last executing test programs: 7m38.988420757s ago: executing program 0 (id=1894): r0 = socket$kcm(0x22, 0x2, 0x21) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1, 0x0, 0xe000}, 0x0) 7m38.612153477s ago: executing program 0 (id=1897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000680)=r0, 0x161) sendmsg$inet(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x30}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x17) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0xd0a42e14fd8aed3f, 0x0, 0xffffffff, 0x0, 0x40000000, 0xfffffffd, 0x12}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='GPL\x00', 0x5, 0x252, &(0x7f0000001300)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703290000001f0300000000000004fe14000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) 7m38.270772835s ago: executing program 0 (id=1904): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x4, 0x5, 0xf, 0x0, 0x0, 0x7, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x2, 0xf}, 0x2098, 0x7, 0x1, 0x6, 0xfffffffffffffff9, 0x10001, 0x8, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xa, r0, 0x9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYRESOCT], 0x6a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000800000001"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd, 0xf9, 0x0, 0x0, 0x0, 0x7, 0x3a410, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x32cc0273, 0x7}, 0x0, 0x4, 0x0, 0x7, 0x5, 0xd1d9, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x3, 0x0, 0x0, 0xfd, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r6) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x3, r2}, 0x38) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10, r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) gettid() recvmsg$unix(r10, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x40000000) 7m37.240805651s ago: executing program 0 (id=1912): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00fd000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 7m36.759663222s ago: executing program 0 (id=1919): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x8}, 0x2012, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r0, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_devices(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123a"], 0xffdd) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000800)={'ip6gretap0\x00', 0x200}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x25, 0x1, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009700000085003200"/40], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000280)="b9ff033168440372b89e14f088", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, 0x0, 0x14) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x80565, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x81b77b31f5f2a54a}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0xa, 0x1, 0x0) gettid() sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r7, 0x0, 0x40001) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r1, 0x16, 0x0, 0x7fff, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f00000005c0)=@hci={0x1f, 0x300, 0xe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="62031400", 0x4}], 0x1}, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) 7m34.504353238s ago: executing program 0 (id=1928): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b70500000000000010180000000000dc0500001000000095ebb2c262688707c67e8ed6cc26d491000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x1f3, 0x10, &(0x7f00000003c0), 0xfffffffffffffc79}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='syzkaller\x00') r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a118001500060014000300001208000400431c0000a8001600a400014020000900ffffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0d5", 0xd9}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b70500000000000010180000000000dc0500001000000095ebb2c262688707c67e8ed6cc26d491000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x1f3, 0x10, &(0x7f00000003c0), 0xfffffffffffffc79}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='syzkaller\x00') (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a118001500060014000300001208000400431c0000a8001600a400014020000900ffffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0d5", 0xd9}], 0x1}, 0x0) (async) 7m19.477230258s ago: executing program 32 (id=1928): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b70500000000000010180000000000dc0500001000000095ebb2c262688707c67e8ed6cc26d491000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x1f3, 0x10, &(0x7f00000003c0), 0xfffffffffffffc79}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='syzkaller\x00') r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a118001500060014000300001208000400431c0000a8001600a400014020000900ffffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0d5", 0xd9}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b70500000000000010180000000000dc0500001000000095ebb2c262688707c67e8ed6cc26d491000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x1f3, 0x10, &(0x7f00000003c0), 0xfffffffffffffc79}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='syzkaller\x00') (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a118001500060014000300001208000400431c0000a8001600a400014020000900ffffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0d5", 0xd9}], 0x1}, 0x0) (async) 1m59.25516031s ago: executing program 5 (id=5697): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3, 0x0, 0x0) 1m59.150668193s ago: executing program 5 (id=5699): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="85000000af00000076000000000000002f0a0000000001009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0x4, 0x99, &(0x7f0000000a80)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 1m59.027935636s ago: executing program 5 (id=5701): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x48) 1m58.967918837s ago: executing program 5 (id=5704): r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x80, 0x1, 0x4, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xa5, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x100020, 0x4, 0x6, 0x1, 0xc663, 0x7, 0x1, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffa47, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1900000004"], 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f00000006c0)=r4, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x140) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x0, 0x9}, 0x0, 0x80000400000000, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x6, 0x8, 0x2, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r6, 0x2) perf_event_open(0x0, r7, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x10, 0x1, 0x3, 0xcb, 0x0, 0x7, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10, 0x2, 0x8c2b, 0x4, 0x58, 0xffff, 0x100, 0x0, 0x3}, r7, 0x10, r0, 0xb) 1m58.659200945s ago: executing program 5 (id=5711): bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x1b, 0x0, 0x0, &(0x7f0000001ec0)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001fc0)={'ip6_vti0\x00', 0x210}) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x1, 0xc, &(0x7f0000002540)=ANY=[], &(0x7f0000002580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000025c0)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb3"], &(0x7f0000003300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000002000)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003580)=ANY=[@ANYBLOB="0900000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3d9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r3, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000001380)='GPL\x00', 0x0, 0xe, &(0x7f00000013c0)=""/14, 0x40f00, 0x30, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001640)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001680)={0x5, 0x3, 0x8, 0x2fc5bbd7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r3, r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304020000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed69000000000000000000000000009a6d1852cfe790362ca800000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c9534229d6133fa814a0a67385f"], &(0x7f0000000e80)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0xc4, &(0x7f0000000f80)=""/196}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000f40)="76389e14050000007583ddd08906a5", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m58.556383198s ago: executing program 5 (id=5714): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x20000016, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x11, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) 1m42.838434685s ago: executing program 33 (id=5714): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x20000016, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x11, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) 1m24.156261205s ago: executing program 2 (id=5965): perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000002000000732ac0ff00000040180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000080850000004500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.075711267s ago: executing program 2 (id=5967): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00400095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 1m24.014241629s ago: executing program 2 (id=5968): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 1m23.935533751s ago: executing program 2 (id=5969): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001140)=@base={0x9, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0xdef}, 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x7, 0xa, &(0x7f0000001300)=@framed={{0x18, 0x8, 0x0, 0x0, 0xd20b0000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0x83}, @initr0, @exit]}, &(0x7f0000001380)='GPL\x00', 0x2, 0xee, &(0x7f00000013c0)=""/238, 0x41100}, 0x25) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m23.808316114s ago: executing program 2 (id=5970): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x6, 0x2, 0x3, 0x100}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0x6, 0x2, 0x9, 0x0, r5, 0x100}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r7}, &(0x7f0000000b40), &(0x7f0000000b80)=r5}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="2e0000003e000511d25a80698c6394090204fc602f6e354008000180", 0x1c}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1303000076"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) close(0x3) 1m22.732333441s ago: executing program 2 (id=5975): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x3, 0x0, 0x8000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x99}, [@ldst={0x4}]}, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@arena={0x21, 0x0, 0x0, 0x23, 0x40000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000240)="e95764a3ca6c5e807d9b44e380bded46ca50a4bfbc726fc0ddc0793d34e11f007216c32b717b7aec32bd536f1d70ee530d2068549db450cf2fa938cb2135bf2641bfafa7e6a4192429b6b069ae997f880d45e6f95ccc8e0f7da4bfad170d9ecec0794a3f9ae1424591902650740134cba6bf9867c1fb9e4f851203245e7e9a32b5a1c067c4c5ffd35a3beb78e0db75cd9ccdca3e0249855e727fb21677be9234d9395c62dda9af4aeb0fc3ae8aac271bbbaf0ee0"}, 0x20) recvmsg(0xffffffffffffffff, 0x0, 0x40000140) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000400), 0x8) r3 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x1, 0xffffffff, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000005c0)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="c805000000000000290000000300000043b6"], 0x5c8}, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c80)="c55ea7bfa644c39faac3", 0xa}, {&(0x7f0000000cc0)="9da8fc1508128fc3b52f1a6930578fa0c697c889fd81ac3eedba71590f52270ef24c3be5ddb1c654e904162ca2aa2fd38b854dafa33e4688b94a859fa897288daf252b6d34beefac973667f9d59673c9d0c5b53600aec822ca2fd8bb35bd9fb5f443cc2f5a35ddf407f9fcc2da2d89fac332e4d332c3c2ce491ba0cd9db393fa6d2130dce77ebae66522f5b47611a7aaa350bfb67d499d90590b35d7ca5702c2850f7c795ae92ca77f87ada5", 0xac}, {&(0x7f0000000d80)="d2d1db8e02a6de06a31e6793f4e493c9cf476038cbe6f30971fbebd75bf02c7b65ebdce9a80595f210ca377ef5fbb9062e35b1dc06d47f6e0aaf6f55bb67bf2c58e4b906da663c1f6633a7c237c6d9f309794bd736af0c49818010d3ed07b080d94fc0dde7c8dd5f61c87683500abaae6061553bae32e257222fa3b6c13d677f817e03d1703320169d16fe0ec9a7acbd2e3873bdb591da85fca5470fbf259d06fb8510c0f99c596d19dce319f6e96babed22d6df563155d1faec002d4d91f71535", 0xc1}], 0x3, &(0x7f0000000e80)="670adaa50d6a03b5d3cd2f0022c339ed7cdacda43e96dcfe8a66f6e4daf70d4c60413e482d7361be0bbbb4a805826cfb3ce54076b56d19ffe9dc9069f5c4a610e760824024aa6cbc90fd9c9eff4e318868b9bccf50839e0b12c836bc13a3e8524369c6c349ba8258357df4e6b9b474dd98c30533263fe9cfe873dd4d317c623986df73400d022dabb34c2e2cac9d7c8b5134a63cb981efc8b8e18c2ad4d5fed7914537bff040", 0xa6, 0x200000c5}, 0x20008000) r4 = perf_event_open(&(0x7f0000000f40)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e12080006000000040104001600400001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="d800000018009d064e81060000000000000036660730e70d12c9dd97021d080006007cfce7fe55a10a0015000200142603600e1208000f", 0x37}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000011c0)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r6 = getpid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1f8}, 0x0, 0x0, 0xffffffff, 0x8, 0x5, 0x0, 0x2, 0x0, 0x10000}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 1m7.401209139s ago: executing program 34 (id=5975): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x3, 0x0, 0x8000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x99}, [@ldst={0x4}]}, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@arena={0x21, 0x0, 0x0, 0x23, 0x40000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000240)="e95764a3ca6c5e807d9b44e380bded46ca50a4bfbc726fc0ddc0793d34e11f007216c32b717b7aec32bd536f1d70ee530d2068549db450cf2fa938cb2135bf2641bfafa7e6a4192429b6b069ae997f880d45e6f95ccc8e0f7da4bfad170d9ecec0794a3f9ae1424591902650740134cba6bf9867c1fb9e4f851203245e7e9a32b5a1c067c4c5ffd35a3beb78e0db75cd9ccdca3e0249855e727fb21677be9234d9395c62dda9af4aeb0fc3ae8aac271bbbaf0ee0"}, 0x20) recvmsg(0xffffffffffffffff, 0x0, 0x40000140) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000400), 0x8) r3 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x1, 0xffffffff, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000005c0)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="c805000000000000290000000300000043b6"], 0x5c8}, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c80)="c55ea7bfa644c39faac3", 0xa}, {&(0x7f0000000cc0)="9da8fc1508128fc3b52f1a6930578fa0c697c889fd81ac3eedba71590f52270ef24c3be5ddb1c654e904162ca2aa2fd38b854dafa33e4688b94a859fa897288daf252b6d34beefac973667f9d59673c9d0c5b53600aec822ca2fd8bb35bd9fb5f443cc2f5a35ddf407f9fcc2da2d89fac332e4d332c3c2ce491ba0cd9db393fa6d2130dce77ebae66522f5b47611a7aaa350bfb67d499d90590b35d7ca5702c2850f7c795ae92ca77f87ada5", 0xac}, {&(0x7f0000000d80)="d2d1db8e02a6de06a31e6793f4e493c9cf476038cbe6f30971fbebd75bf02c7b65ebdce9a80595f210ca377ef5fbb9062e35b1dc06d47f6e0aaf6f55bb67bf2c58e4b906da663c1f6633a7c237c6d9f309794bd736af0c49818010d3ed07b080d94fc0dde7c8dd5f61c87683500abaae6061553bae32e257222fa3b6c13d677f817e03d1703320169d16fe0ec9a7acbd2e3873bdb591da85fca5470fbf259d06fb8510c0f99c596d19dce319f6e96babed22d6df563155d1faec002d4d91f71535", 0xc1}], 0x3, &(0x7f0000000e80)="670adaa50d6a03b5d3cd2f0022c339ed7cdacda43e96dcfe8a66f6e4daf70d4c60413e482d7361be0bbbb4a805826cfb3ce54076b56d19ffe9dc9069f5c4a610e760824024aa6cbc90fd9c9eff4e318868b9bccf50839e0b12c836bc13a3e8524369c6c349ba8258357df4e6b9b474dd98c30533263fe9cfe873dd4d317c623986df73400d022dabb34c2e2cac9d7c8b5134a63cb981efc8b8e18c2ad4d5fed7914537bff040", 0xa6, 0x200000c5}, 0x20008000) r4 = perf_event_open(&(0x7f0000000f40)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e12080006000000040104001600400001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="d800000018009d064e81060000000000000036660730e70d12c9dd97021d080006007cfce7fe55a10a0015000200142603600e1208000f", 0x37}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000011c0)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r6 = getpid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1f8}, 0x0, 0x0, 0xffffffff, 0x8, 0x5, 0x0, 0x2, 0x0, 0x10000}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 5.762837677s ago: executing program 3 (id=6736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 5.580241162s ago: executing program 3 (id=6738): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xc200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x2, 0x0, @local}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000b80)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="c109000000000000001d1e01", 0xc}, {&(0x7f0000000000)="b9321df0f1f313237114fea27e059e2d5de1f9", 0x13}], 0x2, 0x0, 0x0, 0x3000000}, 0x0) 5.480772665s ago: executing program 3 (id=6739): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001c80), 0xffffffffffffffd2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x18, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7d5, 0x10000}, 0x28) 5.232320421s ago: executing program 3 (id=6743): perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x2, 0x2, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e00)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000e40)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="2c000000000000400000000007000000071c05"], 0x30}, 0x0) 4.824117211s ago: executing program 3 (id=6750): perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0xc1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0xff0f000020000080) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3, r2}, 0xc) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x22, 0x2, 0x21) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000001d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x10, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000002f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000002f80), 0x8, 0x10, &(0x7f0000002fc0)={0x0, 0x0, 0x5}, 0x10}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x200, 0x10}, 0xc) 4.580203757s ago: executing program 3 (id=6753): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x20, 0x4, 0x0, 0x0, 0x40000000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000001a00)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002700)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000002780)="b9ff0300600d698cff9e14f008004de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.81878526s ago: executing program 4 (id=6767): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0xa, 0xc, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x0, 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x7, 0xc, &(0x7f0000001800)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x6, &(0x7f00000002c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x29e, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) perf_event_open$cgroup(&(0x7f00000005c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x80202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='GPL\x00', 0x5, 0xc3, &(0x7f00000011c0)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000001940)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000019c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000015f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x3, &(0x7f0000001d80)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000001e00)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000001fc0)=@generic={0x0}, 0x18) 2.272212873s ago: executing program 1 (id=6771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 1.838355215s ago: executing program 1 (id=6774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000440)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x49d8, 0x1, 0x5, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 1.837463144s ago: executing program 4 (id=6776): r0 = socket$kcm(0x10, 0xd2dd94b482e190d8, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x18, &(0x7f0000000380)=[{&(0x7f00000003c0)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e14060200000a000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="82d0612425505bd6674ff52d48f23dea538efc771b79870c5aa07fedf4d0e21ea21e72d9ac9afd8894e02ab6e32b3271c9a23796c8809507026653e9b96049aa85d7de23df21ddd75bb33e2462653bd654afd5fb6142bcb3fbec6799ad1076c486445a8e91d18f6182bec50eea4667d41526a2fba9b85297989755b72f725146a1a8fc3c2d432d9507535df11d40c5f442a16db4796af4fd0be1fe2087389939409bcc55fa37d930df9957e3422730d320491bae15ec08096ab87f24156616604041cf955df450e016a59d33f2a51b770bd7bebec2dc9274f5fd3cc2a7b61d05442c55b1ffd7eab956780b7425294bf95f7b979c23a05f2bba326f90c8f2ef59022f7863", 0x104}], 0x1}, 0x60000000) 1.826065035s ago: executing program 1 (id=6777): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r0 = socket$kcm(0x29, 0x6, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000100), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0xec3, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/net\x00') close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) 1.60618562s ago: executing program 7 (id=6780): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x6, 0xfc, 0x0, 0x0, 0x0, 0x2, 0xc000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x8d01, 0xc8, 0x0, 0x1, 0x91, 0x9f59, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x1000000000003, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x19, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff02000000000000800e000000000001"], 0xfdef) 1.399555685s ago: executing program 4 (id=6781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 1.398879055s ago: executing program 7 (id=6782): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0) r4 = syz_clone(0x0, &(0x7f0000000700)="4bfdd03d179fccdd07912208c5f56738c7f2b29b58ba978ebcdec9f7cc14df0d47abf5e2ee374c2528fa25ed4901ee9ff8c6dc33341183b98f5ec8d835e15c406bc176997f8dda593e54b581aa8cfb85e1c0a031b68e8c98708b2b2f0ce4fc86767ff86ff7f65a2a5315d0a2bd0ebc9772df71e9354bd7cee39833a3392ee81fa79684b513431454", 0x88, 0x0, &(0x7f00000007c0), &(0x7f0000000800)="ae04e53ae147d259b5121da5268a63f16e961099cab23777f718c6d58b72604208caac56dd44506110d434af9c76ffc510570448378965e48cdcdd70d73068148605d86c") syz_open_procfs$namespace(r4, &(0x7f0000000880)='ns/mnt\x00') socket$kcm(0x23, 0x2, 0x0) (async) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000008c0)={&(0x7f0000000900)=@phonet={0x23, 0x0, 0x5}, 0x80, &(0x7f0000000980)=[{&(0x7f00000009c0)="b8", 0x1}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000a00)={&(0x7f0000000a40), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, &(0x7f0000001b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x12040) (async) recvmsg$unix(r5, &(0x7f0000000a00)={&(0x7f0000000a40), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, &(0x7f0000001b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x12040) perf_event_open(&(0x7f0000001b80)={0x0, 0x80, 0x9, 0x0, 0xab, 0x6, 0x0, 0x8, 0x5868, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000001c00), 0x2}, 0x400, 0x6, 0x6, 0x4, 0x100000001, 0x1, 0xa, 0x0, 0x5ab91338, 0x0, 0x6}, r6, 0x1, 0xffffffffffffffff, 0x0) sendmsg$unix(r9, &(0x7f0000001c40)={&(0x7f0000001c80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x8040}, 0x800) r10 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000001d80)={&(0x7f0000001dc0)=@phonet={0x23, 0x0, 0x5}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001e80)="b8", 0x1}], 0x1}, 0x0) recvmsg$unix(r10, &(0x7f0000001ec0)={&(0x7f0000001f00), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1, &(0x7f0000002fc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x12040) (async) recvmsg$unix(r10, &(0x7f0000001ec0)={&(0x7f0000001f00), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1, &(0x7f0000002fc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x12040) perf_event_open(&(0x7f0000003040)={0x0, 0x80, 0x9, 0x0, 0xab, 0x6, 0x0, 0x8, 0x5c08, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f00000030c0), 0x2}, 0x400, 0x6, 0x6, 0x4, 0x100000001, 0x1, 0xa, 0x0, 0x5ab91338, 0x0, 0x6}, r11, 0x1, 0xffffffffffffffff, 0x0) sendmsg$unix(r14, &(0x7f0000003100)={&(0x7f0000003140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000003240)="2a43b2f812cbb0009ba2940323acfe22ceb320bacdccc01fedd7163c9d08952a04e28bab67ab69369df7652dace940f7e6e8", 0x32}, {&(0x7f0000003280)="69c94314fef71891bf0a6ce9492405eb789bfadd5e867e08f3c3d3834a834a57da357c45b6f84a1da31a52e60393b62f56c41f8f77c8f10b2472f74211d23f8efbfd95fe65166919006d840428c9860796e676f30ff32472e1060612db37e0cfd6d25417b61bad4a40", 0x69}, {&(0x7f0000003300)="1a3e12090c8721e00edacdc33dc95cf874ad42352147f0049e802292f554b89ba42d", 0x22}, {&(0x7f0000003340)="1808046d113e79965e60dfe15c825242933e98a81f4ebdd3da23a1605cc6a6e63d58d3e642da5c9c7cc1cb234c84018d1a8e672b9d846922ed091b130b96615a842230a38fd953d9d1a000f48ed14fffed9193143d628eabbf57f85863c1d494c89c768558ab36bd36ca17eb6ac1351b458f15a71328c746e07fa6ec9d7a40dfc5f3ecf5ee5a2109150bf72796199bfc8c811f147d7484171a82142953605b2ee6cfb8482f91bbe2753cb59a5f46b49a5f4f8e5f471c618960b26d9e25ed8dc5191e39cef331afadf647e1695665", 0xce}, {&(0x7f0000003440)="17f36acb391a214cfbefbdba37d12b743956c60c3c50a43adc52d845e6e98b07b51d39a4c89487", 0x27}], 0x5, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x20, 0x8040}, 0x800) socket$kcm(0x23, 0x2, 0x0) (async) r15 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f00000034c0)={&(0x7f0000003500)=@phonet={0x23, 0x0, 0x5}, 0x80, &(0x7f0000003580)=[{&(0x7f00000035c0)="b8", 0x1}], 0x1}, 