last executing test programs: 6m35.276777911s ago: executing program 3 (id=172): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfc, 0x0, 0x7, 0x0, 0x0, 0x3ff, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9, 0x46fa, 0x11a, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) close(r4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/193, 0xc1}, 0x2001) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x17, &(0x7f0000000000), 0x10) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@rc={0x1f, @any, 0xa}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)='Gb', 0x2}], 0x1}, 0x480c0) 6m34.913173618s ago: executing program 3 (id=178): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x10c828, 0x0, 0x7, 0x3, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x2, 0xfffffffe, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x3, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080), 0x0) 6m34.66476809s ago: executing program 3 (id=181): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004083d00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) (async) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7020000000000048500000086000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000e3008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd", 0x0, 0x54, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$kcm(0x10, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0xc, 0x1, 0x7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840), &(0x7f00000008c0)=[{0x1, 0x5, 0xd, 0x6}, {0x3, 0x2, 0x0, 0x7}], 0x10, 0x6}, 0x94) write$cgroup_devices(r5, 0x0, 0xa) perf_event_open(0x0, 0x0, 0x9, r1, 0x1) (async) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x3}, 0x0, 0xfb, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r7 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000ffffffff}) (async) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) (async) r11 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r11, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) (async) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r11, r9}) (async) sendmsg$kcm(r8, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x11) 6m33.537882463s ago: executing program 3 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000002a00000095"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xd6, &(0x7f0000000680)=[{}, {}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f00000004c0), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000500)}}, 0xfffffffffffffee9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r2, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="85"], 0x0, 0x5}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r7, @ANYBLOB="000000000000000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r9, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x10, r3}, 0x18) 6m32.626707936s ago: executing program 3 (id=208): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dbd, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x0, 0xf61, 0x0, 0x800002, 0x3, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0xff2d2131a001ffed) r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x14, 0x0, 0xa4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2000000000000000000026478411f96b366400"/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000002c0)='*{^[\x00') sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1", 0x27}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000015006b02000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m31.509999908s ago: executing program 3 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000001, 0x100}, 0x4008, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d00000000000000000300000000000000030000000400000003000000"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x2000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c0000002d006bcd9e3fe3dc6e480000000087033c0000001f03000000000000040014000d000a8a0d0000a122bf8dd3b58dbc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m16.471427305s ago: executing program 32 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000001, 0x100}, 0x4008, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d00000000000000000300000000000000030000000400000003000000"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x2000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c0000002d006bcd9e3fe3dc6e480000000087033c0000001f03000000000000040014000d000a8a0d0000a122bf8dd3b58dbc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 35.644577765s ago: executing program 5 (id=3073): syz_clone(0x4c186400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xbf0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="5c00000010006bcc9e3be35c6e17aa", 0xf}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 34.200246283s ago: executing program 5 (id=3079): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$kcm(0x1e, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300)}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x112, 0x112, 0x4, [@var={0x7, 0x0, 0x0, 0xe, 0x3}, @union={0xd, 0x7, 0x0, 0x5, 0x0, 0xbc9, [{0x2}, {0xf, 0x4}, {0x9, 0x1, 0x1}, {0xa, 0x5, 0x7}, {0xf, 0x3, 0xff}, {0xe, 0x1, 0x10}, {0xd, 0x4, 0x2}]}, @fwd={0xe}, @datasec={0x7, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x4, 0xe}], "a044"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x10001}}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0xd, 0x2}, {0xd, 0x3}, {0x10, 0x4}, {0xe, 0x3}, {0xa, 0x5}]}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x3}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000980)=""/219, 0x130, 0xdb, 0x1, 0xe}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x82, &(0x7f0000000000), 0x8) sendmsg$inet(r6, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000002c0)="b9158edfaa57fef007fd65583000179221dfbfec91abffff", 0x0, 0x1dc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1a) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000003c0)=r7, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000400)=r0, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r9, 0x11, 0x0, 0xfffffffe, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f00000004c0), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000ac0)=""/253, 0xfd}, {&(0x7f0000000c00)=""/160, 0xa0}, {&(0x7f0000000cc0)=""/34, 0x22}, {&(0x7f0000000d00)=""/217, 0xd9}, {&(0x7f0000000e00)=""/149, 0x95}, {&(0x7f0000000ec0)=""/133, 0x85}, {&(0x7f0000000f80)=""/201, 0xc9}, {&(0x7f0000001e40)=""/134, 0x86}], 0x8}, 0x40000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) 33.781573373s ago: executing program 5 (id=3083): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000006fa05d6fee0dd760ba5d0000000000000700000000000000612e"], 0x0, 0x2a}, 0x28) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) 33.385623291s ago: executing program 5 (id=3087): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x806, 0x0, 0xfffffffd, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x1, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x50) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r1, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 33.089886225s ago: executing program 5 (id=3090): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x0, 0x0, 0xff, 0x0, 0x4, 0x8840, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0xc, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a00)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 32.413736047s ago: executing program 5 (id=3094): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="58000039c6f036d682ccd16299dfc100010000000000000000fcff0085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x3, [@float={0x4, 0x0, 0x0, 0x10, 0x4}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @datasec={0x6, 0xa, 0x0, 0xf, 0x2, [{0x3, 0xfffffff7, 0xe}, {0x3, 0xffffffde, 0x2}, {0x1, 0xe}, {0x4, 0xfffffff8, 0x3}, {0x5, 0x7cbc5db, 0x5}, {0x2, 0x8001, 0x3}, {0x3, 0x3, 0x7fffffff}, {0x4, 0x5, 0x4}, {0x5, 0x0, 0xfffffffe}, {0x5, 0x1, 0x7f}], "9c75"}]}, {0x0, [0x61]}}, &(0x7f0000000580)=""/243, 0xbb, 0xf3, 0x0, 0xfff}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x23, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r3, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, r7}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x4, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8381, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0xc0, 0xd9, &(0x7f0000000a80)=""/217, 0x41100, 0x6, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000006c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x5, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000900)=[r5, r6, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000940)=[{0x1, 0x4, 0x10, 0x5}, {0x0, 0x2, 0xa, 0x1}, {0x4, 0x1, 0x6, 0x8}, {0x2, 0x5, 0x4, 0xb}, {0x4, 0x5, 0x0, 0x1}, {0x1, 0x2, 0x4, 0x8}], 0x10, 0xf}, 0x94) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 17.087446787s ago: executing program 33 (id=3094): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="58000039c6f036d682ccd16299dfc100010000000000000000fcff0085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x3, [@float={0x4, 0x0, 0x0, 0x10, 0x4}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @datasec={0x6, 0xa, 0x0, 0xf, 0x2, [{0x3, 0xfffffff7, 0xe}, {0x3, 0xffffffde, 0x2}, {0x1, 0xe}, {0x4, 0xfffffff8, 0x3}, {0x5, 0x7cbc5db, 0x5}, {0x2, 0x8001, 0x3}, {0x3, 0x3, 0x7fffffff}, {0x4, 0x5, 0x4}, {0x5, 0x0, 0xfffffffe}, {0x5, 0x1, 0x7f}], "9c75"}]}, {0x0, [0x61]}}, &(0x7f0000000580)=""/243, 0xbb, 0xf3, 0x0, 0xfff}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x23, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r3, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, r7}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x4, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8381, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0xc0, 0xd9, &(0x7f0000000a80)=""/217, 0x41100, 0x6, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000006c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x5, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000900)=[r5, r6, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000940)=[{0x1, 0x4, 0x10, 0x5}, {0x0, 0x2, 0xa, 0x1}, {0x4, 0x1, 0x6, 0x8}, {0x2, 0x5, 0x4, 0xb}, {0x4, 0x5, 0x0, 0x1}, {0x1, 0x2, 0x4, 0x8}], 0x10, 0xf}, 0x94) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.587928239s ago: executing program 1 (id=3215): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x59100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xeb, 0x5}, 0x0, 0x2, 0x1, 0x0, 0x101, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002e80), 0x2, 0x0) 2.1287484s ago: executing program 1 (id=3218): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bf0500000000000007010065b39323ffb7025933b808abc18d36000005010000b703000000f14fe90395d64aee05dc8279d4d6c2000000850000001000000018110000e82b9e3e86ab705675993f99198d25b01070ccb586288c3d89090335a323440cc809913ac64ebfc665d9302f8822fb9b3d769c7339b4684b3d0f6e98f0f76689303d32a31012afdf296e0fbbc7675664304fb41da95064e567", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000006fa05d6fee0dd760ba5d0000000000000700000000000000612e"], 0x0, 0x2a}, 0x28) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e001c0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x800000000000, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c37a64", 0x3}], 0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x94}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r3}, 0x38) 1.436967223s ago: executing program 2 (id=3222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.162076296s ago: executing program 4 (id=3225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000080000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x20) 1.139672357s ago: executing program 2 (id=3226): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xc00}]}}, 0x0, 0x26, 0x0, 0x5}, 0x28) 1.042105071s ago: executing program 1 (id=3227): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x2a, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) 966.152874ms ago: executing program 0 (id=3228): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001340)={@fallback, 0xffffffffffffffff, 0x32}, 0x20) 946.116286ms ago: executing program 4 (id=3229): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000d00000000000000820000008520000016450100"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 829.011751ms ago: executing program 6 (id=3129): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dbd, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x0, 0xf61, 0x0, 0x800002, 0x3, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0xff2d2131a001ffed) r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x14, 0x0, 0xa4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2000000000000000000026478411f96b366400"/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000002c0)='*{^[\x00') sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1", 0x27}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000015006b02000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000002", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 750.162655ms ago: executing program 2 (id=3230): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x61, 0x30, 0x61, 0x61]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) 750.017035ms ago: executing program 1 (id=3231): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x50, 0x61, 0x11, 0x60}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) 749.936125ms ago: executing program 0 (id=3232): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000200000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe18, 0x0, 0x0, 0x0}, 0x94) 735.307176ms ago: executing program 4 (id=3233): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) 658.233219ms ago: executing program 0 (id=3234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 497.912427ms ago: executing program 2 (id=3235): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x8}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 471.935908ms ago: executing program 0 (id=3236): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000030000000000000000000051d3"], 0x50) 468.593848ms ago: executing program 1 (id=3237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7, 0x8, 0xf}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 406.129431ms ago: executing program 4 (id=3238): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="13000000100000001ca08f80a39aa819f6"], 0x20) 272.816297ms ago: executing program 2 (id=3239): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0xf}, 0x20) 253.560459ms ago: executing program 6 (id=3240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x3d, 0x0, &(0x7f0000000240)="b9ff033168440372b89e14f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 178.054882ms ago: executing program 4 (id=3241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x2000}) 177.839832ms ago: executing program 1 (id=3242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r0}, 0xc) 156.831263ms ago: executing program 0 (id=3243): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0x20, 0x0, 0x7f, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 78.373827ms ago: executing program 6 (id=3244): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x13}]}, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.04841ms ago: executing program 2 (id=3245): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x51}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 473.31µs ago: executing program 0 (id=3246): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 0s ago: executing program 4 (id=3247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): 340.478936][T11393] pim6reg: tun_chr_ioctl cmd 1074025677 [ 340.484900][T11393] pim6reg: linktype set to 778 [ 340.825476][T11408] Ÿë: port 1(hsr_slave_0) entered blocking state [ 340.856035][T11408] Ÿë: port 1(hsr_slave_0) entered disabled state [ 340.932135][T11408] netlink: 'syz.2.2037': attribute type 21 has an invalid length. [ 340.986489][T11402] delete_channel: no stack [ 340.997572][T11408] netlink: 'syz.2.2037': attribute type 7 has an invalid length. [ 341.776181][T11445] netlink: 'syz.4.2051': attribute type 10 has an invalid length. [ 341.902127][T11441] delete_channel: no stack [ 341.934926][T11454] device syzkaller0 entered promiscuous mode [ 342.034074][T11461] netlink: 'syz.0.2054': attribute type 