last executing test programs: 2.170779427s ago: executing program 2 (id=1915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond0\x00', 0x112}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4b, 0x0, 0x0, 0x40000, 0x10000, @value=r1}, 0x28) close(r0) socket$kcm(0x21, 0x2, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8001}, 0xe06, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057500c30ec0d61342b1c428df8", 0x30}], 0x2}, 0x24000008) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r4, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x10, &(0x7f0000000200), 0x4) r7 = socket$kcm(0x2c, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x6, &(0x7f0000000000)=r8, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x2}, 0x8) 1.852242715s ago: executing program 2 (id=1919): r0 = socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x21, 0x7, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, &(0x7f0000000100)=@raw=[@generic={0xb, 0x5, 0x8, 0x5, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) (async) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000000), 0xe) (async) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)="d8", 0x1}], 0x1}, 0x4008054) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r4, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x40000002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="a9", 0x1}], 0x1}, 0x80) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) 1.616739491s ago: executing program 2 (id=1921): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x72}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000051000000000000000600000040820000", @ANYRES32=0x1, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000000000009a21d222e65b18773034686f33929600000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8920, &(0x7f0000000040)) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010000) 1.530980873s ago: executing program 2 (id=1922): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x90) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000040)="b8b2ca3aba000946dd9c6c82be5539ab418732efe70000140277517658dedaff1a02fc4a70c498a384fda6f6236cee1a0608f41fe3bc16e7e44188fb", 0x3c}], 0x1}, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0xa, &(0x7f0000000500), 0x4) r6 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)="007309ba", 0x4}], 0x1}, 0x3e8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000200)) 1.458822235s ago: executing program 1 (id=1924): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc000000}, 0x21) 1.394971026s ago: executing program 0 (id=1925): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.359502167s ago: executing program 3 (id=1926): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000004000000080000000000000001000000000000000000001800"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 1.277690389s ago: executing program 1 (id=1927): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208000f0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) 1.273545109s ago: executing program 3 (id=1928): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x18}, 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100002, 0xac5d, 0x1c25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x4007}, 0x103865, 0x0, 0x51, 0x0, 0x2, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000540)='devices.list\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff000000007110c900000000009500000000000000be993bada524a52f6054f2fa7d7947ae09e499f386b7ab3bef3df478dd9a5a64ceadc33c0b40cb6b172feb81b0bdf0860046c42b30555d2cd1eedc562ebc992c14c204867e8b"], &(0x7f0000000480)='GPL\x00'}, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10042, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000001c0)={'pimreg1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000800000080000082fdd3bdfc89629900", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000150000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.23378826s ago: executing program 1 (id=1929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond0\x00', 0x112}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4b, 0x0, 0x0, 0x40000, 0x10000, @value=r1}, 0x28) close(r0) socket$kcm(0x21, 0x2, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8001}, 0xe06, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057500c30ec0d61342b1c428df8", 0x30}], 0x2}, 0x24000008) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r4, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x10, &(0x7f0000000200), 0x4) r7 = socket$kcm(0x2c, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x6, &(0x7f0000000000)=r8, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x2}, 0x8) 1.201484351s ago: executing program 2 (id=1930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r0, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) 1.125723483s ago: executing program 0 (id=1931): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000002800), 0x6}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000027c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002780)) r2 = socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0xfffffffffffffffe, 0x0, 0x0, 0x40000}, 0x40) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000070000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000) 1.125331493s ago: executing program 4 (id=1932): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x72}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000051000000000000000600000040820000", @ANYRES32=0x1, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000000000009a21d222e65b18773034686f33929600000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8920, &(0x7f0000000040)) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010000) 1.017650976s ago: executing program 4 (id=1933): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8081, 0xff6c, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x27) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000a10000000000000004fb00008500000036000000950000008d000000", @ANYRES32=r5, @ANYRES8=r6, @ANYRES8=r7, @ANYBLOB="a2f9daf1429273f3df76c19c6b981b9a4ce26a953dab56f19f749587c315eaee5c0e9ccc0f5e924cbc619c9e19e4f467a8497ef4a7f45c706c0f32c08931170e02af843dbb75ae79f602789cbdd2951820e45fca9d79297aaaf1f7fbec1b520443de99368f0e21662ffeace73e89f1b8d01ef93b200e3ed0c533026a66abbff71f2a2797ee857f0d06f911993cdc43829752fa67dd89e827d352f89d6effc59c1d0c64fb1d1b5686c70d52e63af0b0b674a6fa71bba648d3ff8e21d9e02ccbe4046e83c067b80905d9b91f84501815d3a85c341c15a6388f60d665b9f58300e497acff", @ANYRES8, @ANYRES32=r8, @ANYRESDEC=r2], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x6, &(0x7f00000008c0)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}], &(0x7f0000000940)='GPL\x00', 0x2, 0xc8, &(0x7f0000000a00)=""/200, 0x3701753ca1f628c5, 0x40, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)=[r5, r3], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=[0x0], 0x0, 0x5a, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r11, @ANYRES32=r9, @ANYBLOB="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"/311, @ANYRES32=r10, @ANYBLOB, @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) r13 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, @perf_config_ext={0x0, 0x3}, 0x10c002, 0x10000}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r14, 0x10f, 0x32, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 994.696806ms ago: executing program 0 (id=1934): r0 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4000000000000}, 0x0, 0x40000100000000}, 0xffffffffffffffff, 0x0, r0, 0x2) 832.3049ms ago: executing program 3 (id=1935): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='FREEZING\x00', 0x9) r3 = getpid() r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x1, 0xf8, 0x1, 0x0, 0x3000000000000000, 0x80000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xf, 0x4, @perf_bp={&(0x7f0000000100)}, 0x6800, 0x1, 0x7a2f0a7f, 0x3, 0x2, 0x6, 0xac4d, 0x0, 0x3, 0x0, 0x25}, r3, 0xf, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r1, 0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x4, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000015c0)='syzkaller\x00', 0x7fffffff, 0xb, &(0x7f0000001600)=""/11, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001680)={0x5, 0x5, 0x9, 0x997}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000016c0)=[{0x1, 0x2, 0x9, 0xb}, {0x2, 0x1, 0x6, 0xb}, {0x2, 0x4, 0x1, 0x9}, {0x3, 0x1, 0x4, 0x4}, {0x0, 0x1, 0x9, 0xb}], 0x10, 0xfffffff9}, 0x94) r7 = getpid() r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001800)={0x0, r1}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)='%pK \x00'}, 0x20) sendmsg$unix(r1, &(0x7f0000001a00)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000240)="80bf41b78e28685f07d8324c9bea99f7f91e04d9acb20bf2efd0d5d94d5e4319a4caa2ca75485bb1ef44ac4a20af5fe62e27ba68fe12cdb14d6cc0fffaa976b0e4b1d464c5bbbdc679acc74b9e73aa9d4e34c49288a1843328fcfb3d4b831af2dc2ef9d03d02cb8154ac9356406ece88b66c4afa58a526d4c1f5cd794ff29b76d28449d11700d1d4a02f0bf6a4bdcbeb8e4215b9911efb583ae561235be3414d2189990f83933dd7e22ee0602381abed5ac259d08601717b", 0xb8}, {&(0x7f0000000300)="d43266736c3564e4147aba6440dd52b6a7da8071bebc3b1c5e41a919ada129191ba9d01212e2ea2c4d1cb729e72ad1b0d7b27478c397bb38548f2833a1882010b32cce65347484d6440b40504bd3b47a69a533db1bdcc52b22a8af8f3044935f58e208e5cd3133090555be4911d147b32357968bafd4518409d2f952c4ba62a1434d64e5ddad6ea82297dfef23e5313bed874d794cd38100", 0x98}, {&(0x7f00000003c0)="61347d27207fa76f158b16f49070c490865b7b51761288908fff5e169859baec8cbc0af03ae28fed87e6e525eccf59a5a1a32c5bb0dcedf395f1cbc7cb623a93f0791b27c82dba7992f240501bbdb1702d7c45d383aefc5ed48e8bdbca5c2539075dea1a9d2314b4d0c4f59e362d95b4c0721f24eafccb31758cabbd4f3dfff9685f6e04d0006723abfb90cac4a790ed06cc39a023c896977d7661529e305b7fedb4495eb09521cdb3baf29bc49fbb45bbc509cca64ad7", 0xb7}, {&(0x7f0000000480)="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", 0x1000}], 0x4, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r4, r4, r0, r0, r5]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r6, r4, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r1, r8, r2, r2, r4]}}, @rights={{0x18, 0x1, 0x1, [r9, r4]}}], 0xe8}, 0x4000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x4, 0x6, 0x3, 0x1000, 0x40000, r5, 0x8000, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001c00)={r10, &(0x7f0000001ac0)="0900c6a18cb93bf232f9c8eaa8ef12456f2c8c24dacbdeb2269fad35c46be7ec8f7e67078e6de5b8c6106f2ac7b80be6ff56d2843c947e31388a037ec131532551f88cf7bb27bdebefafa7ca85525d53a785901f56", &(0x7f0000001b40)=""/173}, 0x20) openat$cgroup_int(r1, &(0x7f0000001c40)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001c80)={r6, r1}, 0xc) recvmsg$kcm(r1, &(0x7f0000002280)={&(0x7f0000001cc0)=@caif=@rfm, 0x80, &(0x7f0000002200)=[{&(0x7f0000001d40)=""/85, 0x55}, {&(0x7f0000001dc0)=""/79, 0x4f}, {&(0x7f0000001e40)=""/225, 0xe1}, {&(0x7f0000001f40)=""/93, 0x5d}, {&(0x7f0000001fc0)=""/231, 0xe7}, {&(0x7f00000020c0)=""/156, 0x9c}, {&(0x7f0000002180)=""/97, 0x61}], 0x7}, 0x21) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002380)={r1, 0x20, &(0x7f0000002340)={&(0x7f00000022c0)=""/36, 0x24, 0x0, &(0x7f0000002300)=""/19, 0x13}}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000023c0)={0x1, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002400)={r11, 0x81, 0x8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002480)={0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@o_path={&(0x7f0000002440)='./file0\x00', 0x0, 0x8, r12}, 0x18) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000002500)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002800)={r1, 0xe0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f0000002600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002640), &(0x7f0000002680), 0x8, 0x9c, 0x8, 0x8, &(0x7f00000026c0)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002840)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x3, '\x00', r14, r1, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000028c0)=@base={0x1d, 0x1, 0x3, 0xfffffffe, 0x40000, r13, 0xc, '\x00', r14, r13, 0x0, 0x3, 0x1}, 