0x0) (async) sendmsg$kcm(r15, &(0x7f00000034c0)={&(0x7f0000003500)=@phonet={0x23, 0x0, 0x5}, 0x80, &(0x7f0000003580)=[{&(0x7f00000035c0)="b8", 0x1}], 0x1}, 0x0) recvmsg$unix(r15, &(0x7f0000003600)={&(0x7f0000003640), 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x12040) (async) recvmsg$unix(r15, &(0x7f0000003600)={&(0x7f0000003640), 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x12040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001d00)={0xffffffffffffffff}) recvmsg$unix(r20, &(0x7f0000004c40)={&(0x7f0000004a80)=@abs, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004b00)=""/40, 0x28}], 0x1, &(0x7f0000004b80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x10162) perf_event_open(&(0x7f0000004780)={0x0, 0x80, 0x9, 0x0, 0xab, 0x6, 0x0, 0x8, 0x5c08, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000004800), 0x2}, 0x400, 0x6, 0x6, 0x4, 0x100000001, 0x1, 0xa, 0x0, 0x5ab91338, 0x0, 0x6}, r16, 0x1, 0xffffffffffffffff, 0x0) sendmsg$unix(r19, &(0x7f0000004840)={&(0x7f0000004880)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004900), 0x0, &(0x7f0000004940)=[@cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}], 0x20, 0x8040}, 0x800) sendmsg$unix(r2, &(0x7f0000004a40)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000100)="072c912d88d52233d747ec23e328f8949dfacc18c5416877e1a3e9d61c43f40ecb19a2243946495b2c67e516f48a83b829ea61269860567539632cb0eb1e611cf40831ba", 0x44}, {&(0x7f0000000180)="bbd5d167b13615a7f84dd442e33c94a48972d06ebcb0e46889b81556f6aba844f816f87ca696eb0da0adaafc5dafd1b1daff7da96762bf4e9fd8c71ffc067f4a8a9213b158391dadbedeb12b76a7bfbd3ba21dd78e93f6a7f848325781911515", 0x60}, {&(0x7f0000004c80)="f5baf75aadca3dc64dd4d9649024afd9991e4544467c12c1e9f062758458bc9cdcc9831df8d3e37236c9be1e242e4a398aebe74d617b1d6bce65837918a37e467d8f70bd9090407d5d928ffe89035eb55961bb9aefe02ebf6397bb1a10d41e6284c48fd5926ea1845e1d6ea77ac5e5fed36949b229feb8bf8ad44f6506a2a638ba249f", 0x83}, {&(0x7f0000000300)="bf1d355250347ff3660f6f2cb6c3347b4907d28695d3e7991eaad5f9a578b99823b25b91eb13ae94f6bb29a5273117d075d6469c7f66bb3433f6e28e47a5bfa7ec789339af3fd0194f487c94c0ace276cada866a122a9a3cd44beaa82fb18af727b79a4a0fdf08bbaa33b646d1b2493f6de6f61233b66f20f43bac582eef18e16aa5fe82fe63b49135274a31b0b61817f2deec3e7cce2d418579f11b33baf94a515768f5eda291626290282a56c20c19e5179feb309d5f04a80685ead3f4353fa9dbef38d4345f13b91e681aaba572e4cc2c30f15839e85d4c7567baf8a50d466097b8610d37cdb0ad0cdc", 0xeb}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000500)="88c9bc1ff9b5fea554b4e07296fd3fd71355cb1a00bb3bed0d3761951fa7", 0x1e}, {&(0x7f0000000540)="ac934f1339eaaec0833d7f5a7ff06a5807247e8c127a772db035545b0a5be98e376d4e665dce6ea2ecd6b383d7e0d58102e9f1733b008cc16cf9391fa65659f5104bedeccc4ddcee76b319b9d45d3d449bdcbf80289fe4fc98b3aba31f227810855116b137874ddc2f026dfb2f17fbc21e4a76b6e552991705f2b8ed811566ee02e4f456711794e30fe2b4d7c4668dad7a6503451211ee37803cb52320dfa3bc6a790a96d997aec3c543", 0xaa}, {&(0x7f0000000600)="055277dcbcb06245cda9bdf7ec9de0c85ee1f2dfb98523a8a48f78fe4f7a622baa1cc2739a7d5b0368e6", 0x2a}], 0x8, &(0x7f0000004980)=[@cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7}}}, @cred={{0x1c, 0x1, 0x2, {r11, r17, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x98, 0x80}, 0x10) (async) sendmsg$unix(r2, &(0x7f0000004a40)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000100)="072c912d88d52233d747ec23e328f8949dfacc18c5416877e1a3e9d61c43f40ecb19a2243946495b2c67e516f48a83b829ea61269860567539632cb0eb1e611cf40831ba", 0x44}, {&(0x7f0000000180)="bbd5d167b13615a7f84dd442e33c94a48972d06ebcb0e46889b81556f6aba844f816f87ca696eb0da0adaafc5dafd1b1daff7da96762bf4e9fd8c71ffc067f4a8a9213b158391dadbedeb12b76a7bfbd3ba21dd78e93f6a7f848325781911515", 0x60}, {&(0x7f0000004c80)="f5baf75aadca3dc64dd4d9649024afd9991e4544467c12c1e9f062758458bc9cdcc9831df8d3e37236c9be1e242e4a398aebe74d617b1d6bce65837918a37e467d8f70bd9090407d5d928ffe89035eb55961bb9aefe02ebf6397bb1a10d41e6284c48fd5926ea1845e1d6ea77ac5e5fed36949b229feb8bf8ad44f6506a2a638ba249f", 0x83}, {&(0x7f0000000300)="bf1d355250347ff3660f6f2cb6c3347b4907d28695d3e7991eaad5f9a578b99823b25b91eb13ae94f6bb29a5273117d075d6469c7f66bb3433f6e28e47a5bfa7ec789339af3fd0194f487c94c0ace276cada866a122a9a3cd44beaa82fb18af727b79a4a0fdf08bbaa33b646d1b2493f6de6f61233b66f20f43bac582eef18e16aa5fe82fe63b49135274a31b0b61817f2deec3e7cce2d418579f11b33baf94a515768f5eda291626290282a56c20c19e5179feb309d5f04a80685ead3f4353fa9dbef38d4345f13b91e681aaba572e4cc2c30f15839e85d4c7567baf8a50d466097b8610d37cdb0ad0cdc", 0xeb}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000500)="88c9bc1ff9b5fea554b4e07296fd3fd71355cb1a00bb3bed0d3761951fa7", 0x1e}, {&(0x7f0000000540)="ac934f1339eaaec0833d7f5a7ff06a5807247e8c127a772db035545b0a5be98e376d4e665dce6ea2ecd6b383d7e0d58102e9f1733b008cc16cf9391fa65659f5104bedeccc4ddcee76b319b9d45d3d449bdcbf80289fe4fc98b3aba31f227810855116b137874ddc2f026dfb2f17fbc21e4a76b6e552991705f2b8ed811566ee02e4f456711794e30fe2b4d7c4668dad7a6503451211ee37803cb52320dfa3bc6a790a96d997aec3c543", 0xaa}, {&(0x7f0000000600)="055277dcbcb06245cda9bdf7ec9de0c85ee1f2dfb98523a8a48f78fe4f7a622baa1cc2739a7d5b0368e6", 0x2a}], 0x8, &(0x7f0000004980)=[@cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7}}}, @cred={{0x1c, 0x1, 0x2, {r11, r17, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x98, 0x80}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x4008744b, 0xf0ff1f00000000) 1.152933271s ago: executing program 4 (id=6783): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000400)='syzkaller\x00', 0x30, 0x0, 0x0, 0x40f00}, 0x80) 1.117893112s ago: executing program 7 (id=6784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 957.040856ms ago: executing program 4 (id=6786): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x5, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000119500000000000000360a000000000000180900002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 885.514898ms ago: executing program 6 (id=6787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000440)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x49d8, 0x1, 0x5, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 820.192839ms ago: executing program 7 (id=6788): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f00000000c0)=[{&(0x7f0000000100)="ee", 0xfffffdef}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000f5ff000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000680), 0x49) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) close(r1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) sendmsg$inet(r1, 0x0, 0x0) 771.265831ms ago: executing program 6 (id=6789): bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x49d8, 0x1, 0x5, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1}, 0xc) 739.449821ms ago: executing program 1 (id=6790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x16, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @exit, @jmp={0x5, 0x1, 0x7, 0x4, 0x3, 0x10, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9e}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe}, @exit], &(0x7f0000000380)='GPL\x00', 0xfff, 0x35, &(0x7f00000003c0)=""/53, 0x41100, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x9, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000480)=[0x1, 0x1, 0x1], &(0x7f00000004c0)=[{0x4, 0x5, 0xf, 0x9}, {0x4, 0x2, 0xb, 0x1}, {0x4, 0x3, 0xa, 0xb}, {0x3, 0x1, 0x4, 0xb}, {0x0, 0x5, 0x1, 0xc}, {0x0, 0x4, 0x4, 0x5}, {0x2, 0x4, 0xe, 0x9}, {0x4, 0x4, 0x5, 0x9}, {0x3, 0x5, 0x1, 0xc}], 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 660.159783ms ago: executing program 6 (id=6791): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1ff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000030000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 627.331884ms ago: executing program 4 (id=6792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=0x1, 0x32, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8100058700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback=r2, r0, 0xe, 0x2000, r0, @value=r4, @void, @void, @void, r1}, 0x20) 555.518156ms ago: executing program 6 (id=6793): perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9edf811e381ad6e747033a0093b837dc6cc01e5a4c5c2c672d79f8123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b69e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x40010) 452.394728ms ago: executing program 7 (id=6794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x5, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1}, 0x1, 0x5, 0x0, 0x0, 0x0, 0x1004000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 347.157221ms ago: executing program 1 (id=6795): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000071e0000140000000000003ec0000000010000007f000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e000000164010100000000001c"], 0x68}, 0x804) close(r2) 343.149841ms ago: executing program 7 (id=6796): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x18, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x711fec55}, 0xa0d2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x33b) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x8001) close(0x3) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x4}, 0x0, 0x4, 0xfffffffe, 0x0, 0xbf9, 0x4, 0x0, 0x0, 0x100000, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)="23837e03d6c0b88f1476555f48ddb1021b58207ebf323c1abf457fbc9fc2da8c73106dc9b7d8a17ddcee68207b9a29a6348e2483818be4a8bd380b0307f2def305c67379d50068803d82280bd92804759254d2188491ae8e9e34f14a9289c8743b2b0f0f0f267c51fddcf9cf48217e1b738e4af0e1a2fad846d6a91f5a07ff08004b78227519e39dc8ee0b17c921bdfc7a591b", 0x0, 0x7d}, 0x38) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xffffffff}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) r3 = perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x4801}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r4, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b2388a8", @ANYRES16=0x0, @ANYRES8=r3], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 270.476163ms ago: executing program 6 (id=6797): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e14060200c3ff000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 8.11404ms ago: executing program 6 (id=6798): bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 0s ago: executing program 1 (id=6799): bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x49d8, 0x1, 0x5, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) kernel console output (not intermixed with test programs): cess `syz.3.4835'. [ 495.086767][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4835'. [ 495.102728][T19205] netlink: 200588 bytes leftover after parsing attributes in process `syz.2.4845'. [ 495.130285][T19202] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4835'. [ 495.153964][T19205] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 495.181400][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4835'. [ 495.202266][T19202] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4835'. [ 495.753997][T19226] FAULT_INJECTION: forcing a failure. [ 495.753997][T19226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.918980][T19226] CPU: 1 PID: 19226 Comm: syz.1.4843 Not tainted syzkaller #0 [ 495.926570][T19226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 495.936645][T19226] Call Trace: [ 495.939936][T19226] [ 495.942883][T19226] dump_stack_lvl+0x188/0x250 [ 495.947590][T19226] ? show_regs_print_info+0x20/0x20 [ 495.952837][T19226] ? load_image+0x410/0x410 [ 495.957395][T19226] ? __lock_acquire+0x7d40/0x7d40 [ 495.962448][T19226] should_fail+0x383/0x4b0 [ 495.966894][T19226] _copy_to_user+0x2e/0x130 [ 495.971418][T19226] simple_read_from_buffer+0xe3/0x150 [ 495.976813][T19226] proc_fail_nth_read+0x1a6/0x220 [ 495.981867][T19226] ? proc_fault_inject_write+0x310/0x310 [ 495.987537][T19226] ? fsnotify_perm+0x254/0x560 [ 495.992325][T19226] ? proc_fault_inject_write+0x310/0x310 [ 495.997978][T19226] vfs_read+0x2ff/0xd50 [ 496.002158][T19226] ? __lock_acquire+0x7d40/0x7d40 [ 496.007215][T19226] ? kernel_read+0x1e0/0x1e0 [ 496.011845][T19226] ? mutex_lock_nested+0x17/0x20 [ 496.016806][T19226] ? __fdget_pos+0x2bf/0x370 [ 496.021417][T19226] ? ksys_read+0x70/0x260 [ 496.025767][T19226] ksys_read+0x153/0x260 [ 496.030058][T19226] ? vfs_write+0xd70/0xd70 [ 496.034502][T19226] ? lockdep_hardirqs_on+0x94/0x140 [ 496.039721][T19226] do_syscall_64+0x4c/0xa0 [ 496.044159][T19226] ? clear_bhb_loop+0x30/0x80 [ 496.048882][T19226] ? clear_bhb_loop+0x30/0x80 [ 496.053582][T19226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 496.059492][T19226] RIP: 0033:0x7f8d09369d8e [ 496.063965][T19226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 496.083584][T19226] RSP: 002b:00007f8d07600fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.092019][T19226] RAX: ffffffffffffffda RBX: 00007f8d076016c0 RCX: 00007f8d09369d8e [ 496.100016][T19226] RDX: 000000000000000f RSI: 00007f8d076010a0 RDI: 0000000000000004 [ 496.108006][T19226] RBP: 00007f8d07601090 R08: 0000000000000000 R09: 0000000000000000 [ 496.115993][T19226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.123981][T19226] R13: 00007f8d09631038 R14: 00007f8d09630fa0 R15: 00007ffc531da7b8 [ 496.131983][T19226] [ 496.501439][T19238] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 496.502712][T19247] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 496.551282][T19238] CPU: 1 PID: 19238 Comm: syz.4.4847 Not tainted syzkaller #0 [ 496.558910][T19238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 496.568991][T19238] Call Trace: [ 496.572280][T19238] [ 496.575216][T19238] dump_stack_lvl+0x188/0x250 [ 496.579918][T19238] ? show_regs_print_info+0x20/0x20 [ 496.585559][T19238] ? load_image+0x410/0x410 [ 496.590079][T19238] sysfs_warn_dup+0x8a/0xa0 [ 496.594601][T19238] sysfs_do_create_link_sd+0xc0/0x110 [ 496.599991][T19238] device_add+0x83b/0x1050 [ 496.604423][T19238] wiphy_register+0x1e74/0x2c40 [ 496.609321][T19238] ? cfg80211_event_work+0x40/0x40 [ 496.614443][T19238] ? minstrel_ht_alloc+0x807/0x980 [ 496.619570][T19238] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 496.625658][T19238] ieee80211_register_hw+0x2a03/0x3a60 [ 496.631132][T19238] ? ieee80211_register_hw+0xa91/0x3a60 [ 496.636695][T19238] ? ieee80211_tasklet_handler+0x20/0x20 [ 496.642341][T19238] ? rcu_is_watching+0x11/0xa0 [ 496.647112][T19238] ? hrtimer_init+0x10c/0x220 [ 496.651808][T19238] mac80211_hwsim_new_radio+0x209d/0x4050 [ 496.657570][T19238] hwsim_new_radio_nl+0xa7d/0xc50 [ 496.662633][T19238] genl_rcv_msg+0xd0b/0xfa0 [ 496.667264][T19238] ? genl_bind+0x370/0x370 [ 496.671694][T19238] ? verify_lock_unused+0x140/0x140 [ 496.676905][T19238] ? perf_trace_lock_acquire+0xed/0x3f0 [ 496.682463][T19238] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 496.689058][T19238] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 496.695669][T19238] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 496.702172][T19238] netlink_rcv_skb+0x1e9/0x430 [ 496.707069][T19238] ? genl_bind+0x370/0x370 [ 496.711518][T19238] ? netlink_ack+0xb10/0xb10 [ 496.716134][T19238] ? down_read+0x1aa/0x2e0 [ 496.720563][T19238] genl_rcv+0x24/0x40 [ 496.724551][T19238] netlink_unicast+0x78f/0x940 [ 496.729329][T19238] netlink_sendmsg+0x8ba/0xbe0 [ 496.734103][T19238] ? netlink_getsockopt+0x570/0x570 [ 496.739320][T19238] ? aa_sock_msg_perm+0x94/0x150 [ 496.744266][T19238] ? apparmor_socket_sendmsg+0x88/0x230 [ 496.749820][T19238] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 496.755114][T19238] ? security_socket_sendmsg+0x7c/0xa0 [ 496.760578][T19238] ? netlink_getsockopt+0x570/0x570 [ 496.765785][T19238] ____sys_sendmsg+0x5be/0x8f0 [ 496.770566][T19238] ? __sys_sendmsg_sock+0x30/0x30 [ 496.775605][T19238] ? import_iovec+0x6f/0xa0 [ 496.780121][T19238] ___sys_sendmsg+0x236/0x2e0 [ 496.784810][T19238] ? __sys_sendmsg+0x290/0x290 [ 496.789609][T19238] __se_sys_sendmsg+0x1b7/0x2a0 [ 496.794468][T19238] ? __x64_sys_sendmsg+0x80/0x80 [ 496.799430][T19238] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 496.805440][T19238] ? lockdep_hardirqs_on+0x94/0x140 [ 496.810646][T19238] do_syscall_64+0x4c/0xa0 [ 496.815068][T19238] ? clear_bhb_loop+0x30/0x80 [ 496.819763][T19238] ? clear_bhb_loop+0x30/0x80 [ 496.824454][T19238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 496.830354][T19238] RIP: 0033:0x7f0807deb559 [ 496.834776][T19238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.854383][T19238] RSP: 002b:00007f0806043028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.862805][T19238] RAX: ffffffffffffffda RBX: 00007f0808072fa0 RCX: 00007f0807deb559 [ 496.870787][T19238] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 496.878774][T19238] RBP: 00007f0807e828b0 R08: 0000000000000000 R09: 0000000000000000 [ 496.886752][T19238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.894727][T19238] R13: 00007f0808073038 R14: 00007f0808072fa0 R15: 00007ffd8e993a08 [ 496.902725][T19238] [ 496.931070][T19253] validate_nla: 10 callbacks suppressed [ 496.931084][T19253] netlink: 'syz.2.4851': attribute type 10 has an invalid length. [ 496.959785][T19253] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 497.281384][T19266] netlink: 'syz.4.4856': attribute type 1 has an invalid length. [ 497.495981][T19278] netlink: 'syz.3.4860': attribute type 21 has an invalid length. [ 497.528157][T19278] netlink: 'syz.3.4860': attribute type 22 has an invalid length. [ 497.630368][T19286] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 497.812912][T19290] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 497.833065][T19290] CPU: 1 PID: 19290 Comm: syz.5.4865 Not tainted syzkaller #0 [ 497.840565][T19290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 497.850636][T19290] Call Trace: [ 497.853931][T19290] [ 497.856876][T19290] dump_stack_lvl+0x188/0x250 [ 497.861578][T19290] ? show_regs_print_info+0x20/0x20 [ 497.866795][T19290] ? load_image+0x410/0x410 [ 497.871331][T19290] sysfs_warn_dup+0x8a/0xa0 [ 497.875853][T19290] sysfs_do_create_link_sd+0xc0/0x110 [ 497.881246][T19290] device_add+0x83b/0x1050 [ 497.885694][T19290] wiphy_register+0x1e74/0x2c40 [ 497.890583][T19290] ? cfg80211_event_work+0x40/0x40 [ 497.895725][T19290] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 497.901819][T19290] ieee80211_register_hw+0x2a03/0x3a60 [ 497.907307][T19290] ? ieee80211_register_hw+0xa91/0x3a60 [ 497.912879][T19290] ? ieee80211_tasklet_handler+0x20/0x20 [ 497.918540][T19290] ? rcu_is_watching+0x11/0xa0 [ 497.923334][T19290] ? hrtimer_init+0x10c/0x220 [ 497.928048][T19290] mac80211_hwsim_new_radio+0x209d/0x4050 [ 497.933811][T19290] hwsim_new_radio_nl+0xa7d/0xc50 [ 497.938872][T19290] genl_rcv_msg+0xd0b/0xfa0 [ 497.943411][T19290] ? genl_bind+0x370/0x370 [ 497.947853][T19290] ? vmacache_find+0x238/0x590 [ 497.952638][T19290] ? verify_lock_unused+0x140/0x140 [ 497.957871][T19290] ? verify_lock_unused+0x140/0x140 [ 497.963091][T19290] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 497.969119][T19290] ? lock_chain_count+0x20/0x20 [ 497.974007][T19290] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 497.980370][T19290] netlink_rcv_skb+0x1e9/0x430 [ 497.985153][T19290] ? genl_bind+0x370/0x370 [ 497.989588][T19290] ? netlink_ack+0xb10/0xb10 [ 497.994200][T19290] ? down_read+0x1aa/0x2e0 [ 497.998643][T19290] genl_rcv+0x24/0x40 [ 498.002645][T19290] netlink_unicast+0x78f/0x940 [ 498.007437][T19290] netlink_sendmsg+0x8ba/0xbe0 [ 498.012227][T19290] ? netlink_getsockopt+0x570/0x570 [ 498.017440][T19290] ? aa_sock_msg_perm+0x94/0x150 [ 498.022413][T19290] ? apparmor_socket_sendmsg+0x88/0x230 [ 498.027976][T19290] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 498.033288][T19290] ? security_socket_sendmsg+0x7c/0xa0 [ 498.038766][T19290] ? netlink_getsockopt+0x570/0x570 [ 498.043981][T19290] ____sys_sendmsg+0x5be/0x8f0 [ 498.048823][T19290] ? __sys_sendmsg_sock+0x30/0x30 [ 498.053890][T19290] ? import_iovec+0x6f/0xa0 [ 498.058421][T19290] ___sys_sendmsg+0x236/0x2e0 [ 498.063136][T19290] ? __sys_sendmsg+0x290/0x290 [ 498.067957][T19290] __se_sys_sendmsg+0x1b7/0x2a0 [ 498.072839][T19290] ? __x64_sys_sendmsg+0x80/0x80 [ 498.077796][T19290] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 498.083808][T19290] ? lockdep_hardirqs_on+0x94/0x140 [ 498.089048][T19290] do_syscall_64+0x4c/0xa0 [ 498.093487][T19290] ? clear_bhb_loop+0x30/0x80 [ 498.098185][T19290] ? clear_bhb_loop+0x30/0x80 [ 498.102886][T19290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 498.108800][T19290] RIP: 0033:0x7f31906f2559 [ 498.113237][T19290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.132858][T19290] RSP: 002b:00007f318e94a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.141293][T19290] RAX: ffffffffffffffda RBX: 00007f3190979fa0 RCX: 00007f31906f2559 [ 498.149278][T19290] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 498.157262][T19290] RBP: 00007f31907898b0 R08: 0000000000000000 R09: 0000000000000000 [ 498.165247][T19290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.173236][T19290] R13: 00007f319097a038 R14: 00007f3190979fa0 R15: 00007ffd26b24418 [ 498.181240][T19290] [ 498.312400][T19302] openvswitch: netlink: Flow key attr not present in new flow. [ 498.725106][T19333] netlink: 'syz.4.4873': attribute type 10 has an invalid length. [ 498.825646][T19333] team0: Device hsr_slave_0 failed to register rx_handler [ 499.129669][T19345] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 499.145142][T19347] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 499.639443][T19354] netlink: 'syz.2.4882': attribute type 21 has an invalid length. [ 499.651860][T19356] __nla_validate_parse: 14 callbacks suppressed [ 499.651874][T19356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4883'. [ 499.693235][T19356] netlink: 'syz.4.4883': attribute type 1 has an invalid length. [ 499.711008][T19356] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4883'. [ 500.134148][T19388] netlink: 'syz.4.4892': attribute type 10 has an invalid length. [ 500.162486][T19388] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4892'. [ 500.190151][T19385] netlink: 'syz.2.4891': attribute type 10 has an invalid length. [ 500.210789][T19385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4891'. [ 500.261021][T19385] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 500.313728][T19395] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4896'. [ 500.514776][T19399] netlink: 200588 bytes leftover after parsing attributes in process `syz.1.4895'. [ 500.674249][T19399] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 500.860450][T19409] netlink: 'syz.2.4898': attribute type 3 has an invalid length. [ 500.913722][T19409] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4898'. [ 501.116755][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.123104][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.176618][T19422] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4904'. [ 501.297421][T19420] team0: Device hsr_slave_0 failed to register rx_handler [ 501.405595][T19431] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4906'. [ 501.513598][T19431] device virt_wifi0 left promiscuous mode [ 501.521922][T19431] team0: Port device virt_wifi0 removed [ 501.696882][T19436] team0: Device hsr_slave_0 failed to register rx_handler [ 501.713489][T19434] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4909'. [ 501.946688][T19449] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 501.966805][T19449] CPU: 1 PID: 19449 Comm: syz.1.4912 Not tainted syzkaller #0 [ 501.974305][T19449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 501.984378][T19449] Call Trace: [ 501.987665][T19449] [ 501.990608][T19449] dump_stack_lvl+0x188/0x250 [ 501.995318][T19449] ? show_regs_print_info+0x20/0x20 [ 502.000519][T19449] ? load_image+0x410/0x410 [ 502.005045][T19449] sysfs_warn_dup+0x8a/0xa0 [ 502.009570][T19449] sysfs_do_create_link_sd+0xc0/0x110 [ 502.014954][T19449] device_add+0x83b/0x1050 [ 502.019388][T19449] wiphy_register+0x1e74/0x2c40 [ 502.024286][T19449] ? cfg80211_event_work+0x40/0x40 [ 502.029430][T19449] ? minstrel_ht_alloc+0x807/0x980 [ 502.034561][T19449] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 502.040673][T19449] ieee80211_register_hw+0x2a03/0x3a60 [ 502.046154][T19449] ? ieee80211_register_hw+0xa91/0x3a60 [ 502.051724][T19449] ? ieee80211_tasklet_handler+0x20/0x20 [ 502.057382][T19449] ? rcu_is_watching+0x11/0xa0 [ 502.062156][T19449] ? hrtimer_init+0x10c/0x220 [ 502.066856][T19449] mac80211_hwsim_new_radio+0x209d/0x4050 [ 502.072604][T19449] hwsim_new_radio_nl+0xa7d/0xc50 [ 502.077654][T19449] genl_rcv_msg+0xd0b/0xfa0 [ 502.082174][T19449] ? genl_bind+0x370/0x370 [ 502.086606][T19449] ? verify_lock_unused+0x140/0x140 [ 502.091816][T19449] ? perf_trace_lock_acquire+0xed/0x3f0 [ 502.097377][T19449] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 502.103975][T19449] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 502.110574][T19449] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 502.116950][T19449] netlink_rcv_skb+0x1e9/0x430 [ 502.121753][T19449] ? genl_bind+0x370/0x370 [ 502.126187][T19449] ? netlink_ack+0xb10/0xb10 [ 502.130799][T19449] ? down_read+0x1aa/0x2e0 [ 502.135230][T19449] genl_rcv+0x24/0x40 [ 502.139235][T19449] netlink_unicast+0x78f/0x940 [ 502.144027][T19449] netlink_sendmsg+0x8ba/0xbe0 [ 502.148805][T19449] ? netlink_getsockopt+0x570/0x570 [ 502.154007][T19449] ? aa_sock_msg_perm+0x94/0x150 [ 502.158967][T19449] ? apparmor_socket_sendmsg+0x88/0x230 [ 502.164639][T19449] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 