3 has an invalid length. [ 342.062534][T11461] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2054'. [ 342.188983][T11452] device syzkaller0 left promiscuous mode [ 342.779682][T11471] device syzkaller0 entered promiscuous mode [ 343.368246][T11494] delete_channel: no stack [ 343.802509][T11518] netlink: 'syz.2.2072': attribute type 3 has an invalid length. [ 343.855860][T11518] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 343.883527][T11518] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2072'. [ 344.655868][T11541] delete_channel: no stack [ 345.784349][T11599] netlink: 'syz.5.2095': attribute type 10 has an invalid length. [ 345.824377][T11600] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2095'. [ 346.028254][T11578] delete_channel: no stack [ 346.129126][T11594] delete_channel: no stack [ 346.956029][T11646] netlink: 'syz.5.2108': attribute type 11 has an invalid length. [ 346.987421][T11646] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2108'. [ 347.348783][T11651] delete_channel: no stack [ 347.938191][T11683] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2119'. [ 348.056384][T11683] netlink: 'syz.1.2119': attribute type 10 has an invalid length. [ 348.354599][T11683] team0: Port device wlan1 added [ 348.931196][T11701] delete_channel: no stack [ 349.105984][T11712] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.2131'. [ 349.551111][T11734] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2139'. [ 349.874984][T11743] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2142'. [ 350.355517][T11747] delete_channel: no stack [ 350.470774][T11760] netlink: 'syz.1.2147': attribute type 10 has an invalid length. [ 350.671519][T11760] team0: Device hsr_slave_0 failed to register rx_handler [ 350.740118][T11759] netlink: 'syz.1.2147': attribute type 9 has an invalid length. [ 350.787494][T11759] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2147'. [ 351.323409][T11797] FAULT_INJECTION: forcing a failure. [ 351.323409][T11797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.376767][T11797] CPU: 1 PID: 11797 Comm: syz.4.2155 Not tainted syzkaller #0 [ 351.384306][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.394590][T11797] Call Trace: [ 351.398010][T11797] [ 351.400975][T11797] dump_stack_lvl+0x188/0x250 [ 351.405741][T11797] ? show_regs_print_info+0x20/0x20 [ 351.410982][T11797] ? load_image+0x410/0x410 [ 351.415525][T11797] ? __lock_acquire+0x7b50/0x7b50 [ 351.420782][T11797] should_fail+0x383/0x4b0 [ 351.425458][T11797] _copy_from_user+0x2e/0x170 [ 351.430242][T11797] __sys_bpf+0x26d/0x6f0 [ 351.434621][T11797] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 351.440965][T11797] ? bpf_link_show_fdinfo+0x380/0x380 [ 351.446387][T11797] ? rcu_nmi_exit+0x6f/0xf0 [ 351.451031][T11797] __x64_sys_bpf+0x78/0x90 [ 351.455493][T11797] do_syscall_64+0x4c/0xa0 [ 351.459956][T11797] ? clear_bhb_loop+0x30/0x80 [ 351.464787][T11797] ? clear_bhb_loop+0x30/0x80 [ 351.469507][T11797] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.475450][T11797] RIP: 0033:0x7f1d27dfa159 [ 351.479994][T11797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.499640][T11797] RSP: 002b:00007f1d26052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.508106][T11797] RAX: ffffffffffffffda RBX: 00007f1d28081fa0 RCX: 00007f1d27dfa159 [ 351.516205][T11797] RDX: 0000000000000010 RSI: 0000200000002500 RDI: 000000000000000f [ 351.524222][T11797] RBP: 00007f1d26052090 R08: 0000000000000000 R09: 0000000000000000 [ 351.532346][T11797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.540538][T11797] R13: 00007f1d28082038 R14: 00007f1d28081fa0 R15: 00007fffbc06e9b8 [ 351.548574][T11797] [ 351.897201][T11806] netlink: 'syz.2.2159': attribute type 1 has an invalid length. [ 351.965284][T11806] netlink: 'syz.2.2159': attribute type 3 has an invalid length. [ 352.015146][T11806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2159'. [ 352.051730][T11815] : port 1(gretap0) entered blocking state [ 352.069467][T11815] : port 1(gretap0) entered disabled state [ 352.087775][T11815] device gretap0 entered promiscuous mode [ 352.168622][T11817] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2162'. [ 352.781511][T11820] delete_channel: no stack [ 353.001121][T11840] FAULT_INJECTION: forcing a failure. [ 353.001121][T11840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.103322][T11840] CPU: 1 PID: 11840 Comm: syz.4.2171 Not tainted syzkaller #0 [ 353.110862][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.120990][T11840] Call Trace: [ 353.124305][T11840] [ 353.127307][T11840] dump_stack_lvl+0x188/0x250 [ 353.132139][T11840] ? show_regs_print_info+0x20/0x20 [ 353.137383][T11840] ? load_image+0x410/0x410 [ 353.141935][T11840] ? __lock_acquire+0x7b50/0x7b50 [ 353.147012][T11840] should_fail+0x383/0x4b0 [ 353.151517][T11840] _copy_from_user+0x2e/0x170 [ 353.156235][T11840] bpf_obj_get_info_by_fd+0x448/0x2df0 [ 353.161738][T11840] ? __lock_acquire+0x13dc/0x7b50 [ 353.166838][T11840] ? perf_trace_lock+0xe4/0x390 [ 353.171730][T11840] ? bpf_map_get_fd_by_id+0x330/0x330 [ 353.177153][T11840] ? trace_event_raw_event_lock+0x250/0x250 [ 353.183134][T11840] ? __might_fault+0xb3/0x110 [ 353.188245][T11840] ? bpf_lsm_bpf+0x5/0x10 [ 353.192801][T11840] ? security_bpf+0x7a/0xa0 [ 353.197420][T11840] __sys_bpf+0x484/0x6f0 [ 353.201728][T11840] ? bpf_link_show_fdinfo+0x380/0x380 [ 353.207171][T11840] __x64_sys_bpf+0x78/0x90 [ 353.211646][T11840] do_syscall_64+0x4c/0xa0 [ 353.216108][T11840] ? clear_bhb_loop+0x30/0x80 [ 353.220824][T11840] ? clear_bhb_loop+0x30/0x80 [ 353.225552][T11840] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.232100][T11840] RIP: 0033:0x7f1d27dfa159 [ 353.236557][T11840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.256202][T11840] RSP: 002b:00007f1d26052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.264660][T11840] RAX: ffffffffffffffda RBX: 00007f1d28081fa0 RCX: 00007f1d27dfa159 [ 353.272672][T11840] RDX: 0000000000000010 RSI: 0000200000002500 RDI: 000000000000000f [ 353.280684][T11840] RBP: 00007f1d26052090 R08: 0000000000000000 R09: 0000000000000000 [ 353.288898][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.296925][T11840] R13: 00007f1d28082038 R14: 00007f1d28081fa0 R15: 00007fffbc06e9b8 [ 353.304978][T11840] [ 353.333492][T11850] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2172'. [ 354.083612][T11874] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2180'. [ 354.130213][T11871] delete_channel: no stack [ 354.307558][T11881] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2184'. [ 354.818360][T11896] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2188'. [ 355.124460][T11903] netlink: 'syz.1.2190': attribute type 275 has an invalid length. [ 355.936094][T11925] delete_channel: no stack [ 356.290385][T11944] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2203'. [ 356.330914][T11944] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2203'. [ 356.422347][T11948] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2205'. [ 356.835054][T11959] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2208'. [ 356.838290][T11946] netlink: 'syz.2.2204': attribute type 275 has an invalid length. [ 357.540124][T11980] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2213'. [ 357.730979][T11988] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2217'. [ 357.773633][T11988] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2217'. [ 358.098604][T11998] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2221'. [ 358.267897][T11996] device sit0 entered promiscuous mode [ 358.559182][T12006] netlink: 'syz.5.2223': attribute type 275 has an invalid length. [ 358.890907][T12008] delete_channel: no stack [ 359.248846][T12031] device sit0 left promiscuous mode [ 359.492544][T12047] __nla_validate_parse: 1 callbacks suppressed [ 359.492584][T12047] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2231'. [ 359.585885][T12047] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2231'. [ 359.840558][T12056] device sit0 entered promiscuous mode [ 361.213378][T12094] netlink: 'syz.1.2248': attribute type 5 has an invalid length. [ 361.404763][T12097] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2250'. [ 361.476147][T12102] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2250'. [ 361.690175][T12100] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2249'. [ 362.018859][T12110] delete_channel: no stack [ 362.115878][T12115] device sit0 entered promiscuous mode [ 362.710238][T12144] device pim6reg1 entered promiscuous mode [ 362.909294][T12147] delete_channel: no stack [ 363.560529][T12188] device sit0 entered promiscuous mode [ 363.646271][T12191] device pim6reg1 entered promiscuous mode [ 364.204769][T12202] delete_channel: no stack [ 364.584500][T12219] netlink: 'syz.0.2292': attribute type 21 has an invalid length. [ 364.621472][T12219] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2292'. [ 364.751165][T12225] device sit0 entered promiscuous mode [ 365.446264][T12243] delete_channel: no stack [ 365.744866][T12236] device pim6reg1 entered promiscuous mode [ 366.022015][T12266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2304'. [ 366.267464][T12273] netlink: zone id is out of range [ 366.307356][T12273] netlink: set zone limit has 8 unknown bytes [ 366.582588][T12285] netlink: 'syz.0.2311': attribute type 3 has an invalid length. [ 366.620255][T12285] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2311'. [ 366.794267][T12286] delete_channel: no stack [ 367.001672][T12294] device pim6reg1 entered promiscuous mode [ 367.223509][T12303] netlink: 'syz.5.2316': attribute type 29 has an invalid length. [ 367.266809][T12303] netlink: 'syz.5.2316': attribute type 29 has an invalid length. [ 367.286951][T12305] netlink: 'syz.5.2316': attribute type 29 has an invalid length. [ 367.732179][T12322] netlink: zone id is out of range [ 367.750629][T12322] netlink: set zone limit has 8 unknown bytes [ 368.218743][T12330] delete_channel: no stack [ 369.009203][T12371] netlink: zone id is out of range [ 369.048304][T12371] netlink: set zone limit has 8 unknown bytes [ 369.730390][T12384] delete_channel: no stack [ 371.110930][T12442] delete_channel: no stack [ 372.659487][T12488] netlink: 'syz.1.2375': attribute type 9 has an invalid length. [ 372.721778][T12499] netlink: 'syz.0.2374': attribute type 21 has an invalid length. [ 372.757891][T12488] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2375'. [ 373.011201][T12493] delete_channel: no stack [ 373.272908][T12510] FAULT_INJECTION: forcing a failure. [ 373.272908][T12510] name failslab, interval 1, probability 0, space 0, times 0 [ 373.300094][T12510] CPU: 0 PID: 12510 Comm: syz.0.2379 Not tainted syzkaller #0 [ 373.307665][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.317794][T12510] Call Trace: [ 373.321189][T12510] [ 373.324300][T12510] dump_stack_lvl+0x188/0x250 [ 373.329060][T12510] ? show_regs_print_info+0x20/0x20 [ 373.334503][T12510] ? load_image+0x410/0x410 [ 373.339085][T12510] ? __might_sleep+0xf0/0xf0 [ 373.343847][T12510] ? __lock_acquire+0x7b50/0x7b50 [ 373.348961][T12510] should_fail+0x383/0x4b0 [ 373.353572][T12510] should_failslab+0x5/0x20 [ 373.358204][T12510] slab_pre_alloc_hook+0x51/0xc0 [ 373.363261][T12510] __kmalloc+0x6b/0x340 [ 373.367469][T12510] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 373.373354][T12510] tomoyo_realpath_from_path+0xed/0x5e0 [ 373.379008][T12510] tomoyo_path_number_perm+0x251/0x6b0 [ 373.384548][T12510] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 373.390075][T12510] ? perf_trace_lock+0x301/0x390 [ 373.395227][T12510] security_file_ioctl+0x6c/0xa0 [ 373.400320][T12510] __se_sys_ioctl+0x48/0x170 [ 373.404991][T12510] do_syscall_64+0x4c/0xa0 [ 373.409457][T12510] ? clear_bhb_loop+0x30/0x80 [ 373.414183][T12510] ? clear_bhb_loop+0x30/0x80 [ 373.418923][T12510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 373.424873][T12510] RIP: 0033:0x7f30003bb159 [ 373.429356][T12510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.449027][T12510] RSP: 002b:00007f2ffe613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.457513][T12510] RAX: ffffffffffffffda RBX: 00007f3000642fa0 RCX: 00007f30003bb159 [ 373.465528][T12510] RDX: 00002000000001c0 RSI: 00000000400454d9 RDI: 0000000000000009 [ 373.473532][T12510] RBP: 00007f2ffe613090 R08: 0000000000000000 R09: 0000000000000000 [ 373.481537][T12510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.489546][T12510] R13: 00007f3000643038 R14: 00007f3000642fa0 R15: 00007fffa1664bc8 [ 373.497595][T12510] [ 373.565812][T12510] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.190758][T12545] device bond0 left promiscuous mode [ 375.205975][T12545] device bond_slave_0 left promiscuous mode [ 375.233394][T12545] device bond_slave_1 left promiscuous mode [ 375.276881][T12545] bridge0: port 3(bond0) entered disabled state [ 375.331222][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.376726][T12545] device bridge_slave_0 left promiscuous mode [ 375.410284][T12545] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.571951][T12558] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2395'. [ 375.950775][T12564] netlink: zone id is out of range [ 375.975374][T12564] netlink: set zone limit has 8 unknown bytes [ 376.114940][T12566] netlink: 'syz.1.2397': attribute type 10 has an invalid length. [ 376.165031][T12566] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2397'. [ 376.285576][T12567] delete_channel: no stack [ 376.408058][T12571] FAULT_INJECTION: forcing a failure. [ 376.408058][T12571] name failslab, interval 1, probability 0, space 0, times 0 [ 376.445958][T12571] CPU: 0 PID: 12571 Comm: syz.1.2399 Not tainted syzkaller #0 [ 376.453509][T12571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.463694][T12571] Call Trace: [ 376.467006][T12571] [ 376.469963][T12571] dump_stack_lvl+0x188/0x250 [ 376.474790][T12571] ? show_regs_print_info+0x20/0x20 [ 376.480124][T12571] ? load_image+0x410/0x410 [ 376.484694][T12571] ? __might_sleep+0xf0/0xf0 [ 376.489326][T12571] ? __lock_acquire+0x7b50/0x7b50 [ 376.494410][T12571] should_fail+0x383/0x4b0 [ 376.498877][T12571] should_failslab+0x5/0x20 [ 376.503410][T12571] slab_pre_alloc_hook+0x51/0xc0 [ 376.508386][T12571] __kmalloc+0x6b/0x340 [ 376.512575][T12571] ? tomoyo_encode+0x28a/0x550 [ 376.517526][T12571] tomoyo_encode+0x28a/0x550 [ 376.522167][T12571] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 376.527908][T12571] tomoyo_path_number_perm+0x251/0x6b0 [ 376.533413][T12571] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 376.538910][T12571] ? perf_trace_lock+0x301/0x390 [ 376.544084][T12571] security_file_ioctl+0x6c/0xa0 [ 376.549160][T12571] __se_sys_ioctl+0x48/0x170 [ 376.553906][T12571] do_syscall_64+0x4c/0xa0 [ 376.558532][T12571] ? clear_bhb_loop+0x30/0x80 [ 376.563343][T12571] ? clear_bhb_loop+0x30/0x80 [ 376.568263][T12571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.574191][T12571] RIP: 0033:0x7fadbc044159 [ 376.578652][T12571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.598294][T12571] RSP: 002b:00007fadba29c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.606755][T12571] RAX: ffffffffffffffda RBX: 00007fadbc2cbfa0 RCX: 00007fadbc044159 [ 376.614779][T12571] RDX: 00002000000001c0 RSI: 00000000400454d9 RDI: 0000000000000009 [ 376.622889][T12571] RBP: 00007fadba29c090 R08: 0000000000000000 R09: 0000000000000000 [ 376.630997][T12571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.639000][T12571] R13: 00007fadbc2cc038 R14: 00007fadbc2cbfa0 R15: 00007ffe0083f338 [ 376.647163][T12571] [ 376.701848][T12571] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.759273][T12597] netlink: 'syz.0.2407': attribute type 27 has an invalid length. [ 377.916426][T12601] netlink: zone id is out of range [ 377.932282][T12601] netlink: set zone limit has 8 unknown bytes [ 378.027572][T12605] netlink: zone id is out of range [ 378.033157][T12605] netlink: set zone limit has 8 unknown bytes [ 378.487602][T12626] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2417'. [ 378.887557][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.894295][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.511725][T12645] netlink: zone id is out of range [ 379.519876][T12645] netlink: set zone limit has 8 unknown bytes [ 379.832018][T12649] netlink: zone id is out of range [ 379.857226][T12649] netlink: set zone limit has 8 unknown