ? rht_lock+0x150/0x150 [ 1380.576580][T26127] ? irqentry_enter+0x33/0x50 [ 1380.581357][T26127] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1380.587132][T26127] ? perf_trace_preemptirq_template+0x268/0x320 [ 1380.593428][T26127] ? mark_lock+0x94/0x320 [ 1380.597812][T26127] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1380.603869][T26127] ? lock_chain_count+0x20/0x20 [ 1380.608828][T26127] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1380.615047][T26127] ? lockdep_hardirqs_on+0x94/0x140 [ 1380.620319][T26127] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1380.626537][T26127] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1380.631965][T26127] ? _local_bh_enable+0xa0/0xa0 [ 1380.637004][T26127] tipc_sendmsg+0x51/0x70 [ 1380.641383][T26127] ? tipc_recvmsg+0x13d0/0x13d0 [ 1380.646306][T26127] ____sys_sendmsg+0x5ed/0x9a0 [ 1380.651117][T26127] ? __lock_acquire+0x7c40/0x7c40 [ 1380.656212][T26127] ? __sys_sendmsg_sock+0x30/0x30 [ 1380.661279][T26127] ? __import_iovec+0x306/0x510 [ 1380.666219][T26127] ? import_iovec+0x6f/0xa0 [ 1380.671055][T26127] ___sys_sendmsg+0x2a2/0x360 [ 1380.675790][T26127] ? __sys_sendmsg+0x2a0/0x2a0 [ 1380.680623][T26127] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1380.686629][T26127] __se_sys_sendmsg+0x1c3/0x2b0 [ 1380.691529][T26127] ? __x64_sys_sendmsg+0x80/0x80 [ 1380.696526][T26127] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1380.702512][T26127] do_syscall_64+0x4c/0xa0 [ 1380.706997][T26127] ? clear_bhb_loop+0x60/0xb0 [ 1380.711742][T26127] ? clear_bhb_loop+0x60/0xb0 [ 1380.716486][T26127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1380.722440][T26127] RIP: 0033:0x7f495cf9e159 [ 1380.726897][T26127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.746555][T26127] RSP: 002b:00007f495defb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1380.755039][T26127] RAX: ffffffffffffffda RBX: 00007f495d225fa0 RCX: 00007f495cf9e159 [ 1380.763043][T26127] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 1380.771065][T26127] RBP: 00007f495defb090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.779068][T26127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.787068][T26127] R13: 00007f495d226038 R14: 00007f495d225fa0 R15: 00007ffc2803ec68 [ 1380.795098][T26127] [ 1381.478857][T26154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6684'. [ 1381.790667][T26161] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6685'. [ 1381.885291][T26161] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1387.676368][T26180] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6692'. [ 1387.697072][T26180] bridge_slave_1: default FDB implementation only supports local addresses [ 1387.851391][T26184] FAULT_INJECTION: forcing a failure. [ 1387.851391][T26184] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.896525][T26184] CPU: 0 PID: 26184 Comm: syz.4.6694 Not tainted syzkaller #0 [ 1387.904104][T26184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1387.914228][T26184] Call Trace: [ 1387.917639][T26184] [ 1387.920613][T26184] dump_stack_lvl+0x188/0x24e [ 1387.925350][T26184] ? show_regs_print_info+0x12/0x12 [ 1387.930616][T26184] ? load_image+0x410/0x410 [ 1387.935231][T26184] ? __lock_acquire+0x7c40/0x7c40 [ 1387.940327][T26184] should_fail_ex+0x390/0x4c0 [ 1387.945075][T26184] should_failslab+0x5/0x20 [ 1387.949629][T26184] slab_pre_alloc_hook+0x59/0x300 [ 1387.954720][T26184] ? security_sk_alloc+0x47/0x130 [ 1387.959818][T26184] __kmem_cache_alloc_node+0x4f/0x270 [ 1387.965350][T26184] ? security_sk_alloc+0x47/0x130 [ 1387.970441][T26184] __kmalloc+0xa3/0x240 [ 1387.974667][T26184] ? sk_prot_alloc+0xe7/0x210 [ 1387.979414][T26184] security_sk_alloc+0x47/0x130 [ 1387.984340][T26184] sk_prot_alloc+0x101/0x210 [ 1387.989008][T26184] ? sk_alloc+0x20/0x330 [ 1387.993320][T26184] sk_alloc+0x36/0x330 [ 1387.997453][T26184] ? bpf_ctx_init+0x154/0x190 [ 1388.002201][T26184] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1388.007653][T26184] ? __fget_files+0x28/0x460 [ 1388.012321][T26184] ? __fget_files+0x3fc/0x460 [ 1388.017082][T26184] ? cpu_online+0xa0/0xa0 [ 1388.021487][T26184] bpf_prog_test_run+0x31c/0x390 [ 1388.026508][T26184] __sys_bpf+0x62b/0x780 [ 1388.030824][T26184] ? bpf_link_show_fdinfo+0x380/0x380 [ 1388.036333][T26184] ? lock_chain_count+0x20/0x20 [ 1388.041267][T26184] __x64_sys_bpf+0x78/0x90 [ 1388.045750][T26184] do_syscall_64+0x4c/0xa0 [ 1388.050227][T26184] ? clear_bhb_loop+0x60/0xb0 [ 1388.054968][T26184] ? clear_bhb_loop+0x60/0xb0 [ 1388.059729][T26184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1388.065703][T26184] RIP: 0033:0x7fa136f9e159 [ 1388.070176][T26184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.089846][T26184] RSP: 002b:00007fa137e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1388.098330][T26184] RAX: ffffffffffffffda RBX: 00007fa137225fa0 RCX: 00007fa136f9e159 [ 1388.106363][T26184] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1388.114388][T26184] RBP: 00007fa137e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.122419][T26184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.130457][T26184] R13: 00007fa137226038 R14: 00007fa137225fa0 R15: 00007ffcad37f778 [ 1388.138514][T26184] [ 1391.369978][T26214] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6701'. [ 1392.338177][T26221] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6703'. [ 1392.411806][T26221] netlink: 'syz.4.6703': attribute type 1 has an invalid length. [ 1392.428136][T26221] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.6703'. [ 1392.474920][T26227] netlink: 'syz.0.6717': attribute type 25 has an invalid length. [ 1392.528914][T26227] netlink: 'syz.0.6717': attribute type 28 has an invalid length. [ 1392.599254][T26230] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.694289][T26229] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6706'. [ 1392.719962][T26229] bridge_slave_1: default FDB implementation only supports local addresses [ 1392.778130][T26232] netlink: 'syz.3.6708': attribute type 21 has an invalid length. [ 1392.893411][T26245] FAULT_INJECTION: forcing a failure. [ 1392.893411][T26245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.048901][T26245] CPU: 0 PID: 26245 Comm: syz.4.6709 Not tainted syzkaller #0 [ 1393.056476][T26245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1393.066575][T26245] Call Trace: [ 1393.069901][T26245] [ 1393.072875][T26245] dump_stack_lvl+0x188/0x24e [ 1393.077612][T26245] ? show_regs_print_info+0x12/0x12 [ 1393.082869][T26245] ? load_image+0x410/0x410 [ 1393.087433][T26245] ? __lock_acquire+0x7c40/0x7c40 [ 1393.092516][T26245] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1393.098211][T26245] should_fail_ex+0x390/0x4c0 [ 1393.102960][T26245] _copy_from_user+0x2c/0x170 [ 1393.107723][T26245] kstrtouint_from_user+0xda/0x170 [ 1393.112917][T26245] ? kstrtol_from_user+0x190/0x190 [ 1393.118135][T26245] proc_fail_nth_write+0x8b/0x200 [ 1393.123213][T26245] ? proc_fail_nth_read+0x220/0x220 [ 1393.128489][T26245] ? common_file_perm+0x171/0x1c0 [ 1393.133586][T26245] ? proc_fail_nth_read+0x220/0x220 [ 1393.138851][T26245] vfs_write+0x2dc/0x9a0 [ 1393.143161][T26245] ? file_end_write+0x250/0x250 [ 1393.148081][T26245] ? __fget_files+0x28/0x460 [ 1393.152741][T26245] ? __fget_files+0x3fc/0x460 [ 1393.157518][T26245] ? __fdget_pos+0x2ae/0x360 [ 1393.162272][T26245] ? ksys_write+0x70/0x260 [ 1393.166762][T26245] ksys_write+0x14d/0x260 [ 1393.171159][T26245] ? __ia32_sys_read+0x80/0x80 [ 1393.175985][T26245] ? lockdep_hardirqs_on+0x94/0x140 [ 1393.181241][T26245] do_syscall_64+0x4c/0xa0 [ 1393.185701][T26245] ? clear_bhb_loop+0x60/0xb0 [ 1393.190467][T26245] ? clear_bhb_loop+0x60/0xb0 [ 1393.195231][T26245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1393.201196][T26245] RIP: 0033:0x7fa136f5e98e [ 1393.205667][T26245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1393.225334][T26245] RSP: 002b:00007fa137e0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1393.233802][T26245] RAX: ffffffffffffffda RBX: 00007fa137e0d6c0 RCX: 00007fa136f5e98e [ 1393.241827][T26245] RDX: 0000000000000001 RSI: 00007fa137e0d0a0 RDI: 000000000000000c [ 1393.249846][T26245] RBP: 00007fa137e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.257868][T26245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.265891][T26245] R13: 00007fa137226218 R14: 00007fa137226180 R15: 00007ffcad37f778 [ 1393.273944][T26245] [ 1394.279320][T26251] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1394.902834][T26267] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6716'. [ 1397.997615][T26278] netlink: 'syz.0.6721': attribute type 25 has an invalid length. [ 1398.042200][T26278] netlink: 'syz.0.6721': attribute type 28 has an invalid length. [ 1398.284163][T26286] netlink: 'syz.0.6725': attribute type 33 has an invalid length. [ 1398.292265][T26286] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6725'. [ 1398.539802][T26288] netlink: 'syz.2.6722': attribute type 10 has an invalid length. [ 1398.668922][T26295] netlink: 'syz.0.6727': attribute type 29 has an invalid length. [ 1398.791104][ T4275] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 1398.838717][T26288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.846795][T26288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.979360][T26288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.987302][T26288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.997949][T26288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.005531][T26288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.080442][T26288] team0: Port device bridge0 added [ 1399.110179][T26295] netlink: 'syz.0.6727': attribute type 29 has an invalid length. [ 1399.122309][T26299] netlink: 'syz.0.6727': attribute type 29 has an invalid length. [ 1399.763186][T26302] device syzkaller0 entered promiscuous mode [ 1400.304357][T26317] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6733'. [ 1408.145315][T26340] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1408.166140][T26340] syzkaller1: linktype set to 825 [ 1408.174929][T26356] netlink: 'syz.1.6743': attribute type 10 has an invalid length. [ 1408.199903][T26356] team0: Device hsr_slave_0 failed to register rx_handler [ 1408.346847][T26368] device sit0 entered promiscuous mode [ 1408.554306][T26379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6749'. [ 1408.557516][T26374] bridge0: port 3(ip6gretap0) entered blocking state [ 1408.610166][T26374] bridge0: port 3(ip6gretap0) entered disabled state [ 1409.111668][T26374] device ip6gretap0 entered promiscuous mode [ 1409.197804][T26387] netlink: 'syz.1.6752': attribute type 10 has an invalid length. [ 1409.246009][T26387] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1409.287332][T26387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.295295][T26387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.440253][T26387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.447585][T26387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.455191][T26387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.462534][T26387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.578907][T26387] device bridge0 entered promiscuous mode [ 1409.616435][T26387] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1410.251109][T26415] netlink: 'syz.1.6759': attribute type 2 has an invalid length. [ 1410.350414][T26415] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.6759'. [ 1413.129550][T26419] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6763'. [ 1413.148295][T26424] syz.2.6761[26424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1413.148477][T26424] syz.2.6761[26424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1413.157705][T26421] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6762'. [ 1416.644887][T26453] netlink: 'syz.1.6772': attribute type 29 has an invalid length. [ 1416.673761][T26453] netlink: 'syz.1.6772': attribute type 29 has an invalid length. [ 1416.731042][T26457] netlink: 'syz.1.6772': attribute type 29 has an invalid length. [ 1419.420709][T26462] netlink: 'syz.1.6772': attribute type 29 has an invalid length. [ 1419.433680][T26453] netlink: 'syz.1.6772': attribute type 29 has an invalid length. [ 1419.770507][T26486] FAULT_INJECTION: forcing a failure. [ 1419.770507][T26486] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.818180][T26486] CPU: 1 PID: 26486 Comm: syz.0.6780 Not tainted syzkaller #0 [ 1419.825730][T26486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1419.835858][T26486] Call Trace: [ 1419.839162][T26486] [ 1419.842117][T26486] dump_stack_lvl+0x188/0x24e [ 1419.846835][T26486] ? show_regs_print_info+0x12/0x12 [ 1419.852087][T26486] ? load_image+0x410/0x410 [ 1419.856637][T26486] should_fail_ex+0x390/0x4c0 [ 1419.861383][T26486] should_failslab+0x5/0x20 [ 1419.865913][T26486] slab_pre_alloc_hook+0x59/0x300 [ 1419.870969][T26486] ? lockdep_init_map_type+0x98/0x8d0 [ 1419.876406][T26486] ? nf_ct_ext_add+0x1a7/0x3e0 [ 1419.881219][T26486] __kmem_cache_alloc_node+0x4f/0x270 [ 1419.886634][T26486] ? nf_ct_ext_add+0x1a7/0x3e0 [ 1419.891437][T26486] __kmalloc_node_track_caller+0xa0/0x240 [ 1419.897207][T26486] krealloc+0x6a/0x100 [ 1419.901307][T26486] nf_ct_ext_add+0x1a7/0x3e0 [ 1419.905940][T26486] init_conntrack+0x808/0x1210 [ 1419.910743][T26486] ? early_drop+0x870/0x870 [ 1419.915312][T26486] ? nf_conntrack_find_get+0x640/0x640 [ 1419.920804][T26486] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1419.926827][T26486] ? __siphash_unaligned+0x289/0x3d0 [ 1419.932181][T26486] nf_conntrack_in+0xd76/0x1830 [ 1419.937065][T26486] ? lockdep_hardirqs_on+0x94/0x140 [ 1419.942354][T26486] ? nf_ct_pernet+0x270/0x270 [ 1419.947077][T26486] ? ipt_do_table+0x2c1/0x1580 [ 1419.951988][T26486] ? read_lock_is_recursive+0x10/0x10 [ 1419.957396][T26486] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 1419.962925][T26486] ? ipv4_conntrack_local+0x11f/0x200 [ 1419.968447][T26486] ? ipv4_conntrack_in+0x20/0x20 [ 1419.973422][T26486] nf_hook_slow+0xb9/0x200 [ 1419.977984][T26486] ? nf_hook+0x390/0x390 [ 1419.982262][T26486] nf_hook+0x224/0x390 [ 1419.986397][T26486] ? nf_hook+0x9e/0x390 [ 1419.990598][T26486] ? __ip_local_out+0x5d0/0x5d0 [ 1419.995487][T26486] ? nf_hook+0x390/0x390 [ 1419.999782][T26486] ? ip_fast_csum+0x1ea/0x2b0 [ 1420.004489][T26486] __ip_local_out+0x49c/0x5d0 [ 1420.009225][T26486] ? nf_hook+0x390/0x390 [ 1420.013527][T26486] ip_send_skb+0x48/0x1c0 [ 1420.017902][T26486] udp_send_skb+0xa4f/0x13f0 [ 1420.022542][T26486] udp_sendmsg+0x1b46/0x23d0 [ 1420.027161][T26486] ? release_sock+0x2b/0x1b0 [ 1420.031792][T26486] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 1420.036670][T26486] ? udp_cmsg_send+0x350/0x350 [ 1420.041517][T26486] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1420.047539][T26486] ? lock_chain_count+0x20/0x20 [ 1420.052449][T26486] ? __local_bh_enable_ip+0x136/0x1c0 [ 1420.057880][T26486] ? _local_bh_enable+0xa0/0xa0 [ 1420.062780][T26486] ? inet_sendmsg+0x109/0x2a0 [ 1420.067497][T26486] ? inet_sendmsg+0x109/0x2a0 [ 1420.072205][T26486] ? inet_send_prepare+0x250/0x250 [ 1420.077347][T26486] ____sys_sendmsg+0x5ed/0x9a0 [ 1420.082173][T26486] ? __sys_sendmsg_sock+0x30/0x30 [ 1420.087247][T26486] ? __import_iovec+0x306/0x510 [ 1420.092142][T26486] ? import_iovec+0x6f/0xa0 [ 1420.096684][T26486] ___sys_sendmsg+0x2a2/0x360 [ 1420.101410][T26486] ? __sys_sendmsg+0x2a0/0x2a0 [ 1420.106224][T26486] ? __lock_acquire+0x7c40/0x7c40 [ 1420.111310][T26486] __se_sys_sendmsg+0x1c3/0x2b0 [ 1420.116230][T26486] ? __x64_sys_sendmsg+0x80/0x80 [ 1420.121234][T26486] ? lockdep_hardirqs_on+0x94/0x140 [ 1420.126473][T26486] do_syscall_64+0x4c/0xa0 [ 1420.130916][T26486] ? clear_bhb_loop+0x60/0xb0 [ 1420.135620][T26486] ? clear_bhb_loop+0x60/0xb0 [ 1420.140330][T26486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1420.146259][T26486] RIP: 0033:0x7fd86df9e159 [ 1420.150731][T26486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.170390][T26486] RSP: 002b:00007fd86eebb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1420.178836][T26486] RAX: ffffffffffffffda RBX: 00007fd86e225fa0 RCX: 00007fd86df9e159 [ 1420.186842][T26486] RDX: 0000000000046840 RSI: 0000200000000380 RDI: 0000000000000003 [ 1420.194847][T26486] RBP: 00007fd86eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 1420.202871][T26486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1420.210871][T26486] R13: 00007fd86e226038 R14: 00007fd86e225fa0 R15: 00007ffc314353a8 [ 1420.218903][T26486] [ 1420.673340][T26500] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1420.711007][T26500] syzkaller0: linktype set to 823 [ 1420.929825][T26510] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6789'. [ 1421.876419][T26520] FAULT_INJECTION: forcing a failure. [ 1421.876419][T26520] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.900019][T26517] netlink: 'syz.4.6793': attribute type 15 has an invalid length. [ 1421.929839][T26517] netlink: 'syz.4.6793': attribute type 7 has an invalid length. [ 1421.975740][T26520] CPU: 0 PID: 26520 Comm: syz.3.6792 Not tainted syzkaller #0 [ 1421.983298][T26520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1421.993407][T26520] Call Trace: [ 1421.996745][T26520] [ 1421.999718][T26520] dump_stack_lvl+0x188/0x24e [ 1422.004468][T26520] ? show_regs_print_info+0x12/0x12 [ 1422.009723][T26520] ? load_image+0x410/0x410 [ 1422.014287][T26520] ? __might_sleep+0xd0/0xd0 [ 1422.018964][T26520] ? __lock_acquire+0x7c40/0x7c40 [ 1422.024054][T26520] should_fail_ex+0x390/0x4c0 [ 1422.028801][T26520] should_failslab+0x5/0x20 [ 1422.033447][T26520] slab_pre_alloc_hook+0x59/0x300 [ 1422.038539][T26520] ? sk_prot_alloc+0xe7/0x210 [ 1422.043290][T26520] __kmem_cache_alloc_node+0x4f/0x270 [ 1422.048736][T26520] ? sk_prot_alloc+0xe7/0x210 [ 1422.053494][T26520] __kmalloc+0xa3/0x240 [ 1422.057739][T26520] sk_prot_alloc+0xe7/0x210 [ 1422.062324][T26520] ? sk_alloc+0x20/0x330 [ 1422.066633][T26520] sk_alloc+0x36/0x330 [ 1422.070764][T26520] ? bpf_ctx_init+0x154/0x190 [ 1422.075504][T26520] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1422.080955][T26520] ? __fget_files+0x28/0x460 [ 1422.085614][T26520] ? __fget_files+0x3fc/0x460 [ 1422.090440][T26520] ? cpu_online+0xa0/0xa0 [ 1422.094809][T26520] bpf_prog_test_run+0x31c/0x390 [ 1422.099789][T26520] __sys_bpf+0x62b/0x780 [ 1422.104073][T26520] ? bpf_link_show_fdinfo+0x380/0x380 [ 1422.109502][T26520] ? lock_chain_count+0x20/0x20 [ 1422.114407][T26520] __x64_sys_bpf+0x78/0x90 [ 1422.118886][T26520] do_syscall_64+0x4c/0xa0 [ 1422.123342][T26520] ? clear_bhb_loop+0x60/0xb0 [ 1422.128074][T26520] ? clear_bhb_loop+0x60/0xb0 [ 1422.132786][T26520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1422.138730][T26520] RIP: 0033:0x7f15bb19e159 [ 1422.143182][T26520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.162824][T26520] RSP: 002b:00007f15bc0ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1422.171274][T26520] RAX: ffffffffffffffda RBX: 00007f15bb425fa0 RCX: 00007f15bb19e159 [ 1422.179274][T26520] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1422.187269][T26520] RBP: 00007f15bc0ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1422.195268][T26520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1422.203293][T26520] R13: 00007f15bb426038 R14: 00007f15bb425fa0 R15: 00007ffdc40a46a8 [ 1422.211349][T26520] [ 1423.108541][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.114930][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.609247][T26549] netlink: 'syz.4.6804': attribute type 15 has an invalid length. [ 1423.645861][T26549] netlink: 'syz.4.6804': attribute type 7 has an invalid length. [ 1423.653691][T26549] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6804'. [ 1423.787136][T26556] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.365311][T26573] netlink: 'syz.1.6813': attribute type 29 has an invalid length. [ 1424.410521][T26573] netlink: 'syz.1.6813': attribute type 29 has an invalid length. [ 1424.441388][T26576] netlink: 'syz.1.6813': attribute type 29 has an invalid length. [ 1424.739523][T26575] netlink: 'syz.4.6814': attribute type 10 has an invalid length. [ 1424.825659][T26575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.841564][T26575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.974524][T26575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.982422][T26575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.001493][T26575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.012619][T26575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.180292][T26575] team0: Port device bridge0 added [ 1425.321287][T26600] netlink: 'syz.2.6821': attribute type 5 has an invalid length. [ 1425.457783][T26604] FAULT_INJECTION: forcing a failure. [ 1425.457783][T26604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.484197][T26604] CPU: 0 PID: 26604 Comm: syz.0.6822 Not tainted syzkaller #0 [ 1425.491780][T26604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1425.501928][T26604] Call Trace: [ 1425.505273][T26604] [ 1425.508271][T26604] dump_stack_lvl+0x188/0x24e [ 1425.513068][T26604] ? show_regs_print_info+0x12/0x12 [ 1425.518350][T26604] ? load_image+0x410/0x410 [ 1425.522950][T26604] ? __lock_acquire+0x7c40/0x7c40 [ 1425.528072][T26604] ? memcpy+0x3c/0x60 [ 1425.532153][T26604] should_fail_ex+0x390/0x4c0 [ 1425.536955][T26604] _copy_to_user+0x2c/0x130 [ 1425.541557][T26604] generic_map_lookup_batch+0x829/0xbf0 [ 1425.547239][T26604] ? bpf_map_update_value+0x670/0x670 [ 1425.552720][T26604] ? __fdget+0x17c/0x200 [ 1425.557082][T26604] ? bpf_map_update_value+0x670/0x670 [ 1425.562572][T26604] bpf_map_do_batch+0x2e0/0x5f0 [ 1425.567520][T26604] ? bpf_lsm_bpf+0x5/0x10 [ 1425.571932][T26604] ? security_bpf+0x7a/0xa0 [ 1425.576544][T26604] __sys_bpf+0x6f7/0x780 [ 1425.580891][T26604] ? bpf_link_show_fdinfo+0x380/0x380 [ 1425.586406][T26604] ? lock_chain_count+0x20/0x20 [ 1425.591394][T26604] __x64_sys_bpf+0x78/0x90 [ 1425.595896][T26604] do_syscall_64+0x4c/0xa0 [ 1425.600394][T26604] ? clear_bhb_loop+0x60/0xb0 [ 1425.605151][T26604] ? clear_bhb_loop+0x60/0xb0 [ 1425.609912][T26604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1425.615901][T26604] RIP: 