502.169944][T19449] ? security_socket_sendmsg+0x7c/0xa0 [ 502.175414][T19449] ? netlink_getsockopt+0x570/0x570 [ 502.180620][T19449] ____sys_sendmsg+0x5be/0x8f0 [ 502.185402][T19449] ? __sys_sendmsg_sock+0x30/0x30 [ 502.190446][T19449] ? import_iovec+0x6f/0xa0 [ 502.194964][T19449] ___sys_sendmsg+0x236/0x2e0 [ 502.199670][T19449] ? __sys_sendmsg+0x290/0x290 [ 502.204496][T19449] __se_sys_sendmsg+0x1b7/0x2a0 [ 502.209361][T19449] ? __x64_sys_sendmsg+0x80/0x80 [ 502.214301][T19449] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 502.220298][T19449] ? lockdep_hardirqs_on+0x94/0x140 [ 502.225525][T19449] do_syscall_64+0x4c/0xa0 [ 502.229953][T19449] ? clear_bhb_loop+0x30/0x80 [ 502.234653][T19449] ? clear_bhb_loop+0x30/0x80 [ 502.239339][T19449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 502.245237][T19449] RIP: 0033:0x7f8d093a9559 [ 502.249660][T19449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.269273][T19449] RSP: 002b:00007f8d07601028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.277693][T19449] RAX: ffffffffffffffda RBX: 00007f8d09630fa0 RCX: 00007f8d093a9559 [ 502.285666][T19449] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 502.293643][T19449] RBP: 00007f8d094408b0 R08: 0000000000000000 R09: 0000000000000000 [ 502.301619][T19449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.309598][T19449] R13: 00007f8d09631038 R14: 00007f8d09630fa0 R15: 00007ffc531da7b8 [ 502.317592][T19449] [ 502.757936][T19472] validate_nla: 4 callbacks suppressed [ 502.757954][T19472] netlink: 'syz.1.4920': attribute type 10 has an invalid length. [ 503.134623][T19472] device macvlan0 entered promiscuous mode [ 503.158973][T19472] team0: Port device macvlan0 added [ 503.164652][T19472] netlink: 'syz.1.4920': attribute type 10 has an invalid length. [ 503.302552][T19472] netlink: 'syz.1.4920': attribute type 10 has an invalid length. [ 503.358428][T19472] netlink: 'syz.1.4920': attribute type 10 has an invalid length. [ 503.366357][T19472] netlink: 'syz.1.4920': attribute type 10 has an invalid length. [ 506.560414][T19526] netlink: 'syz.5.4938': attribute type 21 has an invalid length. [ 506.568273][T19526] __nla_validate_parse: 1 callbacks suppressed [ 506.568288][T19526] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4938'. [ 506.653362][T19528] netlink: 'syz.1.4939': attribute type 10 has an invalid length. [ 506.731032][T19528] team0: Device hsr_slave_0 failed to register rx_handler [ 507.080377][T19555] netlink: 'syz.3.4951': attribute type 10 has an invalid length. [ 507.088237][T19555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4951'. [ 507.152006][T19555] device dummy0 entered promiscuous mode [ 507.166596][T19555] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 507.472201][T19573] netlink: 'syz.5.4959': attribute type 10 has an invalid length. [ 507.486338][T19573] team0: Device hsr_slave_0 failed to register rx_handler [ 507.651715][T19581] netlink: 'syz.2.4960': attribute type 10 has an invalid length. [ 507.728926][T19581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4960'. [ 507.791348][T19581] device batadv_slave_0 entered promiscuous mode [ 507.830576][T19581] bond0: (slave batadv_slave_0): Releasing backup interface [ 507.857796][T19593] netlink: 'syz.3.4962': attribute type 1 has an invalid length. [ 507.913026][T19593] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4962'. [ 507.937660][T19581] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 508.070940][T19584] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.164147][T19600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4965'. [ 508.188141][T19602] netlink: 200588 bytes leftover after parsing attributes in process `syz.5.4964'. [ 508.216037][T19602] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 508.776827][T19625] FAULT_INJECTION: forcing a failure. [ 508.776827][T19625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.857392][T19625] CPU: 0 PID: 19625 Comm: syz.3.4973 Not tainted syzkaller #0 [ 508.865046][T19625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 508.875132][T19625] Call Trace: [ 508.878447][T19625] [ 508.881415][T19625] dump_stack_lvl+0x188/0x250 [ 508.886149][T19625] ? show_regs_print_info+0x20/0x20 [ 508.891388][T19625] ? load_image+0x410/0x410 [ 508.895964][T19625] ? __lock_acquire+0x7d40/0x7d40 [ 508.901067][T19625] should_fail+0x383/0x4b0 [ 508.905556][T19625] _copy_from_user+0x2e/0x170 [ 508.910290][T19625] __copy_msghdr_from_user+0xc9/0x630 [ 508.915707][T19625] ? verify_lock_unused+0x140/0x140 [ 508.920952][T19625] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 508.926297][T19625] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 508.932246][T19625] ___sys_sendmsg+0x19a/0x2e0 [ 508.936979][T19625] ? __sys_sendmsg+0x290/0x290 [ 508.941913][T19625] __se_sys_sendmsg+0x1b7/0x2a0 [ 508.946797][T19625] ? __x64_sys_sendmsg+0x80/0x80 [ 508.951784][T19625] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 508.957846][T19625] ? trace_sys_enter+0x1f/0x80 [ 508.962660][T19625] do_syscall_64+0x4c/0xa0 [ 508.967107][T19625] ? clear_bhb_loop+0x30/0x80 [ 508.971816][T19625] ? clear_bhb_loop+0x30/0x80 [ 508.976521][T19625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.982432][T19625] RIP: 0033:0x7f4b5bf96559 [ 508.986869][T19625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.006629][T19625] RSP: 002b:00007f4b5a1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.015077][T19625] RAX: ffffffffffffffda RBX: 00007f4b5c21dfa0 RCX: 00007f4b5bf96559 [ 509.023077][T19625] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 509.031093][T19625] RBP: 00007f4b5a1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 509.039094][T19625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.047092][T19625] R13: 00007f4b5c21e038 R14: 00007f4b5c21dfa0 R15: 00007ffcc1e76708 [ 509.055148][T19625] [ 509.231791][T19638] netlink: 'syz.4.4977': attribute type 10 has an invalid length. [ 509.359001][T19644] netlink: 'syz.4.4979': attribute type 9 has an invalid length. [ 509.377749][T19644] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4979'. [ 509.465969][T19651] netlink: 'syz.5.4980': attribute type 3 has an invalid length. [ 509.497950][T19651] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4980'. [ 509.519908][T19652] netlink: 'syz.5.4980': attribute type 1 has an invalid length. [ 509.545438][T19652] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4980'. [ 509.557306][T19657] netlink: 'syz.2.4981': attribute type 10 has an invalid length. [ 509.588582][T19657] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4981'. [ 509.614551][T19657] team0: Device hsr_slave_0 failed to register rx_handler [ 510.111470][T19670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.175597][T19670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.238136][T19670] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 510.345062][T19670] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 510.408818][T19670] bond0 (unregistering): Released all slaves [ 510.796568][T19707] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 510.886442][T19715] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 511.014896][T19721] netlink: 'syz.1.4999': attribute type 10 has an invalid length. [ 511.740257][T19740] __nla_validate_parse: 8 callbacks suppressed [ 511.740273][T19740] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5004'. [ 511.850081][T19747] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5007'. [ 511.875247][T19740] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 512.114553][T19758] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5009'. [ 512.146981][T19758] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 512.263768][T19762] netlink: 'syz.3.5012': attribute type 10 has an invalid length. [ 512.439144][T19776] netlink: 'syz.3.5015': attribute type 21 has an invalid length. [ 512.497719][T19776] netlink: 'syz.3.5015': attribute type 7 has an invalid length. [ 513.561193][T19818] netlink: 'syz.3.5024': attribute type 10 has an invalid length. [ 513.621933][T19818] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5024'. [ 513.640994][T19821] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5025'. [ 513.650679][T19821] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 513.893910][T19825] netlink: 'syz.3.5026': attribute type 4 has an invalid length. [ 513.925887][T19825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5026'. [ 513.957953][T19826] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5026'. [ 514.377989][T19839] netlink: 'syz.4.5030': attribute type 13 has an invalid length. [ 514.428088][T19839] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5030'. [ 514.765508][T19841] rxe_eth0 speed is unknown, defaulting to 1000 [ 514.830315][T19850] netlink: 'syz.2.5033': attribute type 39 has an invalid length. [ 514.972158][ T4304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.015267][T19855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5036'. [ 515.054999][T19858] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5037'. [ 515.095509][ T4304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.129219][T19858] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 515.175296][T19862] netlink: 'syz.1.5035': attribute type 2 has an invalid length. [ 515.232896][ T4304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.343876][T19870] netlink: 'syz.4.5039': attribute type 13 has an invalid length. [ 515.390021][ T4304] device netdevsim0 left promiscuous mode [ 515.424150][ T4304] team0: Port device netdevsim0 removed [ 515.469333][ T4304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.607428][T19841] chnl_net:caif_netlink_parms(): no params data found [ 515.864866][T19885] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 516.011843][T19892] netlink: 'syz.4.5047': attribute type 21 has an invalid length. [ 516.172356][T19899] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 516.307321][T19841] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.400738][T19841] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.418021][T19841] device bridge_slave_0 entered promiscuous mode [ 516.449694][T19841] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.486859][T19841] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.529588][T19841] device bridge_slave_1 entered promiscuous mode [ 516.667543][ T7237] Bluetooth: hci1: command 0x0409 tx timeout [ 516.882374][T19927] netlink: 'syz.1.5054': attribute type 13 has an invalid length. [ 516.941185][T19841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.982937][T19841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.120668][T19939] __nla_validate_parse: 4 callbacks suppressed [ 517.120697][T19939] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5059'. [ 517.143477][T19841] team0: Port device team_slave_0 added [ 517.192619][T19841] team0: Port device team_slave_1 added [ 517.249563][T19944] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5058'. [ 517.343535][T19841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.383870][T19841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.448908][T19841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.588369][T19948] netlink: 'syz.3.5061': attribute type 10 has an invalid length. [ 517.626158][T19948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5061'. [ 517.673444][T19948] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 517.729906][T19941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.737242][T19941] IPv6: NLM_F_CREATE should be set when creating new route [ 517.744666][T19941] IPv6: NLM_F_CREATE should be set when creating new route [ 517.751988][T19941] IPv6: NLM_F_CREATE should be set when creating new route [ 517.825502][T19943] netlink: 'syz.4.5060': attribute type 10 has an invalid length. [ 517.894013][T19943] team0: Device vxcan1 is of different type [ 517.941711][T19841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.959844][T19841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.029836][T19841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.118429][T19961] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5064'. [ 518.134181][T19841] device hsr_slave_0 entered promiscuous mode [ 518.188526][T19841] device hsr_slave_1 entered promiscuous mode [ 518.212775][T19841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.237428][T19841] Cannot create hsr debugfs directory [ 518.310226][T19961] device sit0 entered promiscuous mode [ 518.543101][T19985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5071'. [ 518.573848][T19985] device batadv_slave_0 entered promiscuous mode [ 518.605853][T19985] bond0: (slave batadv_slave_0): Releasing backup interface [ 518.691188][T19985] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 518.741283][T19991] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5072'. [ 518.788460][T15706] Bluetooth: hci1: command 0x041b tx timeout [ 518.932354][T19991] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 519.314886][T20020] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5082'. [ 519.558686][T20037] netlink: 182 bytes leftover after parsing attributes in process `syz.4.5087'. [ 519.586174][T20035] FAULT_INJECTION: forcing a failure. [ 519.586174][T20035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.673089][T20035] CPU: 1 PID: 20035 Comm: syz.3.5086 Not tainted syzkaller #0 [ 519.680610][T20035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 519.683063][T19841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 519.690683][T20035] Call Trace: [ 519.690691][T20035] [ 519.690699][T20035] dump_stack_lvl+0x188/0x250 [ 519.690726][T20035] ? show_regs_print_info+0x20/0x20 [ 519.713487][T20035] ? load_image+0x410/0x410 [ 519.718002][T20035] ? __lock_acquire+0x7d40/0x7d40 [ 519.723074][T20035] ? perf_trace_lock+0xe4/0x390 [ 519.727933][T20035] should_fail+0x383/0x4b0 [ 519.732366][T20035] _copy_from_user+0x2e/0x170 [ 519.737046][T20035] __copy_msghdr_from_user+0x48a/0x630 [ 519.742508][T20035] ? verify_lock_unused+0x140/0x140 [ 519.747712][T20035] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 519.753010][T20035] ? perf_trace_lock+0xe4/0x390 [ 519.757878][T20035] ___sys_sendmsg+0x19a/0x2e0 [ 519.762572][T20035] ? __sys_sendmsg+0x290/0x290 [ 519.767349][T20035] ? trace_event_raw_event_lock+0x250/0x250 [ 519.773262][T20035] __se_sys_sendmsg+0x1b7/0x2a0 [ 519.778117][T20035] ? __x64_sys_sendmsg+0x80/0x80 [ 519.783054][T20035] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 519.789050][T20035] ? lockdep_hardirqs_on+0x94/0x140 [ 519.794256][T20035] do_syscall_64+0x4c/0xa0 [ 519.798674][T20035] ? clear_bhb_loop+0x30/0x80 [ 519.803356][T20035] ? clear_bhb_loop+0x30/0x80 [ 519.808051][T20035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.813959][T20035] RIP: 0033:0x7f4b5bf96559 [ 519.818387][T20035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.838014][T20035] RSP: 002b:00007f4b5a1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.846442][T20035] RAX: ffffffffffffffda RBX: 00007f4b5c21dfa0 RCX: 00007f4b5bf96559 [ 519.854417][T20035] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 519.862390][T20035] RBP: 00007f4b5a1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 519.870363][T20035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.878332][T20035] R13: 00007f4b5c21e038 R14: 00007f4b5c21dfa0 R15: 00007ffcc1e76708 [ 519.886315][T20035] [ 519.920344][T19841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 519.954332][T19841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 519.965051][T20053] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5089'. [ 519.975388][T20053] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 519.997517][T19841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 520.261073][T19841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.282920][T20068] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5095'. [ 520.423971][T20070] device syzkaller0 entered promiscuous mode [ 520.455953][T19841] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.537335][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.555546][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.607109][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 520.629511][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.658329][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.665558][ T5752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.727788][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.767328][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.791465][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.798596][ T5752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.844137][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.868555][ T7245] Bluetooth: hci1: command 0x040f tx timeout [ 521.034892][ T4304] device hsr_slave_0 left promiscuous mode [ 521.043685][ T4304] device hsr_slave_1 left promiscuous mode [ 521.171567][ T4304] device geneve1 left promiscuous mode [ 521.189178][ T4304] team0 (unregistering): Port device geneve1 removed [ 521.273553][ T4304] device team_slave_1 left promiscuous mode [ 521.280927][T20095] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 521.294435][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 521.315505][ T4304] device team_slave_0 left promiscuous mode [ 521.330070][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 521.499706][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.531919][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.582709][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.618960][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.699800][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.717525][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.747978][T19841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 521.778651][T19841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.849050][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.865528][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.902241][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.946209][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.981225][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.036061][T20107] validate_nla: 2 callbacks suppressed [ 522.036075][T20107] netlink: 'syz.2.5105': attribute type 10 has an invalid length. [ 522.123160][T20107] team0: Device vxcan1 is of different type [ 522.188086][T20114] netlink: 'syz.3.5108': attribute type 10 has an invalid length. [ 522.202118][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 522.912435][T20146] tun0: tun_chr_ioctl cmd 1074025694 [ 522.925501][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.949162][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 522.958062][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.992865][T20150] netlink: 'syz.1.5115': attribute type 10 has an invalid length. [ 523.007631][T20150] __nla_validate_parse: 4 callbacks suppressed [ 523.007644][T20150] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5115'. [ 523.121807][T19841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.515927][T20168] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5118'. [ 523.702144][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 523.711426][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 523.774504][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 523.785965][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.815593][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.842920][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.861859][T19841] device veth0_vlan entered promiscuous mode [ 523.898862][T19841] device veth1_vlan entered promiscuous mode [ 523.981241][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 523.996993][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 524.028165][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 524.079471][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.118322][T19841] device veth0_macvtap entered promiscuous mode [ 524.142916][T19841] device veth1_macvtap entered promiscuous mode [ 524.163213][T20192] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5122'. [ 524.219533][T19841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.226984][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 524.239242][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 524.248439][T20192] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 524.272767][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 524.308676][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.346757][T20201] netlink: 'syz.2.5125': attribute type 10 has an invalid length. [ 524.388730][T20201] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5125'. [ 524.409737][T19841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.429633][T19841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.472202][T19841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.502365][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 524.521346][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 524.547052][T19841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.561737][T20208] netlink: 'syz.3.5128': attribute type 4 has an invalid length. [ 524.583161][T19841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.594519][T20208] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.5128'. [ 524.628343][T19841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.637591][T19841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.695528][T20212] netlink: 'syz.3.5128': attribute type 21 has an invalid length. [ 524.758049][T20219] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.5131'. [ 524.789235][T20219] netlink: 'syz.4.5131': attribute type 2 has an invalid length. [ 524.871845][T20214] device syzkaller0 entered promiscuous mode [ 525.024594][ T5759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.040747][ T5759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.100971][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 525.138945][ T5759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.177310][ T5759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.319601][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.471080][T20251] netlink: 'syz.2.5136': attribute type 21 has an invalid length. [ 525.550491][T20251] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5136'. [ 525.777209][T20265] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5139'. [ 525.847757][T20266] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5140'. [ 525.870448][T20265] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 525.900289][T20266] device team_slave_0 left promiscuous mode [ 526.693137][T20266] team0: Port device team_slave_0 removed [ 526.719625][T20266] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 526.841450][T20297] netlink: 'syz.4.5148': attribute type 10 has an invalid length. [ 526.900632][T20297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5148'. [ 526.966370][T20301] netlink: 'syz.3.5151': attribute type 21 has an invalid length. [ 527.043913][T20310] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 527.119952][T20317] validate_nla: 1 callbacks suppressed [ 527.119967][T20317] netlink: 'syz.4.5156': attribute type 10 has an invalid length. [ 527.226382][T20317] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 527.384634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 527.440838][T20325] netlink: 'syz.5.5158': attribute type 1 has an invalid length. [ 527.479150][T20325] netlink: 'syz.5.5158': attribute type 4 has an invalid length. [ 527.697837][T20347] delete_channel: no stack [ 527.728546][T20347] delete_channel: no stack [ 528.397827][T20376] __nla_validate_parse: 5 callbacks suppressed [ 528.397842][T20376] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5169'. [ 528.458731][T20376] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 528.591594][T20386] netlink: 'syz.5.5173': attribute type 10 has an invalid length. [ 528.606906][T20386] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5173'. [ 528.645171][T20386] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 528.915428][T20398] device syzkaller0 entered promiscuous mode [ 528.983095][T20402] netlink: 'syz.4.5177': attribute type 10 has an invalid length. [ 529.016477][T20406] netlink: 'syz.2.5180': attribute type 10 has an invalid length. [ 529.043622][T20406] team0: Device hsr_slave_0 failed to register rx_handler [ 529.141878][T20416] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5184'. [ 529.151584][T20416] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 529.251579][T20422] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.5186'. [ 529.722903][T20444] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5190'. [ 529.810987][T20444] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 530.001850][T20451] netlink: 'syz.2.5192': attribute type 2 has an invalid length. [ 530.028469][T20451] netlink: 'syz.2.5192': attribute type 8 has an invalid length. [ 530.056681][T20451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5192'. [ 530.282869][T20458] device syzkaller0 entered promiscuous mode [ 530.340521][T20462] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5197'. [ 530.580197][T20478] netlink: 'syz.4.5199': attribute type 10 has an invalid length. [ 530.692708][T20493] netlink: 'syz.1.5208': attribute type 10 has an invalid length. [ 