bytes [ 379.869253][T12646] delete_channel: no stack [ 379.962713][T12657] FAULT_INJECTION: forcing a failure. [ 379.962713][T12657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.027904][T12657] CPU: 0 PID: 12657 Comm: syz.5.2427 Not tainted syzkaller #0 [ 380.035572][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.045735][T12657] Call Trace: [ 380.049071][T12657] [ 380.052157][T12657] dump_stack_lvl+0x188/0x250 [ 380.057203][T12657] ? show_regs_print_info+0x20/0x20 [ 380.062470][T12657] ? load_image+0x410/0x410 [ 380.067043][T12657] ? __lock_acquire+0x7b50/0x7b50 [ 380.072136][T12657] should_fail+0x383/0x4b0 [ 380.076613][T12657] _copy_from_user+0x2e/0x170 [ 380.081338][T12657] __tun_chr_ioctl+0x222/0x1f30 [ 380.086346][T12657] ? tun_flow_create+0x310/0x310 [ 380.091376][T12657] ? bpf_lsm_file_ioctl+0x5/0x10 [ 380.096469][T12657] ? security_file_ioctl+0x7c/0xa0 [ 380.101704][T12657] ? tun_chr_poll+0x620/0x620 [ 380.106516][T12657] __se_sys_ioctl+0xfa/0x170 [ 380.111236][T12657] do_syscall_64+0x4c/0xa0 [ 380.115773][T12657] ? clear_bhb_loop+0x30/0x80 [ 380.120487][T12657] ? clear_bhb_loop+0x30/0x80 [ 380.125218][T12657] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 380.131158][T12657] RIP: 0033:0x7fa770ae3159 [ 380.135615][T12657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.155713][T12657] RSP: 002b:00007fa76ed3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.164188][T12657] RAX: ffffffffffffffda RBX: 00007fa770d6afa0 RCX: 00007fa770ae3159 [ 380.172200][T12657] RDX: 00002000000001c0 RSI: 00000000400454d9 RDI: 0000000000000009 [ 380.180209][T12657] RBP: 00007fa76ed3b090 R08: 0000000000000000 R09: 0000000000000000 [ 380.188307][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.196499][T12657] R13: 00007fa770d6b038 R14: 00007fa770d6afa0 R15: 00007ffd9ce3cd68 [ 380.204573][T12657] [ 380.319817][T12662] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 380.335568][T12662] netlink: 'syz.0.2428': attribute type 8 has an invalid length. [ 380.377751][T12662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2428'. [ 380.424438][T12662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2428'. [ 380.520488][T12669] netlink: 'syz.4.2433': attribute type 3 has an invalid length. [ 380.545282][T12669] netlink: 135800 bytes leftover after parsing attributes in process `syz.4.2433'. [ 381.574127][T12697] net_ratelimit: 2 callbacks suppressed [ 381.574168][T12697] netlink: zone id is out of range [ 381.600460][T12697] netlink: set zone limit has 8 unknown bytes [ 381.776941][T12708] netlink: 'syz.2.2444': attribute type 3 has an invalid length. [ 381.784921][T12708] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2444'. [ 381.878034][T12713] netlink: 'syz.2.2444': attribute type 3 has an invalid length. [ 381.903012][T12713] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2444'. [ 382.300193][T12725] netlink: zone id is out of range [ 382.308681][T12725] netlink: set zone limit has 8 unknown bytes [ 382.375750][T12720] delete_channel: no stack [ 382.754043][T12739] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2454'. [ 383.649264][T12754] FAULT_INJECTION: forcing a failure. [ 383.649264][T12754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.667863][T12755] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2455'. [ 383.692593][T12754] CPU: 1 PID: 12754 Comm: syz.2.2456 Not tainted syzkaller #0 [ 383.700254][T12754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.710370][T12754] Call Trace: [ 383.713727][T12754] [ 383.716708][T12754] dump_stack_lvl+0x188/0x250 [ 383.721638][T12754] ? show_regs_print_info+0x20/0x20 [ 383.726989][T12754] ? load_image+0x410/0x410 [ 383.731581][T12754] ? __lock_acquire+0x7b50/0x7b50 [ 383.736727][T12754] should_fail+0x383/0x4b0 [ 383.741222][T12754] _copy_to_user+0x2e/0x130 [ 383.745926][T12754] simple_read_from_buffer+0xe3/0x150 [ 383.751582][T12754] proc_fail_nth_read+0x1a6/0x220 [ 383.756761][T12754] ? proc_fault_inject_write+0x310/0x310 [ 383.763161][T12754] ? fsnotify_perm+0x254/0x560 [ 383.768146][T12754] ? proc_fault_inject_write+0x310/0x310 [ 383.773858][T12754] vfs_read+0x2ff/0xd50 [ 383.778164][T12754] ? __lock_acquire+0x7b50/0x7b50 [ 383.783288][T12754] ? kernel_read+0x1e0/0x1e0 [ 383.788009][T12754] ? mutex_lock_nested+0x17/0x20 [ 383.793002][T12754] ? __fdget_pos+0x2bf/0x370 [ 383.797648][T12754] ? ksys_read+0x70/0x260 [ 383.802048][T12754] ksys_read+0x153/0x260 [ 383.806368][T12754] ? vfs_write+0xd70/0xd70 [ 383.810857][T12754] ? lockdep_hardirqs_on+0x94/0x140 [ 383.816138][T12754] do_syscall_64+0x4c/0xa0 [ 383.820706][T12754] ? clear_bhb_loop+0x30/0x80 [ 383.825440][T12754] ? clear_bhb_loop+0x30/0x80 [ 383.830208][T12754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 383.836185][T12754] RIP: 0033:0x7ff38c5e098e [ 383.840672][T12754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 383.860807][T12754] RSP: 002b:00007ff38a877fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.869672][T12754] RAX: ffffffffffffffda RBX: 00007ff38a8786c0 RCX: 00007ff38c5e098e [ 383.878089][T12754] RDX: 000000000000000f RSI: 00007ff38a8780a0 RDI: 000000000000000b [ 383.886123][T12754] RBP: 00007ff38a878090 R08: 0000000000000000 R09: 0000000000000000 [ 383.894175][T12754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.902208][T12754] R13: 00007ff38c8a8038 R14: 00007ff38c8a7fa0 R15: 00007fffa9188878 [ 383.910321][T12754] [ 383.972427][T12755] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 384.485016][T12764] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2459'. [ 384.568103][T12768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2460'. [ 384.601679][T12768] : renamed from caif0 [ 384.613403][T12768] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 384.731131][T12771] netlink: zone id is out of range [ 384.753811][T12771] netlink: set zone limit has 8 unknown bytes [ 385.851121][T12804] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2471'. [ 385.982579][T12804] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 386.552628][T12831] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2475'. [ 386.648742][T12831] openvswitch: netlink: Flow key attribute not present in set flow. [ 386.697385][T12832] delete_channel: no stack [ 386.770555][T12837] device syzkaller0 entered promiscuous mode [ 387.693734][T12879] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2489'. [ 387.715130][T12879] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 387.725455][T12879] CPU: 1 PID: 12879 Comm: syz.2.2489 Not tainted syzkaller #0 [ 387.732994][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.743110][T12879] Call Trace: [ 387.746436][T12879] [ 387.749441][T12879] dump_stack_lvl+0x188/0x250 [ 387.754205][T12879] ? show_regs_print_info+0x20/0x20 [ 387.759583][T12879] ? load_image+0x410/0x410 [ 387.764158][T12879] sysfs_warn_dup+0x8a/0xa0 [ 387.768794][T12879] sysfs_do_create_link_sd+0xc0/0x110 [ 387.774254][T12879] device_add+0x83b/0x1050 [ 387.779088][T12879] wiphy_register+0x1e74/0x2c40 [ 387.784226][T12879] ? cfg80211_event_work+0x40/0x40 [ 387.789417][T12879] ? minstrel_ht_alloc+0x807/0x980 [ 387.794682][T12879] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 387.800902][T12879] ieee80211_register_hw+0x2a03/0x3a60 [ 387.806520][T12879] ? ieee80211_register_hw+0xb21/0x3a60 [ 387.812605][T12879] ? ieee80211_tasklet_handler+0x20/0x20 [ 387.818377][T12879] ? rcu_is_watching+0x11/0xa0 [ 387.823652][T12879] ? hrtimer_init+0x10c/0x220 [ 387.828484][T12879] mac80211_hwsim_new_radio+0x209d/0x4050 [ 387.834823][T12879] hwsim_new_radio_nl+0xa7d/0xc50 [ 387.840082][T12879] genl_rcv_msg+0xd0b/0xfa0 [ 387.844775][T12879] ? genl_bind+0x370/0x370 [ 387.849261][T12879] ? verify_lock_unused+0x140/0x140 [ 387.854523][T12879] ? perf_trace_lock_acquire+0xed/0x3f0 [ 387.860167][T12879] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 387.866919][T12879] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 387.873513][T12879] netlink_rcv_skb+0x1e9/0x430 [ 387.878416][T12879] ? genl_bind+0x370/0x370 [ 387.883198][T12879] ? netlink_ack+0xb10/0xb10 [ 387.887862][T12879] ? down_read+0x1aa/0x2e0 [ 387.892331][T12879] genl_rcv+0x24/0x40 [ 387.896365][T12879] netlink_unicast+0x78f/0x940 [ 387.901220][T12879] netlink_sendmsg+0x8ba/0xbe0 [ 387.906050][T12879] ? netlink_getsockopt+0x570/0x570 [ 387.911296][T12879] ? aa_sock_msg_perm+0x94/0x150 [ 387.916355][T12879] ? apparmor_socket_sendmsg+0x88/0x230 [ 387.922218][T12879] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 387.927561][T12879] ? security_socket_sendmsg+0x7c/0xa0 [ 387.933078][T12879] ? netlink_getsockopt+0x570/0x570 [ 387.938333][T12879] ____sys_sendmsg+0x5be/0x8f0 [ 387.943262][T12879] ? __sys_sendmsg_sock+0x30/0x30 [ 387.948362][T12879] ? import_iovec+0x6f/0xa0 [ 387.952959][T12879] ___sys_sendmsg+0x236/0x2e0 [ 387.957702][T12879] ? __sys_sendmsg+0x290/0x290 [ 387.962582][T12879] __se_sys_sendmsg+0x1b7/0x2a0 [ 387.967496][T12879] ? __x64_sys_sendmsg+0x80/0x80 [ 387.972493][T12879] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 387.978553][T12879] ? lockdep_hardirqs_on+0x94/0x140 [ 387.983844][T12879] do_syscall_64+0x4c/0xa0 [ 387.988311][T12879] ? clear_bhb_loop+0x30/0x80 [ 387.993045][T12879] ? clear_bhb_loop+0x30/0x80 [ 387.997947][T12879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 388.003913][T12879] RIP: 0033:0x7ff38c620159 [ 388.008386][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.028494][T12879] RSP: 002b:00007ff38a857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.036984][T12879] RAX: ffffffffffffffda RBX: 00007ff38c8a8090 RCX: 00007ff38c620159 [ 388.045036][T12879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 388.053079][T12879] RBP: 00007ff38c6b703b R08: 0000000000000000 R09: 0000000000000000 [ 388.061283][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.069312][T12879] R13: 00007ff38c8a8128 R14: 00007ff38c8a8090 R15: 00007fffa9188878 [ 388.077369][T12879] [ 388.368483][T12889] netlink: 'syz.0.2493': attribute type 10 has an invalid length. [ 388.420927][T12889] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.2493'. [ 389.270265][T12900] delete_channel: no stack [ 389.853072][T12912] device syzkaller0 entered promiscuous mode [ 390.177252][T12934] delete_channel: no stack [ 390.969445][T12956] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2506'. [ 391.025112][T12956] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 391.760663][T12981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2521'. [ 392.031637][T12978] netlink: 'syz.0.2521': attribute type 10 has an invalid length. [ 392.231835][T12978] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2521'. [ 392.353980][T12978] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 392.480746][T12990] delete_channel: no stack [ 392.503933][T12994] netlink: 'syz.5.2525': attribute type 41 has an invalid length. [ 392.868953][T13013] netlink: 'syz.2.2533': attribute type 21 has an invalid length. [ 392.895421][T13013] netlink: 'syz.2.2533': attribute type 6 has an invalid length. [ 392.915602][T13013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2533'. [ 393.082795][T13021] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2535'. [ 393.130910][T13021] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.2535'. [ 393.432540][T13026] delete_channel: no stack [ 393.722043][T13037] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2541'. [ 393.965468][T13045] FAULT_INJECTION: forcing a failure. [ 393.965468][T13045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.000672][T13045] CPU: 0 PID: 13045 Comm: syz.5.2545 Not tainted syzkaller #0 [ 394.008228][T13045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.018337][T13045] Call Trace: [ 394.021745][T13045] [ 394.024709][T13045] dump_stack_lvl+0x188/0x250 [ 394.029447][T13045] ? show_regs_print_info+0x20/0x20 [ 394.034689][T13045] ? load_image+0x410/0x410 [ 394.039377][T13045] ? __lock_acquire+0x7b50/0x7b50 [ 394.044553][T13045] should_fail+0x383/0x4b0 [ 394.049026][T13045] _copy_from_user+0x2e/0x170 [ 394.053753][T13045] __sys_bpf+0x26d/0x6f0 [ 394.058048][T13045] ? bpf_link_show_fdinfo+0x380/0x380 [ 394.063508][T13045] __x64_sys_bpf+0x78/0x90 [ 394.067979][T13045] do_syscall_64+0x4c/0xa0 [ 394.072539][T13045] ? clear_bhb_loop+0x30/0x80 [ 394.077520][T13045] ? clear_bhb_loop+0x30/0x80 [ 394.082247][T13045] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.088327][T13045] RIP: 0033:0x7fa770ae3159 [ 394.092790][T13045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.112458][T13045] RSP: 002b:00007fa76ed3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.121160][T13045] RAX: ffffffffffffffda RBX: 00007fa770d6afa0 RCX: 00007fa770ae3159 [ 394.129197][T13045] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 394.137341][T13045] RBP: 00007fa76ed3b090 R08: 0000000000000000 R09: 0000000000000000 [ 394.145469][T13045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.153526][T13045] R13: 00007fa770d6b038 R14: 00007fa770d6afa0 R15: 00007ffd9ce3cd68 [ 394.161613][T13045] [ 394.256565][T13051] tun0: tun_chr_ioctl cmd 1074025677 [ 394.266760][T13051] tun0: linktype set to 776 [ 394.368304][T13055] netlink: 668 bytes leftover after parsing attributes in process `syz.5.2547'. [ 394.377835][T13055] openvswitch: netlink: Key type 15645 is out of range max 29 [ 395.493278][T13087] delete_channel: no stack [ 395.787232][T13100] FAULT_INJECTION: forcing a failure. [ 395.787232][T13100] name failslab, interval 1, probability 0, space 0, times 0 [ 395.873168][T13100] CPU: 1 PID: 13100 Comm: syz.1.2561 Not tainted syzkaller #0 [ 395.880829][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.891017][T13100] Call Trace: [ 395.894343][T13100] [ 395.897315][T13100] dump_stack_lvl+0x188/0x250 [ 395.902170][T13100] ? show_regs_print_info+0x20/0x20 [ 395.907418][T13100] ? load_image+0x410/0x410 [ 395.913170][T13100] ? __might_sleep+0xf0/0xf0 [ 395.917835][T13100] ? __lock_acquire+0x7b50/0x7b50 [ 395.923147][T13100] ? perf_trace_lock+0xe4/0x390 [ 395.928496][T13100] should_fail+0x383/0x4b0 [ 395.932985][T13100] should_failslab+0x5/0x20 [ 395.937530][T13100] slab_pre_alloc_hook+0x51/0xc0 [ 395.942519][T13100] __kmalloc+0x6b/0x340 [ 395.946828][T13100] ? bpf_ctx_init+0xb2/0x190 [ 395.951491][T13100] bpf_ctx_init+0xb2/0x190 [ 395.956051][T13100] bpf_prog_test_run_sk_lookup+0x2ec/0xb40 [ 395.961907][T13100] ? __lock_acquire+0x7b50/0x7b50 [ 395.966996][T13100] ? bpf_test_timer_leave+0x150/0x150 [ 395.972426][T13100] ? bpf_test_timer_leave+0x150/0x150 [ 395.978263][T13100] bpf_prog_test_run+0x31c/0x390 [ 395.983257][T13100] __sys_bpf+0x5a5/0x6f0 [ 395.987553][T13100] ? bpf_link_show_fdinfo+0x380/0x380 [ 395.993085][T13100] __x64_sys_bpf+0x78/0x90 [ 395.997576][T13100] do_syscall_64+0x4c/0xa0 [ 396.002166][T13100] ? clear_bhb_loop+0x30/0x80 [ 396.007085][T13100] ? clear_bhb_loop+0x30/0x80 [ 396.011835][T13100] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.017785][T13100] RIP: 0033:0x7fadbc044159 [ 396.022270][T13100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.042023][T13100] RSP: 002b:00007fadba27b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.050498][T13100] RAX: ffffffffffffffda RBX: 00007fadbc2cc090 RCX: 00007fadbc044159 [ 396.058528][T13100] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 396.066553][T13100] RBP: 00007fadba27b090 R08: 0000000000000000 R09: 0000000000000000 [ 396.074612][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.082629][T13100] R13: 00007fadbc2cc128 R14: 00007fadbc2cc090 R15: 00007ffe0083f338 [ 396.090672][T13100] [ 397.565056][T13136] netlink: 'syz.4.2570': attribute type 2 has an invalid length. [ 397.588233][T13136] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2570'. [ 398.183930][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2573'. [ 398.277102][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2573'. [ 398.364304][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2573'. [ 398.468049][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2573'. [ 398.549703][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2573'. [ 398.610525][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2573'. [ 398.686034][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2573'. [ 398.706037][T13158] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2576'. [ 398.744243][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2573'. [ 399.334536][T13169] delete_channel: no stack [ 