0x50) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003ac0)={&(0x7f00000039c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x29, 0x1}]}, {0x0, [0x30, 0x30, 0x30, 0x61]}}, &(0x7f0000003a40)=""/70, 0x46, 0x46, 0x0, 0x1000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c00)={0x11, 0x1, &(0x7f0000002940)=@raw=[@alu={0x4, 0x0, 0x9, 0x3, 0x9, 0x0, 0x8}], &(0x7f0000002980)='GPL\x00', 0x9, 0x1000, &(0x7f00000029c0)=""/4096, 0x41000, 0x60, '\x00', r14, 0x0, r15, 0x8, &(0x7f0000003b00)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000003b40)={0x1, 0xc, 0x2000, 0xbfd}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000003b80)=[{0x5, 0x2, 0xc, 0xc}, {0x5, 0x3, 0x8, 0x5}, {0x1, 0x3, 0xa, 0x6}, {0x2, 0x2, 0xf, 0x3}, {0x3, 0x2, 0x7, 0xa}, {0x1, 0x4, 0x6}], 0x10, 0x1}, 0x94) sendmsg$kcm(r13, &(0x7f0000004200)={&(0x7f0000003cc0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003d40)="1a165a817e5f5ccb5f6fb4beace404982438d9cdbb210e21d0ef4a5258658d3c266af6ff4ac87ee97f1207be40ea2673d52ab32261fdfae2042882c5574a96e319ebbca46ae40ca98453a075e63aedc44dd6aca806c9e8f8fcf9b3989cd39f9fabdb91d6c718ad18ca9455d60f36d706f8ee94d227e74efafe96a9cb78ac9523a861380b046f0e4f55413ce651e98bda3e8853965414b92228f8aa39354f6d60f58c85bf3da94e68e860b163c0f3c7bb8d0537c3f9666b202b0fc2dcafec5c53af9b083786d1373849cb0c1748c9ac239d314bb93f72f8b8554b05654d5789b2f713de90c7931f24c44aba9379be7fd6cf94", 0xf2}, {&(0x7f0000003e40)="2d469a46542e13828879b708d90d119b7d7cc5b8326e59e4c4c0959fb6d308436c30527b4ca6d09b7dbd38cfc219a517910b01f3dca0b55768cf560fd807bd6fbc67e3e8b51b64ceb64c189de5151581b28c8fb8a66f0ab5f0ed418865730632434234f10df93197a515ed5861db39bf1a3cba8ce76e", 0x76}, {&(0x7f0000003ec0)="716e35a94745219c77b02972671d3afdd2b60cfa24fa11163e7c0a378bf5e6ac5406ddcb30be8e4ea1ff1d64ac4d6d04e7754be3fc26890156779a08dd805ec8962d294661a824a14252dc2baae862f54c8289", 0x53}, {&(0x7f0000003f40)="86e69d427a2c8e769c9fd7e5ea1547e8b1a8d45b135d3313deb7ebd50fd54ab26c75bc5dd98bd49753d09aa3aa7f49b53e79084989db52485dc1782212b1a29087ef3e24f1a3ff6803ea36b46caad4b81f4ae8191ba913b43ca7ca6d2c51411a96a4f1c5b60905f74feb58110a9d2ec1ae68efccc5d6473e488fe4d7527db9687c3ea5044a69d9ce6c5670f7188e5186e6c9f755f50a68b54e5fe30757e3e6f2668f0ea1a3a5cba6169c3d3a25312f975acd3c0da9d73ac79e569098d82ca8920e9f86", 0xc3}, {&(0x7f0000004040)="31a7076071a8e1bf1c86f70cf942a58cfce2407c8f6ef1996f9aa29af82552bed993885ac9344cf78b02f071fa52704da1", 0x31}], 0x5, &(0x7f0000004100)=[{0x20, 0x103, 0x9, "e63202b91f3afb45701e2ce7aa"}, {0xd8, 0x108, 0x2, "7f4723214c57bff82a9d4f4484fc69922a5d636b9ec72597e55683c409e7c13190302f3e875e8ce1f1aa3b3e133b257d06284a749bf6f20f6934b480ae545f3ee54f75e15b89578331e428c15b7ee9ca679e780a808d8f5c4710bc6e534fd99d5024e82ef655ce8db4167f69c1fcc866b36c12042f96c2d9ec58797d5c57e50e79d025a0ec04638eb08763634c7a0ef482be2bec295e97e289ed4a766624d4d50dfc3fd7462866ce2fe94a8c912f6dada070e0e9184e75836eacde95ff5e54780e8df6"}], 0xf8}, 0x28008001) 703.344193ms ago: executing program 1 (id=1936): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x18}, 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100002, 0xac5d, 0x1c25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x4007}, 0x103865, 0x0, 0x51, 0x0, 0x2, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000540)='devices.list\x00', 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff000000007110c900000000009500000000000000be993bada524a52f6054f2fa7d7947ae09e499f386b7ab3bef3df478dd9a5a64ceadc33c0b40cb6b172feb81b0bdf0860046c42b30555d2cd1eedc562ebc992c14c204867e8b"], &(0x7f0000000480)='GPL\x00'}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10042, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000001c0)={'pimreg1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000800000080000082fdd3bdfc89629900", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000150000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 703.025233ms ago: executing program 2 (id=1937): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000040)=r1, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r1, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$sock(r4, &(0x7f0000000ec0)={&(0x7f0000000980)=@xdp={0x2c, 0x2, r5}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="87958af22cee068f1f47d272c67747a4d70844be32be4740546d7d3c191b1c507c126819ad903385cdfa3e63e0cf0bd4ec08f02c49f75048b3f0fb0afcf3e16fde6a730192c670493295", 0x4a}, {&(0x7f0000000a80)="b31cc2273ee7464ae59898f4c21e00a32607f608576573f58c69353e5c32b45cfddb893c6ce062ed6e609f4b86935b0886533e79f0a5e5519e20484229fb1700eafcd847a93d6ecc75f2311544171eca92b102d9d06c8d5bd8dea8b4fe7fca0ce8b741b56705ec97debc36666eb1ea261f1160913245d9", 0x77}, {&(0x7f0000000b00)="de41afec2eb3fa05db0e1396ab513c2ba6c2e84849308da33452483afa6b63f89125f0e993cac43490e2d974c96c977936e42f104ebfa1e720e9511a", 0x3c}, {&(0x7f0000000b40)="5daf9de177b6c49b933607a7683a2fe59fdbcf16bc640032c50c3e0ec090f57aa5f786084e8326e2014a26e8e0f6a4e6b9acce4d1b6f4cc19df7767821dd956fe8b2ec", 0x43}, {&(0x7f0000000bc0)="acb3d5a84f1abf90fc05c9ba24813466fe6b35ebb8de12be59a38c7543de8554ef46462102b2ed8bab937834a45d685e0932cd0f2fef45ae3a4ab4", 0x3b}, {&(0x7f0000000c00)="3089c30ade76ac0c95d8d23778cd1ed5e8d01fb4e8151bdf67edbb5ba0aeb016ce595070b445a49736a680cec1dcb483900d189b95770bb8fd324ab13de3b962bfcb6c39d92b46fed29192a7cbab91a9c8e137a472114816cb6e0cc341ce36bafad1c858fed616be90d2a539226e73b6", 0x70}, {&(0x7f0000000c80)="f8e4934c56be2e30e6d61d0a2d89748afbf511f48606caef56f3ba34f083e6cb867d4fd88a96085decbdb65e93d2622dee667e62b7df3bfff779d1fba23d8893b620fe438d316ce2cd1a4a09cfb3897f7d2c19cae53f82be67871bedc5ddea05edfe5c3ed90ceb7f0395e902f7f4fade46100cf3fd9c457ca0e4e1e2c11b9e6f0c97c3346bcc9a1bdf18452fe3c0482e1407ba171f1c8fa58b9268bfa27b2c7ca57abce1200e279f4280aa63141360843b760f540225b1d253f39571cf17717f5867bc9c0a", 0xc5}, {&(0x7f0000000d80)="ea030038e637ec0af425d1e4ec1aeaa0ab50896a4cbdc752bf77531bece42330b2ef0ed48cc1c8cb347cbaba858497e4fff4", 0x32}], 0x8, &(0x7f0000000e40)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}, 0x10) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x2, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0xebde, 0xb7, &(0x7f0000000280)=""/183, 0x40f00, 0x2, '\x00', r8, 0x0, r1, 0x8, &(0x7f0000000700)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xb, 0x9, 0xffffff16}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r1, r1, r1], &(0x7f00000007c0), 0x10, 0x2c}, 0x94) socketpair(0x1, 0xa, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x450, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x2, 0x10000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000267}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x2a, &(0x7f0000000100)=r11, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018007aff00003800000004000000020000000000001104130000ffffffff000000000000001202000000020000000000000e030000000000000000006100"/84], 0x0, 0x54}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080)) 694.659083ms ago: executing program 0 (id=1946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond0\x00', 0x112}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4b, 0x0, 0x0, 0x40000, 0x10000, @value=r1}, 0x28) close(r0) socket$kcm(0x21, 0x2, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8001}, 0xe06, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057500c30ec0d61342b1c428df8", 0x30}], 0x2}, 0x24000008) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r4, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x10, &(0x7f0000000200), 0x4) r7 = socket$kcm(0x2c, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x6, &(0x7f0000000000)=r8, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r8, 0xffffffffffffffff, 0xa, 0x3c}, 0x20) 644.549145ms ago: executing program 3 (id=1938): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119800000000008510000002000000850000000500000095000000000100009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 476.645999ms ago: executing program 4 (id=1939): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 476.227799ms ago: executing program 3 (id=1940): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92a24fc60", 0x14}], 0x3}, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x4, 0x5, 0x58, 0x0, 0x1, 0x20010, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3553, 0x4, @perf_config_ext={0x3, 0x10}, 0x10, 0x7, 0x7fffffff, 0x3, 0x5, 0xd9ad, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000006700000000000000", @ANYRES32=0x1, @ANYBLOB="011bb900000000000000bd2b32ce0100"/25, @ANYRES32, @ANYRES32=r2, @ANYBLOB="03000000050000000500"/28], 0x50) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0xff, 0x6, 0x7, 0xffff675b}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d8000000180081064e81f782db4cb90402c051cc2a007c0541b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6f930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d956670700dcdf63951f215ce3bb9ad809d5e181ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392077ff9000000008af26c8b7b55f4d2a6823a45f28fcb1d54386230bb56b1d93553d851a3ddd79775", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0xf8, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 349.141022ms ago: executing program 0 (id=1941): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x90) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000040)="b8b2ca3aba000946dd9c6c82be5539ab418732efe70000140277517658dedaff1a02fc4a70c498a384fda6f6236cee1a0608f41fe3bc16e7e44188fb", 0x3c}], 0x1}, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0xa, &(0x7f0000000500), 0x4) r6 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)="007309ba", 0x4}], 0x1}, 0x3e8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000200)) 327.993112ms ago: executing program 4 (id=1942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001800)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0x86c, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x2, 0x8, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22) openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) 189.950156ms ago: executing program 1 (id=1943): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x72}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000051000000000000000600000040820000", @ANYRES32=0x1, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000000000009a21d222e65b18773034686f33929600000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8920, &(0x7f0000000040)) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010000) 133.827178ms ago: executing program 4 (id=1944): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1, 0x0, 0x0, 0x8004}, 0x0) 127.115528ms ago: executing program 3 (id=1945): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x18}, 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100002, 0xac5d, 0x1c25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x4007}, 0x103865, 0x0, 0x51, 0x0, 0x2, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000540)='devices.list\x00', 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff000000007110c900000000009500000000000000be993bada524a52f6054f2fa7d7947ae09e499f386b7ab3bef3df478dd9a5a64ceadc33c0b40cb6b172feb81b0bdf0860046c42b30555d2cd1eedc562ebc992c14c204867e8b"], &(0x7f0000000480)='GPL\x00'}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10042, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000001c0)={'pimreg1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000800000080000082fdd3bdfc89629900", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000150000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 108.757488ms ago: executing program 0 (id=1947): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0xa) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffe13) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 13.796071ms ago: executing program 4 (id=1948): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 1 (id=1949): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r6}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x0, 0x2, 0x8000, r1, 0x2, '\x00', 0x0, r5, 0x4, 0x3, 0x0, 0x2, @value=r6}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xf, 0x80, 0x0, 0x2, 0x0, 0x40000000002, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x1000000, 0xd2b6, 0x3, 