530.753361][T20493] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5208'. [ 530.806113][T20494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5206'. [ 531.156823][T20513] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5216'. [ 531.513523][T20522] device geneve1 entered promiscuous mode [ 531.536122][T20522] team0: Port device geneve1 added [ 532.033464][T20565] netlink: 'syz.1.5226': attribute type 11 has an invalid length. [ 532.045978][T20565] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 532.054685][T20565] CPU: 1 PID: 20565 Comm: syz.1.5226 Not tainted syzkaller #0 [ 532.062177][T20565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 532.072247][T20565] Call Trace: [ 532.075539][T20565] [ 532.078490][T20565] dump_stack_lvl+0x188/0x250 [ 532.083195][T20565] ? show_regs_print_info+0x20/0x20 [ 532.088416][T20565] ? load_image+0x410/0x410 [ 532.092961][T20565] sysfs_warn_dup+0x8a/0xa0 [ 532.097485][T20565] sysfs_do_create_link_sd+0xc0/0x110 [ 532.102876][T20565] device_add+0x83b/0x1050 [ 532.107330][T20565] wiphy_register+0x1e74/0x2c40 [ 532.112219][T20565] ? cfg80211_event_work+0x40/0x40 [ 532.117357][T20565] ? minstrel_ht_alloc+0x807/0x980 [ 532.122500][T20565] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 532.128593][T20565] ieee80211_register_hw+0x2a03/0x3a60 [ 532.134082][T20565] ? ieee80211_register_hw+0xa91/0x3a60 [ 532.139669][T20565] ? ieee80211_tasklet_handler+0x20/0x20 [ 532.145329][T20565] ? rcu_is_watching+0x11/0xa0 [ 532.150125][T20565] ? hrtimer_init+0x10c/0x220 [ 532.154824][T20565] mac80211_hwsim_new_radio+0x209d/0x4050 [ 532.160584][T20565] hwsim_new_radio_nl+0xa7d/0xc50 [ 532.165649][T20565] genl_rcv_msg+0xd0b/0xfa0 [ 532.170186][T20565] ? genl_bind+0x370/0x370 [ 532.174623][T20565] ? rcu_nmi_exit+0x6f/0xf0 [ 532.179140][T20565] ? verify_lock_unused+0x140/0x140 [ 532.184365][T20565] ? verify_lock_unused+0x140/0x140 [ 532.189579][T20565] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 532.195590][T20565] ? lock_chain_count+0x20/0x20 [ 532.200477][T20565] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 532.206874][T20565] netlink_rcv_skb+0x1e9/0x430 [ 532.211661][T20565] ? genl_bind+0x370/0x370 [ 532.216104][T20565] ? netlink_ack+0xb10/0xb10 [ 532.220724][T20565] ? down_read+0x1aa/0x2e0 [ 532.225159][T20565] genl_rcv+0x24/0x40 [ 532.229165][T20565] netlink_unicast+0x78f/0x940 [ 532.233967][T20565] netlink_sendmsg+0x8ba/0xbe0 [ 532.238755][T20565] ? netlink_getsockopt+0x570/0x570 [ 532.243974][T20565] ? aa_sock_msg_perm+0x94/0x150 [ 532.248940][T20565] ? apparmor_socket_sendmsg+0x88/0x230 [ 532.254522][T20565] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 532.259826][T20565] ? security_socket_sendmsg+0x7c/0xa0 [ 532.265310][T20565] ? netlink_getsockopt+0x570/0x570 [ 532.270527][T20565] ____sys_sendmsg+0x5be/0x8f0 [ 532.275341][T20565] ? __sys_sendmsg_sock+0x30/0x30 [ 532.280403][T20565] ? import_iovec+0x6f/0xa0 [ 532.284947][T20565] ___sys_sendmsg+0x236/0x2e0 [ 532.289659][T20565] ? __sys_sendmsg+0x290/0x290 [ 532.294481][T20565] __se_sys_sendmsg+0x1b7/0x2a0 [ 532.299356][T20565] ? __x64_sys_sendmsg+0x80/0x80 [ 532.304345][T20565] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 532.310363][T20565] ? lockdep_hardirqs_on+0x94/0x140 [ 532.315594][T20565] do_syscall_64+0x4c/0xa0 [ 532.320036][T20565] ? clear_bhb_loop+0x30/0x80 [ 532.324732][T20565] ? clear_bhb_loop+0x30/0x80 [ 532.329472][T20565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.335391][T20565] RIP: 0033:0x7f8d093a9559 [ 532.339824][T20565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.359447][T20565] RSP: 002b:00007f8d075e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.367889][T20565] RAX: ffffffffffffffda RBX: 00007f8d09631090 RCX: 00007f8d093a9559 [ 532.375879][T20565] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 532.383882][T20565] RBP: 00007f8d094408b0 R08: 0000000000000000 R09: 0000000000000000 [ 532.391873][T20565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.399861][T20565] R13: 00007f8d09631128 R14: 00007f8d09631090 R15: 00007ffc531da7b8 [ 532.407865][T20565] [ 533.020060][T20604] validate_nla: 7 callbacks suppressed [ 533.020077][T20604] netlink: 'syz.1.5247': attribute type 21 has an invalid length. [ 533.167631][T20608] netlink: 'syz.2.5249': attribute type 10 has an invalid length. [ 533.183677][T20608] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 533.547756][T20630] __nla_validate_parse: 6 callbacks suppressed [ 533.547800][T20630] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5258'. [ 533.662035][T20630] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 533.677672][T20638] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5260'. [ 533.809086][T20640] netlink: 'syz.5.5259': attribute type 10 has an invalid length. [ 533.838841][T20640] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5259'. [ 533.871263][T20640] device batadv_slave_0 entered promiscuous mode [ 533.886938][T20640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.914757][T20640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.944825][T20640] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 534.147429][T20656] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5264'. [ 534.177847][T20656] : renamed from caif0 [ 534.193197][T20656] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 534.363581][T20671] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5272'. [ 534.391785][T20671] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 534.545186][T20669] netlink: 'syz.1.5271': attribute type 21 has an invalid length. [ 534.564810][T20669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5271'. [ 534.661191][T20681] netlink: 'syz.3.5273': attribute type 13 has an invalid length. [ 535.098511][T20696] netlink: 'syz.1.5279': attribute type 10 has an invalid length. [ 535.139577][T20696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5279'. [ 535.149334][T20696] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 535.195028][T20700] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5280'. [ 535.326234][T20707] netlink: 102780 bytes leftover after parsing attributes in process `syz.1.5284'. [ 535.458932][T20718] netlink: 'syz.1.5287': attribute type 13 has an invalid length. [ 535.547004][T20734] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5295'. [ 535.596059][T20734] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 535.939956][T20764] netlink: 'syz.2.5307': attribute type 13 has an invalid length. [ 536.034578][T20771] netlink: 'syz.2.5310': attribute type 39 has an invalid length. [ 536.059875][T20762] netlink: 'syz.1.5306': attribute type 29 has an invalid length. [ 536.245092][T20783] device syzkaller0 entered promiscuous mode [ 536.766677][T20810] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 537.093648][T20851] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 537.261995][T20871] team0: Device vxcan1 is of different type [ 537.355848][T20880] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 538.033663][T20907] delete_channel: no stack [ 538.071950][T20929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 538.107819][T20928] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 538.173361][T20929] validate_nla: 6 callbacks suppressed [ 538.173375][T20929] netlink: 'syz.3.5363': attribute type 22 has an invalid length. [ 538.245496][T20932] netlink: 'syz.2.5365': attribute type 2 has an invalid length. [ 538.579484][T20949] device bridge_slave_1 left promiscuous mode [ 538.585916][T20949] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.614021][T20949] device bridge_slave_0 left promiscuous mode [ 538.635479][T20949] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.742859][T20961] netlink: 'syz.2.5377': attribute type 10 has an invalid length. [ 538.921768][T20970] netlink: 'syz.5.5382': attribute type 10 has an invalid length. [ 538.936731][T20970] __nla_validate_parse: 12 callbacks suppressed [ 538.936745][T20970] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5382'. [ 538.971640][T20970] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 539.006449][T20965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.019672][T20965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.041132][T20974] netlink: 'syz.3.5380': attribute type 29 has an invalid length. [ 539.089419][T20974] netlink: 'syz.3.5380': attribute type 29 has an invalid length. [ 539.159798][T20965] netlink: 'syz.3.5380': attribute type 29 has an invalid length. [ 539.664171][T20994] netlink: 'syz.1.5390': attribute type 10 has an invalid length. [ 540.099977][T21017] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.5399'. [ 540.138173][T21015] netlink: 'syz.3.5398': attribute type 10 has an invalid length. [ 540.187463][T21015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5398'. [ 540.217064][T21015] device batadv_slave_0 entered promiscuous mode [ 540.219834][T21020] Dead loop on virtual device ip6_vti0, fix it urgently! [ 540.274375][T21015] bond0: (slave batadv_slave_0): Releasing backup interface [ 540.312682][T21015] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 540.489207][T21030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5405'. [ 540.608464][T21030] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 540.770788][T21039] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5408'. [ 540.807988][T21039] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 540.977758][T21047] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5411'. [ 541.040010][T21049] bridge0: port 3(dummy0) entered disabled state [ 541.073311][T21049] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.099973][T21049] device bridge_slave_0 left promiscuous mode [ 541.116723][T21049] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.254136][T21061] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5411'. [ 541.394304][T21051] device syzkaller0 entered promiscuous mode [ 541.405540][T21070] netlink: 'syz.3.5417': attribute type 10 has an invalid length. [ 541.425339][T21070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5417'. [ 541.450020][T21070] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 541.727211][T21084] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5422'. [ 541.808497][T21084] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 543.335442][T21119] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5434'. [ 543.345297][T21119] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 543.515058][T21132] FAULT_INJECTION: forcing a failure. [ 543.515058][T21132] name failslab, interval 1, probability 0, space 0, times 0 [ 543.592349][T21132] CPU: 0 PID: 21132 Comm: syz.2.5441 Not tainted syzkaller #0 [ 543.599865][T21132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.609958][T21132] Call Trace: [ 543.613267][T21132] [ 543.616241][T21132] dump_stack_lvl+0x188/0x250 [ 543.620982][T21132] ? show_regs_print_info+0x20/0x20 [ 543.626225][T21132] ? load_image+0x410/0x410 [ 543.630788][T21132] ? __lock_acquire+0x7d40/0x7d40 [ 543.635850][T21132] ? __lock_acquire+0x13b3/0x7d40 [ 543.640954][T21132] should_fail+0x383/0x4b0 [ 543.645444][T21132] should_failslab+0x5/0x20 [ 543.649983][T21132] slab_pre_alloc_hook+0x51/0xc0 [ 543.654971][T21132] __kmalloc+0x6b/0x340 [ 543.659158][T21132] ? ip_options_get+0x4c/0x4e0 [ 543.664014][T21132] ip_options_get+0x4c/0x4e0 [ 543.668675][T21132] ip_cmsg_send+0x4fc/0xa50 [ 543.673280][T21132] udp_sendmsg+0xc2d/0x2350 [ 543.677822][T21132] ? release_sock+0x2b/0x1b0 [ 543.682503][T21132] ? ip_skb_dst_mtu+0x860/0x860 [ 543.687388][T21132] ? print_unlock_imbalance_bug+0x160/0x160 [ 543.693357][T21132] ? udp_cmsg_send+0x350/0x350 [ 543.698223][T21132] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 543.704285][T21132] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 543.710355][T21132] ? __local_bh_enable_ip+0x136/0x1c0 [ 543.715767][T21132] ? _local_bh_enable+0xa0/0xa0 [ 543.720666][T21132] ? do_raw_spin_unlock+0x11d/0x230 [ 543.725916][T21132] ? inet_sendmsg+0x109/0x2a0 [ 543.730652][T21132] ? inet_sendmsg+0x109/0x2a0 [ 543.735375][T21132] ? inet_send_prepare+0x250/0x250 [ 543.740537][T21132] ____sys_sendmsg+0x5be/0x8f0 [ 543.745380][T21132] ? __sys_sendmsg_sock+0x30/0x30 [ 543.750486][T21132] ? import_iovec+0x6f/0xa0 [ 543.755053][T21132] ___sys_sendmsg+0x236/0x2e0 [ 543.759803][T21132] ? __sys_sendmsg+0x290/0x290 [ 543.764762][T21132] __se_sys_sendmsg+0x1b7/0x2a0 [ 543.769669][T21132] ? __x64_sys_sendmsg+0x80/0x80 [ 543.774641][T21132] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 543.780713][T21132] ? lockdep_hardirqs_on+0x94/0x140 [ 543.785972][T21132] do_syscall_64+0x4c/0xa0 [ 543.790425][T21132] ? clear_bhb_loop+0x30/0x80 [ 543.795144][T21132] ? clear_bhb_loop+0x30/0x80 [ 543.799866][T21132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 543.805804][T21132] RIP: 0033:0x7f49988a3559 [ 543.810257][T21132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.829892][T21132] RSP: 002b:00007f4996afb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.838361][T21132] RAX: ffffffffffffffda RBX: 00007f4998b2afa0 RCX: 00007f49988a3559 [ 543.846366][T21132] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 543.854382][T21132] RBP: 00007f4996afb090 R08: 0000000000000000 R09: 0000000000000000 [ 543.862386][T21132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.870387][T21132] R13: 00007f4998b2b038 R14: 00007f4998b2afa0 R15: 00007fff1b140c38 [ 543.878447][T21132] [ 544.263023][T21153] netlink: 'syz.3.5444': attribute type 10 has an invalid length. [ 544.385819][T21153] device veth0_vlan left promiscuous mode [ 544.406096][T21153] device veth0_vlan entered promiscuous mode [ 544.459696][T21153] team0: Device veth0_vlan failed to register rx_handler [ 544.749521][T21181] netlink: 'syz.2.5451': attribute type 3 has an invalid length. [ 544.777852][T21181] __nla_validate_parse: 1 callbacks suppressed [ 544.777866][T21181] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.5451'. [ 544.800796][T21178] device syzkaller0 entered promiscuous mode [ 544.950449][T21193] netlink: 'syz.3.5455': attribute type 2 has an invalid length. [ 544.977703][T21193] netlink: 'syz.3.5455': attribute type 4 has an invalid length. [ 545.016001][T21193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5455'. [ 545.127158][T21197] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5456'. [ 545.177976][T21197] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 545.491711][T21215] netlink: 'syz.5.5462': attribute type 9 has an invalid length. [ 545.518797][T21215] netlink: 134780 bytes leftover after parsing attributes in process `syz.5.5462'. [ 545.579353][T21222] netlink: 170632 bytes leftover after parsing attributes in process `syz.1.5465'. [ 545.731929][T21236] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5472'. [ 545.844066][T21249] netlink: 'syz.4.5475': attribute type 10 has an invalid length. [ 545.888879][T21249] device batadv_slave_0 left promiscuous mode [ 545.963620][T21249] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 546.021870][T21258] netlink: 'syz.5.5478': attribute type 10 has an invalid length. [ 546.049816][T21258] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5478'. [ 546.197327][T21264] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5479'. [ 546.728374][T21281] netlink: 'syz.3.5485': attribute type 10 has an invalid length. [ 546.780309][T21281] device geneve1 left promiscuous mode [ 546.816113][T21281] team0: Port device geneve1 removed [ 546.824989][T21285] netlink: 'syz.3.5485': attribute type 13 has an invalid length. [ 547.080960][T21294] netlink: set zone limit has 8 unknown bytes [ 547.842092][T21338] device sit0 left promiscuous mode [ 548.142631][T21345] device sit0 entered promiscuous mode [ 548.176647][T21353] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5511'. [ 548.357463][T21353] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 548.376344][T21353] CPU: 1 PID: 21353 Comm: syz.3.5511 Not tainted syzkaller #0 [ 548.383848][T21353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 548.393926][T21353] Call Trace: [ 548.397226][T21353] [ 548.400179][T21353] dump_stack_lvl+0x188/0x250 [ 548.404892][T21353] ? show_regs_print_info+0x20/0x20 [ 548.410148][T21353] ? load_image+0x410/0x410 [ 548.414690][T21353] sysfs_warn_dup+0x8a/0xa0 [ 548.419216][T21353] sysfs_do_create_link_sd+0xc0/0x110 [ 548.424612][T21353] device_add+0x83b/0x1050 [ 548.429060][T21353] wiphy_register+0x1e74/0x2c40 [ 548.433964][T21353] ? cfg80211_event_work+0x40/0x40 [ 548.439104][T21353] ? minstrel_ht_alloc+0x807/0x980 [ 548.444251][T21353] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 548.450364][T21353] ieee80211_register_hw+0x2a03/0x3a60 [ 548.455861][T21353] ? ieee80211_register_hw+0xa91/0x3a60 [ 548.461448][T21353] ? ieee80211_tasklet_handler+0x20/0x20 [ 548.467128][T21353] ? rcu_is_watching+0x11/0xa0 [ 548.472033][T21353] ? hrtimer_init+0x10c/0x220 [ 548.476744][T21353] mac80211_hwsim_new_radio+0x209d/0x4050 [ 548.482514][T21353] hwsim_new_radio_nl+0xa7d/0xc50 [ 548.487586][T21353] genl_rcv_msg+0xd0b/0xfa0 [ 548.492128][T21353] ? genl_bind+0x370/0x370 [ 548.496574][T21353] ? perf_trace_lock+0xe4/0x390 [ 548.501446][T21353] ? verify_lock_unused+0x140/0x140 [ 548.506665][T21353] ? verify_lock_unused+0x140/0x140 [ 548.511881][T21353] ? perf_trace_lock+0xe4/0x390 [ 548.516781][T21353] ? perf_trace_lock+0xe4/0x390 [ 548.521664][T21353] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 548.528040][T21353] netlink_rcv_skb+0x1e9/0x430 [ 548.532833][T21353] ? genl_bind+0x370/0x370 [ 548.537280][T21353] ? netlink_ack+0xb10/0xb10 [ 548.541886][T21353] ? down_read+0x1aa/0x2e0 [ 548.546313][T21353] genl_rcv+0x24/0x40 [ 548.550297][T21353] netlink_unicast+0x78f/0x940 [ 548.555076][T21353] netlink_sendmsg+0x8ba/0xbe0 [ 548.559842][T21353] ? lockdep_hardirqs_on+0x94/0x140 [ 548.565053][T21353] ? netlink_getsockopt+0x570/0x570 [ 548.570256][T21353] ? aa_sock_msg_perm+0x94/0x150 [ 548.575210][T21353] ? apparmor_socket_sendmsg+0x88/0x230 [ 548.580765][T21353] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 548.586060][T21353] ? security_socket_sendmsg+0x7c/0xa0 [ 548.591535][T21353] ? netlink_getsockopt+0x570/0x570 [ 548.596745][T21353] ____sys_sendmsg+0x5be/0x8f0 [ 548.601520][T21353] ? __sys_sendmsg_sock+0x30/0x30 [ 548.606556][T21353] ? import_iovec+0x6f/0xa0 [ 548.611068][T21353] ___sys_sendmsg+0x236/0x2e0 [ 548.615763][T21353] ? __sys_sendmsg+0x290/0x290 [ 548.620553][T21353] ? trace_event_raw_event_lock+0x250/0x250 [ 548.626448][T21353] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 548.632712][T21353] __se_sys_sendmsg+0x1b7/0x2a0 [ 548.637580][T21353] ? __x64_sys_sendmsg+0x80/0x80 [ 548.642542][T21353] ? syscall_enter_from_user_mode+0x2a/0x70 [ 548.648443][T21353] do_syscall_64+0x4c/0xa0 [ 548.652862][T21353] ? clear_bhb_loop+0x30/0x80 [ 548.657545][T21353] ? clear_bhb_loop+0x30/0x80 [ 548.662229][T21353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 548.668126][T21353] RIP: 0033:0x7f4b5bf96559 [ 548.672546][T21353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.692166][T21353] RSP: 002b:00007f4b5a1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.700587][T21353] RAX: ffffffffffffffda RBX: 00007f4b5c21dfa0 RCX: 00007f4b5bf96559 [ 548.708568][T21353] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 548.716551][T21353] RBP: 00007f4b5c02d8b0 R08: 0000000000000000 R09: 0000000000000000 [ 548.724528][T21353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.732505][T21353] R13: 00007f4b5c21e038 R14: 00007f4b5c21dfa0 R15: 00007ffcc1e76708 [ 548.740496][T21353] [ 548.810595][T21363] netlink: 13822 bytes leftover after parsing attributes in process `syz.1.5513'. [ 549.366921][T21390] netlink: 'syz.2.5520': attribute type 1 has an invalid length. [ 549.392860][T21393] netlink: 'syz.3.5522': attribute type 10 has an invalid length. [ 549.423852][T21393] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 549.508689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 549.710938][T21411] netlink: 'syz.1.5528': attribute type 10 has an invalid length. [ 549.755641][T21411] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 549.889134][T21415] netlink: 'syz.3.5530': attribute type 4 has an invalid length. [ 549.941537][T21415] __nla_validate_parse: 4 callbacks suppressed [ 549.941550][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5530'. [ 550.061314][T21416] netlink: 'syz.3.5530': attribute type 46 has an invalid length. [ 550.173422][T21416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5530'. [ 550.192818][T21430] netlink: 'syz.1.5534': attribute type 10 has an invalid length. [ 550.215195][T21415] netlink: 'syz.3.5530': attribute type 1 has an invalid length. [ 550.228559][T21430] team0: Device hsr_slave_0 failed to register rx_handler [ 550.248194][T21415] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.5530'. [ 550.332842][T21426] netlink: 'syz.3.5530': attribute type 8 has an invalid length. [ 550.390409][T21426] netlink: 'syz.3.5530': attribute type 6 has an invalid length. [ 550.398249][T21426] netlink: 'syz.3.5530': attribute type 8 has an invalid length. [ 550.426246][T21426] netlink: 198884 bytes leftover after parsing attributes in process `syz.3.5530'. [ 550.460049][T21426] netlink: 198884 bytes leftover after parsing attributes in process `syz.3.5530'. [ 550.508853][T21425] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5533'. [ 550.610937][T21426] netlink: 198884 bytes leftover after parsing attributes in process `syz.3.5530'. [ 550.635039][T21426] netlink: 198884 bytes leftover after parsing attributes in process `syz.3.5530'. [ 550.774665][T21448] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5538'. [ 550.815167][T21448] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 551.134269][T21461] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5545'. [ 551.190637][T21461] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 551.957120][T21496] FAULT_INJECTION: forcing a failure. [ 551.957120][T21496] name failslab, interval 1, probability 0, space 0, times 0 [ 552.068528][T21496] CPU: 0 PID: 21496 Comm: syz.3.5555 Not tainted syzkaller #0 [ 552.076049][T21496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 552.086136][T21496] Call Trace: [ 552.089472][T21496] [ 552.092456][T21496] dump_stack_lvl+0x188/0x250 [ 552.097192][T21496] ? show_regs_print_info+0x20/0x20 [ 552.102432][T21496] ? load_image+0x410/0x410 [ 552.106993][T21496] ? __lock_acquire+0x7d40/0x7d40 [ 552.112089][T21496] should_fail+0x383/0x4b0 [ 552.116563][T21496] should_failslab+0x5/0x20 [ 552.121103][T21496] slab_pre_alloc_hook+0x51/0xc0 [ 552.126088][T21496] __kmalloc+0x6b/0x340 [ 552.130273][T21496] ? ip_options_get+0x4c/0x4e0 [ 552.135099][T21496] ip_options_get+0x4c/0x4e0 [ 552.139797][T21496] ip_cmsg_send+0x4fc/0xa50 [ 552.144422][T21496] udp_sendmsg+0xc2d/0x2350 [ 552.148985][T21496] ? release_sock+0x2b/0x1b0 [ 552.153726][T21496] ? ip_skb_dst_mtu+0x860/0x860 [ 552.158668][T21496] ? udp_cmsg_send+0x350/0x350 [ 552.163492][T21496] ? rcu_nmi_exit+0x6f/0xf0 [ 552.168038][T21496] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 552.174107][T21496] ? __local_bh_enable_ip+0x136/0x1c0 [ 552.179520][T21496] ? _local_bh_enable+0xa0/0xa0 [ 552.184450][T21496] ? do_raw_spin_unlock+0x11d/0x230 [ 552.189835][T21496] ? inet_sendmsg+0x109/0x2a0 [ 552.194577][T21496] ? inet_sendmsg+0x109/0x2a0 [ 552.199335][T21496] ? inet_send_prepare+0x250/0x250 [ 552.204531][T21496] ____sys_sendmsg+0x5be/0x8f0 [ 552.209383][T21496] ? __sys_sendmsg_sock+0x30/0x30 [ 552.214487][T21496] ? import_iovec+0x6f/0xa0 [ 552.219061][T21496] ___sys_sendmsg+0x236/0x2e0 [ 552.223824][T21496] ? __sys_sendmsg+0x290/0x290 [ 552.228804][T21496] __se_sys_sendmsg+0x1b7/0x2a0 [ 552.233730][T21496] ? __x64_sys_sendmsg+0x80/0x80 [ 552.238710][T21496] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 552.244776][T21496] ? lockdep_hardirqs_on+0x94/0x140 [ 552.250017][T21496] do_syscall_64+0x4c/0xa0 [ 552.254457][T21496] ? clear_bhb_loop+0x30/0x80 [ 552.259172][T21496] ? clear_bhb_loop+0x30/0x80 [ 552.263895][T21496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 552.269816][T21496] RIP: 0033:0x7f4b5bf96559 [ 552.274267][T21496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.293903][T21496] RSP: 002b:00007f4b5a1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.302487][T21496] RAX: ffffffffffffffda RBX: 00007f4b5c21dfa0 RCX: 00007f4b5bf96559 [ 552.310495][T21496] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 552.318505][T21496] RBP: 00007f4b5a1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 552.326518][T21496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.334514][T21496] R13: 00007f4b5c21e038 R14: 00007f4b5c21dfa0 R15: 00007ffcc1e76708 [ 552.342558][T21496] [ 552.556470][T21499] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 552.916207][T21509] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 553.187560][T21528] device syzkaller0 entered promiscuous mode [ 553.546720][T21564] device batadv_slave_0 left promiscuous mode [ 553.594581][T21564] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 554.544695][T21602] validate_nla: 27 callbacks suppressed [ 554.544742][T21602] netlink: 'syz.2.5593': attribute type 10 has an invalid length. [ 554.564868][T21602] device netdevsim0 left promiscuous mode [ 554.597217][T21602] device netdevsim0 entered promiscuous mode [ 554.615535][T21602] team0: Port device netdevsim0 added [ 554.625850][T21583] rxe_eth0 speed is