401.053458][T13198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.226824][T13198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.328574][T13198] bond0 (unregistering): Released all slaves [ 401.384729][T13217] netlink: 'syz.1.2596': attribute type 2 has an invalid length. [ 401.476400][T13199] team0: Port device team_slave_0 removed [ 401.824452][T13228] netlink: 'syz.1.2609': attribute type 30 has an invalid length. [ 401.884897][T13223] netlink: 'syz.1.2609': attribute type 2 has an invalid length. [ 402.202693][T13234] openvswitch: netlink: Flow key attribute not present in set flow. [ 402.391249][T13234] device syzkaller0 entered promiscuous mode [ 402.880792][T13255] __nla_validate_parse: 21 callbacks suppressed [ 402.880813][T13255] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2618'. [ 403.014745][T13259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2606'. [ 403.086029][T13259] netlink: 'syz.4.2606': attribute type 10 has an invalid length. [ 403.094769][T13259] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2606'. [ 403.105439][T13259] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.910876][T13275] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2612'. [ 403.977304][T13275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.011710][T13275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.081886][T13275] bond0 (unregistering): Released all slaves [ 404.251537][T13276] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2612'. [ 404.294703][T13279] netlink: 'syz.0.2614': attribute type 2 has an invalid length. [ 404.303989][T13279] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2614'. [ 404.320768][T13276] team0: Port device team_slave_0 removed [ 404.349042][T13278] netlink: 'syz.0.2614': attribute type 30 has an invalid length. [ 404.770860][T13283] delete_channel: no stack [ 405.148253][T13311] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2626'. [ 405.999003][T13334] FAULT_INJECTION: forcing a failure. [ 405.999003][T13334] name failslab, interval 1, probability 0, space 0, times 0 [ 406.021766][T13325] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2633'. [ 406.036865][T13334] CPU: 0 PID: 13334 Comm: syz.5.2636 Not tainted syzkaller #0 [ 406.044421][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.054539][T13334] Call Trace: [ 406.057869][T13334] [ 406.060921][T13334] dump_stack_lvl+0x188/0x250 [ 406.065658][T13334] ? show_regs_print_info+0x20/0x20 [ 406.070926][T13334] ? load_image+0x410/0x410 [ 406.075528][T13334] ? __lock_acquire+0x7b50/0x7b50 [ 406.080605][T13334] ? __lock_acquire+0x7b50/0x7b50 [ 406.085696][T13334] should_fail+0x383/0x4b0 [ 406.090190][T13334] should_failslab+0x5/0x20 [ 406.091068][T13325] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2633'. [ 406.094787][T13334] slab_pre_alloc_hook+0x51/0xc0 [ 406.094823][T13334] __kmalloc+0x6b/0x340 [ 406.094843][T13334] ? bpf_prog_test_run_sk_lookup+0x4fb/0xb40 [ 406.119327][T13334] bpf_prog_test_run_sk_lookup+0x4fb/0xb40 [ 406.125228][T13334] ? __lock_acquire+0x7b50/0x7b50 [ 406.130508][T13334] ? bpf_test_timer_leave+0x150/0x150 [ 406.135999][T13334] ? bpf_test_timer_leave+0x150/0x150 [ 406.141450][T13334] bpf_prog_test_run+0x31c/0x390 [ 406.146464][T13334] __sys_bpf+0x5a5/0x6f0 [ 406.150748][T13325] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2633'. [ 406.160019][T13334] ? bpf_link_show_fdinfo+0x380/0x380 [ 406.165529][T13334] __x64_sys_bpf+0x78/0x90 [ 406.170056][T13334] do_syscall_64+0x4c/0xa0 [ 406.174563][T13334] ? clear_bhb_loop+0x30/0x80 [ 406.179305][T13334] ? clear_bhb_loop+0x30/0x80 [ 406.184072][T13334] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.190038][T13334] RIP: 0033:0x7fa770ae3159 [ 406.194527][T13334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.214327][T13334] RSP: 002b:00007fa76ed3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.222862][T13334] RAX: ffffffffffffffda RBX: 00007fa770d6afa0 RCX: 00007fa770ae3159 [ 406.230906][T13334] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 406.238943][T13334] RBP: 00007fa76ed3b090 R08: 0000000000000000 R09: 0000000000000000 [ 406.246986][T13334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.255111][T13334] R13: 00007fa770d6b038 R14: 00007fa770d6afa0 R15: 00007ffd9ce3cd68 [ 406.263204][T13334] [ 406.647737][T13345] delete_channel: no stack [ 407.210937][T13382] FAULT_INJECTION: forcing a failure. [ 407.210937][T13382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.240280][T13382] CPU: 0 PID: 13382 Comm: syz.1.2648 Not tainted syzkaller #0 [ 407.247841][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.258310][T13382] Call Trace: [ 407.261641][T13382] [ 407.264619][T13382] dump_stack_lvl+0x188/0x250 [ 407.269380][T13382] ? show_regs_print_info+0x20/0x20 [ 407.274736][T13382] ? load_image+0x410/0x410 [ 407.279340][T13382] ? __lock_acquire+0x7b50/0x7b50 [ 407.284443][T13382] ? __local_bh_enable_ip+0x136/0x1c0 [ 407.289964][T13382] ? _local_bh_enable+0xa0/0xa0 [ 407.294889][T13382] should_fail+0x383/0x4b0 [ 407.299402][T13382] copy_fpstate_to_sigframe+0x874/0xba0 [ 407.305140][T13382] ? fpregs_set+0x5d0/0x5d0 [ 407.309707][T13382] ? _raw_spin_unlock_irq+0x2a/0x40 [ 407.314980][T13382] ? get_signal+0x121c/0x12e0 [ 407.319862][T13382] ? fpu__alloc_mathframe+0x77/0x140 [ 407.325235][T13382] arch_do_signal_or_restart+0x640/0x12a0 [ 407.331155][T13382] ? bpf_prog_free_id+0x1d0/0x1d0 [ 407.336284][T13382] ? bpf_test_timer_leave+0x150/0x150 [ 407.341956][T13382] ? get_sigframe_size+0x10/0x10 [ 407.346977][T13382] ? __sys_bpf+0x5a5/0x6f0 [ 407.351548][T13382] ? exit_to_user_mode_loop+0x3b/0x130 [ 407.357097][T13382] exit_to_user_mode_loop+0x9e/0x130 [ 407.362587][T13382] exit_to_user_mode_prepare+0xee/0x180 [ 407.368207][T13382] syscall_exit_to_user_mode+0x16/0x40 [ 407.373736][T13382] do_syscall_64+0x58/0xa0 [ 407.378245][T13382] ? clear_bhb_loop+0x30/0x80 [ 407.382989][T13382] ? clear_bhb_loop+0x30/0x80 [ 407.387752][T13382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.393706][T13382] RIP: 0033:0x7fadbc044159 [ 407.398186][T13382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.417941][T13382] RSP: 002b:00007fadba29c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 407.426523][T13382] RAX: fffffffffffffffc RBX: 00007fadbc2cbfa0 RCX: 00007fadbc044159 [ 407.434726][T13382] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 407.442776][T13382] RBP: 00007fadba29c090 R08: 0000000000000000 R09: 0000000000000000 [ 407.450813][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.458850][T13382] R13: 00007fadbc2cc038 R14: 00007fadbc2cbfa0 R15: 00007ffe0083f338 [ 407.466992][T13382] [ 407.552253][T13393] netlink: 'syz.2.2652': attribute type 40 has an invalid length. [ 407.873783][T13396] delete_channel: no stack [ 408.130252][T13412] netlink: 'syz.5.2661': attribute type 29 has an invalid length. [ 408.572148][T13412] netlink: 'syz.5.2661': attribute type 29 has an invalid length. [ 408.661399][T13415] netlink: 'syz.5.2661': attribute type 29 has an invalid length. [ 409.027858][T13441] __nla_validate_parse: 32 callbacks suppressed [ 409.027898][T13441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2668'. [ 409.204080][T13437] FAULT_INJECTION: forcing a failure. [ 409.204080][T13437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.260044][T13437] CPU: 0 PID: 13437 Comm: syz.0.2667 Not tainted syzkaller #0 [ 409.267836][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.277937][T13437] Call Trace: [ 409.281292][T13437] [ 409.284263][T13437] dump_stack_lvl+0x188/0x250 [ 409.289105][T13437] ? show_regs_print_info+0x20/0x20 [ 409.294357][T13437] ? load_image+0x410/0x410 [ 409.298911][T13437] ? __lock_acquire+0x7b50/0x7b50 [ 409.303998][T13437] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 409.310029][T13437] ? __lock_acquire+0x7b50/0x7b50 [ 409.315111][T13437] should_fail+0x383/0x4b0 [ 409.319617][T13437] _copy_from_user+0x2e/0x170 [ 409.324435][T13437] __ia32_sys_rt_sigreturn+0x21c/0x750 [ 409.330062][T13437] ? load_gs_index+0x130/0x130 [ 409.334932][T13437] ? lock_chain_count+0x20/0x20 [ 409.339866][T13437] ? lockdep_hardirqs_on+0x94/0x140 [ 409.345152][T13437] do_syscall_64+0x4c/0xa0 [ 409.349612][T13437] ? clear_bhb_loop+0x30/0x80 [ 409.354329][T13437] ? clear_bhb_loop+0x30/0x80 [ 409.359168][T13437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 409.365105][T13437] RIP: 0033:0x7f300035c4d9 [ 409.369603][T13437] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 409.389354][T13437] RSP: 002b:00007f2ffe612a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 409.397832][T13437] RAX: ffffffffffffffda RBX: 00007f3000642fa0 RCX: 00007f300035c4d9 [ 409.405847][T13437] RDX: 00007f2ffe612a80 RSI: 00007f2ffe612bb0 RDI: 0000000000000011 [ 409.413872][T13437] RBP: 00007f2ffe613090 R08: 0000000000000000 R09: 0000000000000000 [ 409.421892][T13437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.429905][T13437] R13: 00007f3000643038 R14: 00007f3000642fa0 R15: 00007fffa1664bc8 [ 409.438233][T13437] [ 410.027193][ T4859] tipc: Subscription rejected, illegal request [ 410.420827][T13489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2682'. [ 410.713060][T13498] FAULT_INJECTION: forcing a failure. [ 410.713060][T13498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.745331][T13498] CPU: 1 PID: 13498 Comm: syz.1.2684 Not tainted syzkaller #0 [ 410.752874][T13498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.762977][T13498] Call Trace: [ 410.766297][T13498] [ 410.769267][T13498] dump_stack_lvl+0x188/0x250 [ 410.773995][T13498] ? show_regs_print_info+0x20/0x20 [ 410.779240][T13498] ? load_image+0x410/0x410 [ 410.783790][T13498] ? __lock_acquire+0x7b50/0x7b50 [ 410.788872][T13498] should_fail+0x383/0x4b0 [ 410.793345][T13498] fpu__restore_sig+0x254/0x10a0 [ 410.798341][T13498] ? copy_fpstate_to_sigframe+0xba0/0xba0 [ 410.804127][T13498] ? __lock_acquire+0x7b50/0x7b50 [ 410.809219][T13498] ? __might_fault+0xb3/0x110 [ 410.814031][T13498] ? _copy_from_user+0x111/0x170 [ 410.819052][T13498] __ia32_sys_rt_sigreturn+0x5ef/0x750 [ 410.824587][T13498] ? load_gs_index+0x130/0x130 [ 410.829445][T13498] ? lock_chain_count+0x20/0x20 [ 410.834379][T13498] ? lockdep_hardirqs_on+0x94/0x140 [ 410.839634][T13498] do_syscall_64+0x4c/0xa0 [ 410.844096][T13498] ? clear_bhb_loop+0x30/0x80 [ 410.849167][T13498] ? clear_bhb_loop+0x30/0x80 [ 410.853900][T13498] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.860022][T13498] RIP: 0033:0x7fadbc044159 [ 410.864488][T13498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.884513][T13498] RSP: 002b:00007fadba29c028 EFLAGS: 00000246 [ 410.890684][T13498] RAX: fffffffffffffffc RBX: 00007fadbc2cbfa0 RCX: 00007fadbc044159 [ 410.898745][T13498] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 410.906789][T13498] RBP: 00007fadba29c090 R08: 0000000000000000 R09: 0000000000000000 [ 410.914810][T13498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.923003][T13498] R13: 00007fadbc2cc038 R14: 00007fadbc2cbfa0 R15: 00007ffe0083f338 [ 410.931051][T13498] [ 410.959063][T13503] netlink: 'syz.0.2686': attribute type 9 has an invalid length. [ 410.976415][T13503] netlink: 165200 bytes leftover after parsing attributes in process `syz.0.2686'. [ 411.340179][T13511] netlink: 'syz.0.2686': attribute type 9 has an invalid length. [ 411.350538][T13511] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2686'. [ 412.439496][T13531] delete_channel: no stack [ 412.666570][T13563] netlink: 'syz.0.2701': attribute type 16 has an invalid length. [ 412.685465][T13563] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2701'. [ 412.747997][T13563] netlink: 'syz.0.2701': attribute type 10 has an invalid length. [ 412.784224][T13563] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2701'. [ 412.806617][T13558] FAULT_INJECTION: forcing a failure. [ 412.806617][T13558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.857002][T13566] netlink: 'syz.0.2701': attribute type 10 has an invalid length. [ 412.875346][T13558] CPU: 0 PID: 13558 Comm: syz.1.2699 Not tainted syzkaller #0 [ 412.882875][T13558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.893153][T13558] Call Trace: [ 412.896466][T13558] [ 412.899539][T13558] dump_stack_lvl+0x188/0x250 [ 412.904266][T13558] ? show_regs_print_info+0x20/0x20 [ 412.909516][T13558] ? load_image+0x410/0x410 [ 412.914069][T13558] ? __lock_acquire+0x7b50/0x7b50 [ 412.919148][T13558] ? fpu__restore_sig+0x867/0x10a0 [ 412.924320][T13558] should_fail+0x383/0x4b0 [ 412.928805][T13558] _copy_from_user+0x2e/0x170 [ 412.933548][T13558] restore_altstack+0xa8/0x380 [ 412.938357][T13558] ? __lock_acquire+0x7b50/0x7b50 [ 412.943523][T13558] ? __ia32_sys_sigaltstack+0x60/0x60 [ 412.949388][T13558] ? __might_fault+0xb3/0x110 [ 412.954116][T13558] ? _copy_from_user+0x111/0x170 [ 412.959111][T13558] __ia32_sys_rt_sigreturn+0x624/0x750 [ 412.964723][T13558] ? load_gs_index+0x130/0x130 [ 412.969700][T13558] ? lock_chain_count+0x20/0x20 [ 412.974606][T13558] ? lockdep_hardirqs_on+0x94/0x140 [ 412.979861][T13558] do_syscall_64+0x4c/0xa0 [ 412.984410][T13558] ? clear_bhb_loop+0x30/0x80 [ 412.989226][T13558] ? clear_bhb_loop+0x30/0x80 [ 412.993960][T13558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 412.999910][T13558] RIP: 0033:0x7fadbc044159 [ 413.004363][T13558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.024009][T13558] RSP: 002b:00007fadba29c028 EFLAGS: 00000246 [ 413.030315][T13558] RAX: fffffffffffffffc RBX: 00007fadbc2cbfa0 RCX: 00007fadbc044159 [ 413.038439][T13558] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 413.046454][T13558] RBP: 00007fadba29c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.054464][T13558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.062480][T13558] R13: 00007fadbc2cc038 R14: 00007fadbc2cbfa0 R15: 00007ffe0083f338 [ 413.070621][T13558] [ 413.566534][T13583] netlink: 'syz.2.2706': attribute type 3 has an invalid length. [ 413.609463][T13583] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2706'. [ 413.812220][T13587] netlink: 'syz.1.2707': attribute type 10 has an invalid length. [ 413.822939][T13587] team0: Device hsr_slave_0 failed to register rx_handler [ 414.096401][T13586] netlink: 'syz.1.2707': attribute type 9 has an invalid length. [ 414.134832][T13586] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2707'. [ 414.446029][T13596] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2710'. [ 414.515984][T13593] delete_channel: no stack [ 415.283363][T13624] netlink: 'syz.2.2715': attribute type 29 has an invalid length. [ 415.295599][T13630] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2716'. [ 415.316582][T13624] netlink: 'syz.2.2715': attribute type 3 has an invalid length. [ 415.334906][T13630] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.2716'. [ 415.384506][T13624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2715'. [ 415.621294][T13643] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2716'. [ 415.812524][T13643] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.2716'. [ 416.392915][T13655] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.405374][T13655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.412668][T13655] IPv6: NLM_F_CREATE should be set when creating new route [ 416.420148][T13655] IPv6: NLM_F_CREATE should be set when creating new route [ 416.427449][T13655] IPv6: NLM_F_CREATE should be set when creating new route [ 416.782267][T13673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2727'. [ 416.868561][T13668] delete_channel: no stack [ 416.868816][T13673] netlink: 'syz.1.2727': attribute type 3 has an invalid length. [ 416.986021][T13673] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2727'. [ 417.713150][T13701] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2734'. [ 417.744448][T13701] netlink: 'syz.0.2734': attribute type 2 has an invalid length. [ 417.753631][T13701] netlink: 'syz.0.2734': attribute type 3 has an invalid length. [ 417.767527][T13703] netlink: 'syz.5.2735': attribute type 4 has an invalid length. [ 417.957894][T13703] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 418.487769][T13706] delete_channel: no stack [ 418.734404][T13712] device lo entered promiscuous mode [ 418.769780][T13715] delete_channel: no stack [ 419.278779][T13746] __nla_validate_parse: 3 callbacks suppressed [ 419.278808][T13746] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2745'. [ 421.284938][T13767] device syzkaller0 entered promiscuous