0xfffffffffdd7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x103, &(0x7f0000000140)=""/259}, 0x23) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x80000000, @private1, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}, 0x8c1) kernel console output (not intermixed with test programs): hsr_slave_0: link becomes ready [ 69.725348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.734738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.755988][ T4293] device veth1_vlan entered promiscuous mode [ 69.764557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.793415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.813434][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.832894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.843728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.861614][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.897849][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.909565][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.933666][ T4293] device veth0_macvtap entered promiscuous mode [ 69.943360][ T4285] device veth0_vlan entered promiscuous mode [ 69.952859][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.962127][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.972449][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.985015][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.999192][ T4293] device veth1_macvtap entered promiscuous mode [ 70.012197][ T4285] device veth1_vlan entered promiscuous mode [ 70.037064][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.045181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.060148][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.072853][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.086038][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.102983][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.111043][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.143525][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.156742][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.172601][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.185350][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.201843][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.222815][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.235272][ T4283] device veth0_vlan entered promiscuous mode [ 70.243261][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.252085][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.267779][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.276404][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.292075][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.301778][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.319735][ T4293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.331962][ T4293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.341547][ T4293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.351219][ T4293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.381457][ T4283] device veth1_vlan entered promiscuous mode [ 70.398223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.406215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.415946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.426512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.438144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.454077][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.465285][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.482566][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.503867][ T4285] device veth0_macvtap entered promiscuous mode [ 70.520829][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.538023][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.557092][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.568492][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.587481][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.595004][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.621228][ T4285] device veth1_macvtap entered promiscuous mode [ 70.651159][ T4284] device veth0_vlan entered promiscuous mode [ 70.665062][ T4284] device veth1_vlan entered promiscuous mode [ 70.694374][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.709878][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.722589][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.742407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.755974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.764531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.774355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.822226][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.838584][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.850052][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.861074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.871252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.886185][ T4284] device veth0_macvtap entered promiscuous mode [ 70.900496][ T4285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.909516][ T4285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.919065][ T4285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.928247][ T4285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.942299][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.954400][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.954761][ T4283] device veth0_macvtap entered promiscuous mode [ 70.971259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.981356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.993605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.004404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.020961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.033176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.044264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.059229][ T4284] device veth1_macvtap entered promiscuous mode [ 71.092623][ T4283] device veth1_macvtap entered promiscuous mode [ 71.146564][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.153399][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.165892][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.176012][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.189470][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.202773][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.214157][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.228728][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.242362][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.252580][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.263216][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.273276][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.284367][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.296004][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.297184][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 71.304440][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 71.309303][ T4297] Bluetooth: hci2: command 0x040f tx timeout [ 71.315164][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 71.341359][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.351340][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.359906][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.368530][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.377908][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.386436][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.393156][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 71.399492][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.408491][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.417982][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.426501][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.435520][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.450730][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.465372][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.481706][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.492218][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.503555][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.514303][ T4283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.523513][ T4283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.532741][ T4283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.542823][ T4283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.559202][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.577128][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.587655][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.598856][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.608993][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.620318][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.632188][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.647872][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.656546][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.671216][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.682415][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.716892][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.727259][ T4292] device veth0_vlan entered promiscuous mode [ 71.728794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.738315][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.752512][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.762235][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.770397][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.781869][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.805951][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.818389][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.827449][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.836157][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.892803][ T4292] device veth1_vlan entered promiscuous mode [ 71.912721][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.921863][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.934439][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.943671][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.055141][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.068650][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.077288][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.092667][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.104584][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.115037][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.165909][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.180880][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.197530][ T4292] device veth0_macvtap entered promiscuous mode [ 72.206981][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.217792][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.228768][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.234664][ T4292] device veth1_macvtap entered promiscuous mode [ 72.236753][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.264909][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.283446][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.308055][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.316181][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.345142][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.361995][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.373729][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.388762][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.400701][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.411410][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.424615][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.451737][ T4366] netlink: 'syz.1.2': attribute type 25 has an invalid length. [ 72.460533][ T4366] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.471175][ T4367] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2'. [ 