unknown, defaulting to 1000 [ 554.633009][T21601] netlink: 'syz.2.5593': attribute type 10 has an invalid length. [ 554.659357][T21601] device bond0 entered promiscuous mode [ 554.675358][T21601] device bond_slave_0 entered promiscuous mode [ 554.698477][T21601] device bond_slave_1 entered promiscuous mode [ 554.721226][T21608] netlink: 'syz.5.5595': attribute type 10 has an invalid length. [ 554.824265][T21613] netlink: 'syz.5.5595': attribute type 13 has an invalid length. [ 554.982556][T21639] netlink: 'syz.3.5601': attribute type 21 has an invalid length. [ 554.995297][T21639] __nla_validate_parse: 13 callbacks suppressed [ 554.995311][T21639] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5601'. [ 555.265956][T21656] netlink: 'syz.2.5608': attribute type 10 has an invalid length. [ 555.274405][T21656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5608'. [ 555.298856][T21656] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 555.325114][T21654] netlink: 'syz.5.5609': attribute type 33 has an invalid length. [ 555.346231][T21654] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5609'. [ 555.470699][T21665] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5611'. [ 555.490149][T21665] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 555.722842][T21677] pim6reg0: tun_chr_ioctl cmd 1074025688 [ 555.906205][T21689] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.5620'. [ 555.980803][T21692] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5621'. [ 556.024505][T21694] netlink: 'syz.5.5622': attribute type 1 has an invalid length. [ 556.041003][T21694] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.5622'. [ 556.385656][T21700] netlink: 'syz.5.5624': attribute type 10 has an invalid length. [ 556.402059][T21700] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5624'. [ 556.416153][T21700] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 556.936481][T21743] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5640'. [ 557.481151][T21747] rxe_eth0 speed is unknown, defaulting to 1000 [ 558.055828][T21793] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 558.171773][T21796] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5659'. [ 558.209201][T21796] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 558.345158][T21810] netlink: 'syz.3.5665': attribute type 10 has an invalid length. [ 558.436168][T21806] device syzkaller0 entered promiscuous mode [ 558.586984][T21823] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 558.951081][T21844] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 559.071893][T21847] delete_channel: no stack [ 559.364741][T21866] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 559.523663][T21874] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 559.786389][T21894] validate_nla: 3 callbacks suppressed [ 559.786418][T21894] netlink: 'syz.1.5694': attribute type 10 has an invalid length. [ 559.811026][T21894] device geneve1 left promiscuous mode [ 559.834261][T21894] team0: Port device geneve1 removed [ 559.866799][T21894] netlink: 'syz.1.5694': attribute type 13 has an invalid length. [ 559.900569][T21899] device syzkaller0 entered promiscuous mode [ 560.126152][T21915] __nla_validate_parse: 7 callbacks suppressed [ 560.126185][T21915] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5702'. [ 560.173909][T21915] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 560.208214][T21917] sctp: [Deprecated]: syz.5.5704 (pid 21917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.208214][T21917] Use struct sctp_sack_info instead [ 560.439382][T21933] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5708'. [ 560.451677][T21936] netlink: 'syz.1.5710': attribute type 10 has an invalid length. [ 560.462214][T21936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5710'. [ 560.474936][T21936] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 560.717788][T21951] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5716'. [ 560.765914][T21951] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 560.920182][T21963] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5718'. [ 560.957122][T21963] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 560.994461][T21945] rxe_eth0 speed is unknown, defaulting to 1000 [ 561.063671][T21970] netlink: 'syz.4.5722': attribute type 1 has an invalid length. [ 561.108448][T21970] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5722'. [ 561.181417][T21977] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5724'. [ 561.367461][T21981] netlink: 'syz.1.5726': attribute type 4 has an invalid length. [ 561.798043][T21998] netlink: 'syz.2.5731': attribute type 10 has an invalid length. [ 561.820599][T21998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5731'. [ 561.842544][T21998] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 561.926474][T22002] netlink: 'syz.1.5733': attribute type 2 has an invalid length. [ 561.956121][T22002] netlink: 'syz.1.5733': attribute type 1 has an invalid length. [ 562.561041][T22043] netlink: 'syz.4.5751': attribute type 10 has an invalid length. [ 562.636732][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.643216][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.782607][T22049] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5753'. [ 563.023595][T22063] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5757'. [ 563.192058][T22071] netlink: 'syz.2.5762': attribute type 4 has an invalid length. [ 564.310941][T22092] net_ratelimit: 1 callbacks suppressed [ 564.310958][T22092] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 564.565179][T22093] rxe_eth0 speed is unknown, defaulting to 1000 [ 565.872011][T22120] netlink: 'syz.3.5776': attribute type 4 has an invalid length. [ 566.013189][T22123] netlink: 'syz.4.5779': attribute type 10 has an invalid length. [ 566.029000][T22123] __nla_validate_parse: 2 callbacks suppressed [ 566.029013][T22123] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5779'. [ 566.064960][T22126] netlink: 'syz.2.5780': attribute type 9 has an invalid length. [ 566.095906][T22126] netlink: 'syz.2.5780': attribute type 23 has an invalid length. [ 566.139258][T22126] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.5780'. [ 566.623302][T22136] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5784'. [ 568.511564][T22181] netlink: 'syz.4.5796': attribute type 9 has an invalid length. [ 568.583716][T22183] netlink: 'syz.3.5795': attribute type 21 has an invalid length. [ 568.623592][T22181] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.5796'. [ 568.661377][T22183] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5795'. [ 568.753786][T22166] netlink: 'syz.1.5791': attribute type 41 has an invalid length. [ 568.788757][T22166] device netdevsim0 left promiscuous mode [ 571.291355][T22227] netlink: 'syz.3.5810': attribute type 39 has an invalid length. [ 571.903794][T22235] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.5813'. [ 572.008751][T22235] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 572.293733][T22240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5813'. [ 573.489439][T22258] netlink: 'syz.3.5819': attribute type 10 has an invalid length. [ 573.622549][T22258] device vxcan1 entered promiscuous mode [ 573.654904][T22258] team0: Device vxcan1 is of different type [ 573.788723][T22265] netlink: 'syz.2.5823': attribute type 10 has an invalid length. [ 573.830869][T22265] device virt_wifi0 entered promiscuous mode [ 573.860911][T22265] team0: Port device virt_wifi0 added [ 577.546560][T22309] netlink: 'syz.4.5842': attribute type 39 has an invalid length. [ 578.961238][T22329] netlink: 'syz.3.5846': attribute type 10 has an invalid length. [ 578.999064][T22329] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5846'. [ 579.085055][T22314] rxe_eth0 speed is unknown, defaulting to 1000 [ 579.938530][ T7245] Bluetooth: hci5: command 0x0409 tx timeout [ 580.019431][T22340] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5851'. [ 580.058794][T22340] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 581.225356][T22314] chnl_net:caif_netlink_parms(): no params data found [ 581.311047][T22364] netlink: 'syz.1.5859': attribute type 39 has an invalid length. [ 581.706218][T22367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5861'. [ 581.751763][T22374] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5862'. [ 581.779321][T22374] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 581.874878][T22314] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.905842][T22314] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.914937][T22314] device bridge_slave_0 entered promiscuous mode [ 581.924407][T22314] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.933560][T22314] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.942845][T22314] device bridge_slave_1 entered promiscuous mode [ 581.992723][T22314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.034488][T22314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.073749][ T4344] Bluetooth: hci5: command 0x041b tx timeout [ 582.137011][T22314] team0: Port device team_slave_0 added [ 582.156086][T22314] team0: Port device team_slave_1 added [ 582.232706][T22314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.248332][T22314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.333156][T22314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.372260][T22314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.382141][T22314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.414141][T22314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.724347][ T5759] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.836055][ T5759] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.893079][T22314] device hsr_slave_0 entered promiscuous mode [ 582.905809][T22314] device hsr_slave_1 entered promiscuous mode [ 582.915192][T22314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.927125][T22314] Cannot create hsr debugfs directory [ 582.950934][ T5759] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.982325][T22418] netlink: 'syz.3.5877': attribute type 10 has an invalid length. [ 583.028179][ T5759] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.086699][T22421] netlink: 'syz.1.5878': attribute type 10 has an invalid length. [ 583.120434][T22421] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.129605][T22421] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.139133][T22421] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.147962][T22421] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.160027][T22421] device geneve1 entered promiscuous mode [ 583.166479][T22421] team0: Port device geneve1 added [ 583.483291][T22314] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 583.544517][T22314] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 583.562454][T22314] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 583.602358][T22314] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 583.617551][T22445] netlink: 'syz.1.5891': attribute type 9 has an invalid length. [ 583.666465][T22445] netlink: 165200 bytes leftover after parsing attributes in process `syz.1.5891'. [ 583.800924][T22439] netlink: 'syz.1.5891': attribute type 9 has an invalid length. [ 583.850944][T22439] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5891'. [ 584.148433][ T4328] Bluetooth: hci5: command 0x040f tx timeout [ 584.436104][T22314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.505930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 584.521887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.563435][T22314] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.610644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 584.637082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 584.666765][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.673925][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.726100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 584.755885][T22466] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5888'. [ 584.813127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 584.832795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 584.885129][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.892242][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.971761][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 585.052442][T22469] device syzkaller0 entered promiscuous mode [ 585.097881][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 585.129206][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 585.144792][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 585.168207][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 585.186005][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.284898][T22314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.320175][T22314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.333196][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 585.356248][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.388486][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.436440][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.456689][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.467500][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.743583][T22502] netlink: 'syz.1.5898': attribute type 4 has an invalid length. [ 585.775891][T22502] netlink: 'syz.1.5898': attribute type 7 has an invalid length. [ 585.784131][T22502] netlink: 198628 bytes leftover after parsing attributes in process `syz.1.5898'. [ 586.273071][ T4344] Bluetooth: hci5: command 0x0419 tx timeout [ 586.693235][T22515] netlink: 'syz.3.5899': attribute type 9 has an invalid length. [ 586.729240][T22515] netlink: 165200 bytes leftover after parsing attributes in process `syz.3.5899'. [ 587.086449][T22517] netlink: 'syz.3.5899': attribute type 9 has an invalid length. [ 587.102288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 587.110673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 587.123086][T22314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.131238][T22517] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5899'. [ 587.592190][ T5759] device hsr_slave_0 left promiscuous mode [ 587.612627][ T5759] device hsr_slave_1 left promiscuous mode [ 587.632157][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.640823][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.662309][ T5759] device veth1_vlan left promiscuous mode [ 587.678365][ T5759] device veth0_vlan left promiscuous mode [ 588.376445][ T5759] team0 (unregistering): Port device team_slave_1 removed [ 588.411722][ T5759] team0 (unregistering): Port device team_slave_0 removed [ 588.442850][ T5759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.476984][ T5759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.670072][ T5759] bond0 (unregistering): Released all slaves [ 588.704705][T22548] netlink: 'syz.3.5907': attribute type 10 has an invalid length. [ 588.729586][T22551] netlink: 'syz.3.5907': attribute type 13 has an invalid length. [ 588.986423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 589.009640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 589.097574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 589.113702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 589.144858][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 589.164813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 589.196795][T22314] device veth0_vlan entered promiscuous mode [ 589.232361][T22314] device veth1_vlan entered promiscuous mode [ 589.287274][T22582] netlink: 'syz.2.5916': attribute type 9 has an invalid length. [ 589.328650][T22582] netlink: 165200 bytes leftover after parsing attributes in process `syz.2.5916'. [ 589.362840][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 589.381414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 589.400699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 589.424285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 589.445654][T22314] device veth0_macvtap entered promiscuous mode [ 589.471801][T22314] device veth1_macvtap entered promiscuous mode [ 589.641318][T22314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.659347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 589.667567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 589.679018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 589.692345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 589.800846][T22314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.813192][T22592] netlink: 'syz.2.5916': attribute type 9 has an invalid length. [ 589.824941][T22314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.849981][T22592] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5916'. [ 589.860793][T22314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.892208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.913609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.952999][T22314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.971279][T22314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.986469][T22314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.008127][T22314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.240651][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.263882][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.296414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 590.334669][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.352009][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.398941][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 590.429472][T22632] netlink: 'syz.2.5931': attribute type 4 has an invalid length. [ 590.510830][T22632] netlink: 'syz.2.5931': attribute type 7 has an invalid length. [ 590.568601][T22632] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.5931'. [ 591.336486][T22668] netlink: 'syz.2.5938': attribute type 1 has an invalid length. [ 591.381100][T22668] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5938'. [ 591.645281][T22681] netlink: 'syz.4.5941': attribute type 9 has an invalid length. [ 591.800275][T22681] netlink: 165200 bytes leftover after parsing attributes in process `syz.4.5941'. [ 592.388632][T22684] netlink: 'syz.4.5941': attribute type 9 has an invalid length. [ 592.418019][T22691] rxe_eth0 speed is unknown, defaulting to 1000 [ 592.468336][T22684] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5941'. [ 592.481913][T22711] netlink: 'syz.1.5947': attribute type 10 has an invalid length. [ 592.496359][T22711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5947'. [ 592.520216][T22711] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 592.695772][T22714] device syzkaller0 entered promiscuous mode [ 592.911493][T22691] chnl_net:caif_netlink_parms(): no params data found [ 593.048000][T22691] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.055216][T22691] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.063216][T22691] device bridge_slave_0 entered promiscuous mode [ 593.071621][T22691] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.078871][T22691] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.086888][T22691] device bridge_slave_1 entered promiscuous mode [ 593.125724][T22691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.164607][T22709] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5946'. [ 593.211666][T22691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.088410][T22735] netlink: 'syz.1.5951': attribute type 9 has an invalid length. [ 594.096307][T22735] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5951'. [ 594.123663][T22691] team0: Port device team_slave_0 added [ 594.158564][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 594.224092][ T5759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.273203][T22691] team0: Port device team_slave_1 added [ 594.315188][T22739] netlink: 'syz.2.5952': attribute type 10 has an invalid length. [ 594.329609][T22739] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5952'. [ 594.379834][ T5759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.421424][T22691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.438938][T22691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.536670][T22691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.561632][T22691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.638667][T22691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.695087][T22755] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5959'. [ 594.713043][T22691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.757624][T22758] netlink: 'syz.4.5960': attribute type 10 has an invalid length. [ 594.779054][T22758] team0: Device hsr_slave_0 failed to register rx_handler [ 594.820574][ T5759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.917218][T22691] device hsr_slave_0 entered promiscuous mode [ 595.109334][T22691] device hsr_slave_1 entered promiscuous mode [ 595.361426][T22795] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5970'. [ 595.733082][T22691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.749983][T22691] Cannot create hsr debugfs directory [ 595.792846][ T5759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.839945][T22795] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 595.848061][T22795] CPU: 0 PID: 22795 Comm: syz.2.5970 Not tainted syzkaller #0 [ 595.855546][T22795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 595.865622][T22795] Call Trace: [ 595.868915][T22795] [ 595.871906][T22795] dump_stack_lvl+0x188/0x250 [ 595.876605][T22795] ? show_regs_print_info+0x20/0x20 [ 595.881832][T22795] ? load_image+0x410/0x410 [ 595.886353][T22795] sysfs_warn_dup+0x8a/0xa0 [ 595.890865][T22795] sysfs_do_create_link_sd+0xc0/0x110 [ 595.896259][T22795] device_add+0x83b/0x1050 [ 595.900698][T22795] wiphy_register+0x1e74/0x2c40 [ 595.905611][T22795] ? cfg80211_event_work+0x40/0x40 [ 595.910734][T22795] ? minstrel_ht_alloc+0x807/0x980 [ 595.915863][T22795] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 595.921951][T22795] ieee80211_register_hw+0x2a03/0x3a60 [ 595.927425][T22795] ? ieee80211_register_hw+0xa91/0x3a60 [ 595.932986][T22795] ? ieee80211_tasklet_handler+0x20/0x20 [ 595.938636][T22795] ? rcu_is_watching+0x11/0xa0 [ 595.943431][T22795] ? hrtimer_init+0x10c/0x220 [ 595.948136][T22795] mac80211_hwsim_new_radio+0x209d/0x4050 [ 595.953897][T22795] hwsim_new_radio_nl+0xa7d/0xc50 [ 595.958948][T22795] genl_rcv_msg+0xd0b/0xfa0 [ 595.963488][T22795] ? genl_bind+0x370/0x370 [ 595.967922][T22795] ? perf_trace_lock+0xe4/0x390 [ 595.972787][T22795] ? verify_lock_unused+0x140/0x140 [ 595.977997][T22795] ? verify_lock_unused+0x140/0x140 [ 595.983211][T22795] ? perf_trace_lock+0xe4/0x390 [ 595.988076][T22795] ? perf_trace_lock+0xe4/0x390 [ 595.992936][T22795] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 595.999292][T22795] netlink_rcv_skb+0x1e9/0x430 [ 596.004064][T22795] ? genl_bind+0x370/0x370 [ 596.008491][T22795] ? netlink_ack+0xb10/0xb10 [ 596.013228][T22795] ? down_read+0x1aa/0x2e0 [ 596.017665][T22795] genl_rcv+0x24/0x40 [ 596.021662][T22795] netlink_unicast+0x78f/0x940 [ 596.026449][T22795] netlink_sendmsg+0x8ba/0xbe0 [ 596.031234][T22795] ? netlink_getsockopt+0x570/0x570 [ 596.036442][T22795] ? aa_sock_msg_perm+0x94/0x150 [ 596.041399][T22795] ? apparmor_socket_sendmsg+0x88/0x230 [ 596.046961][T22795] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 596.052261][T22795] ? security_socket_sendmsg+0x7c/0xa0 [ 596.057737][T22795] ? netlink_getsockopt+0x570/0x570 [ 596.062964][T22795] ____sys_sendmsg+0x5be/0x8f0 [ 596.067746][T22795] ? __sys_sendmsg_sock+0x30/0x30 [ 596.072796][T22795] ? import_iovec+0x6f/0xa0 [ 596.077322][T22795] ___sys_sendmsg+0x236/0x2e0 [ 596.082019][T22795] ? __sys_sendmsg+0x290/0x290 [ 596.086828][T22795] ? trace_event_raw_event_lock+0x250/0x250 [ 596.092754][T22795] __se_sys_sendmsg+0x1b7/0x2a0 [ 596.097624][T22795] ? __x64_sys_sendmsg+0x80/0x80 [ 596.102571][T22795] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 596.108575][T22795] ? lockdep_hardirqs_on+0x94/0x140 [ 596.113784][T22795] do_syscall_64+0x4c/0xa0 [ 596.118210][T22795] ? clear_bhb_loop+0x30/0x80 [ 596.122909][T22795] ? clear_bhb_loop+0x30/0x80 [ 596.127599][T22795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 596.133501][T22795] RIP: 0033:0x7f49988a3559 [ 596.137930][T22795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.157550][T22795] RSP: 002b:00007f4996ada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.165977][T22795] RAX: ffffffffffffffda RBX: 00007f4998b2b090 RCX: 00007f49988a3559 [ 596.173954][T22795] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 596.181930][T22795] RBP: 00007f499893a8b0 R08: 0000000000000000 R09: 0000000000000000 [ 596.189906][T22795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.197884][T22795] R13: 00007f4998b2b128 R14: 00007f4998b2b090 R15: 00007fff1b140c38 [ 596.205884][T22795] [ 596.238527][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 596.278772][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5972'. [ 596.289871][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5972'. [ 596.320976][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5972'. [ 596.362829][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5972'. [ 596.423705][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5972'. [ 596.452610][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5972'. [ 596.481561][T22815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5976'. [ 