mode [ 421.500149][T13788] delete_channel: no stack [ 421.866749][T13797] netlink: 189928 bytes leftover after parsing attributes in process `syz.5.2758'. [ 421.953645][T13796] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.2759'. [ 422.010755][T13797] netlink: 6320 bytes leftover after parsing attributes in process `syz.5.2758'. [ 422.198960][T13802] netlink: 'syz.1.2761': attribute type 29 has an invalid length. [ 422.256515][T13802] netlink: 'syz.1.2761': attribute type 29 has an invalid length. [ 422.305640][T13812] netlink: 'syz.1.2761': attribute type 29 has an invalid length. [ 422.326871][T13804] sctp: [Deprecated]: syz.2.2762 (pid 13804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.326871][T13804] Use struct sctp_sack_info instead [ 422.522984][T13821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 422.550445][T13821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 422.830505][T13814] netlink: 'syz.1.2761': attribute type 29 has an invalid length. [ 423.293365][T13839] device syzkaller0 entered promiscuous mode [ 423.383462][T13823] chnl_net:caif_netlink_parms(): no params data found [ 423.967154][T13857] delete_channel: no stack [ 423.988520][T13823] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.045263][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.053730][T13823] device bridge_slave_0 entered promiscuous mode [ 424.098136][T13823] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.106688][T13823] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.116797][T13823] device bridge_slave_1 entered promiscuous mode [ 424.222102][T13823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.302241][T13823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.421580][T13823] team0: Port device team_slave_0 added [ 424.431916][T13823] team0: Port device team_slave_1 added [ 424.635812][ T7157] Bluetooth: hci2: command 0x0409 tx timeout [ 424.962918][T13884] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2779'. [ 424.984317][T13823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.004516][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.062740][T13823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.350605][T13823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.364837][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.403264][T13823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.423962][T13899] netlink: 'syz.2.2783': attribute type 7 has an invalid length. [ 425.609730][T13823] device hsr_slave_0 entered promiscuous mode [ 425.862831][T13823] device hsr_slave_1 entered promiscuous mode [ 425.906421][T13823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.931534][T13823] Cannot create hsr debugfs directory [ 425.954526][T13911] netlink: 'syz.4.2785': attribute type 29 has an invalid length. [ 425.985499][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2785'. [ 426.019729][T13911] netlink: 'syz.4.2785': attribute type 29 has an invalid length. [ 426.052873][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2785'. [ 426.071645][T13910] delete_channel: no stack [ 426.106772][ T3087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.187312][T13914] delete_channel: no stack [ 426.335744][ T3087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.445059][T13937] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.2794'. [ 426.526977][ T3087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.612668][ T3087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.724617][ T7157] Bluetooth: hci2: command 0x041b tx timeout [ 427.420543][T13967] delete_channel: no stack [ 427.946360][T14000] netlink: 'syz.4.2806': attribute type 33 has an invalid length. [ 427.977157][T14000] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2806'. [ 428.015493][T14002] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2808'. [ 428.066698][T14007] netlink: 'syz.1.2808': attribute type 9 has an invalid length. [ 428.121946][T14007] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2808'. [ 428.626690][T13823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.747869][T13823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.755696][T14017] delete_channel: no stack [ 428.794251][T13823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.796637][ T9389] Bluetooth: hci2: command 0x040f tx timeout [ 428.895623][T13823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.297859][T13823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.393055][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 429.425737][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.463001][T14059] netlink: 105940 bytes leftover after parsing attributes in process `syz.4.2820'. [ 429.488910][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.504712][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.529528][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.552157][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.603647][ T3087] device veth1_macvtap left promiscuous mode [ 429.618039][ T3087] device veth0_macvtap left promiscuous mode [ 429.634548][ T3087] device veth1_vlan left promiscuous mode [ 429.651915][ T3087] device veth0_vlan left promiscuous mode [ 430.077789][T14090] delete_channel: no stack [ 430.204800][ T3087] team0 (unregistering): Port device geneve1 removed [ 430.410079][ T3087] team0 (unregistering): Port device team_slave_1 removed [ 430.523127][T13823] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.543072][T14085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2826'. [ 430.554891][T14085] netlink: 'syz.5.2826': attribute type 1 has an invalid length. [ 430.568801][T14085] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2826'. [ 430.587398][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 430.607508][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.632539][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.639755][ T4871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.697189][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 430.726072][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.745320][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.752474][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.806130][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 430.832629][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 430.853218][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 430.875437][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 430.886846][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 430.911821][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 430.944521][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 430.972139][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 430.990727][T14119] can: request_module (can-proto-4) failed. [ 431.045700][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.078906][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.098413][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.167046][T13823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.190158][T13823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.208622][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.227606][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.321831][T14133] delete_channel: no stack [ 434.646131][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.653837][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.680188][T14167] netlink: 'syz.4.2846': attribute type 12 has an invalid length. [ 434.700059][T14167] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.2846'. [ 434.764733][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.861850][T14174] netlink: 'syz.2.2847': attribute type 1 has an invalid length. [ 434.890952][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 434.916630][T14174] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2847'. [ 434.938137][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 434.957943][T14182] netlink: 'syz.2.2847': attribute type 4 has an invalid length. [ 434.980336][T14182] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2847'. [ 435.036971][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 435.066924][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.094134][T13823] device veth0_vlan entered promiscuous mode [ 435.119930][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.173147][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.234581][T13823] device veth1_vlan entered promiscuous mode [ 435.361177][T14187] delete_channel: no stack [ 435.425777][T13823] device veth0_macvtap entered promiscuous mode [ 435.443482][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 435.460599][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 435.478479][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 435.498876][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.522497][T13823] device veth1_macvtap entered promiscuous mode [ 435.556317][T14201] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2854'. [ 435.581389][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 435.594348][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 435.653417][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.674606][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.716030][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.732533][T14208] can: request_module (can-proto-4) failed. [ 435.742275][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.757728][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.787606][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.817163][T13823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.851200][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.862162][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.917969][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.930160][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.940646][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.954710][T14218] netlink: set zone limit has 8 unknown bytes [ 435.961071][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.982475][T13823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.014147][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 436.034466][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.081048][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 436.096384][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.119978][T13823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.130040][T13823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.143284][T13823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.154604][T13823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.438440][ T712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.488548][ T712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.569751][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 436.640891][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.668272][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.708035][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 437.372513][T14258] netlink: 'syz.1.2867': attribute type 10 has an invalid length. [ 437.405312][T14258] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2867'. [ 438.304481][T14262] chnl_net:caif_netlink_parms(): no params data found [ 438.840993][T14262] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.898113][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.957280][T14262] device bridge_slave_0 entered promiscuous mode [ 439.018331][T14262] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.025951][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.034299][T14262] device bridge_slave_1 entered promiscuous mode [ 439.140932][T14262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.175969][T14262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.258017][T14262] team0: Port device team_slave_0 added [ 439.303447][T14262] team0: Port device team_slave_1 added [ 439.409248][T14262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.435227][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.515213][T14262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.533126][T14262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.540797][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.592956][T14262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.660424][T14314] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2880'. [ 439.755336][ T7157] Bluetooth: hci0: command 0x0409 tx timeout [ 439.778789][ T3087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.902960][T14262] device hsr_slave_0 entered promiscuous mode [ 439.943804][T14262] device hsr_slave_1 entered promiscuous mode [ 439.982138][T14262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.010228][T14262] Cannot create hsr debugfs directory [ 440.062222][ T3087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.238373][ T3087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.318909][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.325621][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.401473][ T3087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.602884][T14338] netlink: 'syz.5.2886': attribute type 27 has an invalid length. [ 440.652036][T14338] netlink: 'syz.5.2886': attribute type 3 has an invalid length. [ 440.720832][T14338] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2886'. [ 441.094097][ T3087] tipc: Left network mode [ 441.584710][T14357] netlink: 'syz.5.2891': attribute type 2 has an invalid length. [ 441.646002][T14357] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2891'. [ 441.835341][ T5781] Bluetooth: hci0: command 0x041b tx timeout [ 442.554090][T14385] device pim6reg1 entered promiscuous mode [ 443.050776][T14262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.061417][T14392] netlink: 'syz.4.2898': attribute type 9 has an invalid length. [ 443.078674][T14262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.113286][T14392] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2898'. [ 443.158941][T14262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.193485][T14262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.915794][ T8164] Bluetooth: hci0: command 0x040f tx timeout [ 443.989777][T14262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.031834][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 444.051717][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.132146][T14262] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.268708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 444.286580][T14438] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2904'. [ 444.289004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.326925][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.334110][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.354274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 444.454871][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 444.474913][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 444.504237][ T4869] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.511610][ T4869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.550102][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 444.646670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 444.672198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 444.701335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 444.793140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.828193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 444.862887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 444.892249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 444.916447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.977718][T14262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.023562][T14262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.108732][ T3087] team0: Port device wlan1 removed [ 445.149832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.176519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.489966][ T3087] device hsr_slave_0 left promiscuous mode [ 445.499726][ T3087] device hsr_slave_1 left promiscuous mode [ 445.520100][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.537325][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.561085][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.578569][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.627035][ T3087] device veth1_macvtap left promiscuous mode [ 445.635036][ T3087] device veth0_macvtap left promiscuous mode [ 445.650985][ T3087] device veth1_vlan left promiscuous mode [ 445.663848][ T3087] device veth0_vlan left promiscuous mode [ 446.004308][ T8164] Bluetooth: hci0: command 0x0419 tx timeout [ 446.323954][ T3087] team0 (unregistering): Port device geneve1 removed [ 446.864506][ T3087] team0 (unregistering): Port device team_slave_1 removed [ 446.913132][ T3087] team0 (unregistering): Port device team_slave_0 removed [ 446.946512][ T3087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.052568][ T3087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.349760][ T3087] bond0 (unregistering): Released all slaves [ 447.571080][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.611153][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.662002][T14262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.775966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 447.799327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.867482][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.905872][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.925710][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.983297][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.994986][T14262] device veth0_vlan entered promiscuous mode [ 448.015068][T14262] device veth1_vlan entered promiscuous mode [ 448.140227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 448.159428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 448.206288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 448.221543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.241760][T14262] device veth0_macvtap entered promiscuous mode [ 448.275453][T14262] device veth1_macvtap entered promiscuous mode [ 448.322682][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.369358][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.388428][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.410647][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.439263][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.450267][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.497730][T14262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.523188][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 448.566301][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 448.585125][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.606993][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.631880][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.657013][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.700666][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.760001][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.790572][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.832054][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.869600][T14262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.990007][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.026949][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.044813][T14527] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2928'. [ 449.081790][T14262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.116644][T14262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.167450][T14262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.225458][T14262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.298573][T14527] netlink: 21648 bytes leftover after parsing attributes in process `syz.4.2928'. [ 449.433838][T14527] tipc: Started in network mode [ 449.501388][T14527] tipc: Node identity e, cluster identity 4711 [ 449.568166][T14527] tipc: Node number set to 14 [ 450.023532][ T3114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.070334][ T3114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.174783][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 450.202836][ T4859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.211930][ T4859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.230188][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 450.474435][T14557] netlink: 'syz.5.2934': attribute type 3 has an invalid length. [ 450.575920][T14557] netlink: 'syz.5.2934': attribute type 1 has an invalid length. [ 450.612913][T14554] delete_channel: no stack [ 450.619254][T14557] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.2934'. [ 451.101103][T14571] netlink: 'syz.1.2940': attribute type 3 has an invalid length. [ 451.136000][T14571] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2940'. [ 451.175844][T14584] netlink: 'syz.1.2940': attribute type 10 has an invalid length. [ 451.262702][T14584] team0: Port device virt_wifi0 added [ 451.381550][T14579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.389125][T14579] IPv6: NLM_F_CREATE should be set when creating new route [ 451.396511][T14579] IPv6: NLM_F_CREATE should be set when creating new route [ 451.403856][T14579] IPv6: NLM_F_CREATE should be set when creating new route [ 451.638086][T14594] netlink: 'syz.1.2943': attribute type 4 has an invalid length. [ 451.694255][T14594] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2943'. [ 451.824404][T14586] chnl_net:caif_netlink_parms(): no params data found [ 451.876971][T14605] delete_channel: no stack [ 452.037856][T14586] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.062719][T14586] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.139346][T14586] device bridge_slave_0 entered promiscuous mode [ 452.166530][T14602] delete_channel: no stack [ 452.182186][T14586] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.228139][T14586] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.262345][T14586] device bridge_slave_1 entered promiscuous mode [ 452.402106][T14586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.458630][T14586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.602767][T14586] team0: Port device team_slave_0 added [ 452.639573][T14586] team0: Port device team_slave_1 added [ 452.738404][T14586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.773344][T14586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.821215][T14586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.893083][T14586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.906510][T14586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.023710][T14586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.228331][T14652] delete_channel: no stack [ 453.275526][T10765] Bluetooth: hci4: command 0x0409 tx timeout [ 453.290428][T14586] device hsr_slave_0 entered promiscuous mode [ 453.315966][T14586] device hsr_slave_1 entered promiscuous mode [ 453.346016][T14586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.354045][T14586] Cannot create hsr debugfs directory [ 453.830303][T14586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.057430][T14586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.211110][T14586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.389809][T14586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.837384][T14702] delete_channel: no stack [ 454.876920][T14586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.918518][T14586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.949423][T14586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.983321][T14586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 455.094993][ T3087] tipc: Left network mode [ 455.320254][T14586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.365346][ T5760] Bluetooth: hci4: command 0x041b tx timeout [ 455.410174][T14727] netlink: 'syz.0.2980': attribute type 39 has an invalid length. [ 455.478015][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.494860][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.668562][T14586] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.697121][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.711388][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.730978][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.738270][ T4871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.883762][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 455.897296][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 455.948895][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.999026][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.006238][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.078156][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 456.102772][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 456.202697][T14735] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2982'. [ 456.229137][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 456.257078][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 456.305122][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 456.338894][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.363036][T14586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.374672][T14742] delete_channel: no stack [ 456.398472][T14586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.518782][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 456.537843][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 456.560462][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.579046][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 456.618469][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.758360][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.183319][T14785] netlink: 'syz.0.2995': attribute type 11 has an invalid length. [ 457.192679][T14785] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2995'. [ 457.310348][ T3114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 457.346851][ T3114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.391689][T14586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.435704][ T5786] Bluetooth: hci4: command 0x040f tx timeout [ 457.748521][T14793] delete_channel: no stack [ 457.966432][T14809] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3001'. [ 458.576993][T14830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.584702][T14830] IPv6: NLM_F_CREATE should be set when creating new route [ 458.592415][T14830] IPv6: NLM_F_CREATE should be set when creating new route [ 458.600027][T14830] IPv6: NLM_F_CREATE should be set when creating new route [ 458.863757][T14833] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3006'. [ 458.975091][ T3087] device hsr_slave_0 left promiscuous mode [ 459.001745][ T3087] device hsr_slave_1 left promiscuous mode [ 459.027570][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.073251][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.084138][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.093616][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.114920][ T3087] bridge0: port 3(hsr0) entered disabled state [ 459.134235][ T3087] device bridge_slave_1 left promiscuous mode [ 459.152716][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.172538][ T3087] device bridge_slave_0 left promiscuous mode [ 459.188764][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.235914][ T3087] device veth1_macvtap left promiscuous mode [ 459.253201][ T3087] device veth1_vlan left promiscuous mode [ 459.268569][ T3087] device veth0_vlan left promiscuous mode [ 459.320085][T14846] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3008'. [ 459.436870][T14846] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 459.525724][ T5781] Bluetooth: hci4: command 0x0419 tx timeout [ 460.202553][ T3087] team0 (unregistering): Port device team_slave_1 removed [ 460.716430][T14844] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3007'. [ 460.745985][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.767813][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.867040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.903812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.913435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.932810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.973343][T14586] device veth0_vlan entered promiscuous mode [ 461.132285][T14586] device veth1_vlan entered promiscuous mode [ 461.673589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 461.693435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 461.723281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.795627][T14856] delete_channel: no stack [ 461.837884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.867398][T14586] device veth0_macvtap entered promiscuous mode [ 462.038721][T14867] netlink: 'syz.5.3015': attribute type 10 has an invalid length. [ 462.131977][T14867] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.139418][T14867] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.239206][T14586] device veth1_macvtap entered promiscuous mode [ 463.333413][T14586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.354748][T14586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.379375][T14586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.398008][T14586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.418224][T14586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.444111][T14586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.474627][T14586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.489483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.503210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.533599][T14586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.555006][T14586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.584790][T14586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.605675][T14586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.635201][T14586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.666351][T14586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.686958][T14586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.713867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.723973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.751077][T14586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.770442][T14586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.781682][T14586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.798546][T14586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.955970][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.964283][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.055515][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 465.108934][ T712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.140444][ T712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.165493][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 465.202670][T14891] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3021'. [ 465.248299][T14893] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3021'. [ 465.742614][T14908] delete_channel: no stack [ 465.777709][T14916] netlink: 192440 bytes leftover after parsing attributes in process `syz.5.3030'. [ 465.810216][T14916] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 466.016490][ T712] tipc: Subscription rejected, illegal request [ 466.479757][T14939] netlink: 'syz.0.3035': attribute type 39 has an invalid length. [ 467.218880][T14972] netlink: 'syz.5.3040': attribute type 19 has an invalid length. [ 467.932942][T14982] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3041'. [ 468.297799][T14988] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3043'. [ 468.321423][T14985] delete_channel: no stack [ 469.880249][T15043] delete_channel: no stack [ 470.061915][T15052] netlink: 'syz.5.3058': attribute type 29 has an invalid length. [ 470.084000][T15052] netlink: 'syz.5.3058': attribute type 29 has an invalid length. [ 470.163237][T15058] netlink: 'syz.5.3058': attribute type 29 has an invalid length. [ 471.363818][T15087] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3069'. [ 472.318412][T15099] delete_channel: no stack [ 473.276407][T15101] chnl_net:caif_netlink_parms(): no params data found [ 473.763359][T15101] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.778229][T15101] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.802088][T15101] device bridge_slave_0 entered promiscuous mode [ 473.835465][ T8164] Bluetooth: hci3: command 0x0409 tx timeout [ 473.881765][T15101] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.904697][T15101] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.922368][T15101] device bridge_slave_1 