0033:0x7fd86df9e159 [ 1425.620397][T26604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.640109][T26604] RSP: 002b:00007fd86eebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1425.648610][T26604] RAX: ffffffffffffffda RBX: 00007fd86e225fa0 RCX: 00007fd86df9e159 [ 1425.656667][T26604] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 1425.664742][T26604] RBP: 00007fd86eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.672795][T26604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1425.680854][T26604] R13: 00007fd86e226038 R14: 00007fd86e225fa0 R15: 00007ffc314353a8 [ 1425.688964][T26604] [ 1425.828450][T26611] netlink: 124861 bytes leftover after parsing attributes in process `syz.4.6824'. [ 1425.869032][T26611] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1426.032178][T26620] netlink: 'syz.3.6828': attribute type 29 has an invalid length. [ 1427.235081][T26659] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1427.687638][T26670] validate_nla: 5 callbacks suppressed [ 1427.687667][T26670] netlink: 'syz.2.6847': attribute type 39 has an invalid length. [ 1427.708606][T26670] device macvlan0 entered promiscuous mode [ 1428.063186][T26678] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6849'. [ 1428.460689][T26684] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6848'. [ 1429.222461][T26708] FAULT_INJECTION: forcing a failure. [ 1429.222461][T26708] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.270499][T26708] CPU: 1 PID: 26708 Comm: syz.3.6857 Not tainted syzkaller #0 [ 1429.278092][T26708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1429.288232][T26708] Call Trace: [ 1429.291557][T26708] [ 1429.294533][T26708] dump_stack_lvl+0x188/0x24e [ 1429.299285][T26708] ? show_regs_print_info+0x12/0x12 [ 1429.304534][T26708] ? load_image+0x410/0x410 [ 1429.309099][T26708] ? __might_sleep+0xd0/0xd0 [ 1429.313748][T26708] ? __lock_acquire+0x7c40/0x7c40 [ 1429.318836][T26708] should_fail_ex+0x390/0x4c0 [ 1429.323579][T26708] should_failslab+0x5/0x20 [ 1429.328132][T26708] slab_pre_alloc_hook+0x59/0x300 [ 1429.333214][T26708] kmem_cache_alloc_node+0x5a/0x310 [ 1429.338452][T26708] ? __alloc_skb+0xf9/0x7d0 [ 1429.343001][T26708] __alloc_skb+0xf9/0x7d0 [ 1429.347383][T26708] netlink_sendmsg+0x654/0xbd0 [ 1429.352183][T26708] ? netlink_getsockopt+0x550/0x550 [ 1429.357421][T26708] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1429.363009][T26708] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1429.368348][T26708] ? security_socket_sendmsg+0x7c/0xa0 [ 1429.373867][T26708] ? netlink_getsockopt+0x550/0x550 [ 1429.379201][T26708] ____sys_sendmsg+0x5ed/0x9a0 [ 1429.384010][T26708] ? __sys_sendmsg_sock+0x30/0x30 [ 1429.389119][T26708] ? __import_iovec+0x306/0x510 [ 1429.394083][T26708] ? import_iovec+0x6f/0xa0 [ 1429.398638][T26708] ___sys_sendmsg+0x2a2/0x360 [ 1429.403361][T26708] ? __sys_sendmsg+0x2a0/0x2a0 [ 1429.408169][T26708] ? __lock_acquire+0x7c40/0x7c40 [ 1429.413254][T26708] __se_sys_sendmsg+0x1c3/0x2b0 [ 1429.418142][T26708] ? __x64_sys_sendmsg+0x80/0x80 [ 1429.423123][T26708] ? lockdep_hardirqs_on+0x94/0x140 [ 1429.428366][T26708] do_syscall_64+0x4c/0xa0 [ 1429.432813][T26708] ? clear_bhb_loop+0x60/0xb0 [ 1429.437520][T26708] ? clear_bhb_loop+0x60/0xb0 [ 1429.442230][T26708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1429.448195][T26708] RIP: 0033:0x7f15bb19e159 [ 1429.452645][T26708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.472290][T26708] RSP: 002b:00007f15bc0ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1429.480741][T26708] RAX: ffffffffffffffda RBX: 00007f15bb425fa0 RCX: 00007f15bb19e159 [ 1429.488744][T26708] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1429.496741][T26708] RBP: 00007f15bc0ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1429.504853][T26708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1429.512888][T26708] R13: 00007f15bb426038 R14: 00007f15bb425fa0 R15: 00007ffdc40a46a8 [ 1429.520905][T26708] [ 1429.840812][T26714] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6860'. [ 1430.335841][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 1430.591172][T26735] netlink: 'syz.3.6869': attribute type 6 has an invalid length. [ 1432.198955][T26757] device sit0 left promiscuous mode [ 1432.693154][T26787] netlink: 'syz.0.6881': attribute type 3 has an invalid length. [ 1432.712031][T26787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6881'. [ 1433.058126][T26763] device sit0 entered promiscuous mode [ 1433.118715][T26765] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.6879'. [ 1433.181047][T26773] netlink: 763 bytes leftover after parsing attributes in process `syz.3.6882'. [ 1436.371133][T26814] netlink: 'syz.2.6889': attribute type 15 has an invalid length. [ 1436.439170][T26814] netlink: 'syz.2.6889': attribute type 7 has an invalid length. [ 1436.633326][T26826] device sit0 entered promiscuous mode [ 1440.500413][T26853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6903'. [ 1441.623293][T26877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1441.666952][T26878] netlink: 'syz.4.6913': attribute type 27 has an invalid length. [ 1441.841577][T26883] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6914'. [ 1441.920681][T26883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1441.928357][T26883] IPv6: NLM_F_CREATE should be set when creating new route [ 1441.936034][T26883] IPv6: NLM_F_CREATE should be set when creating new route [ 1441.943581][T26883] IPv6: NLM_F_CREATE should be set when creating new route [ 1442.656761][T26893] device syzkaller0 entered promiscuous mode [ 1451.127184][T26903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6922'. [ 1451.136559][T26911] netlink: 'syz.3.6925': attribute type 4 has an invalid length. [ 1451.411285][T26939] delete_channel: no stack [ 1456.023785][T26994] netlink: 122640 bytes leftover after parsing attributes in process `syz.1.6955'. [ 1456.058683][T26994] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1456.091959][T26994] CPU: 0 PID: 26994 Comm: syz.1.6955 Not tainted syzkaller #0 [ 1456.099539][T26994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1456.109688][T26994] Call Trace: [ 1456.113034][T26994] [ 1456.116036][T26994] dump_stack_lvl+0x188/0x24e [ 1456.120798][T26994] ? show_regs_print_info+0x12/0x12 [ 1456.126075][T26994] ? load_image+0x410/0x410 [ 1456.130699][T26994] sysfs_warn_dup+0x8a/0xa0 [ 1456.135286][T26994] sysfs_do_create_link_sd+0xc0/0x110 [ 1456.140747][T26994] device_add+0x83b/0x1050 [ 1456.145254][T26994] wiphy_register+0x1d8b/0x2aa0 [ 1456.150210][T26994] ? cfg80211_event_work+0x40/0x40 [ 1456.155389][T26994] ? minstrel_ht_alloc+0x894/0xa20 [ 1456.160626][T26994] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1456.166788][T26994] ieee80211_register_hw+0x2d48/0x39f0 [ 1456.172349][T26994] ? ieee80211_register_hw+0xf41/0x39f0 [ 1456.177956][T26994] ? ieee80211_register_hw+0xf41/0x39f0 [ 1456.183588][T26994] ? ieee80211_tasklet_handler+0x20/0x20 [ 1456.189290][T26994] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1456.195259][T26994] ? __debug_object_init+0xed/0x440 [ 1456.200524][T26994] ? memset+0x1e/0x40 [ 1456.204557][T26994] ? __hrtimer_init+0x189/0x270 [ 1456.209478][T26994] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1456.215321][T26994] ? memcpy+0x3c/0x60 [ 1456.219378][T26994] hwsim_new_radio_nl+0xab7/0xc90 [ 1456.224509][T26994] genl_family_rcv_msg_doit+0x22f/0x350 [ 1456.230166][T26994] ? end_current_label_crit_section+0x170/0x170 [ 1456.236484][T26994] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1456.242449][T26994] ? bpf_lsm_capable+0x5/0x10 [ 1456.247188][T26994] ? security_capable+0x85/0xb0 [ 1456.252203][T26994] genl_rcv_msg+0x601/0x790 [ 1456.256802][T26994] ? genl_bind+0x360/0x360 [ 1456.261284][T26994] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1456.267755][T26994] netlink_rcv_skb+0x1ef/0x440 [ 1456.272588][T26994] ? genl_bind+0x360/0x360 [ 1456.277076][T26994] ? netlink_ack+0x1160/0x1160 [ 1456.281917][T26994] ? down_read+0x1a8/0x2d0 [ 1456.286401][T26994] genl_rcv+0x24/0x40 [ 1456.290448][T26994] netlink_unicast+0x7ad/0x920 [ 1456.295293][T26994] netlink_sendmsg+0x8ad/0xbd0 [ 1456.300144][T26994] ? netlink_getsockopt+0x550/0x550 [ 1456.305454][T26994] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1456.311079][T26994] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1456.316422][T26994] ? security_socket_sendmsg+0x7c/0xa0 [ 1456.321940][T26994] ? netlink_getsockopt+0x550/0x550 [ 1456.327205][T26994] ____sys_sendmsg+0x5ed/0x9a0 [ 1456.332043][T26994] ? __sys_sendmsg_sock+0x30/0x30 [ 1456.337120][T26994] ? __import_iovec+0x306/0x510 [ 1456.342065][T26994] ? import_iovec+0x6f/0xa0 [ 1456.346649][T26994] ___sys_sendmsg+0x2a2/0x360 [ 1456.351394][T26994] ? __sys_sendmsg+0x2a0/0x2a0 [ 1456.356325][T26994] __se_sys_sendmsg+0x1c3/0x2b0 [ 1456.361234][T26994] ? __x64_sys_sendmsg+0x80/0x80 [ 1456.366303][T26994] ? lockdep_hardirqs_on+0x94/0x140 [ 1456.371588][T26994] do_syscall_64+0x4c/0xa0 [ 1456.376079][T26994] ? clear_bhb_loop+0x60/0xb0 [ 1456.380813][T26994] ? clear_bhb_loop+0x60/0xb0 [ 1456.385551][T26994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.391525][T26994] RIP: 0033:0x7f495cf9e159 [ 1456.396001][T26994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.415674][T26994] RSP: 002b:00007f495defb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1456.424152][T26994] RAX: ffffffffffffffda RBX: 00007f495d225fa0 RCX: 00007f495cf9e159 [ 1456.432191][T26994] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1456.440242][T26994] RBP: 00007f495d03506b R08: 0000000000000000 R09: 0000000000000000 [ 1456.448272][T26994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.456318][T26994] R13: 00007f495d226038 R14: 00007f495d225fa0 R15: 00007ffc2803ec68 [ 1456.464380][T26994] [ 1456.809619][T27006] netlink: 'syz.2.6959': attribute type 10 has an invalid length. [ 1456.824278][T27006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6959'. [ 1456.837289][T27006] netlink: 'syz.2.6959': attribute type 10 has an invalid length. [ 1456.861858][T27006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6959'. [ 1456.946122][T27004] netlink: 'syz.2.6959': attribute type 10 has an invalid length. [ 1456.954046][T27004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6959'. [ 1457.601270][T27036] netlink: 'syz.0.6969': attribute type 9 has an invalid length. [ 1457.650797][T27036] netlink: 123820 bytes leftover after parsing attributes in process `syz.0.6969'. [ 1457.907013][T27040] netlink: 'syz.0.6970': attribute type 21 has an invalid length. [ 1457.947964][T27040] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6970'. [ 1461.062653][T27072] delete_channel: no stack [ 1461.474562][T13687] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 1461.854597][T27085] netlink: 'syz.4.6983': attribute type 29 has an invalid length. [ 1461.914103][T27085] netlink: 'syz.4.6983': attribute type 29 has an invalid length. [ 1461.954196][T27089] netlink: 'syz.4.6983': attribute type 29 has an invalid length. [ 1462.015469][T27081] netlink: 'syz.2.6982': attribute type 10 has an invalid length. [ 1462.213036][T27085] can: request_module (can-proto-0) failed. [ 1462.249707][T27081] team0: Device veth0_vlan is already a lower device of the team interface [ 1462.268386][T27089] netlink: 'syz.4.6983': attribute type 29 has an invalid length. [ 1462.301463][T27097] netlink: 'syz.4.6983': attribute type 29 has an invalid length. [ 1462.324570][T27099] netlink: 'syz.4.6983': attribute type 29 has an invalid length. [ 1462.889400][T27117] netlink: 'syz.3.6992': attribute type 10 has an invalid length. [ 1462.906371][T27117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1462.935013][T27117] netlink: 'syz.3.6992': attribute type 10 has an invalid length. [ 1462.952578][T27117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1462.981801][T27114] netlink: 'syz.3.6992': attribute type 10 has an invalid length. [ 1462.995291][T27114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1466.178646][T27144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7003'. [ 1466.416737][T27155] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7004'. [ 1467.774964][T27177] validate_nla: 2 callbacks suppressed [ 1467.774996][T27177] netlink: 'syz.4.7008': attribute type 10 has an invalid length. [ 1467.817859][T27177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7008'. [ 1467.833196][T27177] netlink: 'syz.4.7008': attribute type 10 has an invalid length. [ 1467.841858][T27177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7008'. [ 1467.852251][T27170] netlink: 'syz.4.7008': attribute type 10 has an invalid length. [ 1467.883086][T27170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7008'. [ 1471.120269][T27188] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.7012'. [ 1471.471786][T27210] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7016'. [ 1471.529747][T27204] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7018'. [ 1472.994376][T27226] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7026'. [ 1473.006902][T27226] netlink: zone id is out of range [ 1473.016517][T27226] netlink: zone id is out of range [ 1473.022928][T27226] netlink: zone id is out of range [ 1473.030998][T27226] netlink: zone id is out of range [ 1473.037888][T27226] netlink: zone id is out of range [ 1473.043098][T27226] netlink: zone id is out of range [ 1473.052661][T27226] netlink: zone id is out of range [ 1473.061139][T27226] netlink: get zone limit has 8 unknown bytes [ 1474.618122][T27250] FAULT_INJECTION: forcing a failure. [ 1474.618122][T27250] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.634490][T27250] CPU: 0 PID: 27250 Comm: syz.4.7033 Not tainted syzkaller #0 [ 1474.642008][T27250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1474.652099][T27250] Call Trace: [ 1474.655414][T27250] [ 1474.658378][T27250] dump_stack_lvl+0x188/0x24e [ 1474.663083][T27250] ? show_regs_print_info+0x12/0x12 [ 1474.668311][T27250] ? load_image+0x410/0x410 [ 1474.672872][T27250] ? verify_lock_unused+0x140/0x140 [ 1474.678114][T27250] should_fail_ex+0x390/0x4c0 [ 1474.682845][T27250] should_failslab+0x5/0x20 [ 1474.687405][T27250] slab_pre_alloc_hook+0x59/0x300 [ 1474.692469][T27250] kmem_cache_alloc+0x56/0x2f0 [ 1474.697262][T27250] ? skb_clone+0x1e7/0x370 [ 1474.701719][T27250] skb_clone+0x1e7/0x370 [ 1474.705996][T27250] __netlink_deliver_tap+0x3e4/0x7e0 [ 1474.711327][T27250] ? netlink_deliver_tap+0x2e/0x1b0 [ 1474.716564][T27250] netlink_deliver_tap+0x19c/0x1b0 [ 1474.721709][T27250] netlink_unicast+0x777/0x920 [ 1474.726599][T27250] netlink_sendmsg+0x8ad/0xbd0 [ 1474.731410][T27250] ? netlink_getsockopt+0x550/0x550 [ 1474.736646][T27250] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1474.742237][T27250] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1474.747558][T27250] ? security_socket_sendmsg+0x7c/0xa0 [ 1474.753067][T27250] ? netlink_getsockopt+0x550/0x550 [ 1474.758320][T27250] ____sys_sendmsg+0x5ed/0x9a0 [ 1474.763489][T27250] ? __sys_sendmsg_sock+0x30/0x30 [ 1474.768661][T27250] ? __import_iovec+0x306/0x510 [ 1474.773573][T27250] ? import_iovec+0x6f/0xa0 [ 1474.778146][T27250] ___sys_sendmsg+0x2a2/0x360 [ 1474.782882][T27250] ? __sys_sendmsg+0x2a0/0x2a0 [ 1474.787727][T27250] ? __lock_acquire+0x7c40/0x7c40 [ 1474.792823][T27250] __se_sys_sendmsg+0x1c3/0x2b0 [ 1474.797726][T27250] ? __x64_sys_sendmsg+0x80/0x80 [ 1474.802711][T27250] ? lockdep_hardirqs_on+0x94/0x140 [ 1474.807957][T27250] do_syscall_64+0x4c/0xa0 [ 1474.812407][T27250] ? clear_bhb_loop+0x60/0xb0 [ 1474.817116][T27250] ? clear_bhb_loop+0x60/0xb0 [ 1474.821827][T27250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1474.827799][T27250] RIP: 0033:0x7fa136f9e159 [ 1474.832248][T27250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.851908][T27250] RSP: 002b:00007fa137e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1474.860390][T27250] RAX: ffffffffffffffda RBX: 00007fa137225fa0 RCX: 00007fa136f9e159 [ 1474.868396][T27250] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1474.876422][T27250] RBP: 00007fa137e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.884445][T27250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.892461][T27250] R13: 00007fa137226038 R14: 00007fa137225fa0 R15: 00007ffcad37f778 [ 1474.900482][T27250] [ 1476.760574][T27234] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7028'. [ 1477.913397][T27275] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7042'. [ 1478.035228][T27279] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7044'. [ 1481.724511][T27307] netlink: 'syz.1.7052': attribute type 1 has an invalid length. [ 1481.752006][T27307] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.7052'. [ 1481.879589][T27315] netlink: 'syz.0.7055': attribute type 29 has an invalid length. [ 1481.893218][T27315] netlink: 'syz.0.7055': attribute type 29 has an invalid length. [ 1481.912008][T27315] netlink: 'syz.0.7055': attribute type 29 has an invalid length. [ 1482.002474][T27321] netlink: 'syz.0.7055': attribute type 29 has an invalid length. [ 1482.061882][T27322] netlink: 'syz.0.7055': attribute type 29 has an invalid length. [ 1482.090381][T27321] netlink: 'syz.0.7055': attribute type 29 has an invalid length. [ 1482.108452][T27315] can: request_module (can-proto-0) failed. [ 1482.372088][T27332] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7057'. [ 1482.905404][T27342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7062'. [ 1484.541702][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.548343][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.200335][T27361] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7067'. [ 1486.260217][T27360] netlink: 907 bytes leftover after parsing attributes in process `syz.0.7065'. [ 1486.337232][T27360] bridge_slave_1: default FDB implementation only supports local addresses [ 1486.668394][T27366] netlink: 'syz.4.7068': attribute type 21 has an invalid length. [ 1486.757849][T27370] netlink: 'syz.4.7068': attribute type 1 has an invalid length. [ 1486.961592][T27370] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.7068'. [ 1488.809853][T27378] netlink: 'syz.2.7070': attribute type 1 has an invalid length. [ 1488.834903][T27378] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7070'. [ 1489.413974][T27381] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7071'. [ 1490.637043][T27403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7078'. [ 1490.721263][T27386] netlink: 'syz.3.7073': attribute type 10 has an invalid length. [ 1491.134266][T27414] FAULT_INJECTION: forcing a failure. [ 1491.134266][T27414] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.174242][T27414] CPU: 1 PID: 27414 Comm: syz.1.7081 Not tainted syzkaller #0 [ 1491.181807][T27414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1491.191918][T27414] Call Trace: [ 1491.195258][T27414] [ 1491.198240][T27414] dump_stack_lvl+0x188/0x24e [ 1491.202971][T27414] ? rcu_is_watching+0x11/0xa0 [ 1491.207804][T27414] ? show_regs_print_info+0x12/0x12 [ 1491.213067][T27414] ? load_image+0x410/0x410 [ 1491.217650][T27414] ? lockdep_hardirqs_on+0x94/0x140 [ 1491.222929][T27414] should_fail_ex+0x390/0x4c0 [ 1491.227677][T27414] should_failslab+0x5/0x20 [ 1491.232242][T27414] slab_pre_alloc_hook+0x59/0x300 [ 1491.237331][T27414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1491.243541][T27414] ? dev_ethtool+0x125/0x12f0 [ 1491.248289][T27414] __kmem_cache_alloc_node+0x4f/0x270 [ 1491.253740][T27414] ? dev_ethtool+0x125/0x12f0 [ 1491.258487][T27414] kmalloc_trace+0x26/0xe0 [ 1491.262956][T27414] dev_ethtool+0x125/0x12f0 [ 1491.267535][T27414] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1491.273844][T27414] ? __lock_acquire+0x7c40/0x7c40 [ 1491.278933][T27414] ? unix_ioctl+0x255/0x6a0 [ 1491.283501][T27414] ? full_name_hash+0x8e/0xe0 [ 1491.288238][T27414] ? dev_load+0x1d/0x1e0 [ 1491.292540][T27414] ? dev_load+0x1d/0x1e0 [ 1491.296845][T27414] dev_ioctl+0x474/0xe80 [ 1491.301151][T27414] sock_do_ioctl+0x245/0x320 [ 1491.305802][T27414] ? perf_trace_preemptirq_template+0x268/0x320 [ 1491.312128][T27414] ? sock_show_fdinfo+0xb0/0xb0 [ 1491.317050][T27414] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1491.323107][T27414] ? lock_chain_count+0x20/0x20 [ 1491.328042][T27414] sock_ioctl+0x48a/0x700 [ 1491.332526][T27414] ? sock_poll+0x420/0x420 [ 1491.337003][T27414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1491.343229][T27414] ? sock_poll+0x420/0x420 [ 1491.347768][T27414] __se_sys_ioctl+0xfa/0x170 [ 1491.352441][T27414] do_syscall_64+0x4c/0xa0 [ 1491.356916][T27414] ? clear_bhb_loop+0x60/0xb0 [ 1491.361649][T27414] ? clear_bhb_loop+0x60/0xb0 [ 1491.366388][T27414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1491.372353][T27414] RIP: 0033:0x7f495cf9e159 [ 1491.376855][T27414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.396975][T27414] RSP: 002b:00007f495defb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.405899][T27414] RAX: ffffffffffffffda RBX: 00007f495d225fa0 RCX: 00007f495cf9e159 [ 1491.413938][T27414] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000015 [ 1491.421965][T27414] RBP: 00007f495defb090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.429994][T27414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.438028][T27414] R13: 00007f495d226038 R14: 00007f495d225fa0 R15: 00007ffc2803ec68 [ 1491.446080][T27414] [ 1493.630096][T27386] device veth0_vlan left promiscuous mode [ 1493.667872][T27386] device veth0_vlan entered promiscuous mode [ 1493.681557][T27386] team0: Device veth0_vlan failed to register rx_handler [ 1493.810163][T27420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7083'. [ 1493.988080][T27428] netlink: 'syz.1.7085': attribute type 2 has an invalid length. [ 1494.030248][T27428] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7085'. [ 1494.057691][T27426] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7084'. [ 1497.845412][T27474] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7099'. [ 1497.921367][T27479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7102'. [ 