596.490951][T22816] netlink: 'syz.4.5977': attribute type 10 has an invalid length. [ 596.499441][T22812] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5975'. [ 596.512149][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5972'. [ 596.985924][T22835] netlink: 'syz.1.5981': attribute type 4 has an invalid length. [ 597.149073][T22812] rxe_eth0 speed is unknown, defaulting to 1000 [ 597.326133][T22850] FAULT_INJECTION: forcing a failure. [ 597.326133][T22850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.369838][T22850] CPU: 0 PID: 22850 Comm: syz.4.5985 Not tainted syzkaller #0 [ 597.377339][T22850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 597.387411][T22850] Call Trace: [ 597.390708][T22850] [ 597.393655][T22850] dump_stack_lvl+0x188/0x250 [ 597.398355][T22850] ? show_regs_print_info+0x20/0x20 [ 597.403577][T22850] ? load_image+0x410/0x410 [ 597.408101][T22850] ? __lock_acquire+0x7d40/0x7d40 [ 597.413150][T22850] should_fail+0x383/0x4b0 [ 597.417602][T22850] _copy_from_user+0x2e/0x170 [ 597.422301][T22850] __sys_bpf+0x26d/0x6f0 [ 597.426568][T22850] ? bpf_link_show_fdinfo+0x380/0x380 [ 597.431990][T22850] __x64_sys_bpf+0x78/0x90 [ 597.436442][T22850] do_syscall_64+0x4c/0xa0 [ 597.440886][T22850] ? clear_bhb_loop+0x30/0x80 [ 597.445585][T22850] ? clear_bhb_loop+0x30/0x80 [ 597.450369][T22850] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 597.456274][T22850] RIP: 0033:0x7f0807deb559 [ 597.460701][T22850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.480399][T22850] RSP: 002b:00007f0806043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.488825][T22850] RAX: ffffffffffffffda RBX: 00007f0808072fa0 RCX: 00007f0807deb559 [ 597.496806][T22850] RDX: 0000000000000048 RSI: 0000200000001d80 RDI: 0000000000000005 [ 597.504791][T22850] RBP: 00007f0806043090 R08: 0000000000000000 R09: 0000000000000000 [ 597.512769][T22850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.520745][T22850] R13: 00007f0808073038 R14: 00007f0808072fa0 R15: 00007ffd8e993a08 [ 597.528740][T22850] [ 598.310416][ T4344] Bluetooth: hci1: command 0x040f tx timeout [ 598.427354][T22691] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 598.493727][T22691] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 598.541544][T22691] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 598.555044][T22691] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 598.838613][T22691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.900591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 598.912306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 598.957125][T22691] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.990312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.033596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.054817][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.061941][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.104088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 599.112382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.144431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.189021][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.196220][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.230783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 599.308178][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 599.322909][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 599.335312][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 599.347302][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 599.362542][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 599.372451][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 599.401195][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 599.446055][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 599.481347][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.175561][T22691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 600.198513][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 600.383881][T22962] netlink: 'syz.4.6018': attribute type 10 has an invalid length. [ 600.398562][T11764] Bluetooth: hci1: command 0x0419 tx timeout [ 600.506569][T22962] team0: Port device geneve1 removed [ 600.548344][T22965] netlink: 'syz.4.6018': attribute type 13 has an invalid length. [ 600.695653][ T5759] device hsr_slave_0 left promiscuous mode [ 600.706180][ T5759] device hsr_slave_1 left promiscuous mode [ 600.782576][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.824241][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.875705][ T5759] device veth1_vlan left promiscuous mode [ 601.333403][ T5759] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 601.391922][ T5759] device team_slave_1 left promiscuous mode [ 601.440499][ T5759] team0 (unregistering): Port device team_slave_1 removed [ 601.488220][ T5759] device team_slave_0 left promiscuous mode [ 601.532334][ T5759] team0 (unregistering): Port device team_slave_0 removed [ 601.577582][ T5759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.593953][ T5759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.700731][ T5759] bond0 (unregistering): Released all slaves [ 601.725250][T22691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.742669][T22976] __nla_validate_parse: 61 callbacks suppressed [ 601.742683][T22976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6021'. [ 601.762485][T22985] netlink: 'syz.4.6024': attribute type 10 has an invalid length. [ 601.781230][T22985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6024'. [ 601.801708][T22985] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 601.830445][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 601.870639][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 601.972338][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 601.989428][T22991] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.6027'. [ 602.000187][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.142373][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 602.179410][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.207455][T22997] netlink: 'syz.6.6026': attribute type 9 has an invalid length. [ 602.238544][T22997] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.6026'. [ 602.251088][T22691] device veth0_vlan entered promiscuous mode [ 602.346921][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.356329][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.389951][T22691] device veth1_vlan entered promiscuous mode [ 602.500684][T23009] -1O2~: renamed from syzkaller0 [ 602.555366][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 602.574660][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 602.604895][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.645826][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.679171][T22691] device veth0_macvtap entered promiscuous mode [ 602.719641][T22691] device veth1_macvtap entered promiscuous mode [ 602.794197][T22691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.848359][T22691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.886533][T22691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.923128][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 602.939825][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 602.970926][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 603.009938][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.044719][T22691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.110727][T23038] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6037'. [ 603.122068][T22691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.155752][T22691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.180995][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 603.201131][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.254018][T23038] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 603.280862][T23038] CPU: 1 PID: 23038 Comm: syz.1.6037 Not tainted syzkaller #0 [ 603.288353][T23038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 603.298427][T23038] Call Trace: [ 603.301717][T23038] [ 603.304659][T23038] dump_stack_lvl+0x188/0x250 [ 603.309368][T23038] ? show_regs_print_info+0x20/0x20 [ 603.314578][T23038] ? load_image+0x410/0x410 [ 603.319108][T23038] sysfs_warn_dup+0x8a/0xa0 [ 603.323629][T23038] sysfs_do_create_link_sd+0xc0/0x110 [ 603.329028][T23038] device_add+0x83b/0x1050 [ 603.333471][T23038] wiphy_register+0x1e74/0x2c40 [ 603.338363][T23038] ? cfg80211_event_work+0x40/0x40 [ 603.343503][T23038] ? minstrel_ht_alloc+0x807/0x980 [ 603.348646][T23038] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 603.354754][T23038] ieee80211_register_hw+0x2a03/0x3a60 [ 603.360248][T23038] ? ieee80211_register_hw+0xa91/0x3a60 [ 603.365826][T23038] ? ieee80211_tasklet_handler+0x20/0x20 [ 603.371489][T23038] ? rcu_is_watching+0x11/0xa0 [ 603.376285][T23038] ? hrtimer_init+0x10c/0x220 [ 603.380992][T23038] mac80211_hwsim_new_radio+0x209d/0x4050 [ 603.386758][T23038] hwsim_new_radio_nl+0xa7d/0xc50 [ 603.391820][T23038] genl_rcv_msg+0xd0b/0xfa0 [ 603.396353][T23038] ? genl_bind+0x370/0x370 [ 603.400793][T23038] ? vmacache_find+0x238/0x590 [ 603.405575][T23038] ? verify_lock_unused+0x140/0x140 [ 603.410877][T23038] ? verify_lock_unused+0x140/0x140 [ 603.416126][T23038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 603.422131][T23038] ? lock_chain_count+0x20/0x20 [ 603.427009][T23038] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 603.433388][T23038] netlink_rcv_skb+0x1e9/0x430 [ 603.438168][T23038] ? genl_bind+0x370/0x370 [ 603.442607][T23038] ? netlink_ack+0xb10/0xb10 [ 603.447229][T23038] ? down_read+0x1aa/0x2e0 [ 603.451752][T23038] genl_rcv+0x24/0x40 [ 603.455770][T23038] netlink_unicast+0x78f/0x940 [ 603.460564][T23038] netlink_sendmsg+0x8ba/0xbe0 [ 603.465359][T23038] ? netlink_getsockopt+0x570/0x570 [ 603.470577][T23038] ? aa_sock_msg_perm+0x94/0x150 [ 603.475632][T23038] ? apparmor_socket_sendmsg+0x88/0x230 [ 603.481199][T23038] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 603.486501][T23038] ? security_socket_sendmsg+0x7c/0xa0 [ 603.491975][T23038] ? netlink_getsockopt+0x570/0x570 [ 603.497193][T23038] ____sys_sendmsg+0x5be/0x8f0 [ 603.501987][T23038] ? __sys_sendmsg_sock+0x30/0x30 [ 603.507038][T23038] ? import_iovec+0x6f/0xa0 [ 603.511559][T23038] ___sys_sendmsg+0x236/0x2e0 [ 603.516267][T23038] ? __sys_sendmsg+0x290/0x290 [ 603.521086][T23038] __se_sys_sendmsg+0x1b7/0x2a0 [ 603.525956][T23038] ? __x64_sys_sendmsg+0x80/0x80 [ 603.530921][T23038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 603.536931][T23038] ? lockdep_hardirqs_on+0x94/0x140 [ 603.542153][T23038] do_syscall_64+0x4c/0xa0 [ 603.546581][T23038] ? clear_bhb_loop+0x30/0x80 [ 603.551285][T23038] ? clear_bhb_loop+0x30/0x80 [ 603.555988][T23038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 603.561903][T23038] RIP: 0033:0x7f8d093a9559 [ 603.566334][T23038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.585952][T23038] RSP: 002b:00007f8d075bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.594382][T23038] RAX: ffffffffffffffda RBX: 00007f8d09631180 RCX: 00007f8d093a9559 [ 603.602375][T23038] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 603.610357][T23038] RBP: 00007f8d094408b0 R08: 0000000000000000 R09: 0000000000000000 [ 603.618350][T23038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.626342][T23038] R13: 00007f8d09631218 R14: 00007f8d09631180 R15: 00007ffc531da7b8 [ 603.634351][T23038] [ 603.675155][T22691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.713970][T22691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.729659][T22691] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.738696][T22691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.845220][T23054] netlink: 'syz.4.6043': attribute type 10 has an invalid length. [ 603.879620][T23054] team0: Device hsr_slave_0 failed to register rx_handler [ 604.202248][T23066] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.6045'. [ 604.290494][ T5757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.322497][ T5757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.364994][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 604.426769][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.466140][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.527442][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 605.387263][T23110] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6056'. [ 605.677620][T23115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.708399][T23115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.774281][T23118] rxe_eth0 speed is unknown, defaulting to 1000 [ 605.806521][T23113] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.6058'. [ 605.882136][T23112] delete_channel: no stack [ 606.519653][T23142] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6066'. [ 606.553196][T23135] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6065'. [ 606.716893][T23118] chnl_net:caif_netlink_parms(): no params data found [ 606.908160][T23148] netlink: 'syz.6.6069': attribute type 10 has an invalid length. [ 607.201331][T23154] netlink: 'syz.3.6070': attribute type 10 has an invalid length. [ 607.234255][T23154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6070'. [ 607.754368][T23154] netlink: 'syz.3.6070': attribute type 10 has an invalid length. [ 607.764945][ T7245] Bluetooth: hci0: command 0x0409 tx timeout [ 607.792086][T23154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6070'. [ 607.911807][T23148] syz.6.6069 (23148) used greatest stack depth: 17936 bytes left [ 607.945850][T23118] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.990123][T23118] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.025913][T23118] device bridge_slave_0 entered promiscuous mode [ 608.074941][T23166] netlink: 'syz.6.6072': attribute type 10 has an invalid length. [ 608.095808][T23118] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.170736][T23118] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.242826][T23118] device bridge_slave_1 entered promiscuous mode [ 608.369302][T23118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.401591][T23177] netlink: 'syz.3.6078': attribute type 29 has an invalid length. [ 608.420046][T23178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.427689][T23178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.458645][T23178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.474368][T23178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.543697][T23118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.566581][T23177] netlink: 'syz.3.6078': attribute type 29 has an invalid length. [ 608.582120][T23179] netlink: 'syz.3.6078': attribute type 29 has an invalid length. [ 608.661360][T23118] team0: Port device team_slave_0 added [ 608.675271][T23182] netlink: 'syz.3.6078': attribute type 29 has an invalid length. [ 608.699625][T23118] team0: Port device team_slave_1 added [ 608.819439][T23118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.858346][T23118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.998165][T23118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.062707][T23118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.114942][T23118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.186893][T23194] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.6085'. [ 609.286306][T23118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.318071][T23195] netlink: 140 bytes leftover after parsing attributes in process `syz.6.6085'. [ 609.828819][T15706] Bluetooth: hci0: command 0x041b tx timeout [ 609.997240][T23118] device hsr_slave_0 entered promiscuous mode [ 610.066134][T23118] device hsr_slave_1 entered promiscuous mode [ 610.546817][ T5759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.716019][ T5759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.908485][ T7231] Bluetooth: hci0: command 0x040f tx timeout [ 612.443020][T23223] netlink: 'syz.6.6094': attribute type 39 has an invalid length. [ 612.612548][T23228] netlink: 15119 bytes leftover after parsing attributes in process `syz.6.6094'. [ 612.662034][ T5759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.700863][T23241] netlink: 'syz.3.6098': attribute type 10 has an invalid length. [ 612.719951][T23241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6098'. [ 612.734638][T23241] device dummy0 entered promiscuous mode [ 612.752010][T23241] bridge0: port 3(dummy0) entered blocking state [ 612.774952][T23241] bridge0: port 3(dummy0) entered disabled state [ 612.782826][T23241] bridge0: port 3(dummy0) entered blocking state [ 612.789255][T23241] bridge0: port 3(dummy0) entered forwarding state [ 612.820373][ T5759] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.923843][T23243] rxe_eth0 speed is unknown, defaulting to 1000 [ 613.608955][T23281] netlink: 'syz.3.6108': attribute type 46 has an invalid length. [ 613.644169][T23285] netlink: 'syz.6.6109': attribute type 10 has an invalid length. [ 613.701948][T23285] team0: Port device virt_wifi0 added [ 613.914461][T23294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6112'. [ 613.938517][T23294] : renamed from caif0 [ 613.988632][ T7244] Bluetooth: hci0: command 0x0419 tx timeout [ 614.020825][T23243] chnl_net:caif_netlink_parms(): no params data found [ 614.416277][T23243] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.426423][T23243] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.435208][T23243] device bridge_slave_0 entered promiscuous mode [ 614.491939][T23243] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.508658][T23243] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.521364][T23243] device bridge_slave_1 entered promiscuous mode [ 614.602962][T23243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.635700][T23317] rxe_eth0 speed is unknown, defaulting to 1000 [ 614.657218][T23243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.779256][T23243] team0: Port device team_slave_0 added [ 614.788438][ T7257] Bluetooth: hci2: command 0x0409 tx timeout [ 614.831813][T23243] team0: Port device team_slave_1 added [ 614.885374][T23243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.925664][T23243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.994690][T23243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.067471][T23243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.075719][T23243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.123936][T23243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.124683][T23350] netlink: 'syz.4.6124': attribute type 4 has an invalid length. [ 615.153599][T23350] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6124'. [ 615.292886][T23118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 615.313885][T23243] device hsr_slave_0 entered promiscuous mode [ 615.341440][T23243] device hsr_slave_1 entered promiscuous mode [ 615.369346][T23243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.376923][T23243] Cannot create hsr debugfs directory [ 615.429150][T23118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 615.479076][T23118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 615.545506][T23118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 616.016523][T23118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.095896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 616.114109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 616.158963][T23118] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.239874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 616.276647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 616.307118][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.314353][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.354582][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 616.392461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 616.410127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 616.419016][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.426125][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.442023][T23243] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 616.487814][T23243] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 616.514197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 616.532222][T23243] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 616.563168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 616.585393][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 616.626201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 616.679672][T23243] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 616.702015][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 616.729527][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 616.752754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 616.775260][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 616.792948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 616.811830][T23118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.826150][T23118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 616.870113][ T7231] Bluetooth: hci2: command 0x041b tx timeout [ 616.924360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 616.951595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 617.126780][ T5759] device wlan1 left promiscuous mode [ 617.163573][ T5759] team0: Port device wlan1 removed [ 617.333559][T23243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.445342][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.465432][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.509197][T23243] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.568463][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 617.576119][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.633086][T23118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.671078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 617.693469][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 617.716841][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.724037][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.847669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.857022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 617.891047][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 617.921908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 617.949480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 617.971632][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.978940][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.028136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.052631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.085422][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.129060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 618.137919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 618.187513][ T5759] device hsr_slave_0 left promiscuous mode [ 618.195824][T23466] netlink: 'syz.6.6148': attribute type 1 has an invalid length. [ 618.203976][ T5759] device hsr_slave_1 left promiscuous mode [ 618.222392][T23466] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.6148'. [ 618.234031][ T5759] device veth1_vlan left promiscuous mode [ 618.248175][ T5759] device veth0_vlan left promiscuous mode [ 618.472420][ T5759] device geneve1 left promiscuous mode [ 618.492259][ T5759] team0 (unregistering): Port device geneve1 removed [ 618.524095][ T5759] device macvlan0 left promiscuous mode [ 618.533715][ T5759] team0 (unregistering): Port device macvlan0 removed [ 618.555586][ T5759] device virt_wifi0 left promiscuous mode [ 618.562979][ T5759] team0 (unregistering): Port device virt_wifi0 removed [ 618.609770][ T5759] device team_slave_1 left promiscuous mode [ 618.617000][ T5759] team0 (unregistering): Port device team_slave_1 removed [ 618.631497][ T5759] device team_slave_0 left promiscuous mode [ 618.638228][ T5759] team0 (unregistering): Port device team_slave_0 removed [ 618.657595][ T5759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.673624][ T5759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.689231][ T5759] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 618.751396][ T5759] bond0 (unregistering): Released all slaves [ 618.772958][T23118] device veth0_vlan entered promiscuous mode [ 618.781588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 618.791936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 618.801210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 618.813266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 618.823084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 618.840399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 618.849556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 618.858059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 618.871369][T23243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 618.881132][T23481] netlink: 'syz.3.6151': attribute type 10 has an invalid length. [ 618.891704][T23481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6151'. [ 618.901237][T23481] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 618.933288][T23118] device veth1_vlan entered promiscuous mode [ 618.942614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 618.949648][ T7245] Bluetooth: hci2: command 0x040f tx timeout [ 618.970219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 618.982253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 