72.483509][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.494905][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.506487][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.518701][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.531522][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.542196][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.554229][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.568631][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.589838][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.603886][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.614438][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.633293][ T4292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.686881][ T4292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.731707][ T4292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.753706][ T4292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.800060][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.831292][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.881877][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.903449][ T4372] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4'. [ 72.914765][ C1] hrtimer: interrupt took 100229 ns [ 73.078997][ T4372] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4'. [ 73.377874][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 73.384062][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 73.391471][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 73.391671][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 73.436895][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.457524][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 73.470840][ T4372] syz.3.4 (4372) used greatest stack depth: 19840 bytes left [ 73.497337][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.971754][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.140550][ T4382] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 74.184174][ T4382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.397279][ T4382] batman_adv: batadv0: Adding interface: virt_wifi0 [ 74.490234][ T4382] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.624322][ T4382] batman_adv: batadv0: Interface activated: virt_wifi0 [ 74.802935][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.825983][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.872330][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.669514][ T4397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9'. [ 75.695594][ T4397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9'. [ 76.112092][ T4399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9'. [ 76.228603][ T4401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9'. [ 76.978135][ T4411] netlink: 'syz.1.13': attribute type 10 has an invalid length. [ 76.985894][ T4411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13'. [ 77.012064][ T4411] batman_adv: batadv0: Adding interface: virt_wifi0 [ 77.038094][ T4411] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.074990][ T4411] batman_adv: batadv0: Interface activated: virt_wifi0 [ 77.129556][ T4416] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.12'. [ 77.143743][ T4417] netlink: 'syz.0.11': attribute type 21 has an invalid length. [ 77.760508][ T127] cfg80211: failed to load regulatory.db [ 78.073783][ T4441] netlink: 'syz.3.24': attribute type 10 has an invalid length. [ 78.088681][ T4441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24'. [ 78.178363][ T4441] batman_adv: batadv0: Adding interface: virt_wifi0 [ 78.185797][ T4441] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.212961][ T4441] batman_adv: batadv0: Interface activated: virt_wifi0 [ 78.245751][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.253861][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.268390][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.276163][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.286538][ T4443] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 78.294295][ T4443] batman_adv: batadv0: Removing interface: virt_wifi0 [ 78.345687][ T4452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28'. [ 78.387606][ T4448] netlink: 'syz.2.27': attribute type 10 has an invalid length. [ 78.409986][ T4438] syz.4.22 (4438) used greatest stack depth: 16256 bytes left [ 78.425215][ T4448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27'. [ 78.546457][ T4448] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 78.575872][ T4452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28'. [ 78.816660][ T4462] netlink: 'syz.4.31': attribute type 13 has an invalid length. [ 78.829380][ T4462] netlink: 152 bytes leftover after parsing attributes in process `syz.4.31'. [ 78.856301][ T4461] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 78.872286][ T4461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.32'. [ 78.888199][ T4461] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 79.093626][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.129813][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.155957][ T4476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.37'. [ 79.169857][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.197061][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.333133][ T4472] netlink: 'syz.2.36': attribute type 10 has an invalid length. [ 79.358313][ T4472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36'. [ 79.558725][ T4472] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 79.586547][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 79.613790][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 79.638571][ T4485] netlink: 'syz.3.38': attribute type 2 has an invalid length. [ 79.668041][ T4485] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 80.036046][ T4492] netlink: 'syz.0.40': attribute type 10 has an invalid length. [ 80.142542][ T4492] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 80.259152][ T4502] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 80.298857][ T4502] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 80.598952][ T4511] netlink: 'syz.0.45': attribute type 3 has an invalid length. [ 80.811475][ T4518] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 81.187198][ T4526] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 81.454036][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.474879][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.499100][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.523131][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.583559][ T4536] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 81.601743][ T4536] batman_adv: batadv0: Removing interface: virt_wifi0 [ 82.246351][ T4546] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 82.773018][ T4556] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 82.927355][ T4565] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 83.545784][ T4582] __nla_validate_parse: 26 callbacks suppressed [ 83.545800][ T4582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.583666][ T4584] netlink: 60 bytes leftover after parsing attributes in process `syz.4.68'. [ 83.600468][ T4582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.679471][ T4584] netlink: 60 bytes leftover after parsing attributes in process `syz.4.68'. [ 83.737168][ T4586] netlink: 188 bytes leftover after parsing attributes in process `syz.1.81'. [ 83.767401][ T4582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.792049][ T4586] validate_nla: 10 callbacks suppressed [ 83.792084][ T4586] netlink: 'syz.1.81': attribute type 3 has an invalid length. [ 83.876880][ T4586] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 83.915306][ T4586] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.81'. [ 83.935480][ T4597] netlink: 'syz.2.71': attribute type 21 has an invalid length. [ 84.026734][ T4599] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 84.035863][ T4599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.73'. [ 84.070147][ T4599] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 84.525507][ T4609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.78'. [ 84.556415][ T4609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.78'. [ 87.861179][ T4633] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 88.292955][ T4650] netlink: 'syz.3.98': attribute type 10 has an invalid length. [ 88.348522][ T4650] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 88.662527][ T4660] netlink: 'syz.1.90': attribute type 10 has an invalid length. [ 88.699897][ T4660] __nla_validate_parse: 11 callbacks suppressed [ 88.699944][ T4660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.90'. [ 88.777167][ T4666] netlink: 188 bytes leftover after parsing attributes in process `syz.4.91'. [ 88.812657][ T4669] netlink: 'syz.3.93': attribute type 21 has an invalid length. [ 88.853054][ T4666] netlink: 'syz.4.91': attribute type 3 has an invalid length. [ 88.892067][ T4671] netlink: 'syz.2.95': attribute type 49 has an invalid length. [ 88.904258][ T4666] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 88.937643][ T4666] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.91'. [ 91.327820][ T4708] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 91.451179][ T4713] netlink: 'syz.1.108': attribute type 10 has an invalid length. [ 91.692663][ T4720] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET) [ 93.075686][ T4750] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.117'. [ 94.443720][ T4773] Zero length message leads to an empty skb [ 97.648400][ T4802] netlink: 'syz.2.138': attribute type 28 has an invalid length. [ 97.711723][ T4803] sctp: [Deprecated]: syz.2.138 (pid 4803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.711723][ T4803] Use struct sctp_sack_info instead [ 99.307713][ T4822] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 99.313882][ T4822] pim6reg0: linktype set to 780 [ 99.612203][ T4836] netlink: 'syz.2.152': attribute type 16 has an invalid length. [ 99.650361][ T4836] netlink: 'syz.2.152': attribute type 3 has an invalid length. [ 99.677982][ T4836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.152'. [ 99.690334][ T4832] netlink: 60 bytes leftover after parsing attributes in process `syz.3.151'. [ 99.780869][ T4832] netlink: 60 bytes leftover after parsing attributes in process `syz.3.151'. [ 99.802994][ T4846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.151'. [ 100.001375][ T4855] netlink: 'syz.3.157': attribute type 28 has an invalid length. [ 100.032335][ T4855] netlink: 'syz.3.157': attribute type 4 has an invalid length. [ 100.043281][ T4856] netlink: 'syz.0.159': attribute type 3 has an invalid length. [ 100.063903][ T4855] netlink: 136 bytes leftover after parsing attributes in process `syz.3.157'. [ 100.073930][ T4856] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.159'. [ 100.149736][ T4855] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 100.224461][ T4855] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 100.461250][ T4873] netlink: 'syz.4.165': attribute type 39 has an invalid length. [ 100.506827][ T4873] device macvlan0 entered promiscuous mode [ 100.776603][ T4888] netlink: 'syz.3.170': attribute type 25 has an invalid length. [ 100.785658][ T4888] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 100.829543][ T4889] netlink: 5 bytes leftover after parsing attributes in process `syz.3.170'. [ 101.001755][ T4895] netlink: 188 bytes leftover after parsing attributes in process `syz.0.174'. [ 101.057191][ T4898] netlink: 152 bytes leftover after parsing attributes in process `syz.2.176'. [ 101.089955][ T4900] FAULT_INJECTION: forcing a failure. [ 101.089955][ T4900] name failslab, interval 1, probability 0, space 0, times 1 [ 101.158977][ T4900] CPU: 0 PID: 4900 Comm: syz.1.177 Not tainted syzkaller #0 [ 101.166323][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.176412][ T4900] Call Trace: [ 101.179721][ T4900] [ 101.182672][ T4900] dump_stack_lvl+0x188/0x24e [ 101.187394][ T4900] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 101.193576][ T4900] ? show_regs_print_info+0x12/0x12 [ 101.198804][ T4900] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 101.204996][ T4900] should_fail_ex+0x390/0x4c0 [ 101.209705][ T4900] should_failslab+0x5/0x20 [ 101.214223][ T4900] slab_pre_alloc_hook+0x59/0x300 [ 101.219274][ T4900] ? tomoyo_encode+0x28a/0x550 [ 101.224057][ T4900] __kmem_cache_alloc_node+0x4f/0x270 [ 101.229453][ T4900] ? tomoyo_encode+0x28a/0x550 [ 101.234246][ T4900] __kmalloc+0xa3/0x240 [ 101.238434][ T4900] tomoyo_encode+0x28a/0x550 [ 101.243058][ T4900] tomoyo_realpath_from_path+0x578/0x5c0 [ 101.248715][ T4900] ? tomoyo_domain+0xd2/0x120 [ 101.253425][ T4900] ? tomoyo_path_number_perm+0x205/0x650 [ 101.259075][ T4900] tomoyo_path_number_perm+0x22f/0x650 [ 101.264551][ T4900] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 101.271158][ T4900] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 101.276630][ T4900] ? ksys_write+0x1ce/0x260 [ 101.281189][ T4900] ? __fget_files+0x28/0x460 [ 101.285811][ T4900] security_file_ioctl+0x6c/0xa0 [ 101.290776][ T4900] __se_sys_ioctl+0x48/0x170 [ 101.295384][ T4900] do_syscall_64+0x4c/0xa0 [ 101.299805][ T4900] ? clear_bhb_loop+0x60/0xb0 [ 101.304487][ T4900] ? clear_bhb_loop+0x60/0xb0 [ 101.309181][ T4900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.315074][ T4900] RIP: 0033:0x7f57cb59e0d9 [ 101.319495][ T4900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.339099][ T4900] RSP: 002b:00007f57cc507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.347524][ T4900] RAX: ffffffffffffffda RBX: 00007f57cb825fa0 RCX: 00007f57cb59e0d9 [ 101.355509][ T4900] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000a [ 101.363477][ T4900] RBP: 00007f57cc507090 R08: 0000000000000000 R09: 0000000000000000 [ 101.371438][ T4900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.379400][ T4900] R13: 00007f57cb826038 R14: 00007f57cb825fa0 R15: 00007ffc06bfb5a8 [ 101.387396][ T4900] [ 101.421196][ T4900] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.510999][ T4957] device macvlan0 entered promiscuous mode [ 102.531750][ T4956] netlink: 188 bytes leftover after parsing attributes in process `syz.2.198'. [ 102.715574][ T4962] validate_nla: 3 callbacks suppressed [ 102.715589][ T4962] netlink: 'syz.4.199': attribute type 28 has an invalid length. [ 102.760450][ T4962] netlink: 'syz.4.199': attribute type 4 has an invalid length. [ 102.800495][ T4962] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 104.161391][ T4962] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 104.751309][ T4998] netlink: 'syz.0.212': attribute type 39 has an invalid length. [ 104.794216][ T4998] device macvlan0 entered promiscuous mode [ 104.944522][ T5007] netlink: 'syz.2.215': attribute type 28 has an invalid length. [ 104.953983][ T5007] netlink: 'syz.2.215': attribute type 4 has an invalid length. [ 104.963385][ T5007] __nla_validate_parse: 5 callbacks suppressed [ 104.963399][ T5007] netlink: 136 bytes leftover after parsing attributes in process `syz.2.215'. [ 105.000760][ T5003] netlink: 'syz.1.214': attribute type 10 has an invalid length. [ 105.661039][ T5003] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 105.670170][ T5007] netlink: 'syz.2.215': attribute type 10 has an invalid length. [ 105.703030][ T5007] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 106.048981][ T5043] netlink: 'syz.3.229': attribute type 39 has an invalid length. [ 106.067442][ T5043] device macvlan0 entered promiscuous mode [ 106.874369][ T5066] netlink: 188 bytes leftover after parsing attributes in process `syz.3.234'. [ 106.907976][ T5066] netlink: 'syz.3.234': attribute type 3 has an invalid length. [ 106.925604][ T5066] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.234'. [ 106.958354][ T5070] device lo entered promiscuous mode [ 107.110967][ T5077] netlink: 188 bytes leftover after parsing attributes in process `syz.3.238'. [ 107.898583][ T5108] device syzkaller0 entered promiscuous mode [ 108.786223][ T5128] netlink: 'syz.2.260': attribute type 28 has an invalid length. [ 108.804890][ T5128] netlink: 'syz.2.260': attribute type 4 has an invalid length. [ 108.825160][ T5128] netlink: 136 bytes leftover after parsing attributes in process `syz.2.260'. [ 110.856377][ T5128] netlink: 'syz.2.260': attribute type 10 has an invalid length. [ 110.882675][ T5128] team0: Port device netdevsim0 added [ 110.917977][ T5140] device bond_slave_1 entered promiscuous mode [ 111.130698][ T5169] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.271'. [ 111.288943][ T5178] netlink: 'syz.4.276': attribute type 10 has an invalid length. [ 111.367767][ T5178] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 112.509379][ T5193] netlink: 'syz.1.281': attribute type 4 has an invalid length. [ 112.721389][ T5198] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 113.075788][ T5218] netlink: 188 bytes leftover after parsing attributes in process `syz.3.291'. [ 113.108717][ T5218] netlink: 'syz.3.291': attribute type 3 has an invalid length. [ 113.118892][ T5218] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 113.126941][ T5218] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.291'. [ 113.359296][ T5231] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 116.417534][ T5231] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 116.688748][ T5258] netlink: 188 bytes leftover after parsing attributes in process `syz.4.305'. [ 116.739841][ T5261] netlink: 'syz.4.305': attribute type 3 has an invalid length. [ 116.756324][ T5261] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 116.770216][ T5261] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.305'. [ 117.196768][ T5278] netlink: 'syz.3.311': attribute type 2 has an invalid length. [ 119.054307][ T5298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.329'. [ 119.093689][ T5298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.329'. [ 119.150434][ T5298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.329'. [ 119.198118][ T5298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.329'. [ 119.237068][ T5305] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 119.818159][ T5324] netlink: 14 bytes leftover after parsing attributes in process `syz.0.330'. [ 119.998936][ T5324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.038648][ T5324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.075255][ T5324] bond0 (unregistering): Released all slaves [ 120.104262][ T5327] netlink: 64 bytes leftover after parsing attributes in process `syz.0.330'. [ 120.133655][ T5330] netlink: 'syz.4.333': attribute type 39 has an invalid length. [ 120.244729][ T5339] netlink: 'syz.1.335': attribute type 28 has an invalid length. [ 120.264341][ T5339] netlink: 'syz.1.335': attribute type 4 has an invalid length. [ 120.334629][ T5339] netlink: 136 bytes leftover after parsing attributes in process `syz.1.335'. [ 120.363370][ T5344] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 120.388571][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.399570][ T5344] device bridge_slave_1 left promiscuous mode [ 120.406625][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.472492][ T5346] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 120.503659][ T5339] netlink: 'syz.1.335': attribute type 10 has an invalid length. [ 120.525576][ T5339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.613869][ T5339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.712191][ T5339] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 120.792346][ T5361] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.344'. [ 120.892599][ T5360] netlink: 'syz.3.343': attribute type 25 has an invalid length. [ 120.962156][ T5368] FAULT_INJECTION: forcing a failure. [ 120.962156][ T5368] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.000578][ T5368] CPU: 1 PID: 5368 Comm: syz.1.347 Not tainted syzkaller #0 [ 121.007915][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.017979][ T5368] Call Trace: [ 121.021256][ T5368] [ 121.024185][ T5368] dump_stack_lvl+0x188/0x24e [ 121.028864][ T5368] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 121.035017][ T5368] ? show_regs_print_info+0x12/0x12 [ 121.040213][ T5368] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 121.046384][ T5368] should_fail_ex+0x390/0x4c0 [ 121.051070][ T5368] _copy_to_user+0x2c/0x130 [ 121.055570][ T5368] simple_read_from_buffer+0xe3/0x150 [ 121.060965][ T5368] proc_fail_nth_read+0x1a6/0x220 [ 121.065989][ T5368] ? proc_fault_inject_write+0x310/0x310 [ 121.071619][ T5368] ? fsnotify_perm+0x248/0x550 [ 121.076382][ T5368] ? proc_fault_inject_write+0x310/0x310 [ 121.082011][ T5368] vfs_read+0x2db/0x960 [ 121.086174][ T5368] ? kernel_read+0x1e0/0x1e0 [ 121.090759][ T5368] ? __fget_files+0x28/0x460 [ 121.095349][ T5368] ? __fget_files+0x3fc/0x460 [ 121.100050][ T5368] ? __fdget_pos+0x2ae/0x360 [ 121.104634][ T5368] ? ksys_read+0x70/0x260 [ 121.108962][ T5368] ksys_read+0x14d/0x260 [ 121.113209][ T5368] ? vfs_write+0x9a0/0x9a0 [ 121.117627][ T5368] ? lockdep_hardirqs_on+0x94/0x140 [ 121.122827][ T5368] do_syscall_64+0x4c/0xa0 [ 121.127327][ T5368] ? clear_bhb_loop+0x60/0xb0 [ 121.131998][ T5368] ? clear_bhb_loop+0x60/0xb0 [ 121.136673][ T5368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.142579][ T5368] RIP: 0033:0x7f57cb55e90e [ 121.146988][ T5368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.166610][ T5368] RSP: 002b:00007f57cc506fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.175049][ T5368] RAX: ffffffffffffffda RBX: 00007f57cc5076c0 RCX: 00007f57cb55e90e [ 121.183122][ T5368] RDX: 000000000000000f RSI: 00007f57cc5070a0 RDI: 000000000000000e [ 121.191113][ T5368] RBP: 00007f57cc507090 R08: 0000000000000000 R09: 0000000000000000 [ 121.199104][ T5368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.207124][ T5368] R13: 00007f57cb826038 R14: 00007f57cb825fa0 R15: 00007ffc06bfb5a8 [ 121.215116][ T5368] [ 121.542657][ T5384] pimreg: tun_chr_ioctl cmd 2147767520 [ 122.968269][ T5430] validate_nla: 1 callbacks suppressed [ 122.968285][ T5430] netlink: 'syz.1.370': attribute type 2 has an invalid length. [ 123.016855][ T5430] netlink: 'syz.1.370': attribute type 8 has an invalid length. [ 123.053971][ T5430] __nla_validate_parse: 3 callbacks suppressed [ 123.053986][ T5430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.370'. [ 125.915217][ T5471] netlink: 'syz.3.385': attribute type 10 has an invalid length. [ 125.998175][ T5471] team0: Device vxcan1 is of different type [ 127.075142][ T5470] device syzkaller0 entered promiscuous mode [ 127.087694][ T5482] netlink: 'syz.0.388': attribute type 2 has an invalid length. [ 127.095578][ T5482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.388'. [ 127.779724][ T5516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.397'. [ 129.266220][ T5516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.397'. [ 129.275571][ T5515] netlink: 'syz.2.398': attribute type 2 has an invalid length. [ 129.284940][ T5515] netlink: 'syz.2.398': attribute type 8 has an invalid length. [ 129.292996][ T5515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.398'. [ 129.464382][ T5528] netlink: 60 bytes leftover after parsing attributes in process `syz.2.402'. [ 129.478645][ T5530] netlink: 188 bytes leftover after parsing attributes in process `syz.3.404'. [ 129.524652][ T5530] netlink: 'syz.3.404': attribute type 3 has an invalid length. [ 129.527861][ T5528] netlink: 60 bytes leftover after parsing attributes in process `syz.2.402'. [ 129.557015][ T5530] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 129.575389][ T5530] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.404'. [ 129.660127][ T5534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.402'. [ 129.703247][ T5534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.402'. [ 129.893238][ T5537] netlink: 'syz.1.405': attribute type 2 has an invalid length. [ 130.011707][ T5539] netlink: 'syz.3.415': attribute type 10 has an invalid length. [ 132.072062][ T5552] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 132.381789][ T5568] can: request_module (can-proto-4) failed. [ 132.823594][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830233][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.382671][ T5586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.419'. [ 135.595728][ T5586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.419'. [ 135.615246][ T5591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.419'. [ 135.653444][ T5588] netlink: 'syz.1.420': attribute type 10 has an invalid length. [ 136.199652][ T5596] netlink: 'syz.2.422': attribute type 2 has an invalid length. [ 137.109380][ T5593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.419'. [ 137.356434][ T5614] device bridge_slave_1 left promiscuous mode [ 137.370114][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.391569][ T5623] netlink: 'syz.2.429': attribute type 28 has an invalid length. [ 137.392675][ T5614] device bridge_slave_0 left promiscuous mode [ 137.408064][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.431021][ T5623] netlink: 'syz.2.429': attribute type 4 has an invalid length. [ 137.461745][ T5623] netlink: 136 bytes leftover after parsing attributes in process `syz.2.429'. [ 137.641749][ T5626] netlink: 'syz.2.429': attribute type 10 has an invalid length. [ 137.710811][ T5629] netlink: 'syz.0.430': attribute type 25 has an invalid length. [ 137.719601][ T5629] netlink: 'syz.0.430': attribute type 29 has an invalid length. [ 137.732558][ T5629] netlink: 5 bytes leftover after parsing attributes in process `syz.0.430'. [ 138.060781][ T5638] netlink: 14 bytes leftover after parsing attributes in process `syz.2.433'. [ 138.291883][ T5638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.382268][ T5638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.467730][ T5638] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 138.511862][ T5638] bond0 (unregistering): Released all slaves [ 138.521591][ T5644] netlink: 'syz.4.435': attribute type 3 has an invalid length. [ 138.533207][ T5644] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 138.543217][ T5644] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.435'. [ 138.584160][ T5642] netlink: 188 bytes leftover after parsing attributes in process `syz.4.435'. [ 139.260518][ T5655] netlink: 60 bytes leftover after parsing attributes in process `syz.4.437'. [ 140.239995][ T5680] netlink: 'syz.3.448': attribute type 3 has an invalid length. [ 140.562601][ T5695] __nla_validate_parse: 5 callbacks suppressed [ 140.562618][ T5695] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.452'. [ 140.696437][ T5695] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.452'. [ 141.090864][ T5707] validate_nla: 1 callbacks suppressed [ 141.090900][ T5707] netlink: 'syz.4.457': attribute type 10 has an invalid length. [ 141.126965][ T5707] netlink: 168 bytes leftover after parsing attributes in process `syz.4.457'. [ 141.157988][ T5711] netlink: 152 bytes leftover after parsing attributes in process `syz.4.457'. [ 141.192737][ T5713] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 141.215516][ T5707] netlink: 53775 bytes leftover after parsing attributes in process `syz.4.457'. [ 142.625563][ T5761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.474'. [ 142.648340][ T5761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.474'. [ 142.675424][ T5761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.474'. [ 142.811044][ T5766] netlink: 'syz.0.486': attribute type 3 has an invalid length. [ 142.866882][ T5766] netlink: 'syz.0.486': attribute type 1 has an invalid length. [ 142.906125][ T5766] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.486'. [ 143.095876][ T5764] netlink: 60 bytes leftover after parsing attributes in process `syz.4.474'. [ 143.371444][ T5780] device bridge_slave_0 left promiscuous mode [ 143.401536][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.417753][ T5793] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 144.560909][ T5800] netlink: 'syz.2.488': attribute type 10 has an invalid length. [ 144.801071][ T5805] netlink: 'syz.0.491': attribute type 8 has an invalid length. [ 144.812664][ T5805] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 147.264117][ T5805] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 147.520017][ T5825] netlink: 'syz.1.498': attribute type 39 has an invalid length. [ 147.993273][ T5850] netlink: 'syz.1.505': attribute type 10 has an invalid length. [ 148.006063][ T5850] __nla_validate_parse: 7 callbacks suppressed [ 148.006095][ T5850] netlink: 168 bytes leftover after parsing attributes in process `syz.1.505'. [ 148.137508][ T5850] netlink: 152 bytes leftover after parsing attributes in process `syz.1.505'. [ 148.229212][ T5850] netlink: 53775 bytes leftover after parsing attributes in process `syz.1.505'. [ 148.279978][ T5854] netlink: 'syz.4.509': attribute type 25 has an invalid length. [ 148.290790][ T5854] netlink: 'syz.4.509': attribute type 29 has an invalid length. [ 148.325886][ T5860] netlink: 5 bytes leftover after parsing attributes in process `syz.4.509'. [ 149.024301][ T5866] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.512'. [ 149.282490][ T5872] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.514'. [ 149.448865][ T5879] netlink: 14 bytes leftover after parsing attributes in process `syz.2.518'. [ 149.460481][ T5881] netlink: 'syz.0.519': attribute type 3 has an invalid length. [ 149.476059][ T5881] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.519'. [ 149.754523][ T5896] FAULT_INJECTION: forcing a failure. [ 149.754523][ T5896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.770251][ T5896] CPU: 1 PID: 5896 Comm: syz.1.523 Not tainted syzkaller #0 [ 149.777601][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.787687][ T5896] Call Trace: [ 149.790984][ T5896] [ 149.793931][ T5896] dump_stack_lvl+0x188/0x24e [ 149.798653][ T5896] ? show_regs_print_info+0x12/0x12 [ 149.803886][ T5896] ? load_image+0x410/0x410 [ 149.808430][ T5896] ? __lock_acquire+0x7c40/0x7c40 [ 149.813487][ T5896] ? __might_sleep+0xd0/0xd0 [ 149.818105][ T5896] should_fail_ex+0x390/0x4c0 [ 149.822817][ T5896] _copy_from_user+0x2c/0x170 [ 149.827523][ T5896] generic_map_update_batch+0x4dc/0x7f0 [ 149.833116][ T5896] ? rcu_read_unlock+0xa0/0xa0 [ 149.837921][ T5896] ? __fdget+0x17c/0x200 [ 149.842188][ T5896] ? rcu_read_unlock+0xa0/0xa0 [ 149.846985][ T5896] bpf_map_do_batch+0x475/0x5f0 [ 149.851864][ T5896] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 149.858315][ T5896] __sys_bpf+0x6f7/0x780 [ 149.862598][ T5896] ? bpf_link_show_fdinfo+0x380/0x380 [ 149.868023][ T5896] ? lock_chain_count+0x20/0x20 [ 149.872922][ T5896] __x64_sys_bpf+0x78/0x90 [ 149.878253][ T5896] do_syscall_64+0x4c/0xa0 [ 149.882707][ T5896] ? clear_bhb_loop+0x60/0xb0 [ 149.887499][ T5896] ? clear_bhb_loop+0x60/0xb0 [ 149.892208][ T5896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.898215][ T5896] RIP: 0033:0x7f57cb59e0d9 [ 149.902657][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.922288][ T5896] RSP: 002b:00007f57cc507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.930742][ T5896] RAX: ffffffffffffffda RBX: 00007f57cb825fa0 RCX: 00007f57cb59e0d9 [ 149.938751][ T5896] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 149.946749][ T5896] RBP: 00007f57cc507090 R08: 0000000000000000 R09: 0000000000000000 [ 149.954741][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.962739][ T5896] R13: 00007f57cb826038 R14: 00007f57cb825fa0 R15: 00007ffc06bfb5a8 [ 149.970763][ T5896] [ 150.180873][ T5899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.524'. [ 150.202040][ T5899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.524'. [ 150.705993][ T5915] device sit0 entered promiscuous mode [ 150.762917][ T5917] netlink: 'syz.1.530': attribute type 8 has an invalid length. [ 150.794740][ T5917] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 150.878454][ T5921] netlink: 'syz.0.531': attribute type 10 has an invalid length. [ 150.909384][ T5921] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 151.055290][ T5917] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 151.796134][ T5939] device pim6reg1 entered promiscuous mode [ 152.998442][ T5984] netlink: 'syz.1.561': attribute type 3 has an invalid length. [ 153.023487][ T5989] netlink: 'syz.4.550': attribute type 8 has an invalid length. [ 153.033088][ T5984] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 153.044710][ T5989] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 153.052701][ T5989] __nla_validate_parse: 9 callbacks suppressed [ 153.052789][ T5989] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.550'. [ 153.069233][ T5984] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.561'. [ 153.336557][ T5989] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 155.469079][ T6021] netlink: 188 bytes leftover after parsing attributes in process `syz.4.567'. [ 155.514664][ T6024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 155.518806][ T6021] netlink: 'syz.4.567': attribute type 3 has an invalid length. [ 155.563873][ T6024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 155.564933][ T6021] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 155.597358][ T6021] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.567'. [ 155.598937][ T6024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 155.740021][ T6037] netlink: 'syz.3.571': attribute type 39 has an invalid length. [ 155.784352][ T6038] netlink: 'syz.2.572': attribute type 8 has an invalid length. [ 155.826994][ T6038] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 155.848423][ T6038] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.572'. [ 155.942215][ T6041] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.573'. [ 156.486971][ T6032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 156.635550][ T6050] device syzkaller0 entered promiscuous mode [ 158.028145][ T6078] openvswitch: netlink: Key type 386 is out of range max 32 [ 160.363333][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.371396][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.380541][ T6070] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 160.389295][ T6070] batman_adv: batadv0: Removing interface: virt_wifi0 [ 161.039005][ T6101] __nla_validate_parse: 7 callbacks suppressed [ 161.039022][ T6101] netlink: 14 bytes leftover after parsing attributes in process `syz.0.592'. [ 161.409727][ T6115] validate_nla: 3 callbacks suppressed [ 161.409744][ T6115] netlink: 'syz.3.600': attribute type 10 has an invalid length. [ 161.500289][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.600'. [ 161.561352][ T6115] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 164.613596][ T6169] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 164.809915][ T6177] device pim6reg1 entered promiscuous mode [ 171.176996][ T6232] device lo entered promiscuous mode [ 171.188934][ T6234] netlink: 'syz.3.638': attribute type 10 has an invalid length. [ 171.210001][ T6234] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 171.347560][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.639'. [ 171.393476][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.639'. [ 171.428270][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.639'. [ 171.497046][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.4.639'. [ 171.714112][ T6258] device pim6reg1 entered promiscuous mode [ 172.151946][ T6272] netlink: 188 bytes leftover after parsing attributes in process `syz.4.650'. [ 172.225852][ T6272] netlink: 'syz.4.650': attribute type 3 has an invalid length. [ 172.266036][ T6272] netlink: 'syz.4.650': attribute type 1 has an invalid length. [ 172.276632][ T6272] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.650'. [ 172.459945][ T6281] netlink: 'syz.0.654': attribute type 21 has an invalid length. [ 172.468687][ T6281] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 172.476340][ T6281] netlink: 144 bytes leftover after parsing attributes in process `syz.0.654'. [ 172.485707][ T6282] netlink: 'syz.4.653': attribute type 39 has an invalid length. [ 173.130688][ T6309] netlink: 188 bytes leftover after parsing attributes in process `syz.2.663'. [ 173.149073][ T6309] netlink: 'syz.2.663': attribute type 3 has an invalid length. [ 173.160950][ T6308] netlink: 'syz.3.662': attribute type 25 has an invalid length. [ 173.169245][ T6309] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 173.177629][ T6308] netlink: 'syz.3.662': attribute type 29 has an invalid length. [ 173.186380][ T6309] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.663'. [ 173.200273][ T6308] netlink: 5 bytes leftover after parsing attributes in process `syz.3.662'. [ 175.429008][ T6364] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 176.677993][ T6389] validate_nla: 7 callbacks suppressed [ 176.678013][ T6389] netlink: 'syz.3.691': attribute type 3 has an invalid length. [ 176.754426][ T6389] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 176.787343][ T6389] __nla_validate_parse: 11 callbacks suppressed [ 176.787361][ T6389] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.691'. [ 178.560199][ T6385] netlink: 188 bytes leftover after parsing attributes in process `syz.3.691'. [ 178.763195][ T6402] netlink: 188 bytes leftover after parsing attributes in process `syz.2.694'. [ 178.799513][ T6402] netlink: 'syz.2.694': attribute type 3 has an invalid length. [ 178.856853][ T6402] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 178.872173][ T6402] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.694'. [ 179.646310][ T6427] netlink: 'syz.4.707': attribute type 25 has an invalid length. [ 179.667411][ T6427] netlink: 'syz.4.707': attribute type 25 has an invalid length. [ 180.095842][ T6435] delete_channel: no stack [ 182.097340][ T6480] netlink: 168 bytes leftover after parsing attributes in process `syz.3.727'. [ 185.061468][ T6506] netlink: 'syz.4.737': attribute type 28 has an invalid length. [ 185.089125][ T6506] netlink: 'syz.4.737': attribute type 4 has an invalid length. [ 185.099238][ T6506] netlink: 136 bytes leftover after parsing attributes in process `syz.4.737'. [ 185.218726][ T6511] netlink: 188 bytes leftover after parsing attributes in process `syz.0.740'. [ 185.242286][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.742'. [ 185.261054][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.742'. [ 185.278104][ T6511] netlink: 'syz.0.740': attribute type 3 has an invalid length. [ 185.310659][ T6517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.742'. [ 185.317465][ T6511] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 185.336077][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.742'. [ 185.337026][ T6511] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.740'. [ 187.832337][ T6553] netlink: 188 bytes leftover after parsing attributes in process `syz.0.757'. [ 187.880917][ T6553] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 187.928427][ T6553] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 187.937373][ T6553] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.757'. [ 188.759231][ T6578] netlink: 'syz.4.766': attribute type 10 has an invalid length. [ 189.150335][ T6578] team0: Device wg1 is of different type [ 189.208944][ T6586] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 189.243572][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.767'. [ 189.257451][ T6586] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 191.144550][ T6597] netlink: 188 bytes leftover after parsing attributes in process `syz.0.771'. [ 191.182375][ T6597] netlink: 'syz.0.771': attribute type 3 has an invalid length. [ 191.196906][ T6597] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 191.215600][ T6597] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.771'. [ 191.224995][ T4297] Bluetooth: hci4: command 0x0406 tx timeout [ 191.226826][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 191.244012][ T4297] Bluetooth: hci3: command 0x0406 tx timeout [ 191.244052][ T4294] Bluetooth: hci2: command 0x0406 tx timeout [ 191.250406][ T4297] Bluetooth: hci1: command 0x0406 tx timeout [ 191.661922][ T6618] device syzkaller0 entered promiscuous mode [ 192.118670][ T6641] netlink: 'syz.3.789': attribute type 3 has an invalid length. [ 192.127080][ T6641] netlink: 'syz.3.789': attribute type 1 has an invalid length. [ 192.134805][ T6641] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.789'. [ 193.576054][ T6632] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 193.583804][ T6632] netlink: 152 bytes leftover after parsing attributes in process `syz.1.788'. [ 193.600541][ T6636] netlink: 188 bytes leftover after parsing attributes in process `syz.3.789'. [ 193.609930][ T6639] netlink: 'syz.0.790': attribute type 10 has an invalid length. [ 194.284340][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.290851][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.476558][ T6678] netlink: 188 bytes leftover after parsing attributes in process `syz.4.802'. [ 194.540311][ T6678] netlink: 'syz.4.802': attribute type 3 has an invalid length. [ 194.559123][ T6678] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 194.576284][ T6678] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.802'. [ 194.760350][ T6682] device syzkaller0 entered promiscuous mode [ 196.511774][ T6708] netlink: 'syz.4.813': attribute type 3 has an invalid length. [ 196.519774][ T6708] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.813'. [ 197.288507][ T6717] netlink: 188 bytes leftover after parsing attributes in process `syz.1.817'. [ 197.339680][ T6717] netlink: 'syz.1.817': attribute type 3 has an invalid length. [ 197.350662][ T6717] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 197.397466][ T6717] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.817'. [ 198.493312][ T6739] netlink: 14 bytes leftover after parsing attributes in process `syz.1.825'. [ 198.514577][ T6742] FAULT_INJECTION: forcing a failure. [ 198.514577][ T6742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.618210][ T6742] CPU: 1 PID: 6742 Comm: syz.2.826 Not tainted syzkaller #0 [ 198.625576][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.635741][ T6742] Call Trace: [ 198.639034][ T6742] [ 198.642153][ T6742] dump_stack_lvl+0x188/0x24e [ 198.646870][ T6742] ? show_regs_print_info+0x12/0x12 [ 198.652098][ T6742] ? load_image+0x410/0x410 [ 198.656623][ T6742] ? __lock_acquire+0x7c40/0x7c40 [ 198.661683][ T6742] ? __might_sleep+0xd0/0xd0 [ 198.666302][ T6742] should_fail_ex+0x390/0x4c0 [ 198.671017][ T6742] _copy_from_user+0x2c/0x170 [ 198.675721][ T6742] generic_map_update_batch+0x4dc/0x7f0 [ 198.681303][ T6742] ? rcu_read_unlock+0xa0/0xa0 [ 198.686100][ T6742] ? __fdget+0x17c/0x200 [ 198.690409][ T6742] ? rcu_read_unlock+0xa0/0xa0 [ 198.695214][ T6742] bpf_map_do_batch+0x475/0x5f0 [ 198.700139][ T6742] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 198.706599][ T6742] __sys_bpf+0x6f7/0x780 [ 198.710879][ T6742] ? bpf_link_show_fdinfo+0x380/0x380 [ 198.716305][ T6742] ? lock_chain_count+0x20/0x20 [ 198.721192][ T6742] __x64_sys_bpf+0x78/0x90 [ 198.725632][ T6742] do_syscall_64+0x4c/0xa0 [ 198.730200][ T6742] ? clear_bhb_loop+0x60/0xb0 [ 198.734903][ T6742] ? clear_bhb_loop+0x60/0xb0 [ 198.739600][ T6742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.745518][ T6742] RIP: 0033:0x7f590199e0d9 [ 198.749956][ T6742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.769677][ T6742] RSP: 002b:00007f59027e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.778119][ T6742] RAX: ffffffffffffffda RBX: 00007f5901c26090 RCX: 00007f590199e0d9 [ 198.786112][ T6742] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 198.794101][ T6742] RBP: 00007f59027e5090 R08: 0000000000000000 R09: 0000000000000000 [ 198.802092][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.810083][ T6742] R13: 00007f5901c26128 R14: 00007f5901c26090 R15: 00007ffffa534ab8 [ 198.818195][ T6742] [ 198.888220][ T6739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.946420][ T6739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.983005][ T6739] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 199.125558][ T6739] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 199.204833][ T6746] netlink: 'syz.0.828': attribute type 29 has an invalid length. [ 199.272804][ T6739] bond0 (unregistering): Released all slaves [ 199.561601][ T6747] device syzkaller0 entered promiscuous mode [ 199.627425][ T6746] netlink: 'syz.0.828': attribute type 29 has an invalid length. [ 199.907996][ T6777] netlink: 'syz.1.833': attribute type 3 has an invalid length. [ 199.917452][ T6777] netlink: 'syz.1.833': attribute type 1 has an invalid length. [ 199.930043][ T6777] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.833'. [ 201.494885][ T6769] netlink: 188 bytes leftover after parsing attributes in process `syz.1.833'. [ 201.636541][ T6783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.838'. [ 201.665050][ T6783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.838'. [ 201.695313][ T6783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.838'. [ 201.777619][ T6793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.838'. [ 201.827511][ T6797] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.840'. [ 202.541905][ T6817] netlink: 'syz.3.848': attribute type 12 has an invalid length. [ 202.577472][ T6817] netlink: 164 bytes leftover after parsing attributes in process `syz.3.848'. [ 202.739801][ T6825] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.851'. [ 204.126182][ T6849] netlink: 14 bytes leftover after parsing attributes in process `syz.2.858'. [ 204.442684][ T6856] device aaaaaaaaaaaaaaa entered promiscuous mode [ 204.647461][ T6865] netlink: 'syz.4.865': attribute type 10 has an invalid length. [ 204.713962][ T6861] netlink: 'syz.2.864': attribute type 10 has an invalid length. [ 204.753000][ T6861] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 205.028192][ T6879] netlink: 'syz.4.869': attribute type 16 has an invalid length. [ 205.035989][ T6879] __nla_validate_parse: 1 callbacks suppressed [ 205.036001][ T6879] netlink: 132 bytes leftover after parsing attributes in process `syz.4.869'. [ 206.520356][ T6902] device aaaaaaaaaaaaaaa entered promiscuous mode [ 206.618917][ T6917] netlink: 'syz.0.883': attribute type 39 has an invalid length. [ 207.024724][ T6934] netlink: 'syz.4.891': attribute type 3 has an invalid length. [ 207.080493][ T6934] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.891'. [ 207.323721][ T6942] netlink: 'syz.1.893': attribute type 10 has an invalid length. [ 207.388416][ T6945] netlink: 'syz.3.894': attribute type 25 has an invalid length. [ 207.407832][ T6945] netlink: 'syz.3.894': attribute type 29 has an invalid length. [ 207.416634][ T6947] netlink: 144 bytes leftover after parsing attributes in process `syz.4.895'. [ 207.428019][ T6945] netlink: 5 bytes leftover after parsing attributes in process `syz.3.894'. [ 207.815658][ T6958] device aaaaaaaaaaaaaaa entered promiscuous mode [ 208.222294][ T6969] netlink: 'syz.2.904': attribute type 28 has an invalid length. [ 208.260944][ T6969] netlink: 'syz.2.904': attribute type 4 has an invalid length. [ 208.278385][ T6969] netlink: 136 bytes leftover after parsing attributes in process `syz.2.904'. [ 208.409942][ T6977] netlink: 188 bytes leftover after parsing attributes in process `syz.3.906'. [ 208.440654][ T6977] netlink: 'syz.3.906': attribute type 3 has an invalid length. [ 208.450233][ T6977] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 208.459035][ T6977] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.906'. [ 208.635358][ T6985] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.911'. [ 208.682027][ T6987] netlink: 14 bytes leftover after parsing attributes in process `syz.4.910'. [ 208.772406][ T6987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.800655][ T6987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.825757][ T6987] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 208.864289][ T6987] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 208.900144][ T6987] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 208.931766][ T6987] bond0 (unregistering): Released all slaves [ 209.984456][ T6989] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 210.833293][ T6989] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.890707][ T6989] bond0: (slave team0): Enslaving as an active interface with an up link [ 210.972246][ T7001] FAULT_INJECTION: forcing a failure. [ 210.972246][ T7001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.009038][ T7001] CPU: 1 PID: 7001 Comm: syz.4.915 Not tainted syzkaller #0 [ 