1498.846847][T27497] netlink: 'syz.1.7107': attribute type 10 has an invalid length. [ 1498.984586][T27499] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1500.894580][T27497] device veth0_vlan left promiscuous mode [ 1500.946913][T27497] device veth0_vlan entered promiscuous mode [ 1501.017200][T27497] team0: Device veth0_vlan failed to register rx_handler [ 1501.366267][T27504] netlink: 'syz.4.7108': attribute type 21 has an invalid length. [ 1502.123036][T27529] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7116'. [ 1502.707952][T27545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7122'. [ 1502.761185][T27528] device syzkaller0 entered promiscuous mode [ 1502.846929][T27548] netlink: 'syz.2.7123': attribute type 21 has an invalid length. [ 1502.865182][T27548] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7123'. [ 1502.959062][T27548] netlink: 'syz.2.7123': attribute type 1 has an invalid length. [ 1509.431526][T27590] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1509.445038][T27590] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1509.455150][T27590] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1509.806794][T27602] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1511.778723][T27635] device syzkaller0 entered promiscuous mode [ 1512.438099][T27669] delete_channel: no stack [ 1514.851921][T27657] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7155'. [ 1514.861216][T27662] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7157'. [ 1515.562368][T27695] netlink: 'syz.0.7170': attribute type 33 has an invalid length. [ 1515.591297][T27695] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7170'. [ 1515.655211][T27695] FAULT_INJECTION: forcing a failure. [ 1515.655211][T27695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1515.722431][T27695] CPU: 0 PID: 27695 Comm: syz.0.7170 Not tainted syzkaller #0 [ 1515.730032][T27695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1515.740151][T27695] Call Trace: [ 1515.743492][T27695] [ 1515.746481][T27695] dump_stack_lvl+0x188/0x24e [ 1515.751230][T27695] ? show_regs_print_info+0x12/0x12 [ 1515.756491][T27695] ? load_image+0x410/0x410 [ 1515.761083][T27695] ? __lock_acquire+0x7c40/0x7c40 [ 1515.766197][T27695] should_fail_ex+0x390/0x4c0 [ 1515.770971][T27695] _copy_from_user+0x2c/0x170 [ 1515.775721][T27695] iovec_from_user+0x143/0x360 [ 1515.780569][T27695] __import_iovec+0x6c/0x510 [ 1515.785264][T27695] import_iovec+0x6f/0xa0 [ 1515.789681][T27695] ___sys_sendmsg+0x252/0x360 [ 1515.794447][T27695] ? __sys_sendmsg+0x2a0/0x2a0 [ 1515.799333][T27695] ? __lock_acquire+0x7c40/0x7c40 [ 1515.804482][T27695] __se_sys_sendmsg+0x1c3/0x2b0 [ 1515.809415][T27695] ? perf_trace_preemptirq_template+0x268/0x320 [ 1515.815824][T27695] ? __x64_sys_sendmsg+0x80/0x80 [ 1515.820875][T27695] ? lockdep_hardirqs_on+0x94/0x140 [ 1515.826171][T27695] do_syscall_64+0x4c/0xa0 [ 1515.830677][T27695] ? clear_bhb_loop+0x60/0xb0 [ 1515.835466][T27695] ? clear_bhb_loop+0x60/0xb0 [ 1515.840225][T27695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1515.846222][T27695] RIP: 0033:0x7fd86df9e159 [ 1515.850705][T27695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.870382][T27695] RSP: 002b:00007fd86eebb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1515.878880][T27695] RAX: ffffffffffffffda RBX: 00007fd86e225fa0 RCX: 00007fd86df9e159 [ 1515.886938][T27695] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000008 [ 1515.894980][T27695] RBP: 00007fd86eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.903060][T27695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.911117][T27695] R13: 00007fd86e226038 R14: 00007fd86e225fa0 R15: 00007ffc314353a8 [ 1515.919246][T27695] [ 1518.375872][T27713] netlink: 'syz.0.7174': attribute type 41 has an invalid length. [ 1518.811047][T27724] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1518.854465][T27729] netlink: 'syz.2.7180': attribute type 10 has an invalid length. [ 1519.246082][T27730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1520.646476][T27764] netlink: 'syz.3.7191': attribute type 41 has an invalid length. [ 1523.492123][T27786] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1524.230383][T27805] netlink: 'syz.3.7205': attribute type 29 has an invalid length. [ 1524.353244][T27805] netlink: 'syz.3.7205': attribute type 29 has an invalid length. [ 1524.413201][T27807] netlink: 'syz.4.7208': attribute type 41 has an invalid length. [ 1528.424776][T27861] netlink: 'syz.4.7224': attribute type 10 has an invalid length. [ 1531.140395][T27861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.159111][T27861] device team0 entered promiscuous mode [ 1531.164751][T27861] device team_slave_0 entered promiscuous mode [ 1531.195941][T27861] device team_slave_1 entered promiscuous mode [ 1531.202331][T27861] device bridge0 entered promiscuous mode [ 1531.217080][T27861] bond0: (slave team0): Enslaving as an active interface with an up link [ 1531.392644][T27871] netlink: 'syz.2.7226': attribute type 41 has an invalid length. [ 1534.592680][T27894] netlink: 'syz.0.7232': attribute type 15 has an invalid length. [ 1534.609114][T27894] netlink: 'syz.0.7232': attribute type 7 has an invalid length. [ 1534.630844][T27894] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7232'. [ 1535.178940][T27905] netlink: 'syz.4.7238': attribute type 29 has an invalid length. [ 1535.241208][T27905] netlink: 'syz.4.7238': attribute type 29 has an invalid length. [ 1535.316070][T27908] netlink: 'syz.4.7238': attribute type 29 has an invalid length. [ 1542.054012][T27950] tipc: Started in network mode [ 1542.070262][T27950] tipc: Node identity 9215a268, cluster identity 4711 [ 1542.098670][T27950] tipc: Node number set to 2450891368 [ 1545.359373][T27970] netlink: 'syz.1.7263': attribute type 1 has an invalid length. [ 1545.375031][T27970] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.7263'. [ 1545.988522][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.994943][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.995223][T27998] netlink: 'syz.0.7271': attribute type 29 has an invalid length. [ 1549.038132][T27998] netlink: 'syz.0.7271': attribute type 29 has an invalid length. [ 1549.086314][T27999] netlink: 'syz.0.7271': attribute type 29 has an invalid length. [ 1549.262171][T27998] netlink: 'syz.0.7271': attribute type 11 has an invalid length. [ 1551.409712][T28025] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.7280'. [ 1551.436299][T28025] netlink: zone id is out of range [ 1551.455450][T28025] netlink: zone id is out of range [ 1551.515906][T28025] netlink: zone id is out of range [ 1551.577937][T28025] netlink: del zone limit has 4 unknown bytes [ 1557.903950][T28102] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7308'. [ 1557.967874][T28100] netlink: 'syz.1.7306': attribute type 1 has an invalid length. [ 1558.064698][T28102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1558.072258][T28102] IPv6: NLM_F_CREATE should be set when creating new route [ 1558.081807][T28102] IPv6: NLM_F_CREATE should be set when creating new route [ 1558.090276][T28102] IPv6: NLM_F_CREATE should be set when creating new route [ 1558.101191][T28100] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.7306'. [ 1558.746054][T28120] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7312'. [ 1562.479754][T28147] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7319'. [ 1563.036056][T28153] delete_channel: no stack [ 1563.117457][T28165] netlink: 'syz.4.7327': attribute type 10 has an invalid length. [ 1566.266793][T28164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7325'. [ 1566.285750][T28164] : renamed from caif0 [ 1566.293624][T28164] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1566.521222][T28188] netlink: 'syz.0.7341': attribute type 14 has an invalid length. [ 1566.537206][T28188] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7341'. [ 1566.957425][T28198] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7336'. [ 1567.863689][T28208] netlink: 'syz.3.7340': attribute type 10 has an invalid length. [ 1568.087934][T28226] netlink: 'syz.1.7342': attribute type 10 has an invalid length. [ 1568.103750][T28226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7342'. [ 1569.698818][T28208] team0: Device gre0 is of different type [ 1569.920880][T28225] netlink: 'syz.2.7344': attribute type 10 has an invalid length. [ 1570.027806][T28225] team0 (unregistering): Port device team_slave_0 removed [ 1570.041889][T28225] team0 (unregistering): Port device team_slave_1 removed [ 1570.057193][T28225] team0 (unregistering): Port device vlan0 removed [ 1570.065331][T28225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.073234][T28225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.121181][T28225] team0 (unregistering): Port device bridge0 removed [ 1570.165218][T28226] netlink: 'syz.1.7342': attribute type 10 has an invalid length. [ 1570.174232][T28226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7342'. [ 1570.502030][T28236] netlink: 'syz.0.7346': attribute type 16 has an invalid length. [ 1570.512390][T28236] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1571.064003][T28255] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7353'. [ 1571.432231][T28256] delete_channel: no stack [ 1571.847217][T28280] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1572.108900][T28291] netlink: 'syz.4.7366': attribute type 29 has an invalid length. [ 1572.214746][T28291] netlink: 'syz.4.7366': attribute type 29 has an invalid length. [ 1572.267185][T28293] netlink: 'syz.4.7366': attribute type 29 has an invalid length. [ 1572.339136][T28291] netlink: 'syz.4.7366': attribute type 29 has an invalid length. [ 1572.371113][T28291] netlink: 'syz.4.7366': attribute type 29 has an invalid length. [ 1572.420534][T28291] netlink: 'syz.4.7366': attribute type 29 has an invalid length. [ 1572.523700][T28294] can: request_module (can-proto-0) failed. [ 1572.941408][T28306] FAULT_INJECTION: forcing a failure. [ 1572.941408][T28306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.955087][T28306] CPU: 1 PID: 28306 Comm: syz.0.7370 Not tainted syzkaller #0 [ 1572.962618][T28306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1572.972712][T28306] Call Trace: [ 1572.976022][T28306] [ 1572.978980][T28306] dump_stack_lvl+0x188/0x24e [ 1572.983694][T28306] ? show_regs_print_info+0x12/0x12 [ 1572.988929][T28306] ? load_image+0x410/0x410 [ 1572.993486][T28306] ? __lock_acquire+0x7c40/0x7c40 [ 1572.998561][T28306] should_fail_ex+0x390/0x4c0 [ 1573.003286][T28306] _copy_to_user+0x2c/0x130 [ 1573.007828][T28306] bpf_test_finish+0x266/0x600 [ 1573.012690][T28306] ? convert_skb_to___skb+0x420/0x420 [ 1573.018111][T28306] ? __build_skb+0x24b/0x3b0 [ 1573.022746][T28306] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1573.028261][T28306] ? cpu_online+0xa0/0xa0 [ 1573.032637][T28306] bpf_prog_test_run+0x31c/0x390 [ 1573.037624][T28306] __sys_bpf+0x62b/0x780 [ 1573.041910][T28306] ? bpf_link_show_fdinfo+0x380/0x380 [ 1573.047344][T28306] ? lock_chain_count+0x20/0x20 [ 1573.052252][T28306] __x64_sys_bpf+0x78/0x90 [ 1573.056723][T28306] do_syscall_64+0x4c/0xa0 [ 1573.061175][T28306] ? clear_bhb_loop+0x60/0xb0 [ 1573.065886][T28306] ? clear_bhb_loop+0x60/0xb0 [ 1573.070610][T28306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1573.076551][T28306] RIP: 0033:0x7fd86df9e159 [ 1573.080998][T28306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.100817][T28306] RSP: 002b:00007fd86eebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1573.109270][T28306] RAX: ffffffffffffffda RBX: 00007fd86e225fa0 RCX: 00007fd86df9e159 [ 1573.117276][T28306] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1573.125279][T28306] RBP: 00007fd86eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.133284][T28306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.141381][T28306] R13: 00007fd86e226038 R14: 00007fd86e225fa0 R15: 00007ffc314353a8 [ 1573.149403][T28306] [ 1573.214878][T28311] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1573.529398][T28319] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.7375'. [ 1573.558950][T28321] netlink: 'syz.4.7376': attribute type 33 has an invalid length. [ 1574.580488][T28337] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1574.675268][T28339] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1576.981027][T28346] FAULT_INJECTION: forcing a failure. [ 1576.981027][T28346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1577.026224][T28346] CPU: 0 PID: 28346 Comm: syz.0.7382 Not tainted syzkaller #0 [ 1577.033816][T28346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1577.043920][T28346] Call Trace: [ 1577.047228][T28346] [ 1577.050188][T28346] dump_stack_lvl+0x188/0x24e [ 1577.054897][T28346] ? rcu_is_watching+0x11/0xa0 [ 1577.059710][T28346] ? show_regs_print_info+0x12/0x12 [ 1577.064992][T28346] ? load_image+0x410/0x410 [ 1577.069534][T28346] ? lockdep_hardirqs_on+0x94/0x140 [ 1577.074783][T28346] should_fail_ex+0x390/0x4c0 [ 1577.079507][T28346] _copy_to_user+0x2c/0x130 [ 1577.084052][T28346] simple_read_from_buffer+0xe3/0x150 [ 1577.089469][T28346] proc_fail_nth_read+0x1a6/0x220 [ 1577.094544][T28346] ? proc_fault_inject_write+0x310/0x310 [ 1577.100219][T28346] ? fsnotify_perm+0x248/0x550 [ 1577.105233][T28346] ? proc_fault_inject_write+0x310/0x310 [ 1577.111601][T28346] vfs_read+0x2db/0x960 [ 1577.115805][T28346] ? kernel_read+0x1e0/0x1e0 [ 1577.120435][T28346] ? __fget_files+0x28/0x460 [ 1577.125111][T28346] ? __fget_files+0x3fc/0x460 [ 1577.129844][T28346] ? __fdget_pos+0x2ae/0x360 [ 1577.134473][T28346] ? ksys_read+0x70/0x260 [ 1577.138847][T28346] ksys_read+0x14d/0x260 [ 1577.143140][T28346] ? vfs_write+0x9a0/0x9a0 [ 1577.147600][T28346] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1577.153538][T28346] do_syscall_64+0x4c/0xa0 [ 1577.157987][T28346] ? clear_bhb_loop+0x60/0xb0 [ 1577.162698][T28346] ? clear_bhb_loop+0x60/0xb0 [ 1577.167419][T28346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1577.173359][T28346] RIP: 0033:0x7fd86df5e98e [ 1577.177810][T28346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1577.197452][T28346] RSP: 002b:00007fd86eebafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1577.205905][T28346] RAX: ffffffffffffffda RBX: 00007fd86eebb6c0 RCX: 00007fd86df5e98e [ 1577.213907][T28346] RDX: 000000000000000f RSI: 00007fd86eebb0a0 RDI: 000000000000000a [ 1577.221932][T28346] RBP: 00007fd86eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.229935][T28346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1577.237941][T28346] R13: 00007fd86e226038 R14: 00007fd86e225fa0 R15: 00007ffc314353a8 [ 1577.245963][T28346] [ 1577.700653][T28361] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7387'. [ 1578.721082][T28392] FAULT_INJECTION: forcing a failure. [ 1578.721082][T28392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1578.764615][T28392] CPU: 1 PID: 28392 Comm: syz.4.7400 Not tainted syzkaller #0 [ 1578.772229][T28392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1578.782345][T28392] Call Trace: [ 1578.785667][T28392] [ 1578.788647][T28392] dump_stack_lvl+0x188/0x24e [ 1578.793395][T28392] ? show_regs_print_info+0x12/0x12 [ 1578.798652][T28392] ? load_image+0x410/0x410 [ 1578.803222][T28392] ? __lock_acquire+0x7c40/0x7c40 [ 1578.808327][T28392] should_fail_ex+0x390/0x4c0 [ 1578.813130][T28392] _copy_from_user+0x2c/0x170 [ 1578.817868][T28392] ___sys_recvmsg+0x170/0x590 [ 1578.822609][T28392] ? __sys_recvmsg+0x2a0/0x2a0 [ 1578.827438][T28392] ? common_file_perm+0x171/0x1c0 [ 1578.832546][T28392] ? __fget_files+0x3fc/0x460 [ 1578.837306][T28392] __x64_sys_recvmsg+0x20d/0x2e0 [ 1578.842312][T28392] ? ___sys_recvmsg+0x590/0x590 [ 1578.847240][T28392] ? lockdep_hardirqs_on+0x94/0x140 [ 1578.852505][T28392] do_syscall_64+0x4c/0xa0 [ 1578.856975][T28392] ? clear_bhb_loop+0x60/0xb0 [ 1578.861755][T28392] ? clear_bhb_loop+0x60/0xb0 [ 1578.866495][T28392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1578.872468][T28392] RIP: 0033:0x7fa136f9e159 [ 1578.876950][T28392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.896621][T28392] RSP: 002b:00007fa137e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1578.905109][T28392] RAX: ffffffffffffffda RBX: 00007fa137225fa0 RCX: 00007fa136f9e159 [ 1578.913146][T28392] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 1578.921175][T28392] RBP: 00007fa137e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.929199][T28392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.937227][T28392] R13: 00007fa137226038 R14: 00007fa137225fa0 R15: 00007ffcad37f778 [ 1578.945317][T28392] [ 1579.010139][T28386] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7398'. [ 1579.360456][T28410] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7404'. [ 1579.414726][T28413] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7406'. [ 1579.442164][T28413] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1580.314109][T28434] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.7414'. [ 1580.337802][T28434] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1581.047766][T28455] FAULT_INJECTION: forcing a failure. [ 1581.047766][T28455] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.060563][T28455] CPU: 1 PID: 28455 Comm: syz.0.7420 Not tainted syzkaller #0 [ 1581.068090][T28455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1581.078202][T28455] Call Trace: [ 1581.081525][T28455] [ 1581.084511][T28455] dump_stack_lvl+0x188/0x24e [ 1581.089261][T28455] ? show_regs_print_info+0x12/0x12 [ 1581.094521][T28455] ? load_image+0x410/0x410 [ 1581.099096][T28455] ? skb_network_protocol+0x52f/0x790 [ 1581.104547][T28455] should_fail_ex+0x390/0x4c0 [ 1581.109350][T28455] should_failslab+0x5/0x20 [ 1581.113922][T28455] slab_pre_alloc_hook+0x59/0x300 [ 1581.119005][T28455] ? netif_skb_features+0xafa/0x1630 [ 1581.124354][T28455] kmem_cache_alloc+0x56/0x2f0 [ 1581.129162][T28455] ? skb_clone+0x1e7/0x370 [ 1581.133619][T28455] skb_clone+0x1e7/0x370 [ 1581.137898][T28455] ? dev_queue_xmit_nit+0x200/0xba0 [ 1581.143140][T28455] dev_queue_xmit_nit+0x23b/0xba0 [ 1581.148200][T28455] ? dev_queue_xmit_nit+0x29/0xba0 [ 1581.153353][T28455] ? validate_xmit_skb+0x7ca/0xe80 [ 1581.158531][T28455] dev_hard_start_xmit+0x158/0x8b0 [ 1581.163690][T28455] ? validate_xmit_skb_list+0x120/0x120 [ 1581.169294][T28455] __dev_queue_xmit+0x1b4b/0x3810 [ 1581.174367][T28455] ? __dev_queue_xmit+0x281/0x3810 [ 1581.179522][T28455] ? netdev_core_pick_tx+0x360/0x360 [ 1581.184862][T28455] ? ref_tracker_alloc+0x333/0x490 [ 1581.190022][T28455] ? __copy_skb_header+0x3ba/0x4f0 [ 1581.195166][T28455] ? memcpy+0x3c/0x60 [ 1581.199183][T28455] ? __copy_skb_header+0x3ba/0x4f0 [ 1581.204370][T28455] ? __skb_clone+0x446/0x6c0 [ 1581.209184][T28455] ? skb_clone+0x21b/0x370 [ 1581.213639][T28455] __netlink_deliver_tap+0x55c/0x7e0 [ 1581.218967][T28455] ? netlink_deliver_tap+0x2e/0x1b0 [ 1581.224235][T28455] netlink_deliver_tap+0x19c/0x1b0 [ 1581.229391][T28455] netlink_unicast+0x777/0x920 [ 1581.234211][T28455] netlink_sendmsg+0x8ad/0xbd0 [ 1581.239021][T28455] ? netlink_getsockopt+0x550/0x550 [ 1581.244261][T28455] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1581.249857][T28455] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1581.255197][T28455] ? security_socket_sendmsg+0x7c/0xa0 [ 1581.260695][T28455] ? netlink_getsockopt+0x550/0x550 [ 1581.265974][T28455] ____sys_sendmsg+0x5ed/0x9a0 [ 1581.270800][T28455] ? __sys_sendmsg_sock+0x30/0x30 [ 1581.275865][T28455] ? __import_iovec+0x306/0x510 [ 1581.280775][T28455] ? import_iovec+0x6f/0xa0 [ 1581.285365][T28455] ___sys_sendmsg+0x2a2/0x360 [ 1581.290082][T28455] ? __sys_sendmsg+0x2a0/0x2a0 [ 1581.294906][T28455] ? __lock_acquire+0x7c40/0x7c40 [ 1581.300011][T28455] __se_sys_sendmsg+0x1c3/0x2b0 [ 1581.304898][T28455] ? __x64_sys_sendmsg+0x80/0x80 [ 1581.309884][T28455] ? lockdep_hardirqs_on+0x94/0x140 [ 1581.315123][T28455] do_syscall_64+0x4c/0xa0 [ 1581.319571][T28455] ? clear_bhb_loop+0x60/0xb0 [ 1581.324282][T28455] ? clear_bhb_loop+0x60/0xb0 [ 1581.328992][T28455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1581.334938][T28455] RIP: 0033:0x7fd86df9e159 [ 1581.339394][T28455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.359052][T28455] RSP: 002b:00007fd86eebb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1581.367513][T28455] RAX: ffffffffffffffda RBX: 00007fd86e225fa0 RCX: 00007fd86df9e159 [ 1581.375517][T28455] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1581.383520][T28455] RBP: 00007fd86eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.391528][T28455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.399534][T28455] R13: 00007fd86e226038 R14: 00007fd86e225fa0 R15: 00007ffc314353a8 [ 1581.407553][T28455] [ 1581.554166][T28461] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7421'. [ 1581.617630][T28463] validate_nla: 2 callbacks suppressed [ 1581.617650][T28463] netlink: 'syz.3.7423': attribute type 2 has an invalid length. [ 1581.736893][T28463] netlink: 'syz.3.7423': attribute type 1 has an invalid length. [ 1581.745215][T28463] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.7423'. [ 1582.281121][T28480] netlink: 'syz.4.7432': attribute type 22 has an invalid length. [ 1582.847346][T28493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7444'. [ 1582.924638][T28493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7444'. [ 1582.959882][T28487] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7444'. [ 1583.014511][T28495] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7436'. [ 1586.178562][T28514] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7440'. [ 1586.827943][T28530] netlink: 'syz.2.7450': attribute type 29 has an invalid length. [ 1586.836766][T28530] netlink: 'syz.2.7450': attribute type 29 has an invalid length. [ 1586.847143][T28530] netlink: 'syz.2.7450': attribute type 29 has an invalid length. [ 1587.075057][T28534] netlink: 'syz.2.7450': attribute type 29 has an invalid length. [ 1587.092879][T28534] netlink: 'syz.2.7450': attribute type 29 has an invalid length. [ 1587.106162][T28534] netlink: 'syz.2.7450': attribute type 29 has