618.992725][T23485] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.6152'. [ 619.045145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 619.054531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 619.067299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 619.086096][T23118] device veth0_macvtap entered promiscuous mode [ 619.141613][T23118] device veth1_macvtap entered promiscuous mode [ 619.159792][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 619.171304][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 619.204505][T23118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.215388][T23118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.267943][T23118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.280783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 619.294900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 619.317160][T23118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.333910][T23118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.349876][T23118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.393646][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 619.418823][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 619.446666][T23118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.498352][T23118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.507077][T23118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.562100][T23118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.603725][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 619.614305][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.635570][T23243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.723175][T23512] netlink: 'syz.3.6159': attribute type 21 has an invalid length. [ 619.763022][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.786838][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.835925][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 619.905252][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.938019][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.969787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 620.136495][T23522] netlink: 'syz.1.6053': attribute type 1 has an invalid length. [ 620.175002][T23522] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6053'. [ 620.433879][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 620.465442][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.542156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 620.569042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.602636][T23243] device veth0_vlan entered promiscuous mode [ 620.609954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 620.658988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 620.719483][T23243] device veth1_vlan entered promiscuous mode [ 620.842568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 620.861253][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 620.925737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 620.960547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.002309][T23243] device veth0_macvtap entered promiscuous mode [ 621.029613][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 621.047588][T23243] device veth1_macvtap entered promiscuous mode [ 621.103696][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.124810][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.158294][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.177908][T23570] FAULT_INJECTION: forcing a failure. [ 621.177908][T23570] name failslab, interval 1, probability 0, space 0, times 0 [ 621.208292][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.208985][T23570] CPU: 1 PID: 23570 Comm: syz.6.6179 Not tainted syzkaller #0 [ 621.225572][T23570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.235641][T23570] Call Trace: [ 621.236800][T23243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.238934][T23570] [ 621.238943][T23570] dump_stack_lvl+0x188/0x250 [ 621.253756][T23570] ? show_regs_print_info+0x20/0x20 [ 621.258980][T23570] ? load_image+0x410/0x410 [ 621.263508][T23570] ? __might_sleep+0xf0/0xf0 [ 621.268120][T23570] ? __lock_acquire+0x7d40/0x7d40 [ 621.273175][T23570] should_fail+0x383/0x4b0 [ 621.277622][T23570] should_failslab+0x5/0x20 [ 621.282141][T23570] slab_pre_alloc_hook+0x51/0xc0 [ 621.282508][T23563] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6176'. [ 621.287097][T23570] kmem_cache_alloc_node+0x47/0x2c0 [ 621.287117][T23570] ? alloc_vmap_area+0x199/0x1b30 [ 621.287141][T23570] alloc_vmap_area+0x199/0x1b30 [ 621.287175][T23570] ? vm_map_ram+0xba0/0xba0 [ 621.287202][T23570] __get_vm_area_node+0x14f/0x2d0 [ 621.287226][T23570] __vmalloc_node_range+0xef/0x8b0 [ 621.287245][T23570] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 621.287263][T23570] ? end_current_label_crit_section+0x170/0x170 [ 621.337725][T23570] ? __lock_acquire+0x7d40/0x7d40 [ 621.342786][T23570] ? perf_trace_lock_acquire+0xed/0x3f0 [ 621.348352][T23570] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 621.353910][T23570] __vmalloc+0x76/0x80 [ 621.358003][T23570] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 621.363567][T23570] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 621.368960][T23570] bpf_prog_alloc+0x1a/0x1e0 [ 621.373571][T23570] bpf_prog_load+0x7d1/0x14e0 [ 621.378276][T23570] ? map_freeze+0x360/0x360 [ 621.382801][T23570] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 621.389095][T23570] ? lockdep_hardirqs_on+0x94/0x140 [ 621.394326][T23570] ? bpf_lsm_bpf+0x5/0x10 [ 621.398680][T23570] ? security_bpf+0x7a/0xa0 [ 621.403241][T23570] __sys_bpf+0x532/0x6f0 [ 621.407502][T23570] ? bpf_link_show_fdinfo+0x380/0x380 [ 621.412907][T23570] __x64_sys_bpf+0x78/0x90 [ 621.417346][T23570] do_syscall_64+0x4c/0xa0 [ 621.421781][T23570] ? clear_bhb_loop+0x30/0x80 [ 621.426485][T23570] ? clear_bhb_loop+0x30/0x80 [ 621.431183][T23570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.437099][T23570] RIP: 0033:0x7ffa50668559 [ 621.441527][T23570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.461174][T23570] RSP: 002b:00007ffa4e8c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 621.469604][T23570] RAX: ffffffffffffffda RBX: 00007ffa508effa0 RCX: 00007ffa50668559 [ 621.477591][T23570] RDX: 0000000000000048 RSI: 0000200000001d80 RDI: 0000000000000005 [ 621.485582][T23570] RBP: 00007ffa4e8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 621.493574][T23570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.501565][T23570] R13: 00007ffa508f0038 R14: 00007ffa508effa0 R15: 00007ffead550f98 [ 621.509565][T23570] [ 621.526387][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 621.549183][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 621.577537][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.616862][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.635328][T23570] syz.6.6179: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 621.664092][T23570] CPU: 1 PID: 23570 Comm: syz.6.6179 Not tainted syzkaller #0 [ 621.671576][T23570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.681639][T23570] Call Trace: [ 621.684927][T23570] [ 621.687866][T23570] dump_stack_lvl+0x188/0x250 [ 621.692551][T23570] ? rcu_lock_release+0x5/0x20 [ 621.697322][T23570] ? show_regs_print_info+0x20/0x20 [ 621.702539][T23570] ? load_image+0x410/0x410 [ 621.707053][T23570] warn_alloc+0x245/0x320 [ 621.711399][T23570] ? zone_watermark_ok_safe+0x250/0x250 [ 621.716947][T23570] ? lockdep_hardirqs_on+0x94/0x140 [ 621.722153][T23570] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 621.728319][T23570] ? __vmalloc_node_range+0x29a/0x8b0 [ 621.733698][T23570] __vmalloc_node_range+0x2b1/0x8b0 [ 621.738905][T23570] ? end_current_label_crit_section+0x170/0x170 [ 621.745153][T23570] ? __lock_acquire+0x7d40/0x7d40 [ 621.750182][T23570] ? perf_trace_lock_acquire+0xed/0x3f0 [ 621.755737][T23570] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 621.761284][T23570] __vmalloc+0x76/0x80 [ 621.765357][T23570] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 621.770906][T23570] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 621.776283][T23570] bpf_prog_alloc+0x1a/0x1e0 [ 621.780878][T23570] bpf_prog_load+0x7d1/0x14e0 [ 621.785568][T23570] ? map_freeze+0x360/0x360 [ 621.790072][T23570] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 621.796230][T23570] ? lockdep_hardirqs_on+0x94/0x140 [ 621.801443][T23570] ? bpf_lsm_bpf+0x5/0x10 [ 621.805778][T23570] ? security_bpf+0x7a/0xa0 [ 621.810291][T23570] __sys_bpf+0x532/0x6f0 [ 621.814546][T23570] ? bpf_link_show_fdinfo+0x380/0x380 [ 621.819935][T23570] __x64_sys_bpf+0x78/0x90 [ 621.824353][T23570] do_syscall_64+0x4c/0xa0 [ 621.828774][T23570] ? clear_bhb_loop+0x30/0x80 [ 621.833451][T23570] ? clear_bhb_loop+0x30/0x80 [ 621.838135][T23570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.844033][T23570] RIP: 0033:0x7ffa50668559 [ 621.848452][T23570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.868061][T23570] RSP: 002b:00007ffa4e8c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 621.876505][T23570] RAX: ffffffffffffffda RBX: 00007ffa508effa0 RCX: 00007ffa50668559 [ 621.884483][T23570] RDX: 0000000000000048 RSI: 0000200000001d80 RDI: 0000000000000005 [ 621.892590][T23570] RBP: 00007ffa4e8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 621.900565][T23570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.908534][T23570] R13: 00007ffa508f0038 R14: 00007ffa508effa0 R15: 00007ffead550f98 [ 621.916519][T23570] [ 621.955468][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.984735][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.005650][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.028781][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.038922][T23570] Mem-Info: [ 622.042172][T23570] active_anon:292 inactive_anon:10179 isolated_anon:0 [ 622.042172][T23570] active_file:23619 inactive_file:36223 isolated_file:0 [ 622.042172][T23570] unevictable:768 dirty:41 writeback:82 [ 622.042172][T23570] slab_reclaimable:22679 slab_unreclaimable:104837 [ 622.042172][T23570] mapped:30901 shmem:4679 pagetables:814 bounce:0 [ 622.042172][T23570] kernel_misc_reclaimable:0 [ 622.042172][T23570] free:1356857 free_pcp:7343 free_cma:0 [ 622.118185][T23243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.146762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 622.157782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.180310][T23243] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.192056][T23243] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.210995][T23570] Node 0 active_anon:1136kB inactive_anon:37304kB active_file:94272kB inactive_file:144892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124404kB dirty:164kB writeback:328kB shmem:14036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:13568kB pagetables:3056kB all_unreclaimable? no [ 622.253175][T23243] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.275572][T23243] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.305757][T23584] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6185'. [ 622.321579][T23570] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 622.379384][T23580] rxe_eth0 speed is unknown, defaulting to 1000 [ 622.489099][T23570] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 622.571222][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.592601][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.652559][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.665406][T23570] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 622.691631][T23570] Node 0 DMA32 free:1491596kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1136kB inactive_anon:36576kB active_file:94272kB inactive_file:144892kB unevictable:1536kB writepending:936kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:31104kB local_pcp:19880kB free_cma:0kB [ 622.753928][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.775572][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.802876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.837206][T23570] lowmem_reserve[]: 0 0 0 0 0 [ 622.852443][T23570] Node 0 Normal free:12kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 622.922860][T23597] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6189'. [ 622.945281][T23570] lowmem_reserve[]: 0 0 0 0 0 [ 622.971472][T23570] Node 1 Normal free:3920632kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:716kB local_pcp:0kB free_cma:0kB [ 623.108169][T23570] lowmem_reserve[]: 0 0 0 0 0 [ 623.135935][T23570] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 623.199415][T23570] Node 0 DMA32: 1884*4kB (UME) 2365*8kB (UME) 1493*16kB (UME) 2083*32kB (UME) 1161*64kB (UME) 668*128kB (UM) 325*256kB (UME) 168*512kB (UME) 89*1024kB (UM) 31*2048kB (UME) 217*4096kB (UM) = 1489480kB [ 623.298533][T23570] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 623.345296][T23570] Node 1 Normal: 236*4kB (UME) 35*8kB (UE) 25*16kB (UME) 159*32kB (UE) 71*64kB (UME) 24*128kB (UME) 15*256kB (UME) 2*512kB (U) 0*1024kB 3*2048kB (UME) 951*4096kB (M) = 3920632kB [ 623.403977][T23570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 623.439015][T23570] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 623.478403][T23570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 623.508508][T23570] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 623.547143][T23570] 65436 total pagecache pages [ 623.557325][T23570] 0 pages in swap cache [ 623.572240][T23570] Swap cache stats: add 58, delete 58, find 2/15 [ 623.589740][T23570] Free swap = 124728kB [ 623.604138][T23570] Total swap = 124996kB [ 623.627612][T23570] 2097051 pages RAM [ 623.648366][T23570] 0 pages HighMem/MovableOnly [ 623.653063][T23570] 415313 pages reserved [ 623.657232][T23570] 0 pages cma reserved [ 623.786924][T23633] netlink: 'syz.6.6205': attribute type 5 has an invalid length. [ 623.825094][T23633] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6205'. [ 623.932211][T23633] netlink: 10 bytes leftover after parsing attributes in process `syz.6.6205'. [ 624.012887][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.019378][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.305763][T23649] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.6208'. [ 624.692630][T23657] netlink: 'syz.1.6210': attribute type 10 has an invalid length. [ 624.756777][T23657] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6210'. [ 624.827670][T23658] rxe_eth0 speed is unknown, defaulting to 1000 [ 624.912572][ T5759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.186677][ T5759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.219741][T23678] netlink: 'syz.3.6219': attribute type 10 has an invalid length. [ 625.227836][T23678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6219'. [ 625.237420][T23678] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 625.292207][ T5759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.395749][ T5759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.473628][T23658] chnl_net:caif_netlink_parms(): no params data found [ 625.553037][T23697] netlink: 'syz.1.6226': attribute type 10 has an invalid length. [ 625.564255][T23697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6226'. [ 625.573587][T23697] device dummy0 entered promiscuous mode [ 625.580776][T23697] bridge0: port 3(dummy0) entered blocking state [ 625.587409][T23697] bridge0: port 3(dummy0) entered disabled state [ 625.595760][T23697] bridge0: port 3(dummy0) entered blocking state [ 625.602211][T23697] bridge0: port 3(dummy0) entered forwarding state [ 625.647974][T23705] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 625.744705][T23658] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.791456][T23658] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.843357][T23658] device bridge_slave_0 entered promiscuous mode [ 625.892715][ T5759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.920605][T23712] netlink: 'syz.3.6230': attribute type 2 has an invalid length. [ 625.950654][T23658] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.957858][T23658] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.969660][T23712] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6230'. [ 625.989900][T23658] device bridge_slave_1 entered promiscuous mode [ 626.031602][T23717] netlink: 'syz.6.6231': attribute type 10 has an invalid length. [ 626.093054][T23717] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 626.117319][T23658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.155100][T23724] delete_channel: no stack [ 626.161872][T23658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.165743][T23724] delete_channel: no stack [ 626.249512][T23658] team0: Port device team_slave_0 added [ 626.296689][T23658] team0: Port device team_slave_1 added [ 626.305506][T23729] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6232'. [ 626.331795][T23729] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 626.363570][ T5759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.453106][T23658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.465323][T23658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.537524][T23658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.555961][T23747] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.6238'. [ 626.588211][T23740] netlink: 'syz.1.6237': attribute type 10 has an invalid length. [ 626.631666][T23740] team0: Port device virt_wifi0 added [ 626.672830][ T5759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.701032][T23658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.709458][T23658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.758210][T23658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.789380][ T7245] Bluetooth: hci4: command 0x0409 tx timeout [ 626.834574][ T5759] device netdevsim0 left promiscuous mode [ 626.860177][ T5759] team0: Port device netdevsim0 removed [ 626.867876][ T5759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.915969][T23755] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.923696][T23755] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.956419][T23755] device bridge0 entered promiscuous mode [ 627.076863][T23770] netlink: 'syz.1.6245': attribute type 10 has an invalid length. [ 627.812869][T23658] device hsr_slave_0 entered promiscuous mode [ 627.842262][T23658] device hsr_slave_1 entered promiscuous mode [ 627.862233][T23658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.889223][T23658] Cannot create hsr debugfs directory [ 628.002378][T23790] FAULT_INJECTION: forcing a failure. [ 628.002378][T23790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.110683][T23790] CPU: 0 PID: 23790 Comm: syz.7.6248 Not tainted syzkaller #0 [ 628.118263][T23790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 628.128335][T23790] Call Trace: [ 628.131640][T23790] [ 628.134591][T23790] dump_stack_lvl+0x188/0x250 [ 628.139309][T23790] ? show_regs_print_info+0x20/0x20 [ 628.144534][T23790] ? load_image+0x410/0x410 [ 628.149077][T23790] ? __lock_acquire+0x7d40/0x7d40 [ 628.154249][T23790] ? __lock_acquire+0x13b3/0x7d40 [ 628.159331][T23790] should_fail+0x383/0x4b0 [ 628.163781][T23790] strncpy_from_user+0x32/0x350 [ 628.168657][T23790] bpf_prog_load+0x1fd/0x14e0 [ 628.173373][T23790] ? map_freeze+0x360/0x360 [ 628.177898][T23790] ? __might_fault+0xb7/0x110 [ 628.182647][T23790] ? __might_fault+0xb3/0x110 [ 628.187346][T23790] ? bpf_lsm_bpf+0x5/0x10 [ 628.191696][T23790] ? security_bpf+0x7a/0xa0 [ 628.196228][T23790] __sys_bpf+0x532/0x6f0 [ 628.200491][T23790] ? bpf_link_show_fdinfo+0x380/0x380 [ 628.205898][T23790] __x64_sys_bpf+0x78/0x90 [ 628.210337][T23790] do_syscall_64+0x4c/0xa0 [ 628.214772][T23790] ? clear_bhb_loop+0x30/0x80 [ 628.219473][T23790] ? clear_bhb_loop+0x30/0x80 [ 628.224304][T23790] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 628.230217][T23790] RIP: 0033:0x7f98e9991559 [ 628.234647][T23790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.254267][T23790] RSP: 002b:00007f98e7bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 628.262703][T23790] RAX: ffffffffffffffda RBX: 00007f98e9c19090 RCX: 00007f98e9991559 [ 628.270695][T23790] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 628.278685][T23790] RBP: 00007f98e7bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 628.286677][T23790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.294672][T23790] R13: 00007f98e9c19128 R14: 00007f98e9c19090 R15: 00007ffe66df4a98 [ 628.302681][T23790] [ 628.369003][T23798] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6253'. [ 628.558733][T23798] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 628.835593][T23804] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.869369][ T7234] Bluetooth: hci4: command 0x041b tx timeout [ 629.088102][T23833] __nla_validate_parse: 1 callbacks suppressed [ 629.088132][T23833] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.6263'. [ 629.138620][T23833] netlink: 'syz.7.6263': attribute type 2 has an invalid length. [ 629.364246][T23850] nr0: tun_chr_ioctl cmd 1074025677 [ 629.378534][T23850] nr0: linktype set to 780 [ 629.408948][T23658] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 629.514244][T23658] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 629.562224][T23859] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6270'. [ 629.609745][T23658] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 629.651140][T23658] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 630.123928][T23658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.145424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 630.165829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 630.206330][T23658] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.234236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 630.276335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 630.323335][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.330548][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.374197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 630.418069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 630.437236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 630.467520][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.474670][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.580300][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 630.601776][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 630.653768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 630.681051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 630.793604][T23897] device syzkaller0 entered promiscuous mode [ 630.870188][T23658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.918466][T23658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 630.948331][T15706] Bluetooth: hci4: command 0x040f tx timeout [ 631.003770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 631.025017][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 631.063599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 631.090670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 631.128633][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 631.165476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 631.202926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 631.265918][T23903] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.6280'. [ 631.297219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 631.839112][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 631.856872][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 631.938918][T23658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.006818][ T5759] bond0: (slave wlan1): Releasing backup interface [ 632.561406][T23933] rxe_eth0 speed is unknown, defaulting to 1000 [ 632.750333][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.784014][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.886423][T23658] device veth0_vlan entered promiscuous mode [ 632.934763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 632.956032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 633.028566][T15706] Bluetooth: hci4: command 0x0419 tx timeout [ 633.072358][T23658] device veth1_vlan entered promiscuous mode [ 633.129773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 633.151110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 633.177784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 633.274925][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 633.289201][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 633.327179][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.365854][T23658] device veth0_macvtap entered promiscuous mode [ 633.466302][T23658] device veth1_macvtap entered promiscuous mode [ 633.572944][T23658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.624145][T23658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.666565][T23658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.728306][T23658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.762295][T23658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.822348][T23658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.863710][T23658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.925408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 633.944029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 633.994455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 634.030809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 634.064772][T23961] netlink: 