entered promiscuous mode [ 474.160719][T15101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.194569][T15101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.245918][T15171] delete_channel: no stack [ 474.340669][T15101] team0: Port device team_slave_0 added [ 474.388671][T15101] team0: Port device team_slave_1 added [ 474.480437][T15187] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3091'. [ 475.218925][T15198] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3094'. [ 475.261887][T15101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.309980][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.385366][T15101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.422646][T15195] netlink: 'syz.0.3093': attribute type 10 has an invalid length. [ 475.446048][T15195] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3093'. [ 475.915445][ T9389] Bluetooth: hci3: command 0x041b tx timeout [ 475.959766][T15210] netlink: 'syz.4.3097': attribute type 1 has an invalid length. [ 476.066285][T15101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.073349][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.111592][T15101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.124834][T15210] netlink: 101600 bytes leftover after parsing attributes in process `syz.4.3097'. [ 477.995253][T10771] Bluetooth: hci3: command 0x040f tx timeout [ 479.123622][T15101] device hsr_slave_0 entered promiscuous mode [ 479.136036][T15101] device hsr_slave_1 entered promiscuous mode [ 479.184850][T15101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.207181][T15101] Cannot create hsr debugfs directory [ 479.526556][T15230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3102'. [ 479.720647][T15223] delete_channel: no stack [ 479.883060][T15230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3102'. [ 480.075540][ T9389] Bluetooth: hci3: command 0x0419 tx timeout [ 480.626069][T15101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.970963][T15101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.324071][T15101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.930276][T15101] batman_adv: batadv0: Removing interface: netdevsim0 [ 482.022908][T15101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.105788][T15256] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3111'. [ 482.670896][T15101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 482.806343][T15101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 482.869209][T15101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 482.971845][T15101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 483.186227][T15259] delete_channel: no stack [ 483.600583][T15101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.726326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 483.766534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 483.794145][T15101] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.834297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 483.856599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 483.876011][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.883302][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.949525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.986322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.046024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.080594][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.088169][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.168026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.246679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.376083][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.420507][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.476601][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 484.506709][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 484.565054][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 484.626132][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.681465][T15101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.748205][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.826001][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.849573][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 484.895844][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.219313][T15280] netlink: 2220 bytes leftover after parsing attributes in process `syz.4.3118'. [ 485.839588][T15284] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3118'. [ 486.224933][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.255694][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.397261][T15101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.514015][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 486.559332][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.724396][T15101] device veth0_vlan entered promiscuous mode [ 486.749342][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 486.779393][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.843218][T15101] device veth1_vlan entered promiscuous mode [ 486.886958][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.896495][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.916813][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 487.046812][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 487.106807][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 487.159780][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.239953][T15101] device veth0_macvtap entered promiscuous mode [ 487.427839][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 487.483680][T15101] device veth1_macvtap entered promiscuous mode [ 487.679630][T15293] delete_channel: no stack [ 487.849720][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.916042][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.964588][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.034643][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.065297][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.123864][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.162013][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.181196][T15301] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3121'. [ 488.214566][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.263480][T15101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.619921][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.647367][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.696845][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.741989][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.775387][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.834143][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.866260][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.905352][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.950546][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.993391][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.039598][T15101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.113457][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.148125][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.187604][T15101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.231817][T15101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.285315][T15101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.294523][T15101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.945892][ T712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.954086][ T712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.074192][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 490.300765][ T712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.355449][ T712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.423119][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.599382][T15336] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 490.738658][T15342] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3131'. [ 490.761459][T15337] delete_channel: no stack [ 490.835560][T15336] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3131'. [ 491.410024][T15342] team0: Port device team_slave_0 removed [ 491.505979][T15342] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 491.655474][T15340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3068'. [ 492.206363][T15348] chnl_net:caif_netlink_parms(): no params data found [ 492.785815][T15378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.953052][T15378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.035476][ T5781] Bluetooth: hci1: command 0x0409 tx timeout [ 493.168276][T15378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.241884][T15378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.339881][T15008] syz.4.3046 (15008) used greatest stack depth: 17568 bytes left [ 493.592864][T15390] netlink: 'syz.0.3141': attribute type 2 has an invalid length. [ 493.624648][T15390] netlink: 'syz.0.3141': attribute type 8 has an invalid length. [ 493.674556][T15390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3141'. [ 493.694209][T15387] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3142'. [ 493.706883][T15401] FAULT_INJECTION: forcing a failure. [ 493.706883][T15401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.735333][T15348] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.742470][T15348] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.815326][T15401] CPU: 0 PID: 15401 Comm: syz.2.3143 Not tainted syzkaller #0 [ 493.823087][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.833845][T15401] Call Trace: [ 493.837286][T15401] [ 493.840267][T15401] dump_stack_lvl+0x188/0x250 [ 493.845106][T15401] ? show_regs_print_info+0x20/0x20 [ 493.850367][T15401] ? load_image+0x410/0x410 [ 493.855278][T15401] ? __lock_acquire+0x7b50/0x7b50 [ 493.860480][T15401] should_fail+0x383/0x4b0 [ 493.864608][T15348] device bridge_slave_0 entered promiscuous mode [ 493.865092][T15401] _copy_from_user+0x2e/0x170 [ 493.876398][T15401] __sys_bpf+0x26d/0x6f0 [ 493.880752][T15401] ? bpf_link_show_fdinfo+0x380/0x380 [ 493.886336][T15401] __x64_sys_bpf+0x78/0x90 [ 493.890932][T15401] do_syscall_64+0x4c/0xa0 [ 493.896030][T15401] ? clear_bhb_loop+0x30/0x80 [ 493.900757][T15401] ? clear_bhb_loop+0x30/0x80 [ 493.905662][T15401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 493.912019][T15401] RIP: 0033:0x7f850ddb7159 [ 493.916574][T15401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.936232][T15401] RSP: 002b:00007f850c00f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 493.939596][T15348] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.945128][T15401] RAX: ffffffffffffffda RBX: 00007f850e03efa0 RCX: 00007f850ddb7159 [ 493.945154][T15401] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 493.945167][T15401] RBP: 00007f850c00f090 R08: 0000000000000000 R09: 0000000000000000 [ 493.945180][T15401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.945192][T15401] R13: 00007f850e03f038 R14: 00007f850e03efa0 R15: 00007ffcd466d778 [ 493.945222][T15401] [ 494.109369][T15404] netlink: 'syz.1.3145': attribute type 27 has an invalid length. [ 494.164691][T15404] netlink: 'syz.1.3145': attribute type 3 has an invalid length. [ 494.262243][T15348] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.331276][T15348] device bridge_slave_1 entered promiscuous mode [ 494.511130][T15402] delete_channel: no stack [ 494.544265][T15348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.632533][T15348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.017364][T15348] team0: Port device team_slave_0 added [ 495.117582][T10771] Bluetooth: hci1: command 0x041b tx timeout [ 495.137354][T15348] team0: Port device team_slave_1 added [ 495.301453][T15348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.334408][T15348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.498746][T15348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.520628][T15441] netlink: 'syz.4.3153': attribute type 4 has an invalid length. [ 495.547144][T15348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.554340][T15348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.581487][T15348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.621942][T15438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.629505][T15438] IPv6: NLM_F_CREATE should be set when creating new route [ 495.634767][T15441] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3153'. [ 495.638289][T15438] IPv6: NLM_F_CREATE should be set when creating new route [ 495.654385][T15438] IPv6: NLM_F_CREATE should be set when creating new route [ 495.797662][T15449] FAULT_INJECTION: forcing a failure. [ 495.797662][T15449] name failslab, interval 1, probability 0, space 0, times 0 [ 495.852980][T15348] device hsr_slave_0 entered promiscuous mode [ 495.886293][T15348] device hsr_slave_1 entered promiscuous mode [ 495.895501][T15348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.905550][T15449] CPU: 0 PID: 15449 Comm: syz.0.3156 Not tainted syzkaller #0 [ 495.913291][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.923808][T15449] Call Trace: [ 495.927214][T15449] [ 495.930203][T15449] dump_stack_lvl+0x188/0x250 [ 495.935047][T15449] ? show_regs_print_info+0x20/0x20 [ 495.940305][T15449] ? load_image+0x410/0x410 [ 495.944945][T15449] ? __might_sleep+0xf0/0xf0 [ 495.949674][T15449] ? __lock_acquire+0x7b50/0x7b50 [ 495.954849][T15449] should_fail+0x383/0x4b0 [ 495.959436][T15449] should_failslab+0x5/0x20 [ 495.963988][T15449] slab_pre_alloc_hook+0x51/0xc0 [ 495.969003][T15449] __kmalloc_node+0x6d/0x3a0 [ 495.973735][T15449] ? kvmalloc_node+0x84/0x130 [ 495.978543][T15449] kvmalloc_node+0x84/0x130 [ 495.983203][T15449] generic_map_delete_batch+0x22d/0x660 [ 495.988999][T15449] ? bpf_map_inc_not_zero+0x100/0x100 [ 495.994565][T15449] ? __fdget+0x18b/0x210 [ 495.998861][T15449] ? bpf_map_inc_not_zero+0x100/0x100 [ 496.005021][T15449] bpf_map_do_batch+0x475/0x5f0 [ 496.009920][T15449] ? bpf_lsm_xfrm_policy_lookup+0x10/0x10 [ 496.015781][T15449] __sys_bpf+0x671/0x6f0 [ 496.020059][T15449] ? bpf_link_show_fdinfo+0x380/0x380 [ 496.025455][T15449] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 496.031824][T15449] __x64_sys_bpf+0x78/0x90 [ 496.036274][T15449] do_syscall_64+0x4c/0xa0 [ 496.040713][T15449] ? clear_bhb_loop+0x30/0x80 [ 496.045506][T15449] ? clear_bhb_loop+0x30/0x80 [ 496.050210][T15449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 496.056148][T15449] RIP: 0033:0x7f0214907159 [ 496.060680][T15449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.080657][T15449] RSP: 002b:00007f0212b3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.089365][T15449] RAX: ffffffffffffffda RBX: 00007f0214b8f090 RCX: 00007f0214907159 [ 496.097462][T15449] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 496.106006][T15449] RBP: 00007f0212b3e090 R08: 0000000000000000 R09: 0000000000000000 [ 496.114001][T15449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.121997][T15449] R13: 00007f0214b8f128 R14: 00007f0214b8f090 R15: 00007ffe6e203ec8 [ 496.130279][T15449] [ 496.198145][T15348] Cannot create hsr debugfs directory [ 496.891967][T15481] delete_channel: no stack [ 497.086828][ T3087] team0: Port device wlan1 removed [ 497.195492][T10765] Bluetooth: hci1: command 0x040f tx timeout [ 497.318852][T15348] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.461585][T15348] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 497.580245][ T3087] device hsr_slave_0 left promiscuous mode [ 497.594455][ T3087] device hsr_slave_1 left promiscuous mode [ 497.618391][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.651800][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.705987][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.738328][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.786730][ T3087] bridge0: port 3(hsr0) entered disabled state [ 497.812592][ T3087] device bridge_slave_1 left promiscuous mode [ 497.832798][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.854697][ T3087] device bridge_slave_0 left promiscuous mode [ 497.861739][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.893351][ T3087] device veth1_macvtap left promiscuous mode [ 497.912818][ T3087] device veth0_macvtap left promiscuous mode [ 497.924573][ T3087] device veth1_vlan left promiscuous mode [ 497.943076][ T3087] device veth0_vlan left promiscuous mode [ 498.378330][ T3087] team0 (unregistering): Port device virt_wifi0 