an invalid length. [ 1587.126116][T28532] can: request_module (can-proto-0) failed. [ 1587.569336][T28545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7455'. [ 1587.623463][T28549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7457'. [ 1587.830886][T28554] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7458'. [ 1588.012098][T28562] netlink: 'syz.2.7462': attribute type 1 has an invalid length. [ 1588.033656][T28562] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.7462'. [ 1588.399854][T28571] FAULT_INJECTION: forcing a failure. [ 1588.399854][T28571] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.467920][T28571] CPU: 0 PID: 28571 Comm: syz.0.7465 Not tainted syzkaller #0 [ 1588.475490][T28571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1588.485600][T28571] Call Trace: [ 1588.488931][T28571] [ 1588.491908][T28571] dump_stack_lvl+0x188/0x24e [ 1588.496647][T28571] ? show_regs_print_info+0x12/0x12 [ 1588.501988][T28571] ? load_image+0x410/0x410 [ 1588.506573][T28571] should_fail_ex+0x390/0x4c0 [ 1588.511341][T28571] should_failslab+0x5/0x20 [ 1588.515937][T28571] slab_pre_alloc_hook+0x59/0x300 [ 1588.521021][T28571] ? __kernel_text_address+0x9/0x30 [ 1588.526287][T28571] ? unwind_get_return_address+0x49/0x80 [ 1588.532030][T28571] kmem_cache_alloc+0x56/0x2f0 [ 1588.536865][T28571] ? skb_clone+0x1e7/0x370 [ 1588.541345][T28571] skb_clone+0x1e7/0x370 [ 1588.545652][T28571] bpf_clone_redirect+0x169/0x4a0 [ 1588.550761][T28571] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 1588.556298][T28571] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1588.562360][T28571] ? __lock_acquire+0x7c40/0x7c40 [ 1588.567452][T28571] ? lock_chain_count+0x20/0x20 [ 1588.572376][T28571] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1588.578689][T28571] ? lockdep_hardirqs_on+0x94/0x140 [ 1588.583961][T28571] ? ktime_get+0x7b/0x270 [ 1588.588356][T28571] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1588.594665][T28571] ? ktime_get_real_ts64+0x440/0x440 [ 1588.600023][T28571] ? read_lock_is_recursive+0x10/0x10 [ 1588.605487][T28571] ? __cant_sleep+0x220/0x220 [ 1588.610226][T28571] ? ktime_get+0x247/0x270 [ 1588.614715][T28571] bpf_test_run+0x2b6/0x830 [ 1588.619483][T28571] ? dst_hold+0xb0/0xb0 [ 1588.623714][T28571] ? eth_get_headlen+0x200/0x200 [ 1588.628725][T28571] ? __build_skb+0x24b/0x3b0 [ 1588.630879][T28576] netlink: 'syz.3.7464': attribute type 21 has an invalid length. [ 1588.633355][T28571] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1588.633480][T28571] ? cpu_online+0xa0/0xa0 [ 1588.650995][T28571] bpf_prog_test_run+0x31c/0x390 [ 1588.656005][T28571] __sys_bpf+0x62b/0x780 [ 1588.660321][T28571] ? bpf_link_show_fdinfo+0x380/0x380 [ 1588.665781][T28571] ? lock_chain_count+0x20/0x20 [ 1588.670710][T28571] __x64_sys_bpf+0x78/0x90 [ 1588.675195][T28571] do_syscall_64+0x4c/0xa0 [ 1588.679686][T28571] ? clear_bhb_loop+0x60/0xb0 [ 1588.684421][T28571] ? clear_bhb_loop+0x60/0xb0 [ 1588.689158][T28571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1588.695127][T28571] RIP: 0033:0x7fd86df9e159 [ 1588.699608][T28571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.701500][T28576] netlink: 13070 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1588.719259][T28571] RSP: 002b:00007fd86eebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1588.719289][T28571] RAX: ffffffffffffffda RBX: 00007fd86e225fa0 RCX: 00007fd86df9e159 [ 1588.719305][T28571] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1588.719318][T28571] RBP: 00007fd86eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.719331][T28571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.719344][T28571] R13: 00007fd86e226038 R14: 00007fd86e225fa0 R15: 00007ffc314353a8 [ 1588.719376][T28571] [ 1588.810285][T28580] netlink: 'syz.1.7466': attribute type 29 has an invalid length. [ 1589.058456][T28580] netlink: 'syz.1.7466': attribute type 29 has an invalid length. [ 1589.120662][T28587] can: request_module (can-proto-0) failed. [ 1589.214488][T28594] netlink: 795 bytes leftover after parsing attributes in process `syz.2.7468'. [ 1589.499818][T28598] netlink: 95 bytes leftover after parsing attributes in process `syz.0.7469'. [ 1589.537324][T28598] netlink: 95 bytes leftover after parsing attributes in process `syz.0.7469'. [ 1589.741555][T28608] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7474'. [ 1590.473054][T28624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7479'. [ 1592.706923][T28663] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1592.800730][T28668] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.7496'. [ 1592.965744][T28674] validate_nla: 4 callbacks suppressed [ 1592.965763][T28674] netlink: 'syz.0.7497': attribute type 1 has an invalid length. [ 1593.030989][T28674] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.7497'. [ 1593.588797][T28682] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1593.912441][T28695] netlink: 'syz.1.7504': attribute type 10 has an invalid length. [ 1594.482051][T28695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.522600][T28695] device team0 entered promiscuous mode [ 1594.559523][T28695] device team_slave_1 entered promiscuous mode [ 1594.575920][T28695] device macvlan0 entered promiscuous mode [ 1594.593412][T28695] bond0: (slave team0): Enslaving as an active interface with an up link [ 1594.637032][T28702] FAULT_INJECTION: forcing a failure. [ 1594.637032][T28702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.680411][T28702] CPU: 0 PID: 28702 Comm: syz.4.7507 Not tainted syzkaller #0 [ 1594.688045][T28702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1594.698197][T28702] Call Trace: [ 1594.701533][T28702] [ 1594.704515][T28702] dump_stack_lvl+0x188/0x24e [ 1594.709264][T28702] ? show_regs_print_info+0x12/0x12 [ 1594.714661][T28702] ? load_image+0x410/0x410 [ 1594.719273][T28702] ? __lock_acquire+0x7c40/0x7c40 [ 1594.724367][T28702] ? lockdep_hardirqs_on+0x94/0x140 [ 1594.729640][T28702] should_fail_ex+0x390/0x4c0 [ 1594.734397][T28702] _copy_to_user+0x2c/0x130 [ 1594.738966][T28702] ethtool_get_fecparam+0x133/0x1b0 [ 1594.744226][T28702] ? _raw_spin_unlock+0x40/0x40 [ 1594.749151][T28702] ? set_phy_tunable+0x460/0x460 [ 1594.754155][T28702] dev_ethtool+0xbda/0x12f0 [ 1594.758735][T28702] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1594.765075][T28702] ? __lock_acquire+0x7c40/0x7c40 [ 1594.770174][T28702] ? full_name_hash+0x28/0xe0 [ 1594.774912][T28702] ? full_name_hash+0x8e/0xe0 [ 1594.779663][T28702] ? dev_load+0x1d/0x1e0 [ 1594.783972][T28702] ? dev_load+0x1d/0x1e0 [ 1594.788288][T28702] dev_ioctl+0x474/0xe80 [ 1594.792602][T28702] sock_do_ioctl+0x245/0x320 [ 1594.797262][T28702] ? sock_show_fdinfo+0xb0/0xb0 [ 1594.802196][T28702] sock_ioctl+0x48a/0x700 [ 1594.806591][T28702] ? sock_poll+0x420/0x420 [ 1594.811084][T28702] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1594.816182][T28702] ? security_file_ioctl+0x7c/0xa0 [ 1594.821354][T28702] ? sock_poll+0x420/0x420 [ 1594.825864][T28702] __se_sys_ioctl+0xfa/0x170 [ 1594.830558][T28702] do_syscall_64+0x4c/0xa0 [ 1594.835041][T28702] ? clear_bhb_loop+0x60/0xb0 [ 1594.839778][T28702] ? clear_bhb_loop+0x60/0xb0 [ 1594.844517][T28702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.850487][T28702] RIP: 0033:0x7fa136f9e159 [ 1594.854955][T28702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.874620][T28702] RSP: 002b:00007fa137e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1594.883119][T28702] RAX: ffffffffffffffda RBX: 00007fa137225fa0 RCX: 00007fa136f9e159 [ 1594.891154][T28702] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000051 [ 1594.899184][T28702] RBP: 00007fa137e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.907215][T28702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.915239][T28702] R13: 00007fa137226038 R14: 00007fa137225fa0 R15: 00007ffcad37f778 [ 1594.923286][T28702] [ 1595.069196][T28716] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.7511'. [ 1595.083524][T28716] openvswitch: netlink: Key type 386 is out of range max 32 [ 1595.506616][T28721] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7512'. [ 1595.522729][T28724] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7514'. [ 1595.552476][T28724] netlink: zone id is out of range [ 1595.612577][T28725] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7515'. [ 1595.642274][T28724] netlink: del zone limit has 4 unknown bytes [ 1596.468522][T28753] netlink: 'syz.2.7522': attribute type 2 has an invalid length. [ 1596.534445][T28753] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7522'. [ 1596.568650][T28754] netlink: 'syz.2.7522': attribute type 2 has an invalid length. [ 1596.656123][T28754] netlink: 'syz.2.7522': attribute type 1 has an invalid length. [ 1597.230645][T28766] netlink: 'syz.2.7528': attribute type 3 has an invalid length. [ 1597.251568][T28767] netlink: 'syz.0.7529': attribute type 2 has an invalid length. [ 1597.263602][T28766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7528'. [ 1597.274822][T28767] netlink: 'syz.0.7529': attribute type 9 has an invalid length. [ 1597.303977][T28768] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7528'. [ 1597.833235][T28783] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7532'. [ 1598.052506][T28786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.093225][T28796] netlink: 'syz.1.7538': attribute type 2 has an invalid length. [ 1598.101541][T28786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.233974][T28796] netlink: 'syz.1.7538': attribute type 1 has an invalid length. [ 1598.251220][T28786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1598.336463][T28786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1598.340390][T28796] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.7538'. [ 1598.830624][T28804] netlink: 'syz.0.7540': attribute type 22 has an invalid length. [ 1598.857916][T28800] netlink: 'syz.4.7541': attribute type 10 has an invalid length. [ 1598.882283][T28800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.028401][T28800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.352162][T28800] device batadv_slave_0 entered promiscuous mode [ 1599.386240][T28800] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1599.914945][T28839] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7550'. [ 1600.590822][T28857] netlink: 'syz.4.7556': attribute type 21 has an invalid length. [ 1602.013095][T28891] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7566'. [ 1602.160545][T28898] netlink: 3529 bytes leftover after parsing attributes in process `syz.0.7569'. [ 1602.205674][T28898] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.7569'. [ 1602.222952][T28898] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.7569'. [ 1604.496008][T28930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7581'. [ 1604.514619][T28930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7581'. [ 1604.557714][T28931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7581'. [ 1604.600579][T28928] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7580'. [ 1605.388355][T28956] FAULT_INJECTION: forcing a failure. [ 1605.388355][T28956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.456160][T28956] CPU: 0 PID: 28956 Comm: syz.1.7590 Not tainted syzkaller #0 [ 1605.463729][T28956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1605.473837][T28956] Call Trace: [ 1605.477171][T28956] [ 1605.480157][T28956] dump_stack_lvl+0x188/0x24e [ 1605.484902][T28956] ? show_regs_print_info+0x12/0x12 [ 1605.490165][T28956] ? load_image+0x410/0x410 [ 1605.494743][T28956] ? __might_fault+0xa6/0x120 [ 1605.499520][T28956] should_fail_ex+0x390/0x4c0 [ 1605.504363][T28956] copyin+0x1b/0x120 [ 1605.508320][T28956] _copy_from_iter+0x447/0x1130 [ 1605.513246][T28956] ? copyout_mc+0x110/0x110 [ 1605.517817][T28956] ? __virt_addr_valid+0x188/0x540 [ 1605.523002][T28956] ? __virt_addr_valid+0x188/0x540 [ 1605.528154][T28956] ? __virt_addr_valid+0x467/0x540 [ 1605.533311][T28956] ? __phys_addr_symbol+0x2b/0x70 [ 1605.538402][T28956] ? __check_object_size+0x4f6/0xa70 [ 1605.543722][T28956] netlink_sendmsg+0x755/0xbd0 [ 1605.548537][T28956] ? netlink_getsockopt+0x550/0x550 [ 1605.553771][T28956] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1605.559389][T28956] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1605.564705][T28956] ? security_socket_sendmsg+0x7c/0xa0 [ 1605.570203][T28956] ? netlink_getsockopt+0x550/0x550 [ 1605.575444][T28956] ____sys_sendmsg+0x5ed/0x9a0 [ 1605.580255][T28956] ? __sys_sendmsg_sock+0x30/0x30 [ 1605.585335][T28956] ? __import_iovec+0x306/0x510 [ 1605.590237][T28956] ? import_iovec+0x6f/0xa0 [ 1605.594786][T28956] ___sys_sendmsg+0x2a2/0x360 [ 1605.599503][T28956] ? __sys_sendmsg+0x2a0/0x2a0 [ 1605.604410][T28956] ? __lock_acquire+0x7c40/0x7c40 [ 1605.609489][T28956] __se_sys_sendmsg+0x1c3/0x2b0 [ 1605.614376][T28956] ? __x64_sys_sendmsg+0x80/0x80 [ 1605.619356][T28956] ? lockdep_hardirqs_on+0x94/0x140 [ 1605.624598][T28956] do_syscall_64+0x4c/0xa0 [ 1605.629052][T28956] ? clear_bhb_loop+0x60/0xb0 [ 1605.633761][T28956] ? clear_bhb_loop+0x60/0xb0 [ 1605.638476][T28956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1605.644422][T28956] RIP: 0033:0x7f495cf9e159 [ 1605.648893][T28956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.668530][T28956] RSP: 002b:00007f495defb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1605.677071][T28956] RAX: ffffffffffffffda RBX: 00007f495d225fa0 RCX: 00007f495cf9e159 [ 1605.685075][T28956] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1605.693079][T28956] RBP: 00007f495defb090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.701082][T28956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.709091][T28956] R13: 00007f495d226038 R14: 00007f495d225fa0 R15: 00007ffc2803ec68 [ 1605.717106][T28956] [ 1606.084936][T28969] delete_channel: no stack [ 1606.274359][T28976] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7595'. [ 1606.395111][T28981] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.7599'. [ 1606.480480][T28966] device syzkaller0 entered promiscuous mode [ 1607.426141][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.432909][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.661809][T29001] device veth1_macvtap left promiscuous mode [ 1610.694434][T29006] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1611.328921][T29035] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7611'. [ 1611.504789][T29042] FAULT_INJECTION: forcing a failure. [ 1611.504789][T29042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.540370][T29041] netlink: 'syz.0.7613': attribute type 25 has an invalid length. [ 1611.594988][T29042] CPU: 1 PID: 29042 Comm: syz.2.7612 Not tainted syzkaller #0 [ 1611.602573][T29042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1611.612769][T29042] Call Trace: [ 1611.616145][T29042] [ 1611.619163][T29042] dump_stack_lvl+0x188/0x24e [ 1611.623904][T29042] ? show_regs_print_info+0x12/0x12 [ 1611.629191][T29042] ? load_image+0x410/0x410 [ 1611.633758][T29042] ? __lock_acquire+0x7c40/0x7c40 [ 1611.638850][T29042] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1611.644554][T29042] should_fail_ex+0x390/0x4c0 [ 1611.649307][T29042] _copy_from_user+0x2c/0x170 [ 1611.654050][T29042] ___sys_sendmsg+0x1c3/0x360 [ 1611.658801][T29042] ? __sys_sendmsg+0x2a0/0x2a0 [ 1611.663643][T29042] ? __lock_acquire+0x7c40/0x7c40 [ 1611.668759][T29042] __se_sys_sendmsg+0x1c3/0x2b0 [ 1611.673671][T29042] ? ct_nmi_exit+0x145/0x1c0 [ 1611.678329][T29042] ? __x64_sys_sendmsg+0x80/0x80 [ 1611.683339][T29042] ? lockdep_hardirqs_on+0x94/0x140 [ 1611.688611][T29042] do_syscall_64+0x4c/0xa0 [ 1611.693082][T29042] ? clear_bhb_loop+0x60/0xb0 [ 1611.697824][T29042] ? clear_bhb_loop+0x60/0xb0 [ 1611.702554][T29042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1611.708508][T29042] RIP: 0033:0x7f66de19e159 [ 1611.712969][T29042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.732667][T29042] RSP: 002b:00007f66df129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1611.741234][T29042] RAX: ffffffffffffffda RBX: 00007f66de426090 RCX: 00007f66de19e159 [ 1611.749266][T29042] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000007 [ 1611.757293][T29042] RBP: 00007f66df129090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.765319][T29042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.773443][T29042] R13: 00007f66de426128 R14: 00007f66de426090 R15: 00007ffda1202648 [ 1611.781493][T29042] [ 1611.842853][T29041] netlink: 'syz.0.7613': attribute type 28 has an invalid length. [ 1613.106383][T29053] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.7617'. [ 1613.542953][T29076] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7626'. [ 1613.734844][T29084] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7637'. [ 1614.193194][T29092] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.7629'. [ 1614.249646][T29095] netlink: 'syz.3.7629': attribute type 21 has an invalid length. [ 1614.296007][T29095] IPv6: NLM_F_CREATE should be specified when creating new route [ 1614.346607][T29095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1614.353953][T29095] IPv6: NLM_F_CREATE should be set when creating new route [ 1614.361363][T29095] IPv6: NLM_F_CREATE should be set when creating new route [ 1614.368680][T29095] IPv6: NLM_F_CREATE should be set when creating new route [ 1614.614024][T29104] netlink: 'syz.3.7645': attribute type 1 has an invalid length. [ 1614.759645][T29110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.772361][T29110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.133825][T29122] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7639'. [ 1615.303702][T29126] netlink: 'syz.2.7641': attribute type 29 has an invalid length. [ 1615.316092][T29126] netlink: 'syz.2.7641': attribute type 29 has an invalid length. [ 1615.336619][T29126] netlink: 'syz.2.7641': attribute type 29 has an invalid length. [ 1615.429232][T29126] netlink: 'syz.2.7641': attribute type 29 has an invalid length. [ 1615.759594][T29143] FAULT_INJECTION: forcing a failure. [ 1615.759594][T29143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1615.808374][T29143] CPU: 0 PID: 29143 Comm: syz.1.7647 Not tainted syzkaller #0 [ 1615.815942][T29143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1615.826056][T29143] Call Trace: [ 1615.829382][T29143] [ 1615.832357][T29143] dump_stack_lvl+0x188/0x24e [ 1615.837104][T29143] ? show_regs_print_info+0x12/0x12 [ 1615.842368][T29143] ? load_image+0x410/0x410 [ 1615.846937][T29143] ? __lock_acquire+0x7c40/0x7c40 [ 1615.852043][T29143] should_fail_ex+0x390/0x4c0 [ 1615.856803][T29143] _copy_to_user+0x2c/0x130 [ 1615.861360][T29143] simple_read_from_buffer+0xe3/0x150 [ 1615.866772][T29143] proc_fail_nth_read+0x1a6/0x220 [ 1615.871838][T29143] ? proc_fault_inject_write+0x310/0x310 [ 1615.877511][T29143] ? fsnotify_perm+0x248/0x550 [ 1615.882311][T29143] ? proc_fault_inject_write+0x310/0x310 [ 1615.887978][T29143] vfs_read+0x2db/0x960 [ 1615.892178][T29143] ? kernel_read+0x1e0/0x1e0 [ 1615.896812][T29143] ? __fget_files+0x28/0x460 [ 1615.901442][T29143] ? __fget_files+0x3fc/0x460 [ 1615.906163][T29143] ? __fdget_pos+0x2ae/0x360 [ 1615.910790][T29143] ? ksys_read+0x70/0x260 [ 1615.915160][T29143] ksys_read+0x14d/0x260 [ 1615.919452][T29143] ? vfs_write+0x9a0/0x9a0 [ 1615.923937][T29143] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1615.929894][T29143] do_syscall_64+0x4c/0xa0 [ 1615.934348][T29143] ? clear_bhb_loop+0x60/0xb0 [ 1615.939055][T29143] ? clear_bhb_loop+0x60/0xb0 [ 1615.943774][T29143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1615.949719][T29143] RIP: 0033:0x7f495cf5e98e [ 1615.954199][T29143] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1615.973855][T29143] RSP: 002b:00007f495defafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1615.982398][T29143] RAX: ffffffffffffffda RBX: 00007f495defb6c0 RCX: 00007f495cf5e98e [ 1615.990404][T29143] RDX: 000000000000000f RSI: 00007f495defb0a0 RDI: 0000000000000006 [ 1615.998412][T29143] RBP: 00007f495defb090 R08: 0000000000000000 R09: 0000000000000000 [ 1616.006416][T29143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.014415][T29143] R13: 00007f495d226038 R14: 00007f495d225fa0 R15: 00007ffc2803ec68 [ 1616.022442][T29143] [ 1617.584430][T29180] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7654'. [ 1618.365267][T29196] netlink: 'syz.4.7660': attribute type 2 has an invalid length. [ 1618.379682][T29196] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.7660'. [ 1619.227510][T29210] netlink: 'syz.0.7667': attribute type 6 has an invalid length. [ 1619.290631][T29210] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7667'. [ 1619.337785][T29219] netlink: 'syz.1.7668': attribute type 29 has an invalid length. [ 1619.479793][T29213] netlink: 'syz.0.7667': attribute type 6 has an invalid length. [ 1619.495643][T29213] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7667'. [ 1619.505080][T29219] netlink: 'syz.1.7668': attribute type 29 has an invalid length. [ 1619.863201][T29237] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7675'. [ 1619.894635][T29237] openvswitch: netlink: Flow key attr not present in new flow. [ 1620.599570][T29249] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1620.950744][T29265] netlink: 'syz.1.7682': attribute type 29 has an invalid length. [ 1620.984013][T29265] netlink: 'syz.1.7682': attribute type 29 has an invalid length. [ 1621.036036][T29266] netlink: 'syz.1.7682': attribute type 29 has an invalid length. [ 1621.077713][T29265] netlink: 'syz.1.7682': attribute type 29 has an invalid length. [ 1621.231014][T29266] netlink: 'syz.1.7682': attribute type 29 has an invalid length. [ 1621.460264][T29274] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7687'. [ 1621.550588][T29274] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1622.936921][T29303] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7695'. [ 1623.477277][T29319] netlink: 'syz.2.7706': attribute type 29 has an invalid length. [ 1623.548516][T29319] netlink: 'syz.2.7706': attribute type 29 has an invalid length. [ 