'syz.1.6291': attribute type 10 has an invalid length. [ 634.093057][T23961] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6291'. [ 634.314373][T23658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.338750][T23658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.351024][T23973] netlink: 'syz.1.6292': attribute type 1 has an invalid length. [ 634.388284][T23658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.408357][T23973] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6292'. [ 634.432166][T23658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.466026][T23658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.504013][T23658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.545918][T23658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.596697][T23658] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.659740][T23658] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.700784][T23658] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.736812][T23658] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.784497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 634.832877][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 635.934569][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.960241][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.993102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 636.112586][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.138318][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.145840][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 636.261136][T23995] bridge0: port 3(dummy0) entered disabled state [ 636.305929][T23995] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.335908][T23995] device bridge_slave_0 left promiscuous mode [ 636.368186][T23995] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.725345][T24019] netlink: 'syz.1.6299': attribute type 16 has an invalid length. [ 637.738626][T24019] netlink: 'syz.1.6299': attribute type 3 has an invalid length. [ 637.773188][T24019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6299'. [ 637.795045][T24028] device syzkaller0 entered promiscuous mode [ 638.084233][T24019] netlink: 'syz.1.6299': attribute type 2 has an invalid length. [ 638.092228][T24019] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6299'. [ 638.400337][ T5759] device hsr_slave_0 left promiscuous mode [ 638.411028][ T5759] device hsr_slave_1 left promiscuous mode [ 638.438923][ T5759] device hsr_slave_0 left promiscuous mode [ 638.484141][ T5759] device veth0_vlan left promiscuous mode [ 638.491806][T24049] netlink: 'syz.4.6303': attribute type 2 has an invalid length. [ 638.509980][ T5759] device veth1_vlan left promiscuous mode [ 638.515820][ T5759] device veth0_vlan left promiscuous mode [ 638.528344][T24049] netlink: 135320 bytes leftover after parsing attributes in process `syz.4.6303'. [ 639.123338][ T5759] team0 (unregistering): Port device virt_wifi0 removed [ 639.243760][ T5759] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 639.304583][ T5759] team0 (unregistering): Port device team_slave_1 removed [ 639.333265][ T5759] team0 (unregistering): Port device team_slave_0 removed [ 639.368917][ T5759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.425147][ T5759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.561101][ T5759] bond0 (unregistering): Released all slaves [ 639.600509][ T5759] device geneve1 left promiscuous mode [ 639.813010][ T5759] team0 (unregistering): Port device geneve1 removed [ 640.132969][ T5759] device virt_wifi0 left promiscuous mode [ 640.148878][ T5759] team0 (unregistering): Port device virt_wifi0 removed [ 640.211696][ T5759] device team_slave_1 left promiscuous mode [ 640.228756][ T5759] team0 (unregistering): Port device team_slave_1 removed [ 640.261418][ T5759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.273802][ T5759] device bond_slave_1 left promiscuous mode [ 640.290786][ T5759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.303357][ T5759] device bond_slave_0 left promiscuous mode [ 640.397648][ T5759] bond0 (unregistering): Released all slaves [ 640.433969][T24048] netlink: 'syz.1.6304': attribute type 21 has an invalid length. [ 640.846273][T24083] device bridge_slave_1 left promiscuous mode [ 640.878960][T24083] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.932917][T24083] device bridge_slave_0 left promiscuous mode [ 640.955780][T24083] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.445021][T24111] netlink: 'syz.6.6312': attribute type 10 has an invalid length. [ 641.510281][T24119] netlink: 'syz.7.6315': attribute type 29 has an invalid length. [ 641.568493][T24120] netlink: 'syz.6.6312': attribute type 13 has an invalid length. [ 641.683871][T24119] netlink: 'syz.7.6315': attribute type 29 has an invalid length. [ 641.753702][T24133] netlink: 'syz.4.6321': attribute type 10 has an invalid length. [ 641.765548][T24133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6321'. [ 641.795015][T24133] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 641.874039][T24126] netlink: 'syz.7.6315': attribute type 29 has an invalid length. [ 642.183911][T24169] netlink: 'syz.3.6329': attribute type 10 has an invalid length. [ 642.222820][T24169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6329'. [ 642.254574][T24158] can: request_module (can-proto-3) failed. [ 642.572406][T24190] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6336'. [ 642.665019][T24190] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6336'. [ 643.543387][T24222] netlink: 'syz.3.6342': attribute type 4 has an invalid length. [ 643.587307][T24222] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6342'. [ 643.745584][T24222] netlink: 'syz.3.6342': attribute type 3 has an invalid length. [ 643.818652][T24222] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6342'. [ 643.849794][T24238] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6348'. [ 644.037293][T24226] rxe_eth0 speed is unknown, defaulting to 1000 [ 644.090204][T24242] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.097792][T24242] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.270403][T24242] device bridge0 entered promiscuous mode [ 644.923300][T24275] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.6360'. [ 645.462682][T24311] validate_nla: 8 callbacks suppressed [ 645.462698][T24311] netlink: 'syz.7.6369': attribute type 2 has an invalid length. [ 645.513085][T24308] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6369'. [ 645.599135][T24319] netlink: 'syz.3.6372': attribute type 10 has an invalid length. [ 645.611327][T24319] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6372'. [ 646.142996][T24356] netlink: 'syz.4.6386': attribute type 21 has an invalid length. [ 646.477160][T24373] device syzkaller0 entered promiscuous mode [ 646.779473][T24408] __nla_validate_parse: 1 callbacks suppressed [ 646.779487][T24408] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6397'. [ 646.834330][T24406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6397'. [ 647.578692][T24451] netlink: 'syz.1.6409': attribute type 21 has an invalid length. [ 647.596460][T24451] netlink: 'syz.1.6409': attribute type 2 has an invalid length. [ 647.611934][T24451] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6409'. [ 650.669796][T24482] netlink: 'syz.1.6416': attribute type 10 has an invalid length. [ 650.677962][T24482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6416'. [ 650.687561][T24482] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 650.734927][T24473] netlink: set zone limit has 8 unknown bytes [ 650.913686][T24498] netlink: 'syz.3.6423': attribute type 10 has an invalid length. [ 651.514594][T24522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.531367][T24522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.547580][T24522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.555829][T24522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.617717][T24514] rxe_eth0 speed is unknown, defaulting to 1000 [ 651.648168][T24528] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.6431'. [ 651.885467][T24540] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6435'. [ 651.904576][T24540] netlink: 'syz.1.6435': attribute type 2 has an invalid length. [ 652.009657][T24543] netlink: 'syz.3.6436': attribute type 3 has an invalid length. [ 652.017506][T24543] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6436'. [ 652.113279][T24560] FAULT_INJECTION: forcing a failure. [ 652.113279][T24560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.192416][T24560] CPU: 0 PID: 24560 Comm: syz.3.6442 Not tainted syzkaller #0 [ 652.200034][T24560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 652.210100][T24560] Call Trace: [ 652.213395][T24560] [ 652.216335][T24560] dump_stack_lvl+0x188/0x250 [ 652.221060][T24560] ? show_regs_print_info+0x20/0x20 [ 652.226310][T24560] ? load_image+0x410/0x410 [ 652.230843][T24560] ? __lock_acquire+0x7d40/0x7d40 [ 652.235916][T24560] should_fail+0x383/0x4b0 [ 652.240375][T24560] _copy_from_user+0x2e/0x170 [ 652.245085][T24560] __sys_bpf+0x26d/0x6f0 [ 652.249368][T24560] ? bpf_link_show_fdinfo+0x380/0x380 [ 652.254790][T24560] __x64_sys_bpf+0x78/0x90 [ 652.259245][T24560] do_syscall_64+0x4c/0xa0 [ 652.263711][T24560] ? clear_bhb_loop+0x30/0x80 [ 652.268416][T24560] ? clear_bhb_loop+0x30/0x80 [ 652.273117][T24560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 652.279034][T24560] RIP: 0033:0x7f6abb7d7559 [ 652.283462][T24560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.303079][T24560] RSP: 002b:00007f6ab9a2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 652.311510][T24560] RAX: ffffffffffffffda RBX: 00007f6abba5efa0 RCX: 00007f6abb7d7559 [ 652.319509][T24560] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 652.327495][T24560] RBP: 00007f6ab9a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 652.335483][T24560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.343478][T24560] R13: 00007f6abba5f038 R14: 00007f6abba5efa0 R15: 00007ffc3f61da28 [ 652.351482][T24560] [ 653.323145][T24586] netlink: 'syz.7.6451': attribute type 10 has an invalid length. [ 653.352583][T24586] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6451'. [ 653.487085][T24592] netlink: 'syz.6.6453': attribute type 21 has an invalid length. [ 653.566114][T24592] netlink: 'syz.6.6453': attribute type 2 has an invalid length. [ 653.645547][T24592] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6453'. [ 656.595409][T24633] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6462'. [ 656.771785][T24656] netlink: 'syz.1.6469': attribute type 21 has an invalid length. [ 656.789527][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6469'. [ 656.832199][T24650] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.6467'. [ 657.012416][T24661] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 657.562775][T24676] netlink: 'syz.4.6474': attribute type 29 has an invalid length. [ 657.601099][T24676] netlink: 'syz.4.6474': attribute type 29 has an invalid length. [ 657.735242][T24690] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6479'. [ 657.844017][T24697] netlink: 'syz.4.6481': attribute type 1 has an invalid length. [ 657.872077][T24697] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6481'. [ 657.891258][T24698] FAULT_INJECTION: forcing a failure. [ 657.891258][T24698] name failslab, interval 1, probability 0, space 0, times 0 [ 657.942730][T24698] CPU: 0 PID: 24698 Comm: syz.6.6482 Not tainted syzkaller #0 [ 657.950222][T24698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 657.960294][T24698] Call Trace: [ 657.963588][T24698] [ 657.966534][T24698] dump_stack_lvl+0x188/0x250 [ 657.971241][T24698] ? show_regs_print_info+0x20/0x20 [ 657.976463][T24698] ? load_image+0x410/0x410 [ 657.980986][T24698] ? __might_sleep+0xf0/0xf0 [ 657.985594][T24698] ? __lock_acquire+0x7d40/0x7d40 [ 657.990645][T24698] should_fail+0x383/0x4b0 [ 657.995086][T24698] should_failslab+0x5/0x20 [ 657.999603][T24698] slab_pre_alloc_hook+0x51/0xc0 [ 658.004568][T24698] __kmalloc+0x6b/0x340 [ 658.008746][T24698] ? sk_prot_alloc+0xe7/0x210 [ 658.013451][T24698] sk_prot_alloc+0xe7/0x210 [ 658.017974][T24698] ? sk_alloc+0x1d/0x310 [ 658.022233][T24698] sk_alloc+0x2f/0x310 [ 658.026321][T24698] bpf_prog_test_run_skb+0x23c/0x1190 [ 658.031727][T24698] ? __fget_files+0x402/0x470 [ 658.036444][T24698] ? cpu_online+0x60/0x60 [ 658.040809][T24698] bpf_prog_test_run+0x31c/0x390 [ 658.045772][T24698] __sys_bpf+0x5a5/0x6f0 [ 658.050039][T24698] ? bpf_link_show_fdinfo+0x380/0x380 [ 658.055446][T24698] __x64_sys_bpf+0x78/0x90 [ 658.059880][T24698] do_syscall_64+0x4c/0xa0 [ 658.064312][T24698] ? clear_bhb_loop+0x30/0x80 [ 658.069014][T24698] ? clear_bhb_loop+0x30/0x80 [ 658.073714][T24698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 658.079633][T24698] RIP: 0033:0x7ffa50668559 [ 658.084097][T24698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.103752][T24698] RSP: 002b:00007ffa4e8c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.112218][T24698] RAX: ffffffffffffffda RBX: 00007ffa508effa0 RCX: 00007ffa50668559 [ 658.120215][T24698] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 658.128198][T24698] RBP: 00007ffa4e8c0090 R08: 0000000000000000 R09: 0000000000000000 [ 658.136185][T24698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.144176][T24698] R13: 00007ffa508f0038 R14: 00007ffa508effa0 R15: 00007ffead550f98 [ 658.152192][T24698] [ 658.351487][T24713] netlink: 'syz.4.6486': attribute type 10 has an invalid length. [ 658.732794][T24725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6488'. [ 658.995638][T24733] netlink: 'syz.7.6491': attribute type 29 has an invalid length. [ 659.048403][T24733] netlink: 'syz.7.6491': attribute type 29 has an invalid length. [ 659.057089][T24725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6488'. [ 659.086587][T24737] netlink: 'syz.7.6491': attribute type 29 has an invalid length. [ 659.119241][T24725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6488'. [ 659.189635][T24725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6488'. [ 659.234048][T24725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6488'. [ 659.244120][T24725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6488'. [ 659.261260][T24725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6488'. [ 659.276526][T24725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6488'. [ 659.452347][T24758] netlink: 'syz.3.6497': attribute type 1 has an invalid length. [ 659.487521][T24754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.574988][T24754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.609859][T24754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.668423][T24754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.734382][T24784] netlink: 'syz.1.6506': attribute type 29 has an invalid length. [ 660.453029][T24815] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 660.611883][T24817] device syzkaller0 entered promiscuous mode [ 661.206459][T24875] device syzkaller0 entered promiscuous mode [ 661.802786][T24942] validate_nla: 9 callbacks suppressed [ 661.802801][T24942] netlink: 'syz.6.6553': attribute type 21 has an invalid length. [ 661.930420][T24951] rxe_eth0 speed is unknown, defaulting to 1000 [ 661.982695][T24957] netlink: 'syz.6.6559': attribute type 10 has an invalid length. [ 662.011213][T24957] device dummy0 entered promiscuous mode [ 662.017658][T24957] bridge0: port 3(dummy0) entered blocking state [ 662.055590][T24957] bridge0: port 3(dummy0) entered disabled state [ 662.152407][T24965] netlink: 'syz.3.6562': attribute type 10 has an invalid length. [ 662.208362][T24965] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 662.617055][T25005] netlink: 'syz.7.6573': attribute type 29 has an invalid length. [ 662.648197][T25005] netlink: 'syz.7.6573': attribute type 29 has an invalid length. [ 662.699912][T25005] netlink: 'syz.7.6573': attribute type 29 has an invalid length. [ 662.944023][T25023] netlink: 'syz.6.6579': attribute type 10 has an invalid length. [ 663.002631][T25023] device hsr0 entered promiscuous mode [ 663.166487][T25023] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 663.191006][T25023] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 663.211333][T25023] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 663.229102][T25023] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 663.468367][T25053] netlink: 'syz.4.6588': attribute type 10 has an invalid length. [ 663.476353][T25053] __nla_validate_parse: 34 callbacks suppressed [ 663.476366][T25053] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6588'. [ 663.599916][T25071] netlink: 'syz.1.6592': attribute type 29 has an invalid length. [ 663.633032][T25071] netlink: 'syz.1.6592': attribute type 29 has an invalid length. [ 663.973870][T25089] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6598'. [ 664.039651][T25089] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 664.468845][T25138] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6612'. [ 665.055870][T25165] device hsr0 entered promiscuous mode [ 665.179155][T25165] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 665.238569][T25165] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 665.274423][T25165] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 665.304461][T25165] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 665.417472][T25184] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6627'. [ 665.588635][T25185] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6627'. [ 665.818332][T25188] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.6627'. [ 666.088761][T25223] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6644'. [ 666.247847][T25230] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6646'. [ 666.382877][T25238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6651'. [ 666.421662][T25238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6651'. [ 667.223233][T25275] device aaaaaaaaaaaaaaa entered promiscuous mode Stopping sshd: stopped /usr/sbin/sshd (pid 3947) [ 667.494079][T25299] validate_nla: 20 callbacks suppressed [ 667.494111][T25299] netlink: 'syz.7.6674': attribute type 29 has an invalid length. OK [ 667.640533][T25302] device syzkaller0 entered promiscuous mode Stopping crond: [ 667.756870][T25299] netlink: 'syz.7.6674': attribute type 29 has an invalid length. stopped /usr/sbin/crond (pid 3924) OK [ 667.992845][T25306] netlink: 'syz.7.6674': attribute type 29 has an invalid length. [ 668.038642][T25325] netlink: 'syz.3.6682': attribute type 29 has an invalid length. [ 668.047148][T25325] netlink: 'syz.3.6682': attribute type 29 has an invalid length. [ 668.142249][T25329] netlink: 'syz.4.6683': attribute type 29 has an invalid length. [ 668.219077][T25329] netlink: 'syz.4.6683': attribute type 29 has an invalid length. [ 668.359787][T25326] netlink: 'syz.3.6682': attribute type 29 has an invalid length. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3849) [ 668.711549][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 668.744128][T25358] netlink: 'syz.1.6689': attribute type 29 has an invalid length. [ 668.753570][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 668.765920][T25358] netlink: 'syz.1.6689': attribute type 29 has an invalid length. [ 668.834475][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 Stopping network: [ 668.938457][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 668.970322][T25366] rxe_eth0 speed is unknown, defaulting to 1000 [ 669.004229][T25373] __nla_validate_parse: 5 callbacks suppressed [ 669.004242][T25373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6694'. [ 669.058536][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 669.129205][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 669.148417][T25373] device dummy0 entered promiscuous mode [ 669.155583][T25373] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 669.178476][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 669.234150][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 669.307074][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 669.330491][T25387] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 669.358204][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 669.424162][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 669.495748][T25353] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 670.080532][T25410] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6702'. [ 670.342309][T25418] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6714'. OK [ 670.460238][T25419] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.6704'. [ 670.481985][T25419] netlink: zone id is out of range [ 670.514727][T25419] netlink: zone id is out of range [ 670.556511][T25419] netlink: zone id is out of range [ 670.578872][T25419] netlink: zone id is out of range [ 670.601064][T25419] netlink: zone id is out of range [ 670.606523][T25419] netlink: zone id is out of range Stopping iptables: [ 670.635659][T25419] netlink: zone id is out of range [ 670.647608][T25419] netlink: zone id is out of range [ 670.659929][T25419] netlink: zone id is out of range OK [ 670.857130][T25437] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6707'. Stopping system message bus: [ 671.415079][T25475] IPv6: NLM_F_CREATE should be specified when creating new route [ 671.433839][T25475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.441117][T25475] IPv6: NLM_F_CREATE should be set when creating new route [ 671.448419][T25475] IPv6: NLM_F_CREATE should be set when creating new route [ 671.455657][T25475] IPv6: NLM_F_CREATE should be set when creating new route done [ 672.498407][T25486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6723'. [ 672.544177][T25498] validate_nla: 18 callbacks suppressed [ 672.544191][T25498] netlink: 'syz.3.6727': attribute type 5 has an invalid length. [ 672.616172][T25483] rxe_eth0 speed is unknown, defaulting to 1000 [ 672.868172][T25513] netlink: 'syz.1.6729': attribute type 9 has an invalid length. [ 672.969461][T25513] netlink: 126564 bytes leftover after parsing attributes in process `syz.1.6729'. [ 673.081764][T25513] netlink: 'syz.1.6729': attribute type 9 has an invalid length. [ 673.134694][T25513] netlink: 126564 bytes leftover after parsing attributes in process `syz.1.6729'. [ 673.215227][T25533] netlink: 'syz.6.6733': attribute type 10 has an invalid length. [ 673.269878][T25513] netlink: 'syz.1.6729': attribute type 9 has an invalid length. [ 673.277640][T25513] netlink: 126564 bytes leftover after parsing attributes in process `syz.1.6729'. [ 673.469932][T25513] netlink: 'syz.1.6729': attribute type 9 has an invalid length. [ 673.514092][T25513] netlink: 126564 bytes leftover after parsing attributes in process `syz.1.6729'. Stopping klogd: OK Stopping acpid: [ 674.148671][T25615] netlink: 'syz.7.6747': attribute type 10 has an invalid length. [ 674.195891][T25615] __nla_validate_parse: 1 callbacks suppressed [ 674.195906][T25615] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6747'. [ 674.390635][T25624] netlink: 'syz.3.6750': attribute type 4 has an invalid length. [ 674.430611][T25622] delete_channel: no stack [ 674.788373][T25647] netlink: 'syz.6.6756': attribute type 21 has an invalid length. [ 674.836632][T25647] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6756'. [ 675.147833][T25637] rxe_eth0 speed is unknown, defaulting to 1000 OK Stopping syslogd: [ 675.678537][T25678] delete_channel: no stack stopped /sbin/syslogd (pid 3539) OK [ 676.591850][T25694] net_ratelimit: 10 callbacks suppressed [ 676.591867][T25694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. umount: can't remount debugfs read-only [ 677.259977][T25710] netlink: 144316 bytes leftover after parsing attributes in process `syz.7.6773'. [ 677.351328][T25711] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6773'. [ 677.374488][T25691] ODEBUG: Out of memory. ODEBUG disabled [ 677.424279][T25721] netlink: 'syz.4.6776': attribute type 10 has an invalid length. [ 677.618836][T25726] bridge0: port 3(dummy0) entered disabled state [ 677.635266][T25726] device bridge_slave_1 left promiscuous mode [ 677.674739][T25726] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.741850][T25726] device bridge_slave_0 left promiscuous mode [ 677.757678][T25726] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.442926][T25755] netlink: 'syz.1.6790': attribute type 16 has an invalid length. [ 678.483638][T25755] netlink: 'syz.1.6790': attribute type 3 has an invalid length. [ 678.536147][T25755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6790'. [ 678.955642][T25775] netlink: 'syz.6.6797': attribute type 10 has an invalid length. [ 678.984415][T25775] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.71 closed by remote host. Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 681.243934][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.308431][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.372165][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.428575][T25781] kvm: exiting hardware virtualization [ 681.434750][T25781] smc: removing ib device rxe0 [ 681.443195][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.458090][T25781] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 681.467472][T25781] ACPI: PM: Preparing to enter system sleep state S5 [ 681.476395][T25781] reboot: Power down serialport: VM disconnected.