removed [ 498.427206][ T3087] team0 (unregistering): Port device team_slave_1 removed [ 498.561546][T15348] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 498.577634][T15516] netlink: 'syz.2.3170': attribute type 21 has an invalid length. [ 498.587679][T15516] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.597177][T15516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.604818][T15516] IPv6: NLM_F_CREATE should be set when creating new route [ 498.612195][T15516] IPv6: NLM_F_CREATE should be set when creating new route [ 498.619516][T15516] IPv6: NLM_F_CREATE should be set when creating new route [ 498.642526][T15525] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.650272][T15525] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.711051][T15526] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.756289][T15526] device bridge_slave_0 left promiscuous mode [ 498.781043][T15526] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.896563][T15529] delete_channel: no stack [ 498.905979][T15348] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 499.189911][T15548] netlink: 'syz.2.3178': attribute type 2 has an invalid length. [ 499.226856][T15552] netlink: 'syz.0.3179': attribute type 10 has an invalid length. [ 499.275462][T10768] Bluetooth: hci1: command 0x0419 tx timeout [ 499.368146][T15552] team0: Port device macvlan0 added [ 499.623937][T15348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.683081][T15560] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.3182'. [ 499.755004][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 499.795419][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 499.832371][T15560] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.3182'. [ 499.917139][T15348] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.957846][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.996452][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.028975][T15185] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.036201][T15185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.131339][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.181327][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.193783][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.204709][T15185] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.211912][T15185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.237988][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.253532][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.265972][T15581] delete_channel: no stack [ 500.290243][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.334130][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.370983][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.403630][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.434385][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.502467][T15348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.578559][T15348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.626093][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.651945][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.721105][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.739677][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.838975][T15603] netlink: 'syz.1.3192': attribute type 1 has an invalid length. [ 500.872260][T15602] netlink: 'syz.4.3193': attribute type 2 has an invalid length. [ 500.908147][T15603] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3192'. [ 500.927517][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 501.353923][T15618] netlink: 'syz.0.3199': attribute type 3 has an invalid length. [ 501.366647][T15618] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3199'. [ 501.602246][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.618756][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.653195][T15348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.678272][T15619] delete_channel: no stack [ 501.768539][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.775211][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.371366][T15642] netlink: 125732 bytes leftover after parsing attributes in process `syz.4.3205'. [ 502.655375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.671950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.742693][T15348] device veth0_vlan entered promiscuous mode [ 502.781984][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.811876][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.856577][T15663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.967394][T15663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.506279][T15663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.513805][T15663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.792227][T15348] device veth1_vlan entered promiscuous mode [ 503.806596][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.831956][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.866194][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 503.898453][T15667] netlink: 'syz.0.3210': attribute type 10 has an invalid length. [ 504.505630][T15674] delete_channel: no stack [ 504.597571][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 504.626439][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 504.674018][T15348] device veth0_macvtap entered promiscuous mode [ 504.707994][T15348] device veth1_macvtap entered promiscuous mode [ 504.802702][T15348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.834376][T15348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.859462][T15348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.900359][T15348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.967319][T15348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.986789][T15683] netlink: 'syz.4.3214': attribute type 1 has an invalid length. [ 505.018765][T15682] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3216'. [ 505.119964][T15682] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.3216'. [ 505.150844][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 505.164505][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 505.191914][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 505.211871][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 505.279418][T15348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.343730][T15348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.388345][T15348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.420085][T15348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.465401][T15348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.501379][T15696] netlink: 'syz.1.3218': attribute type 11 has an invalid length. [ 505.558875][T15696] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3218'. [ 505.626791][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 505.644534][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 505.712126][T15348] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.764927][T15348] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.814094][T15348] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.845017][T15348] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.890117][T15700] netlink: 'syz.1.3218': attribute type 28 has an invalid length. [ 505.922348][T15700] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3218'. [ 506.195272][ T4859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.203250][ T4859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.227407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 506.317960][T15185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.339378][T15185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.367212][ T712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 506.571364][ T3087] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.850312][ T3087] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.985537][ T3087] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.102127][ T3087] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.199107][T15756] ------------[ cut here ]------------ [ 507.232296][T15756] trace type BPF program uses run-time allocation [ 507.256523][T15756] WARNING: CPU: 0 PID: 15756 at kernel/bpf/verifier.c:11777 check_map_prog_compatibility+0x6cf/0x870 [ 507.315698][T15756] Modules linked in: [ 507.326228][T15756] CPU: 0 PID: 15756 Comm: syz.1.3242 Not tainted syzkaller #0 [ 507.359447][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.395948][T15756] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 507.417543][T15756] Code: ff e8 55 b5 ef ff 48 c7 c6 c0 46 31 8a e9 0d fd ff ff e8 44 b5 ef ff c6 05 d3 04 ee 0b 01 48 c7 c7 20 43 31 8a e8 61 ea 2c 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 507.482760][T15756] RSP: 0018:ffffc9000343f470 EFLAGS: 00010246 [ 507.527733][T15756] RAX: 7dcb9471a4f75b00 RBX: 0000000000000001 RCX: 0000000000080000 [ 507.560869][T15756] RDX: ffffc90010861000 RSI: 0000000000002e9a RDI: 0000000000002e9b [ 507.595680][T15756] RBP: ffff88805ffbc000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 507.604027][T15756] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffffc900011fc038 [ 507.646017][T15756] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff9200023f807 [ 507.679087][T15756] FS: 00007fd05df7a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 507.743550][T15756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.773352][T15756] CR2: 00007fde0d6e57b0 CR3: 0000000058ea6000 CR4: 00000000003506f0 [ 507.797525][T15756] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 507.816991][T15756] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 507.835385][T15756] Call Trace: [ 507.850922][T15756] [ 507.854118][T15756] resolve_pseudo_ldimm64+0x616/0xfd0 [ 507.878863][T15756] ? check_attach_btf_id+0xde0/0xde0 [ 507.884591][T15756] ? __mark_reg_known+0x1a0/0x1a0 [ 507.896928][T15756] bpf_check+0x2c4b/0xf6c0 [ 507.908879][T15756] ? mark_lock+0x94/0x320 [ 507.928824][T15756] ? bpf_get_btf_vmlinux+0x10/0x10 [ 507.937227][T15756] ? __lock_acquire+0x13dc/0x7b50 [ 507.953774][T15756] ? verify_lock_unused+0x140/0x140 [ 507.973406][T15756] ? verify_lock_unused+0x140/0x140 [ 507.993543][T15756] ? rcu_lock_release+0x5/0x20 [ 508.009312][T15756] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 508.035074][T15756] ? lock_chain_count+0x20/0x20 [ 508.050916][T15756] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 508.068094][T15756] ? lockdep_hardirqs_on+0x94/0x140 [ 508.083187][T15756] ? ktime_get_with_offset+0xff/0x320 [ 508.095084][T15756] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 508.109996][T15756] ? ktime_get_real_ts64+0x440/0x440 [ 508.121294][T15756] ? pcpu_alloc+0x11e6/0x16d0 [ 508.132084][T15756] ? __might_fault+0xb3/0x110 [ 508.148651][T15756] ? memset+0x1e/0x40 [ 508.173349][T15756] ? bpf_obj_name_cpy+0x190/0x1d0 [ 508.188093][T15756] bpf_prog_load+0xfdf/0x14e0 [ 508.204575][T15756] ? map_freeze+0x360/0x360 [ 508.222424][ T3087] device gretap0 left promiscuous mode [ 508.232391][T15756] ? __might_fault+0xb7/0x110 [ 508.246859][T15756] ? __might_fault+0xb3/0x110 [ 508.252250][ T3087] : port 1(gretap0) entered disabled state [ 508.264747][T15756] ? bpf_lsm_bpf+0x5/0x10 [ 508.280462][T15756] ? security_bpf+0x7a/0xa0 [ 508.295891][T15756] __sys_bpf+0x532/0x6f0 [ 508.300248][T15756] ? bpf_link_show_fdinfo+0x380/0x380 [ 508.315404][T15756] __x64_sys_bpf+0x78/0x90 [ 508.319917][T15756] do_syscall_64+0x4c/0xa0 [ 508.324476][T15756] ? clear_bhb_loop+0x30/0x80 [ 508.356982][T15756] ? clear_bhb_loop+0x30/0x80 [ 508.361759][T15756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.387547][T15756] RIP: 0033:0x7fd05fd22159 [ 508.392062][T15756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.458251][T15756] RSP: 002b:00007fd05df7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 508.486332][T15756] RAX: ffffffffffffffda RBX: 00007fd05ffa9fa0 RCX: 00007fd05fd22159 [ 508.494405][T15756] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 508.550464][T15756] RBP: 00007fd05fdb903b R08: 0000000000000000 R09: 0000000000000000 [ 508.583170][T15756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.608701][T15756] R13: 00007fd05ffaa038 R14: 00007fd05ffa9fa0 R15: 00007ffc6940b1d8 [ 508.643048][T15756] [ 508.653175][T15756] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 508.660782][T15756] CPU: 0 PID: 15756 Comm: syz.1.3242 Not tainted syzkaller #0 [ 508.668289][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.678446][T15756] Call Trace: [ 508.682311][T15756] [ 508.685300][T15756] dump_stack_lvl+0x188/0x250 [ 508.690045][T15756] ? show_regs_print_info+0x20/0x20 [ 508.695296][T15756] ? load_image+0x410/0x410 [ 508.699870][T15756] panic+0x2f8/0x850 [ 508.704156][T15756] ? bpf_jit_dump+0xd0/0xd0 [ 508.708907][T15756] ? check_map_prog_compatibility+0x6cf/0x870 [ 508.715244][T15756] __warn+0x248/0x2b0 [ 508.719364][T15756] ? check_map_prog_compatibility+0x6cf/0x870 [ 508.725500][T15756] report_bug+0x1b9/0x2e0 [ 508.730020][T15756] handle_bug+0x3a/0x70 [ 508.734257][T15756] exc_invalid_op+0x16/0x40 [ 508.738831][T15756] asm_exc_invalid_op+0x16/0x20 [ 508.743736][T15756] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 508.750461][T15756] Code: ff e8 55 b5 ef ff 48 c7 c6 c0 46 31 8a e9 0d fd ff ff e8 44 b5 ef ff c6 05 d3 04 ee 0b 01 48 c7 c7 20 43 31 8a e8 61 ea 2c 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 508.770345][T15756] RSP: 0018:ffffc9000343f470 EFLAGS: 00010246 [ 508.776577][T15756] RAX: 7dcb9471a4f75b00 RBX: 0000000000000001 RCX: 0000000000080000 [ 508.784600][T15756] RDX: ffffc90010861000 RSI: 0000000000002e9a RDI: 0000000000002e9b [ 508.792805][T15756] RBP: ffff88805ffbc000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 508.800830][T15756] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffffc900011fc038 [ 508.808852][T15756] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff9200023f807 [ 508.817077][T15756] resolve_pseudo_ldimm64+0x616/0xfd0 [ 508.822834][T15756] ? check_attach_btf_id+0xde0/0xde0 [ 508.828185][T15756] ? __mark_reg_known+0x1a0/0x1a0 [ 508.833289][T15756] bpf_check+0x2c4b/0xf6c0 [ 508.838059][T15756] ? mark_lock+0x94/0x320 [ 508.842745][T15756] ? bpf_get_btf_vmlinux+0x10/0x10 [ 508.848111][T15756] ? __lock_acquire+0x13dc/0x7b50 [ 508.853204][T15756] ? verify_lock_unused+0x140/0x140 [ 508.858469][T15756] ? verify_lock_unused+0x140/0x140 [ 508.863820][T15756] ? rcu_lock_release+0x5/0x20 [ 508.868762][T15756] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 508.875002][T15756] ? lock_chain_count+0x20/0x20 [ 508.879922][T15756] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 508.886215][T15756] ? lockdep_hardirqs_on+0x94/0x140 [ 508.891472][T15756] ? ktime_get_with_offset+0xff/0x320 [ 508.897281][T15756] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 508.903827][T15756] ? ktime_get_real_ts64+0x440/0x440 [ 508.909175][T15756] ? pcpu_alloc+0x11e6/0x16d0 [ 508.914099][T15756] ? __might_fault+0xb3/0x110 [ 508.918857][T15756] ? memset+0x1e/0x40 [ 508.922911][T15756] ? bpf_obj_name_cpy+0x190/0x1d0 [ 508.928161][T15756] bpf_prog_load+0xfdf/0x14e0 [ 508.932912][T15756] ? map_freeze+0x360/0x360 [ 508.937472][T15756] ? __might_fault+0xb7/0x110 [ 508.942223][T15756] ? __might_fault+0xb3/0x110 [ 508.946950][T15756] ? bpf_lsm_bpf+0x5/0x10 [ 508.951477][T15756] ? security_bpf+0x7a/0xa0 [ 508.956068][T15756] __sys_bpf+0x532/0x6f0 [ 508.960453][T15756] ? bpf_link_show_fdinfo+0x380/0x380 [ 508.965910][T15756] __x64_sys_bpf+0x78/0x90 [ 508.972131][T15756] do_syscall_64+0x4c/0xa0 [ 508.976598][T15756] ? clear_bhb_loop+0x30/0x80 [ 508.981328][T15756] ? clear_bhb_loop+0x30/0x80 [ 508.986052][T15756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.991987][T15756] RIP: 0033:0x7fd05fd22159 [ 508.996446][T15756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.016221][T15756] RSP: 002b:00007fd05df7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.024818][T15756] RAX: ffffffffffffffda RBX: 00007fd05ffa9fa0 RCX: 00007fd05fd22159 [ 509.032842][T15756] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 509.040862][T15756] RBP: 00007fd05fdb903b R08: 0000000000000000 R09: 0000000000000000 [ 509.048889][T15756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.057028][T15756] R13: 00007fd05ffaa038 R14: 00007fd05ffa9fa0 R15: 00007ffc6940b1d8 [ 509.065156][T15756] [ 509.068486][T15756] Kernel Offset: disabled [ 509.072952][T15756] Rebooting in 86400 seconds..