1623.597891][T29322] netlink: 'syz.2.7706': attribute type 29 has an invalid length. [ 1624.025757][T29328] netlink: 'syz.1.7709': attribute type 29 has an invalid length. [ 1624.217780][T29328] netlink: 'syz.1.7709': attribute type 29 has an invalid length. [ 1624.237917][T29331] netlink: 'syz.1.7709': attribute type 29 has an invalid length. [ 1624.394566][T29336] FAULT_INJECTION: forcing a failure. [ 1624.394566][T29336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.465949][T29336] CPU: 1 PID: 29336 Comm: syz.4.7710 Not tainted syzkaller #0 [ 1624.473543][T29336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1624.483683][T29336] Call Trace: [ 1624.487034][T29336] [ 1624.490120][T29336] dump_stack_lvl+0x188/0x24e [ 1624.494941][T29336] ? show_regs_print_info+0x12/0x12 [ 1624.500246][T29336] ? load_image+0x410/0x410 [ 1624.504870][T29336] ? __lock_acquire+0x7c40/0x7c40 [ 1624.510001][T29336] ? memcpy+0x3c/0x60 [ 1624.514083][T29336] should_fail_ex+0x390/0x4c0 [ 1624.518876][T29336] _copy_to_user+0x2c/0x130 [ 1624.523484][T29336] generic_map_lookup_batch+0x829/0xbf0 [ 1624.529206][T29336] ? bpf_map_update_value+0x670/0x670 [ 1624.534703][T29336] ? __fdget+0x17c/0x200 [ 1624.539067][T29336] ? bpf_map_update_value+0x670/0x670 [ 1624.544973][T29336] bpf_map_do_batch+0x2e0/0x5f0 [ 1624.550030][T29336] ? bpf_lsm_bpf+0x5/0x10 [ 1624.554449][T29336] ? security_bpf+0x7a/0xa0 [ 1624.559055][T29336] __sys_bpf+0x6f7/0x780 [ 1624.563396][T29336] ? bpf_link_show_fdinfo+0x380/0x380 [ 1624.568908][T29336] ? lock_chain_count+0x20/0x20 [ 1624.573892][T29336] __x64_sys_bpf+0x78/0x90 [ 1624.578413][T29336] do_syscall_64+0x4c/0xa0 [ 1624.582940][T29336] ? clear_bhb_loop+0x60/0xb0 [ 1624.587699][T29336] ? clear_bhb_loop+0x60/0xb0 [ 1624.592465][T29336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1624.598459][T29336] RIP: 0033:0x7fa136f9e159 [ 1624.602973][T29336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.622754][T29336] RSP: 002b:00007fa137e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1624.631274][T29336] RAX: ffffffffffffffda RBX: 00007fa137225fa0 RCX: 00007fa136f9e159 [ 1624.639332][T29336] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 1624.647391][T29336] RBP: 00007fa137e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.655488][T29336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1624.663540][T29336] R13: 00007fa137226038 R14: 00007fa137225fa0 R15: 00007ffcad37f778 [ 1624.671678][T29336] [ 1631.074758][T29333] netlink: 'syz.1.7709': attribute type 29 has an invalid length. [ 1631.083988][T29334] netlink: 'syz.1.7709': attribute type 29 has an invalid length. [ 1631.092341][T29345] netlink: 'syz.3.7712': attribute type 21 has an invalid length. [ 1631.106189][T29345] netlink: 'syz.3.7712': attribute type 6 has an invalid length. [ 1631.114014][T29345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1631.325077][T29360] netlink: 'syz.3.7717': attribute type 21 has an invalid length. [ 1631.338487][T29355] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1631.354433][T29360] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7717'. [ 1631.372503][T29361] netlink: 'syz.3.7717': attribute type 21 has an invalid length. [ 1631.380837][T29361] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7717'. [ 1631.428485][T29360] netlink: 'syz.3.7717': attribute type 2 has an invalid length. [ 1631.527237][T29361] netlink: 'syz.3.7717': attribute type 2 has an invalid length. [ 1631.822903][T29378] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7722'. [ 1631.865499][T29380] netlink: 'syz.4.7723': attribute type 10 has an invalid length. [ 1631.968629][T29380] device dummy0 entered promiscuous mode [ 1632.000520][T29380] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1632.118069][T29386] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7725'. [ 1632.243573][T29390] FAULT_INJECTION: forcing a failure. [ 1632.243573][T29390] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.301597][T29390] CPU: 1 PID: 29390 Comm: syz.0.7726 Not tainted syzkaller #0 [ 1632.309172][T29390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1632.319344][T29390] Call Trace: [ 1632.322669][T29390] [ 1632.325656][T29390] dump_stack_lvl+0x188/0x24e [ 1632.330434][T29390] ? show_regs_print_info+0x12/0x12 [ 1632.335689][T29390] ? load_image+0x410/0x410 [ 1632.340270][T29390] ? __lock_acquire+0x7c40/0x7c40 [ 1632.345371][T29390] should_fail_ex+0x390/0x4c0 [ 1632.350121][T29390] should_failslab+0x5/0x20 [ 1632.354679][T29390] slab_pre_alloc_hook+0x59/0x300 [ 1632.360035][T29390] ? bpf_test_init+0x9f/0x140 [ 1632.364784][T29390] __kmem_cache_alloc_node+0x4f/0x270 [ 1632.370210][T29390] ? bpf_test_init+0x9f/0x140 [ 1632.374932][T29390] __kmalloc+0xa3/0x240 [ 1632.379141][T29390] bpf_test_init+0x9f/0x140 [ 1632.383687][T29390] bpf_prog_test_run_xdp+0x488/0xf80 [ 1632.389029][T29390] ? __lock_acquire+0x7c40/0x7c40 [ 1632.394107][T29390] ? dev_put+0x80/0x80 [ 1632.398232][T29390] ? bpf_prog_test_run+0x310/0x390 [ 1632.403400][T29390] ? dev_put+0x80/0x80 [ 1632.407520][T29390] bpf_prog_test_run+0x31c/0x390 [ 1632.412507][T29390] __sys_bpf+0x62b/0x780 [ 1632.416821][T29390] ? bpf_link_show_fdinfo+0x380/0x380 [ 1632.422275][T29390] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1632.428598][T29390] __x64_sys_bpf+0x78/0x90 [ 1632.433063][T29390] do_syscall_64+0x4c/0xa0 [ 1632.437515][T29390] ? clear_bhb_loop+0x60/0xb0 [ 1632.442234][T29390] ? clear_bhb_loop+0x60/0xb0 [ 1632.446954][T29390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1632.452921][T29390] RIP: 0033:0x7fd86df9e159 [ 1632.457377][T29390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.477109][T29390] RSP: 002b:00007fd86eebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1632.485662][T29390] RAX: ffffffffffffffda RBX: 00007fd86e225fa0 RCX: 00007fd86df9e159 [ 1632.493706][T29390] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1632.501724][T29390] RBP: 00007fd86eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.509735][T29390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1632.517770][T29390] R13: 00007fd86e226038 R14: 00007fd86e225fa0 R15: 00007ffc314353a8 [ 1632.525801][T29390] [ 1634.092893][T29434] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7736'. [ 1634.232481][T29436] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.7739'. [ 1636.563150][T29448] FAULT_INJECTION: forcing a failure. [ 1636.563150][T29448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.623172][T29448] CPU: 1 PID: 29448 Comm: syz.2.7746 Not tainted syzkaller #0 [ 1636.630733][T29448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1636.640842][T29448] Call Trace: [ 1636.644175][T29448] [ 1636.647154][T29448] dump_stack_lvl+0x188/0x24e [ 1636.651923][T29448] ? show_regs_print_info+0x12/0x12 [ 1636.657266][T29448] ? load_image+0x410/0x410 [ 1636.661844][T29448] ? __might_fault+0xa6/0x120 [ 1636.666599][T29448] should_fail_ex+0x390/0x4c0 [ 1636.671352][T29448] copyin+0x1b/0x120 [ 1636.675316][T29448] _copy_from_iter+0x447/0x1130 [ 1636.680244][T29448] ? copyout_mc+0x110/0x110 [ 1636.684822][T29448] ? __virt_addr_valid+0x188/0x540 [ 1636.690053][T29448] ? __virt_addr_valid+0x188/0x540 [ 1636.695273][T29448] ? __virt_addr_valid+0x467/0x540 [ 1636.700582][T29448] ? __phys_addr_symbol+0x2b/0x70 [ 1636.705669][T29448] ? __check_object_size+0x4f6/0xa70 [ 1636.711142][T29448] netlink_sendmsg+0x755/0xbd0 [ 1636.715986][T29448] ? netlink_getsockopt+0x550/0x550 [ 1636.721252][T29448] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1636.726879][T29448] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1636.732225][T29448] ? security_socket_sendmsg+0x7c/0xa0 [ 1636.737757][T29448] ? netlink_getsockopt+0x550/0x550 [ 1636.742996][T29448] ____sys_sendmsg+0x5ed/0x9a0 [ 1636.747805][T29448] ? __sys_sendmsg_sock+0x30/0x30 [ 1636.752864][T29448] ? __import_iovec+0x306/0x510 [ 1636.757767][T29448] ? import_iovec+0x6f/0xa0 [ 1636.762343][T29448] ___sys_sendmsg+0x2a2/0x360 [ 1636.767060][T29448] ? __sys_sendmsg+0x2a0/0x2a0 [ 1636.771872][T29448] ? __lock_acquire+0x7c40/0x7c40 [ 1636.776968][T29448] __se_sys_sendmsg+0x1c3/0x2b0 [ 1636.781862][T29448] ? __x64_sys_sendmsg+0x80/0x80 [ 1636.786849][T29448] ? lockdep_hardirqs_on+0x94/0x140 [ 1636.792120][T29448] do_syscall_64+0x4c/0xa0 [ 1636.796572][T29448] ? clear_bhb_loop+0x60/0xb0 [ 1636.801283][T29448] ? clear_bhb_loop+0x60/0xb0 [ 1636.805998][T29448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1636.811937][T29448] RIP: 0033:0x7f66de19e159 [ 1636.816395][T29448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.836167][T29448] RSP: 002b:00007f66df14a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1636.844644][T29448] RAX: ffffffffffffffda RBX: 00007f66de425fa0 RCX: 00007f66de19e159 [ 1636.852752][T29448] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1636.860771][T29448] RBP: 00007f66df14a090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.868777][T29448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.876785][T29448] R13: 00007f66de426038 R14: 00007f66de425fa0 R15: 00007ffda1202648 [ 1636.885081][T29448] [ 1637.242918][T29456] netlink: 'syz.3.7749': attribute type 6 has an invalid length. [ 1637.288914][T29456] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7749'. [ 1637.945142][T29481] netlink: 'syz.2.7756': attribute type 29 has an invalid length. [ 1637.970896][T29481] netlink: 'syz.2.7756': attribute type 29 has an invalid length. [ 1637.993411][T29479] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7755'. [ 1638.007881][T29481] netlink: 'syz.2.7756': attribute type 29 has an invalid length. [ 1638.021804][T29481] netlink: 'syz.2.7756': attribute type 29 has an invalid length. [ 1638.104916][T29483] netlink: 'syz.2.7756': attribute type 29 has an invalid length. [ 1642.728318][T29508] device syzkaller0 entered promiscuous mode [ 1644.463063][T29535] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7771'. [ 1644.509311][T29535] netlink: zone id is out of range [ 1644.547858][T29535] netlink: zone id is out of range [ 1644.579930][T29535] netlink: zone id is out of range [ 1644.610885][T29535] netlink: zone id is out of range [ 1644.654459][T29535] netlink: zone id is out of range [ 1644.676387][T29535] netlink: zone id is out of range [ 1644.702180][T29535] netlink: zone id is out of range [ 1644.726608][T29535] netlink: zone id is out of range [ 1644.739383][T29535] netlink: zone id is out of range [ 1644.769774][T29535] netlink: zone id is out of range [ 1650.430905][T29526] netlink: 'syz.0.7769': attribute type 27 has an invalid length. [ 1650.439031][T29526] netlink: 'syz.0.7769': attribute type 25 has an invalid length. [ 1650.870981][T29592] nr0: port 1(hsr0) entered blocking state [ 1650.890791][T29592] nr0: port 1(hsr0) entered disabled state [ 1650.927807][T29592] device hsr0 entered promiscuous mode [ 1651.044224][T29593] nr0: port 1(hsr0) entered blocking state [ 1651.050319][T29593] nr0: port 1(hsr0) entered forwarding state [ 1653.808711][T29604] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7791'. [ 1653.851795][T29604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1653.859433][T29604] IPv6: NLM_F_CREATE should be set when creating new route [ 1653.866971][T29604] IPv6: NLM_F_CREATE should be set when creating new route [ 1653.874375][T29604] IPv6: NLM_F_CREATE should be set when creating new route [ 1653.995069][T29610] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7793'. [ 1654.444107][T29623] netlink: 'syz.4.7795': attribute type 21 has an invalid length. [ 1655.768635][T29650] delete_channel: no stack [ 1655.968332][T29653] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1656.675430][T29663] netlink: 'syz.3.7810': attribute type 13 has an invalid length. [ 1656.699313][T29663] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.7810'. [ 1657.985615][T29691] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7819'. [ 1658.544995][T29691] net_ratelimit: 2 callbacks suppressed [ 1658.545151][T29691] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1659.896442][T21769] wlan1: Trigger new scan to find an IBSS to join [ 1662.357188][T29733] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.7829'. [ 1662.610573][T29737] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.7834'. [ 1663.895728][T23903] wlan1: Trigger new scan to find an IBSS to join [ 1666.060679][T21773] wlan1: Creating new IBSS network, BSSID f6:7b:4e:dc:c5:d6 [ 1666.384377][T29769] netlink: 'syz.1.7843': attribute type 29 has an invalid length. [ 1666.466709][T29769] netlink: 'syz.1.7843': attribute type 29 has an invalid length. [ 1666.566074][T29774] netlink: 'syz.1.7843': attribute type 29 has an invalid length. [ 1666.648576][T29767] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7845'. [ 1666.732303][T29774] netlink: 'syz.1.7843': attribute type 29 has an invalid length. [ 1666.774896][T29774] netlink: 'syz.1.7843': attribute type 29 has an invalid length. [ 1666.844358][T29778] netlink: 'syz.1.7843': attribute type 29 has an invalid length. [ 1666.951171][T29769] can: request_module (can-proto-0) failed. [ 1667.081012][T29779] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1667.194638][T29779] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1667.223038][T29789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1667.237277][T29789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1667.249012][T29789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1667.257465][T29790] FAULT_INJECTION: forcing a failure. [ 1667.257465][T29790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1667.271523][T29790] CPU: 0 PID: 29790 Comm: syz.1.7850 Not tainted syzkaller #0 [ 1667.279074][T29790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1667.289192][T29790] Call Trace: [ 1667.292526][T29790] [ 1667.295505][T29790] dump_stack_lvl+0x188/0x24e [ 1667.300255][T29790] ? show_regs_print_info+0x12/0x12 [ 1667.305550][T29790] ? load_image+0x410/0x410 [ 1667.310126][T29790] ? __lock_acquire+0x7c40/0x7c40 [ 1667.315219][T29790] ? migrate_enable+0x148/0x220 [ 1667.320226][T29790] should_fail_ex+0x390/0x4c0 [ 1667.324979][T29790] _copy_to_user+0x2c/0x130 [ 1667.329552][T29790] bpf_test_finish+0x4a2/0x600 [ 1667.334399][T29790] ? convert_skb_to___skb+0x420/0x420 [ 1667.339856][T29790] ? __build_skb+0x24b/0x3b0 [ 1667.344541][T29790] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1667.348210][T29789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1667.350119][T29790] ? cpu_online+0xa0/0xa0 [ 1667.359660][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1667.361538][T29790] bpf_prog_test_run+0x31c/0x390 [ 1667.370169][T29789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1667.373473][T29790] __sys_bpf+0x62b/0x780 [ 1667.384768][T29790] ? bpf_link_show_fdinfo+0x380/0x380 [ 1667.390239][T29790] ? lock_chain_count+0x20/0x20 [ 1667.395186][T29790] __x64_sys_bpf+0x78/0x90 [ 1667.397218][T29782] cgroup: fork rejected by pids controller in [ 1667.399667][T29790] do_syscall_64+0x4c/0xa0 [ 1667.399698][T29790] ? clear_bhb_loop+0x60/0xb0 [ 1667.399721][T29790] ? clear_bhb_loop+0x60/0xb0 [ 1667.399747][T29790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1667.426115][T29790] RIP: 0033:0x7f495cf9e159 [ 1667.430596][T29790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.450270][T29790] RSP: 002b:00007f495defb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1667.458752][T29790] RAX: ffffffffffffffda RBX: 00007f495d225fa0 RCX: 00007f495cf9e159 [ 1667.466781][T29790] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1667.472780][T29782] /syz0 [ 1667.474788][T29790] RBP: 00007f495defb090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.474808][T29790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1667.474823][T29790] R13: 00007f495d226038 R14: 00007f495d225fa0 R15: 00007ffc2803ec68 [ 1667.474859][T29790] [ 1667.496227][T29782] [ 1667.670581][T29794] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1667.741283][T29794] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1668.265347][T29787] chnl_net:caif_netlink_parms(): no params data found [ 1668.540320][T29787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.551155][T29787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.563797][T29787] device bridge_slave_0 entered promiscuous mode [ 1668.595646][T29810] netlink: 'syz.3.7856': attribute type 16 has an invalid length. [ 1668.612374][T29810] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7856'. [ 1668.654240][T29787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.664977][T29787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.701408][T29787] device bridge_slave_1 entered promiscuous mode [ 1668.730043][T29810] netlink: 'syz.3.7856': attribute type 16 has an invalid length. [ 1668.752287][T29810] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7856'. [ 1668.834109][T29787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1668.858659][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.865100][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.880888][T29787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1668.978849][T29787] team0: Port device team_slave_0 added [ 1669.002567][T29787] team0: Port device team_slave_1 added [ 1669.578497][T13687] Bluetooth: hci3: command 0x0409 tx timeout [ 1671.488404][T29821] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.7858'. [ 1671.518741][T29787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.546429][T29787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.602680][T29787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.655834][T13687] Bluetooth: hci3: command 0x041b tx timeout [ 1672.033473][T29787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.046508][T29787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1672.074804][T29787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.180913][T23903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.412688][T23903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.500324][T29787] device hsr_slave_0 entered promiscuous mode [ 1673.324733][T29789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1673.358189][T29789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1673.375347][T29789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1673.407988][T29789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1673.431126][T29789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1673.446829][T29789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1673.597947][T29787] device hsr_slave_1 entered promiscuous mode [ 1673.735766][T29789] Bluetooth: hci3: command 0x040f tx timeout [ 1675.579046][T29789] Bluetooth: hci2: command 0x0409 tx timeout [ 1675.675660][T29787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1675.683325][T29787] Cannot create hsr debugfs directory [ 1675.800843][T23903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.815933][T29789] Bluetooth: hci3: command 0x0419 tx timeout [ 1676.067659][T23903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.078373][T29855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7871'. [ 1676.119299][T29855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7871'. [ 1676.170945][T29857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7871'. [ 1676.184640][T29850] FAULT_INJECTION: forcing a failure. [ 1676.184640][T29850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1676.203983][T29855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7871'. [ 1676.214050][T29850] CPU: 1 PID: 29850 Comm: syz.1.7869 Not tainted syzkaller #0 [ 1676.221597][T29850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1676.231711][T29850] Call Trace: [ 1676.235042][T29850] [ 1676.238033][T29850] dump_stack_lvl+0x188/0x24e [ 1676.242782][T29850] ? show_regs_print_info+0x12/0x12 [ 1676.248046][T29850] ? load_image+0x410/0x410 [ 1676.252630][T29850] ? __lock_acquire+0x7c40/0x7c40 [ 1676.257726][T29850] ? __local_bh_enable_ip+0x136/0x1c0 [ 1676.263154][T29850] ? _local_bh_enable+0xa0/0xa0 [ 1676.268070][T29850] should_fail_ex+0x390/0x4c0 [ 1676.272815][T29850] copy_fpstate_to_sigframe+0xaae/0xd70 [ 1676.278526][T29850] ? copy_fpstate_to_sigframe+0x26a/0xd70 [ 1676.284339][T29850] ? fpregs_set+0x5f0/0x5f0 [ 1676.288908][T29850] ? _raw_spin_unlock_irq+0x2a/0x40 [ 1676.294228][T29850] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1676.300291][T29850] ? lock_chain_count+0x20/0x20 [ 1676.305216][T29850] ? arch_do_signal_or_restart+0x23b/0x1310 [ 1676.311214][T29850] ? fpu__alloc_mathframe+0xa3/0x120 [ 1676.317086][T29850] arch_do_signal_or_restart+0x67a/0x1310 [ 1676.322886][T29850] ? __fget_files+0x3fc/0x460 [ 1676.327655][T29850] ? get_sigframe_size+0x10/0x10 [ 1676.332673][T29850] ? fput+0x150/0x1a0 [ 1676.336733][T29850] ? exit_to_user_mode_loop+0x3b/0x110 [ 1676.342283][T29850] exit_to_user_mode_loop+0x70/0x110 [ 1676.347696][T29850] exit_to_user_mode_prepare+0xee/0x180 [ 1676.353310][T29850] syscall_exit_to_user_mode+0x16/0x40 [ 1676.358836][T29850] do_syscall_64+0x58/0xa0 [ 1676.363307][T29850] ? clear_bhb_loop+0x60/0xb0 [ 1676.368047][T29850] ? clear_bhb_loop+0x60/0xb0 [ 1676.372787][T29850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1676.378757][T29850] RIP: 0033:0x7f495cf9e159 [ 1676.383277][T29850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.402949][T29850] RSP: 002b:00007f495defb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1676.411427][T29850] RAX: fffffffffffffffc RBX: 00007f495d225fa0 RCX: 00007f495cf9e159 [ 1676.419466][T29850] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 1676.427515][T29850] RBP: 00007f495defb090 R08: 0000000000000000 R09: 0000000000000000 [ 1676.435546][T29850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.443580][T29850] R13: 00007f495d226038 R14: 00007f495d225fa0 R15: 00007ffc2803ec68 [ 1676.451627][T29850] [ 1676.865388][T23903] tipc: Left network mode [ 1676.940652][T29787] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1677.281942][T29875] netlink: 'syz.4.7877': attribute type 3 has an invalid length. [ 1677.315234][T29787] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1677.375182][T29787] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1677.404525][T29875] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1677.452118][T29872] netlink: 'syz.4.7877': attribute type 39 has an invalid length. [ 1677.656190][T29789] Bluetooth: hci2: command 0x041b tx timeout [ 1678.108500][T29787] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1678.295067][T29844] chnl_net:caif_netlink_parms(): no params data found [ 1678.535997][T29888] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7880'. [ 1678.566102][T29888] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1679.223163][T29787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.245156][T29844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.258727][T29844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.292693][T29844] device bridge_slave_0 entered promiscuous mode [ 1679.337991][T29907] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.7882'. [ 1679.738261][T29789] Bluetooth: hci2: command 0x040f tx timeout [ 1680.314433][T29844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.340706][T29844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.360042][T29844] device bridge_slave_1 entered promiscuous mode [ 1680.383732][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1680.393702][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1680.410397][T29787] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.424868][T29910] netlink: 'syz.3.7884': attribute type 21 has an invalid length. [ 1680.433851][T29910] netlink: 'syz.3.7884': attribute type 6 has an invalid length. [ 1680.450536][T29910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7884'. [ 1680.645231][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1680.677744][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1680.706521][T21769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.713812][T21769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.810367][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1680.828845][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1680.876661][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1680.913903][T21769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.921187][T21769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.999138][T29844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.057866][T29931] netlink: 'syz.3.7888': attribute type 21 has an invalid length. [ 1681.092631][T29931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1681.191228][T29844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1681.299574][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1681.395365][T29844] team0: Port device team_slave_0 added [ 1681.816115][T29789] Bluetooth: hci2: command 0x0419 tx timeout [ 1684.282289][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1684.346403][T29844] team0: Port device team_slave_1 added [ 1684.548281][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1684.568352][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1684.594956][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1684.635177][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1684.673319][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1684.702563][T29844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.710423][T29844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.775807][T29844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.806640][T29948] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7894'. [ 1684.845037][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1684.877803][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1684.901205][T29949] netlink: 'syz.1.7893': attribute type 21 has an invalid length. [ 1684.972407][T29844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.992051][T29844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.062497][T29844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.092688][T29787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1685.137953][T29787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1685.359134][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1685.383250][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1685.800633][T29844] device hsr_slave_0 entered promiscuous mode [ 1685.848887][T29844] device hsr_slave_1 entered promiscuous mode [ 1685.905896][T29844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1685.930585][T29844] Cannot create hsr debugfs directory [ 1686.149064][T23903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1686.167485][T23903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1686.206477][T23903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1686.234361][T23903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.277658][T23903] device bridge_slave_1 left promiscuous mode [ 1686.284042][T23903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.322576][T23903] device bridge_slave_0 left promiscuous mode [ 1686.350302][T23903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.486297][T23903] device veth1_macvtap left promiscuous mode [ 1686.506080][T23903] device veth0_macvtap left promiscuous mode [ 1686.512344][T23903] device veth1_vlan left promiscuous mode [ 1686.548912][T23903] device veth0_vlan left promiscuous mode [ 1688.162448][T23903] team0 (unregistering): Port device team_slave_1 removed [ 1688.241379][T23903] team0 (unregistering): Port device team_slave_0 removed [ 1688.314228][T23903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1688.381737][T23903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1688.907778][T23903] bond0 (unregistering): Released all slaves [ 1689.142988][T21766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1689.153196][T21766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1689.211489][T29985] device syzkaller0 entered promiscuous mode [ 1689.530161][T30006] netlink: 'syz.1.7902': attribute type 1 has an invalid length. [ 1689.549630][T30006] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.7902'. [ 1693.069620][T30008] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7902'. [ 1693.083371][T29787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.071018][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1697.080867][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1697.158241][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1697.177608][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1697.196879][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1697.230220][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1697.242496][T29787] device veth0_vlan entered promiscuous mode [ 1697.312689][T29787] device veth1_vlan entered promiscuous mode [ 1697.348704][T29844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1697.387039][T21766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1697.406067][T21766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1697.448089][T29844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1697.480608][T29844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1697.506170][T21766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1697.514995][T21766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1697.539422][T29787] device veth0_macvtap entered promiscuous mode [ 1697.558139][T29844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1697.575310][T29787] device veth1_macvtap entered promiscuous mode [ 1697.622544][T29787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1697.634605][T29787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.650674][T29787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.676418][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1697.713094][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1697.727013][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1697.749805][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1697.838223][T29787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1697.879777][T29787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.906909][T29787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.931530][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1697.961106][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1698.004073][T30055] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.7905'. [ 1698.023807][T29787] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.042977][T29787] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.079934][T29787] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.100107][T29787] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.991987][T30063] netlink: 791 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1699.016032][T30063] bridge_slave_1: default FDB implementation only supports local addresses [ 1699.163382][T29844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.218236][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1699.270080][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1699.301935][T21785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.322798][T21785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.456478][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1699.491734][T29844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.535106][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1699.544017][T21790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.572908][T21790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.601424][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1699.636983][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.644234][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.708306][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1699.798847][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1699.842363][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1699.868781][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1699.888660][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.895891][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1699.929162][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1700.025833][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1700.046107][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1700.081335][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1700.142561][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1700.202514][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1700.256915][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1700.307459][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1700.348594][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1700.405139][T29844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1700.785253][T30081] device syzkaller0 entered promiscuous mode [ 1700.871957][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1700.891698][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1707.231116][T30122] netlink: 'syz.4.7917': attribute type 2 has an invalid length. [ 1707.256406][T30122] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7917'. [ 1707.269372][T30129] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1707.774470][T30144] netlink: 'syz.4.7924': attribute type 3 has an invalid length. [ 1707.853790][T30144] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7924'. [ 1708.277661][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1708.308795][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1708.349907][T29844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.496617][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1708.536426][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1709.247497][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1709.276460][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1709.306452][T29844] device veth0_vlan entered promiscuous mode [ 1709.315105][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1709.356650][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1709.401376][T29844] device veth1_vlan entered promiscuous mode [ 1709.534438][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1709.571039][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1709.601486][T29844] device veth0_macvtap entered promiscuous mode [ 1709.626850][T30170] netlink: 'syz.5.7928': attribute type 33 has an invalid length. [ 1709.653440][T30170] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7928'. [ 1709.690086][T29844] device veth1_macvtap entered promiscuous mode [ 1709.797042][T29844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.830945][T29844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.855596][T29844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.886621][T29844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.953437][T29844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.032733][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1710.068169][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1710.103098][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1710.170732][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1710.216994][T29844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.256040][T29844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.285690][T29844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.308608][T29844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.341369][T29844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.367187][T30179] netlink: 'syz.5.7932': attribute type 21 has an invalid length. [ 1710.401128][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1710.441288][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1710.484798][T29844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.529976][T29844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.558723][T29844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.603362][T29844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.181261][T30209] device syzkaller0 entered promiscuous mode [ 1712.213983][T30225] netlink: 'syz.4.7939': attribute type 2 has an invalid length. [ 1712.245974][T30225] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.7939'. [ 1715.555367][T21773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.641502][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.660019][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.704262][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1715.790201][T21773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.502112][T21769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.516838][T21769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.998436][T21773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.067266][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1718.108673][T30325] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7958'. [ 1718.972931][T21773] tipc: Left network mode [ 1719.323744][T30368] netlink: 'syz.5.7968': attribute type 25 has an invalid length. [ 1719.366031][T30368] netlink: 'syz.5.7968': attribute type 28 has an invalid length. [ 1719.615988][T30380] netlink: 'syz.0.7972': attribute type 10 has an invalid length. [ 1719.832788][T30380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.946827][T30380] bond0: (slave team0): Enslaving as an active interface with an up link [ 1721.987518][T30432] netlink: 'syz.4.7986': attribute type 2 has an invalid length. [ 1722.060817][T30432] netlink: 119 bytes leftover after parsing attributes in process `syz.4.7986'. [ 1723.444842][T30465] netlink: 'syz.4.7994': attribute type 21 has an invalid length. [ 1723.461012][T30465] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7994'. [ 1723.552458][T30467] netlink: 'syz.4.7994': attribute type 3 has an invalid length. [ 1723.572145][T30467] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7994'. [ 1723.676254][T30467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1725.316242][T30502] netlink: 'syz.1.8002': attribute type 29 has an invalid length. [ 1725.333426][T30506] netlink: 'syz.0.8000': attribute type 2 has an invalid length. [ 1725.360493][T30506] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8000'. [ 1725.497314][T30510] netlink: 'syz.3.8003': attribute type 2 has an invalid length. [ 1725.513534][T30510] netlink: 'syz.3.8003': attribute type 1 has an invalid length. [ 1725.537800][T30510] netlink: 148288 bytes leftover after parsing attributes in process `syz.3.8003'. [ 1725.550940][T30502] netlink: 'syz.1.8002': attribute type 29 has an invalid length. [ 1725.578732][T30511] netlink: 'syz.4.8004': attribute type 22 has an invalid length. [ 1726.435412][T30521] netlink: 'syz.0.8006': attribute type 29 has an invalid length. [ 1726.497714][T30509] netlink: 'syz.1.8002': attribute type 29 has an invalid length. [ 1726.524891][T30521] netlink: 'syz.0.8006': attribute type 29 has an invalid length. [ 1726.539422][T30522] netlink: 'syz.0.8006': attribute type 29 has an invalid length. [ 1726.585336][T21773] device bond0 left promiscuous mode [ 1726.595029][T21773] device bond_slave_0 left promiscuous mode [ 1726.669673][T21773] device bond_slave_1 left promiscuous mode [ 1726.686011][T21773] : port 1(bond0) entered disabled state [ 1726.791587][T21773] device hsr_slave_0 left promiscuous mode [ 1726.821687][T21773] device hsr_slave_1 left promiscuous mode [ 1726.852847][T21773] device bridge_slave_1 left promiscuous mode [ 1726.872300][T21773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.917495][T21773] device bridge_slave_0 left promiscuous mode [ 1726.935896][T21773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.376848][T30546] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8013'. [ 1728.025948][T21773] device veth0_macvtap left promiscuous mode [ 1728.040570][T21773] device veth1_vlan left promiscuous mode [ 1730.311146][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.317590][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.138117][T21773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1733.208247][T21773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1734.326868][T21773] bond0 (unregistering): Released all slaves [ 1734.549119][T30521] validate_nla: 2 callbacks suppressed [ 1734.549141][T30521] netlink: 'syz.0.8006': attribute type 29 has an invalid length. [ 1734.577306][T30542] netlink: 'syz.3.8013': attribute type 21 has an invalid length. [ 1734.585360][T30542] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8013'. [ 1734.644990][T30547] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1734.691697][T30566] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8018'. [ 1734.845907][T30595] netlink: 'syz.0.8028': attribute type 15 has an invalid length. [ 1734.888873][T30595] netlink: 'syz.0.8028': attribute type 7 has an invalid length. [ 1734.935901][T30595] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8028'. [ 1735.930847][T30630] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8034'. [ 1736.409024][T30654] netlink: 'syz.0.8040': attribute type 21 has an invalid length. [ 1736.440653][T30654] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8040'. [ 1736.588432][T30659] netlink: 'syz.0.8040': attribute type 3 has an invalid length. [ 1736.605649][T30659] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8040'. [ 1736.651721][T30659] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1736.710458][T30659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1737.055498][T30664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1737.600524][T30683] FAULT_INJECTION: forcing a failure. [ 1737.600524][T30683] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.613303][T30683] CPU: 0 PID: 30683 Comm: syz.1.8044 Not tainted syzkaller #0 [ 1737.620820][T30683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1737.630932][T30683] Call Trace: [ 1737.634266][T30683] [ 1737.637255][T30683] dump_stack_lvl+0x188/0x24e [ 1737.641996][T30683] ? show_regs_print_info+0x12/0x12 [ 1737.647238][T30683] ? load_image+0x410/0x410 [ 1737.651782][T30683] ? kasan_set_track+0x60/0x70 [ 1737.656584][T30683] ? __kasan_slab_alloc+0x6b/0x80 [ 1737.661647][T30683] ? slab_post_alloc_hook+0x4b/0x490 [ 1737.666969][T30683] ? kmem_cache_alloc+0x18b/0x2f0 [ 1737.672027][T30683] ? dst_alloc+0x101/0x160 [ 1737.676481][T30683] ? ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 1737.682763][T30683] ? ip_route_output_key_hash+0x1ef/0x330 [ 1737.688530][T30683] should_fail_ex+0x390/0x4c0 [ 1737.693259][T30683] should_failslab+0x5/0x20 [ 1737.697800][T30683] slab_pre_alloc_hook+0x59/0x300 [ 1737.702864][T30683] ? ref_tracker_alloc+0x14f/0x490 [ 1737.708024][T30683] __kmem_cache_alloc_node+0x4f/0x270 [ 1737.713443][T30683] ? ref_tracker_alloc+0x14f/0x490 [ 1737.718596][T30683] kmalloc_trace+0x26/0xe0 [ 1737.723059][T30683] ref_tracker_alloc+0x14f/0x490 [ 1737.728043][T30683] ? ref_tracker_dir_print+0x150/0x150 [ 1737.733549][T30683] ? __kasan_slab_alloc+0x6b/0x80 [ 1737.738622][T30683] ? slab_post_alloc_hook+0x67/0x490 [ 1737.743945][T30683] ? slab_pre_alloc_hook+0x59/0x300 [ 1737.749182][T30683] ? rcu_is_watching+0x11/0xa0 [ 1737.754005][T30683] dst_init+0xb1/0x400 [ 1737.758123][T30683] dst_alloc+0x12a/0x160 [ 1737.762438][T30683] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 1737.768557][T30683] ? ip_route_output_key_hash+0x139/0x330 [ 1737.774330][T30683] ip_route_output_key_hash+0x1ef/0x330 [ 1737.779911][T30683] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.786033][T30683] ? ip_route_input_rcu+0x30a0/0x30a0 [ 1737.791457][T30683] ? memset+0x1e/0x40 [ 1737.795511][T30683] ip_route_output_flow+0x26/0x150 [ 1737.800699][T30683] ip_tunnel_xmit+0x9a2/0x25d0 [ 1737.805529][T30683] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1737.810642][T30683] ? skb_push+0x8a/0xd0 [ 1737.814837][T30683] ? gre_build_header+0x251/0x9a0 [ 1737.819917][T30683] ipgre_xmit+0x7e4/0xb60 [ 1737.824292][T30683] dev_hard_start_xmit+0x292/0x8b0 [ 1737.829616][T30683] ? validate_xmit_skb_list+0x120/0x120 [ 1737.835224][T30683] __dev_queue_xmit+0x1b4b/0x3810 [ 1737.840293][T30683] ? __dev_queue_xmit+0x281/0x3810 [ 1737.845487][T30683] ? netdev_core_pick_tx+0x360/0x360 [ 1737.850828][T30683] ? skb_release_data+0x1d3/0x7e0 [ 1737.855898][T30683] __bpf_redirect+0x8c7/0x1110 [ 1737.860712][T30683] bpf_clone_redirect+0x311/0x4a0 [ 1737.865781][T30683] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 1737.871311][T30683] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1737.877340][T30683] ? __lock_acquire+0x7c40/0x7c40 [ 1737.882408][T30683] ? lock_chain_count+0x20/0x20 [ 1737.887327][T30683] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1737.893609][T30683] ? lockdep_hardirqs_on+0x94/0x140 [ 1737.898845][T30683] ? ktime_get+0x7b/0x270 [ 1737.903228][T30683] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1737.909508][T30683] ? ktime_get_real_ts64+0x440/0x440 [ 1737.914831][T30683] ? read_lock_is_recursive+0x10/0x10 [ 1737.920309][T30683] bpf_test_run+0x4c1/0x830 [ 1737.924873][T30683] ? dst_hold+0xb0/0xb0 [ 1737.929072][T30683] ? eth_get_headlen+0x200/0x200 [ 1737.934048][T30683] ? __build_skb+0x24b/0x3b0 [ 1737.938858][T30683] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1737.944292][T30683] ? cpu_online+0xa0/0xa0 [ 1737.948833][T30683] bpf_prog_test_run+0x31c/0x390 [ 1737.953814][T30683] __sys_bpf+0x62b/0x780 [ 1737.958105][T30683] ? bpf_link_show_fdinfo+0x380/0x380 [ 1737.963568][T30683] ? lock_chain_count+0x20/0x20 [ 1737.968470][T30683] __x64_sys_bpf+0x78/0x90 [ 1737.972940][T30683] do_syscall_64+0x4c/0xa0 [ 1737.977395][T30683] ? clear_bhb_loop+0x60/0xb0 [ 1737.982111][T30683] ? clear_bhb_loop+0x60/0xb0 [ 1737.986822][T30683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.992757][T30683] RIP: 0033:0x7f495cf9e159 [ 1737.997218][T30683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.016894][T30683] RSP: 002b:00007f495defb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1738.025349][T30683] RAX: ffffffffffffffda RBX: 00007f495d225fa0 RCX: 00007f495cf9e159 [ 1738.033396][T30683] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1738.041402][T30683] RBP: 00007f495defb090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.049414][T30683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.057416][T30683] R13: 00007f495d226038 R14: 00007f495d225fa0 R15: 00007ffc2803ec68 [ 1738.065435][T30683] [ 1738.476330][T30689] netlink: 'syz.3.8043': attribute type 10 has an invalid length. [ 1738.960277][T30689] team0: Port device geneve1 added [ 1739.018448][T30707] netlink: 'syz.5.8049': attribute type 10 has an invalid length. [ 1739.091755][T30707] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1739.455957][T30725] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8055'. [ 1739.779447][T30733] netlink: 'syz.5.8058': attribute type 21 has an invalid length. [ 1739.823774][T30733] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8058'. [ 1739.949109][T30738] netlink: 'syz.5.8058': attribute type 3 has an invalid length. [ 1739.977347][T30738] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.8058'. [ 1740.020016][T30738] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1740.101042][T30738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1740.155987][T30740] netlink: 'syz.1.8060': attribute type 15 has an invalid length. [ 1740.175710][T30740] netlink: 'syz.1.8060': attribute type 7 has an invalid length. [ 1740.183552][T30740] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8060'. [ 1741.546369][T30765] FAULT_INJECTION: forcing a failure. [ 1741.546369][T30765] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.559249][T30765] CPU: 1 PID: 30765 Comm: syz.0.8066 Not tainted syzkaller #0 [ 1741.566770][T30765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1741.577235][T30765] Call Trace: [ 1741.580563][T30765] [ 1741.583577][T30765] dump_stack_lvl+0x188/0x24e [ 1741.588316][T30765] ? show_regs_print_info+0x12/0x12 [ 1741.593608][T30765] ? load_image+0x410/0x410 [ 1741.598181][T30765] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1741.604281][T30765] should_fail_ex+0x390/0x4c0 [ 1741.609033][T30765] should_failslab+0x5/0x20 [ 1741.613599][T30765] slab_pre_alloc_hook+0x59/0x300 [ 1741.618845][T30765] kmem_cache_alloc+0x56/0x2f0 [ 1741.623671][T30765] ? dst_alloc+0x101/0x160 [ 1741.628138][T30765] dst_alloc+0x101/0x160 [ 1741.632415][T30765] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 1741.638525][T30765] ? ip_route_output_key_hash+0x139/0x330 [ 1741.644370][T30765] ip_route_output_key_hash+0x1ef/0x330 [ 1741.649957][T30765] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1741.656071][T30765] ? ip_route_input_rcu+0x30a0/0x30a0 [ 1741.661484][T30765] ? memset+0x1e/0x40 [ 1741.665501][T30765] ip_route_output_flow+0x26/0x150 [ 1741.670660][T30765] ip_tunnel_xmit+0x9a2/0x25d0 [ 1741.675479][T30765] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1741.680577][T30765] ? skb_push+0x8a/0xd0 [ 1741.684765][T30765] ? gre_build_header+0x251/0x9a0 [ 1741.689858][T30765] ipgre_xmit+0x7e4/0xb60 [ 1741.694241][T30765] dev_hard_start_xmit+0x292/0x8b0 [ 1741.699398][T30765] ? validate_xmit_skb_list+0x120/0x120 [ 1741.704988][T30765] __dev_queue_xmit+0x1b4b/0x3810 [ 1741.710057][T30765] ? __dev_queue_xmit+0x281/0x3810 [ 1741.715215][T30765] ? netdev_core_pick_tx+0x360/0x360 [ 1741.720562][T30765] ? skb_release_data+0x1d3/0x7e0 [ 1741.725629][T30765] __bpf_redirect+0x8c7/0x1110 [ 1741.730441][T30765] bpf_clone_redirect+0x311/0x4a0 [ 1741.735544][T30765] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 1741.741045][T30765] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1741.747070][T30765] ? __lock_acquire+0x7c40/0x7c40 [ 1741.752137][T30765] ? lock_chain_count+0x20/0x20 [ 1741.757028][T30765] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1741.763336][T30765] ? lockdep_hardirqs_on+0x94/0x140 [ 1741.768578][T30765] ? ktime_get+0x7b/0x270 [ 1741.773034][T30765] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1741.779313][T30765] ? ktime_get_real_ts64+0x440/0x440 [ 1741.784717][T30765] ? read_lock_is_recursive+0x10/0x10 [ 1741.790185][T30765] ? __cant_sleep+0x220/0x220 [ 1741.794913][T30765] ? ktime_get+0x247/0x270 [ 1741.799381][T30765] bpf_test_run+0x2b6/0x830 [ 1741.803935][T30765] ? dst_hold+0xb0/0xb0 [ 1741.808138][T30765] ? eth_get_headlen+0x200/0x200 [ 1741.813118][T30765] ? __build_skb+0x24b/0x3b0 [ 1741.817746][T30765] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1741.823209][T30765] ? cpu_online+0xa0/0xa0 [ 1741.827580][T30765] bpf_prog_test_run+0x31c/0x390 [ 1741.832565][T30765] __sys_bpf+0x62b/0x780 [ 1741.836845][T30765] ? bpf_link_show_fdinfo+0x380/0x380 [ 1741.842269][T30765] ? lock_chain_count+0x20/0x20 [ 1741.847163][T30765] __x64_sys_bpf+0x78/0x90 [ 1741.851622][T30765] do_syscall_64+0x4c/0xa0 [ 1741.856112][T30765] ? clear_bhb_loop+0x60/0xb0 [ 1741.860825][T30765] ? clear_bhb_loop+0x60/0xb0 [ 1741.865541][T30765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1741.871483][T30765] RIP: 0033:0x7f03b5f9e159 [ 1741.875936][T30765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.895687][T30765] RSP: 002b:00007f03b6f33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1741.904137][T30765] RAX: ffffffffffffffda RBX: 00007f03b6225fa0 RCX: 00007f03b5f9e159 [ 1741.912160][T30765] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1741.920169][T30765] RBP: 00007f03b6f33090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.928178][T30765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1741.936194][T30765] R13: 00007f03b6226038 R14: 00007f03b6225fa0 R15: 00007fff047a0e78 [ 1741.944213][T30765] [ 1742.998745][T30790] netlink: 'syz.1.8071': attribute type 21 has an invalid length. [ 1743.092151][T30790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8071'. [ 1743.124403][T30800] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8074'. [ 1743.902541][T30819] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1743.999610][T21773] tipc: Subscription rejected, illegal request [ 1744.067308][T30822] netlink: 'syz.1.8078': attribute type 22 has an invalid length. [ 1744.075235][T30822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8078'. [ 1744.105301][T30825] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8080'. [ 1744.120768][T30825] netlink: zone id is out of range [ 1744.127882][T30825] netlink: zone id is out of range [ 1744.133652][T30825] netlink: zone id is out of range [ 1744.153138][T30825] netlink: zone id is out of range [ 1744.159649][T30825] netlink: zone id is out of range [ 1744.172181][T30825] netlink: zone id is out of range [ 1744.178872][T30825] netlink: zone id is out of range [ 1744.184551][T30825] netlink: zone id is out of range [ 1744.194443][T30825] netlink: zone id is out of range [ 1745.295005][T30847] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8085'. [ 1745.337285][T30848] netlink: 'syz.4.8085': attribute type 12 has an invalid length. [ 1745.367449][T30848] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8085'. [ 1745.425279][T30851] netlink: 'syz.3.8084': attribute type 27 has an invalid length. [ 1745.466671][T30851] netlink: 'syz.3.8084': attribute type 25 has an invalid length. [ 1745.717033][T30861] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8088'. [ 1746.782605][T30884] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8092'. [ 1747.909137][T30912] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.8111'. [ 1748.777620][T30943] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8105'. [ 1749.369203][T30941] delete_channel: no stack [ 1749.850752][T30965] netlink: 'syz.4.8113': attribute type 10 has an invalid length. [ 1750.783671][T30986] netlink: 'syz.0.8119': attribute type 2 has an invalid length. [ 1750.805854][T30986] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.8119'. [ 1752.610149][T31027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8130'. [ 1752.680786][T31027] netlink: 'syz.1.8130': attribute type 12 has an invalid length. [ 1752.758223][T31027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8130'. [ 1752.969870][T31036] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8132'. [ 1761.011572][T29789] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 1761.353733][T31286] device syz_tun entered promiscuous mode [ 1761.565222][T31289] net_ratelimit: 36 callbacks suppressed [ 1761.565263][T31289] sock: sock_set_timeout: `syz.5.8223' (pid 31289) tries to set negative timeout [ 1767.773455][T31480] device sit0 entered promiscuous mode [ 1775.813339][T31635] device syzkaller0 entered promiscuous mode [ 1780.083223][T31691] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1782.975843][T31716] device syzkaller0 entered promiscuous mode [ 1791.830467][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.837049][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.751153][T31783] device syzkaller0 entered promiscuous mode [ 1793.816601][T13687] Bluetooth: hci3: command 0x0406 tx timeout [ 1798.362097][T31841] device syzkaller0 entered promiscuous mode [ 1798.936039][T29789] Bluetooth: hci2: command 0x0406 tx timeout [ 1803.320898][T31871] device syzkaller0 entered promiscuous mode [ 1807.972515][T31911] device sit0 left promiscuous mode [ 1808.910316][T31935] device syzkaller0 entered promiscuous mode [ 1815.103124][T13687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1815.113863][T13687] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1815.123117][T13687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1815.133899][T13687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1815.141919][T13687] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1815.149593][T13687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1816.536703][T31999] chnl_net:caif_netlink_parms(): no params data found [ 1816.892682][T31999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.919861][T31999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.933185][T31999] device bridge_slave_0 entered promiscuous mode [ 1817.011958][T31999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.019725][T31999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.054166][T31999] device bridge_slave_1 entered promiscuous mode [ 1817.108420][T31999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.131346][T31999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.182075][T13687] Bluetooth: hci0: command 0x0409 tx timeout [ 1817.405148][T21790] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.499754][T31999] team0: Port device team_slave_0 added [ 1817.544184][T31999] team0: Port device team_slave_1 added [ 1817.688898][T21790] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.760403][T31999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1817.800720][T31999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1817.937021][T31999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1817.997541][T21790] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.100591][T31999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1818.112461][T31999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.231173][T31999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1818.347722][T21790] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.584233][T31999] device hsr_slave_0 entered promiscuous mode [ 1818.610323][T31999] device hsr_slave_1 entered promiscuous mode [ 1818.920144][T32074] device syzkaller0 entered promiscuous mode [ 1819.255809][T13687] Bluetooth: hci0: command 0x041b tx timeout [ 1821.345642][T13687] Bluetooth: hci0: command 0x040f tx timeout [ 1822.739792][T32084] tun0: tun_chr_ioctl cmd 1074025677 [ 1822.745971][T32084] tun0: linktype set to 823 [ 1823.415996][T13687] Bluetooth: hci0: command 0x0419 tx timeout [ 1824.183746][T32111] device syzkaller0 entered promiscuous mode [ 1826.454931][T32153] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 1828.917364][T32140] device syzkaller0 entered promiscuous mode [ 1828.994949][T32170] device syzkaller0 entered promiscuous mode [ 1834.712909][T29789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1834.728626][T29789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1834.739387][T29789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1834.755348][T29789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1834.763356][T29789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1834.771149][T29789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1836.865673][T29789] Bluetooth: hci4: command 0x0409 tx timeout [ 1838.945662][T29789] Bluetooth: hci4: command 0x041b tx timeout [ 1841.016545][T29789] Bluetooth: hci4: command 0x040f tx timeout [ 1841.290422][T32180] device syzkaller0 entered promiscuous mode [ 1843.110504][T29789] Bluetooth: hci4: command 0x0419 tx timeout [ 1845.178143][T13687] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1845.189244][T13687] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1845.197682][T13687] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1845.206170][T13687] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1845.215014][T13687] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1845.222819][T13687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1847.342584][T29789] Bluetooth: hci5: command 0x0409 tx timeout [ 1847.885612][T31999] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1847.923044][T31999] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1848.014363][T31999] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1848.088004][T31999] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1848.100922][T32276] netlink: 'syz.5.8529': attribute type 10 has an invalid length. [ 1848.137175][T32276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.160679][T32276] device bridge_slave_1 left promiscuous mode [ 1848.211064][T32276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.274111][T32276] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1848.349697][T32279] netlink: 'syz.0.8530': attribute type 25 has an invalid length. [ 1848.358061][T32279] netlink: 'syz.0.8530': attribute type 25 has an invalid length. [ 1849.059857][T32194] chnl_net:caif_netlink_parms(): no params data found [ 1849.363011][T31999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1849.391142][T32257] chnl_net:caif_netlink_parms(): no params data found [ 1849.406451][T32306] netlink: 'syz.5.8538': attribute type 33 has an invalid length. [ 1849.415185][T32306] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8538'. [ 1849.425203][T29789] Bluetooth: hci5: command 0x041b tx timeout [ 1849.482428][T31999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1849.549111][T21790] device hsr0 left promiscuous mode [ 1849.554749][T21790] nr0: port 1(hsr0) entered disabled state [ 1849.672576][T21790] device bond0 left promiscuous mode [ 1849.700557][T21790] device bond_slave_1 left promiscuous mode [ 1849.728703][T21790] device team0 left promiscuous mode [ 1849.744351][T21790] device team_slave_0 left promiscuous mode [ 1849.755458][T21790] device team_slave_1 left promiscuous mode [ 1849.792866][T21790] device bridge0 left promiscuous mode [ 1849.815315][T21790] device batadv_slave_0 left promiscuous mode [ 1849.837067][T21790] device dummy0 left promiscuous mode [ 1849.856150][T21790] : port 1(bond0) entered disabled state [ 1849.911932][T21790] device hsr_slave_0 left promiscuous mode [ 1849.935252][T21790] device hsr_slave_1 left promiscuous mode [ 1849.958827][T21790] device bridge_slave_1 left promiscuous mode [ 1849.984587][T21790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.027626][T21790] device bridge_slave_0 left promiscuous mode [ 1850.058364][T21790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.162111][T21790] device veth1_vlan left promiscuous mode [ 1850.181914][T21790] device veth0_vlan left promiscuous mode [ 1851.265195][T21790] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1851.324554][T21790] team0 (unregistering): Port device team_slave_1 removed [ 1851.385229][T21790] team0 (unregistering): Port device team_slave_0 removed [ 1851.441928][T21790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1851.505727][T29789] Bluetooth: hci5: command 0x040f tx timeout [ 1851.803581][T21790] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1851.835588][T21790] bond0 (unregistering): (slave team0): Releasing backup interface [ 1851.848545][T21790] team0 (unregistering): Port device bridge0 removed [ 1851.891889][T21790] bond0 (unregistering): Released all slaves [ 1851.990838][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1852.000431][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1852.011168][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1852.020383][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1852.043805][T21785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.051061][T21785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.059115][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1852.068103][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1852.076718][T21785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.083873][T21785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.091785][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1852.100941][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1852.109835][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1852.118955][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1852.128991][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1852.139482][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1852.148342][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1852.157027][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1852.165435][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1852.174701][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1852.186283][T31999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1852.347286][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1852.373453][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1852.583824][T32194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.595363][T32194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.617716][T32194] device bridge_slave_0 entered promiscuous mode [ 1852.665145][T32194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.672649][T32194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.681272][T32194] device bridge_slave_1 entered promiscuous mode [ 1852.779387][T32257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.791967][T32257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.825735][T32257] device bridge_slave_0 entered promiscuous mode [ 1852.852205][T32194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1852.874905][T32257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.890409][T32257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.904458][T32257] device bridge_slave_1 entered promiscuous mode [ 1852.954621][T32194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1853.124939][T32194] team0: Port device team_slave_0 added [ 1853.150937][T32257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1853.177604][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.184088][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.197571][T32257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1853.237858][T32194] team0: Port device team_slave_1 added [ 1853.365832][T32257] team0: Port device team_slave_0 added [ 1853.386905][T32194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1853.393988][T32194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1853.455581][T32194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1853.487906][T32194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1853.494932][T32194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1853.585939][T29789] Bluetooth: hci5: command 0x0419 tx timeout [ 1853.621458][T32194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1853.635683][T32257] team0: Port device team_slave_1 added [ 1853.727863][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1853.741626][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1853.792903][T31999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1853.822770][T32257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1853.839174][T32257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1853.892286][T32257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1853.944267][T32257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1853.966472][T32257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1854.032826][T32257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1854.056320][T32194] device hsr_slave_0 entered promiscuous mode [ 1854.073481][T32194] device hsr_slave_1 entered promiscuous mode [ 1854.096268][T32194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1854.104208][T32194] Cannot create hsr debugfs directory [ 1854.240405][T21790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.387982][T21790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.419971][T32257] device hsr_slave_0 entered promiscuous mode [ 1854.446593][T32257] device hsr_slave_1 entered promiscuous mode [ 1854.455375][T32257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1854.501008][T32257] Cannot create hsr debugfs directory [ 1854.601650][T21790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.182196][T21790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.249712][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1855.271514][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1855.327397][T21790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.341496][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1855.350654][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1855.360173][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1855.368656][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1855.398833][T31999] device veth0_vlan entered promiscuous mode [ 1855.460064][T21790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.484844][T32194] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1855.509268][T32194] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1855.531371][T31999] device veth1_vlan entered promiscuous mode [ 1855.570228][T32194] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1855.593193][T32194] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1855.670172][T32401] netlink: 'syz.0.8561': attribute type 10 has an invalid length. [ 1855.719259][T32401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.744672][T32401] device bridge_slave_1 left promiscuous mode [ 1855.753288][T32401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.805283][T32401] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1855.883422][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1855.913476][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1855.956893][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1855.987694][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1856.030622][T31999] device veth0_macvtap entered promiscuous mode [ 1856.079756][T31999] device veth1_macvtap entered promiscuous mode [ 1856.205079][T32257] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1856.237598][T31999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1856.279981][T31999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.296053][T31999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1856.325871][T31999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.346313][T31999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1856.360187][T31999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.372608][T31999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1856.411374][T32257] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1856.426534][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1856.443357][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1856.452165][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1856.462256][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1856.486983][T32412] netlink: 'syz.5.8564': attribute type 10 has an invalid length. [ 1856.521706][T32412] device veth0_macvtap left promiscuous mode [ 1856.634639][T32194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1856.683122][T31999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1856.703302][T31999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.720725][T31999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1856.731935][T31999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.742540][T31999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1856.753431][T31999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.775453][T31999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1856.796695][T32257] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1856.827253][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1856.842754][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1856.876588][T32257] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1856.901819][T31999] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.926524][T31999] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.940767][T31999] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.961208][T31999] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.983360][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1857.000355][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1857.031311][T32194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.312482][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1857.337032][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1857.356372][T21773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.363662][T21773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.402437][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1857.435350][T21790] tipc: Left network mode [ 1857.480405][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1857.501765][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1857.541357][T21773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.548617][T21773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.578640][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1857.651068][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1857.661612][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1857.681976][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1857.694966][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1857.736095][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1857.759970][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1857.800937][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.812740][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.943321][T21790] device ip6gretap0 left promiscuous mode [ 1857.949529][T21790] bridge0: port 3(ip6gretap0) entered disabled state [ 1858.155136][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1858.175377][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1858.192206][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1858.214754][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1858.229256][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1858.356154][T32194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1858.387902][T32257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1858.405162][T21785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.435768][T21785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.532391][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1858.571594][T32257] 8021q: adding VLAN 0 to HW filter on device team0 [ 1858.629784][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1858.674914][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1858.690438][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1858.700940][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1858.710205][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.717432][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1858.729830][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1858.801102][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1858.818703][T21785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1858.863786][T21785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.871085][T21785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1859.176328][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1859.212903][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1859.341811][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1859.366788][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1859.403751][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1859.449944][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1859.472782][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1859.482254][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1859.511639][T32257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1859.544228][T32257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1859.705757][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1859.730161][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1859.743989][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1859.759762][T32488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1859.775883][T32488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1859.793536][T32488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1859.833400][T32488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1860.029041][T32490] netlink: 'syz.5.8585': attribute type 10 has an invalid length. [ 1861.243930][T32490] team0: Device wg1 is of different type [ 1861.422255][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1861.440010][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1861.506126][T32194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1861.619098][T32509] netlink: 'syz.5.8588': attribute type 25 has an invalid length. [ 1861.630784][T32509] netlink: 'syz.5.8588': attribute type 25 has an invalid length. [ 1862.008754][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1862.029514][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1862.213498][T32257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1862.514308][T32541] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.8597'. [ 1863.191193][T32560] netlink: 'syz.0.8602': attribute type 10 has an invalid length. [ 1863.201155][T32560] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8602'. [ 1863.233433][T32560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.286350][T32560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.293580][T32560] bridge0: port 1(bridge_slave_0) entered listening state [ 1863.334799][T32560] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1863.456861][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1863.487317][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1863.738431][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1863.763422][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1863.787902][T32194] device veth0_vlan entered promiscuous mode [ 1863.849744][T21790] device bridge_slave_1 left promiscuous mode [ 1863.865958][T21790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.886442][T21790] device bridge_slave_0 left promiscuous mode [ 1863.892747][T21790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.950919][T21790] device bond0 left promiscuous mode [ 1863.970677][T21790] device bond_slave_0 left promiscuous mode [ 1863.994866][T21790] device bond_slave_1 left promiscuous mode [ 1864.001352][T21790] device bridge0 left promiscuous mode [ 1864.008936][T21790] device team0 left promiscuous mode [ 1864.014998][T21790] device team_slave_1 left promiscuous mode [ 1864.021715][T21790] device macvlan0 left promiscuous mode [ 1864.046046][T21790] : port 1(bond0) entered disabled state [ 1864.091028][T21790] device hsr_slave_0 left promiscuous mode [ 1864.111563][T21790] device hsr_slave_1 left promiscuous mode [ 1864.142481][T21790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1864.180351][T21790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1864.213145][T21790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1864.227328][T21790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1864.255868][T21790] device bridge_slave_1 left promiscuous mode [ 1864.262606][T21790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.291753][T21790] device bridge_slave_0 left promiscuous mode [ 1864.303239][T21790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.390438][T21790] device veth1_macvtap left promiscuous mode [ 1864.403531][T21790] device veth0_macvtap left promiscuous mode [ 1864.417799][T21790] device veth1_vlan left promiscuous mode [ 1864.433956][T21790] device veth1_macvtap left promiscuous mode [ 1864.449509][T21790] device veth0_macvtap left promiscuous mode [ 1864.463148][T21790] device veth1_vlan left promiscuous mode [ 1864.874456][T21790] team0 (unregistering): Port device geneve1 removed [ 1865.459095][T21790] team0 (unregistering): Port device team_slave_1 removed [ 1865.514428][T21790] team0 (unregistering): Port device team_slave_0 removed [ 1865.571302][T21790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1865.636804][T21790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.054217][T21790] bond0 (unregistering): Released all slaves [ 1866.504809][T21790] team0 (unregistering): Port device macvlan0 removed [ 1866.898684][T21790] team0 (unregistering): Port device team_slave_1 removed [ 1866.956157][T21790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1867.015172][T21790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1867.412336][T21790] bond0 (unregistering): (slave team0): Releasing backup interface [ 1867.456262][T21790] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1867.465392][T21790] bond0 (unregistering): Released all slaves [ 1867.578352][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1867.588022][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1867.607183][T32588] netlink: 'syz.0.8611': attribute type 10 has an invalid length. [ 1867.665387][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1867.684754][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1867.739498][T32194] device veth1_vlan entered promiscuous mode [ 1867.811622][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1867.836519][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1867.871793][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1867.892469][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1867.909297][T32257] device veth0_vlan entered promiscuous mode [ 1867.927367][T32609] netlink: 'syz.0.8618': attribute type 2 has an invalid length. [ 1867.935187][T32609] netlink: 'syz.0.8618': attribute type 8 has an invalid length. [ 1867.953986][T32609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8618'. [ 1867.995857][T32257] device veth1_vlan entered promiscuous mode [ 1868.014254][T32194] device veth0_macvtap entered promiscuous mode [ 1868.069655][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1868.082048][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1868.116429][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1868.132910][T21769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1868.196372][T32194] device veth1_macvtap entered promiscuous mode [ 1868.263715][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1868.283051][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1868.291977][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1868.302493][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1868.326511][T32194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1868.353556][T32194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.370862][T32194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1868.410822][T32194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.467266][T32194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1868.478754][T32257] device veth0_macvtap entered promiscuous mode [ 1868.513884][T32257] device veth1_macvtap entered promiscuous mode [ 1868.525278][T32194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.563907][T32194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.575639][T32194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.591644][T32194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.613999][T32194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1868.643285][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1868.654508][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1868.693778][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1868.708204][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1868.718461][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1868.728994][T23903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1868.851801][T32194] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.874663][T32194] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.901211][T32194] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.930702][T32194] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.987914][T32257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.035696][T32257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.065515][T32257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.105628][T32257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.143580][T32257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.160464][T32257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.203409][T32257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1869.299317][T32628] device syzkaller0 entered promiscuous mode [ 1869.325366][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1869.353671][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1869.386797][T32257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.435051][T32257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.475527][T32257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.515613][T32257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.562737][T32257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.585578][T32257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.619709][T32257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1872.444459][T32643] netlink: 'syz.6.8629': attribute type 10 has an invalid length. [ 1872.460124][T32643] netlink: 2 bytes leftover after parsing attributes in process `syz.6.8629'. [ 1872.480995][T32643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.488790][T32643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.543947][T32643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.551188][T32643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1872.558805][T32643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.566063][T32643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1872.592335][T32643] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1872.613330][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1872.627762][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1872.650576][T32257] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.680697][T32257] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.689993][T32257] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.726298][T32257] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.740887][T32645] netlink: 'syz.5.8630': attribute type 10 has an invalid length. [ 1872.783729][T32645] team0: Port device wlan1 added [ 1872.808480][T32657] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8631'. [ 1872.826648][T32657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1872.866332][T32658] device wlan1 entered promiscuous mode [ 1872.900330][T21773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.920303][T21773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.978518][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1873.061979][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1873.080460][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.103472][T21773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1873.142114][T21773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1873.170088][T21773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.218999][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1873.268528][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1873.336454][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.345146][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1873.464457][T32676] netlink: 'syz.0.8638': attribute type 10 has an invalid length. [ 1874.196047][T32694] netlink: 'syz.7.8640': attribute type 10 has an invalid length. [ 1874.209957][T32694] netlink: 2 bytes leftover after parsing attributes in process `syz.7.8640'. [ 1874.252473][T32694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.260103][T32694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.367901][T32694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.375138][T32694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1874.382775][T32694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.390036][T32694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1874.509224][T32694] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1874.813557][T32710] netlink: 'syz.0.8645': attribute type 25 has an invalid length. [ 1874.855674][T32710] netlink: 'syz.0.8645': attribute type 25 has an invalid length. [ 1875.316133][T32728] netlink: 'syz.6.8653': attribute type 15 has an invalid length. [ 1875.705212][T32734] device syzkaller0 entered promiscuous mode [ 1875.715099][T32734] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1878.775851][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1894.135725][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1894.143035][ C0] bridge0: topology change detected, propagating [ 1914.618301][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.624682][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1942.295770][T29789] Bluetooth: hci0: command 0x0406 tx timeout [ 1957.655927][T13687] Bluetooth: hci4: command 0x0406 tx timeout [ 1967.895673][T29789] Bluetooth: hci5: command 0x0406 tx timeout [ 1976.060680][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.067214][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.498227][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.504609][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.938196][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.944589][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.379075][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.385668][ T1280] ieee802154 phy1 wpan1: encryption failed: -22