211.016481][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.026561][ T7001] Call Trace: [ 211.029862][ T7001] [ 211.032825][ T7001] dump_stack_lvl+0x188/0x24e [ 211.037541][ T7001] ? show_regs_print_info+0x12/0x12 [ 211.042770][ T7001] ? load_image+0x410/0x410 [ 211.047294][ T7001] ? __lock_acquire+0x7c40/0x7c40 [ 211.052351][ T7001] ? __might_sleep+0xd0/0xd0 [ 211.056982][ T7001] should_fail_ex+0x390/0x4c0 [ 211.061861][ T7001] _copy_from_user+0x2c/0x170 [ 211.066569][ T7001] generic_map_update_batch+0x48d/0x7f0 [ 211.072136][ T7001] ? rcu_read_unlock+0xa0/0xa0 [ 211.076926][ T7001] ? __fdget+0x17c/0x200 [ 211.081191][ T7001] ? rcu_read_unlock+0xa0/0xa0 [ 211.085959][ T7001] bpf_map_do_batch+0x475/0x5f0 [ 211.090815][ T7001] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 211.097235][ T7001] __sys_bpf+0x6f7/0x780 [ 211.101487][ T7001] ? bpf_link_show_fdinfo+0x380/0x380 [ 211.106872][ T7001] ? lock_chain_count+0x20/0x20 [ 211.111730][ T7001] __x64_sys_bpf+0x78/0x90 [ 211.116149][ T7001] do_syscall_64+0x4c/0xa0 [ 211.120567][ T7001] ? clear_bhb_loop+0x60/0xb0 [ 211.125421][ T7001] ? clear_bhb_loop+0x60/0xb0 [ 211.130122][ T7001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.136016][ T7001] RIP: 0033:0x7f288b39e0d9 [ 211.140431][ T7001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.160037][ T7001] RSP: 002b:00007f288c28b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.168454][ T7001] RAX: ffffffffffffffda RBX: 00007f288b625fa0 RCX: 00007f288b39e0d9 [ 211.176462][ T7001] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 211.184468][ T7001] RBP: 00007f288c28b090 R08: 0000000000000000 R09: 0000000000000000 [ 211.192446][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.200423][ T7001] R13: 00007f288b626038 R14: 00007f288b625fa0 R15: 00007ffe342080c8 [ 211.208407][ T7001] [ 211.262900][ T7000] netlink: 'syz.1.916': attribute type 3 has an invalid length. [ 211.271491][ T7000] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.916'. [ 211.674790][ T7022] netlink: 188 bytes leftover after parsing attributes in process `syz.2.922'. [ 211.706128][ T7022] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 211.794897][ T7022] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 211.831118][ T7027] netlink: 'syz.3.925': attribute type 10 has an invalid length. [ 211.890865][ T7022] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.922'. [ 212.057213][ T7043] netlink: 'syz.4.927': attribute type 3 has an invalid length. [ 212.087173][ T7043] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.927'. [ 212.444334][ T7052] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.932'. [ 213.063392][ T7027] team0: Device wg1 is of different type [ 213.097078][ T7036] netlink: 188 bytes leftover after parsing attributes in process `syz.4.927'. [ 213.364827][ T7066] validate_nla: 2 callbacks suppressed [ 213.364863][ T7066] netlink: 'syz.4.936': attribute type 10 has an invalid length. [ 213.407075][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.936'. [ 213.435813][ T7066] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 213.489702][ T7078] netlink: 'syz.0.940': attribute type 21 has an invalid length. [ 213.526983][ T7078] netlink: 156 bytes leftover after parsing attributes in process `syz.0.940'. [ 213.832261][ T7093] netlink: 188 bytes leftover after parsing attributes in process `syz.1.947'. [ 213.939456][ T7096] netlink: 'syz.1.947': attribute type 3 has an invalid length. [ 213.968588][ T7096] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 213.976294][ T7096] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.947'. [ 215.343217][ T7115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.543092][ T7128] netlink: 'syz.1.960': attribute type 49 has an invalid length. [ 215.621015][ T7132] netlink: 'syz.4.962': attribute type 3 has an invalid length. [ 215.637892][ T7132] netlink: 'syz.4.962': attribute type 1 has an invalid length. [ 217.363882][ T7167] __nla_validate_parse: 2 callbacks suppressed [ 217.363915][ T7167] netlink: 188 bytes leftover after parsing attributes in process `syz.1.975'. [ 217.433481][ T7172] netlink: 'syz.1.975': attribute type 3 has an invalid length. [ 217.457035][ T7172] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 217.506819][ T7172] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.975'. [ 217.714142][ T7179] sctp: [Deprecated]: syz.0.979 (pid 7179) Use of int in max_burst socket option deprecated. [ 217.714142][ T7179] Use struct sctp_assoc_value instead [ 218.125966][ T7190] netlink: 'syz.2.985': attribute type 25 has an invalid length. [ 218.160014][ T7190] netlink: 5 bytes leftover after parsing attributes in process `syz.2.985'. [ 220.555388][ T7220] netlink: 60 bytes leftover after parsing attributes in process `syz.3.995'. [ 220.592769][ T7220] netlink: 60 bytes leftover after parsing attributes in process `syz.3.995'. [ 220.687217][ T7225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.995'. [ 220.713989][ T7227] netlink: 68 bytes leftover after parsing attributes in process `syz.2.998'. [ 220.944830][ T7234] validate_nla: 1 callbacks suppressed [ 220.946130][ T7234] netlink: 'syz.3.1001': attribute type 3 has an invalid length. [ 220.961140][ T7234] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1001'. [ 221.242427][ T7248] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.1005'. [ 221.416972][ T7252] syz.2.1007 (7252) used obsolete PPPIOCDETACH ioctl [ 221.800536][ T7264] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1013'. [ 222.087808][ T7266] netlink: 'syz.1.1014': attribute type 21 has an invalid length. [ 222.103911][ T7274] netlink: 'syz.0.1016': attribute type 3 has an invalid length. [ 222.295155][ T7286] netlink: 'syz.4.1019': attribute type 3 has an invalid length. [ 222.618411][ T7297] netlink: 'syz.2.1021': attribute type 10 has an invalid length. [ 222.647267][ T7297] __nla_validate_parse: 3 callbacks suppressed [ 222.647280][ T7297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1021'. [ 222.697466][ T7297] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 222.769000][ T7306] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1027'. [ 222.805771][ T7308] netlink: 'syz.4.1028': attribute type 21 has an invalid length. [ 223.253772][ T7327] device lo entered promiscuous mode [ 223.304435][ T7327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.566874][ T7333] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1039'. [ 223.612492][ T7333] netlink: 'syz.3.1039': attribute type 3 has an invalid length. [ 223.640872][ T7333] netlink: 'syz.3.1039': attribute type 1 has an invalid length. [ 223.673886][ T7333] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1039'. [ 225.822651][ T7376] netlink: 'syz.2.1057': attribute type 39 has an invalid length. [ 225.837005][ T7376] device macvlan0 entered promiscuous mode [ 226.030227][ T7385] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1060'. [ 226.074463][ T7387] netlink: 'syz.3.1059': attribute type 3 has an invalid length. [ 226.093694][ T7387] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1059'. [ 226.122711][ T7385] netlink: 'syz.4.1060': attribute type 3 has an invalid length. [ 226.140667][ T7385] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 226.149134][ T7385] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1060'. [ 226.353849][ T7399] netlink: 'syz.0.1066': attribute type 28 has an invalid length. [ 226.365102][ T7398] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 226.382719][ T7399] netlink: 'syz.0.1066': attribute type 4 has an invalid length. [ 226.422868][ T7399] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1066'. [ 227.006483][ T7422] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1071'. [ 227.112481][ T7422] netlink: 'syz.2.1071': attribute type 3 has an invalid length. [ 227.132144][ T7422] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 227.184627][ T7422] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1071'. [ 227.251457][ T7427] netlink: 'syz.1.1074': attribute type 3 has an invalid length. [ 227.291643][ T7427] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 227.745647][ T7440] __nla_validate_parse: 3 callbacks suppressed [ 227.745679][ T7440] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1079'. [ 228.442123][ T7465] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1086'. [ 228.486053][ T7465] netlink: 'syz.3.1086': attribute type 3 has an invalid length. [ 228.517182][ T7465] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1086'. [ 229.219732][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 229.414950][ T7506] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1103'. [ 229.850429][ T7520] device lo entered promiscuous mode [ 229.894865][ T7520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.833542][ T7578] Ÿë: port 1(gretap0) entered blocking state [ 231.860730][ T7578] Ÿë: port 1(gretap0) entered disabled state [ 231.950071][ T7578] device gretap0 entered promiscuous mode [ 232.269528][ T7593] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1131'. [ 232.306463][ T7593] validate_nla: 3 callbacks suppressed [ 232.306497][ T7593] netlink: 'syz.2.1131': attribute type 3 has an invalid length. [ 232.388586][ T7593] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 232.456210][ T7593] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1131'. [ 232.613436][ T7601] netlink: 'syz.0.1136': attribute type 9 has an invalid length. [ 232.707798][ T7601] netlink: 108504 bytes leftover after parsing attributes in process `syz.0.1136'. [ 232.735490][ T7606] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 232.776926][ T7606] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 232.815425][ T7606] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1140'. [ 232.896641][ T7611] netlink: 'syz.2.1139': attribute type 25 has an invalid length. [ 232.931988][ T7611] netlink: 'syz.2.1139': attribute type 29 has an invalid length. [ 232.950719][ T7617] netlink: 'syz.0.1142': attribute type 3 has an invalid length. [ 232.967057][ T7617] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1142'. [ 233.027040][ T7618] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1139'. [ 234.095023][ T7649] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1151'. [ 234.141417][ T7649] netlink: 'syz.3.1151': attribute type 3 has an invalid length. [ 234.150766][ T7649] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 234.159653][ T7649] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1151'. [ 234.463475][ T7658] device pim6reg1 entered promiscuous mode [ 235.251202][ T7696] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1168'. [ 235.517583][ T7693] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1168'. [ 235.832467][ T7708] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1173'. [ 235.933110][ T7708] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1173'. [ 236.308987][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1177'. [ 236.329342][ T7723] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 236.830858][ T7728] team0: Device hsr_slave_0 failed to register rx_handler [ 237.909170][ T7775] __nla_validate_parse: 2 callbacks suppressed [ 237.909189][ T7775] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1199'. [ 237.970279][ T7777] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1200'. [ 238.036685][ T7777] validate_nla: 9 callbacks suppressed [ 238.036703][ T7777] netlink: 'syz.2.1200': attribute type 3 has an invalid length. [ 238.057483][ T7777] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 238.067948][ T7777] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1200'. [ 238.103785][ T7775] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 238.142929][ T7775] CPU: 1 PID: 7775 Comm: syz.4.1199 Not tainted syzkaller #0 [ 238.150433][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.160538][ T7775] Call Trace: [ 238.163854][ T7775] [ 238.166828][ T7775] dump_stack_lvl+0x188/0x24e [ 238.171580][ T7775] ? show_regs_print_info+0x12/0x12 [ 238.176847][ T7775] ? load_image+0x410/0x410 [ 238.181449][ T7775] sysfs_warn_dup+0x8a/0xa0 [ 238.186022][ T7775] sysfs_do_create_link_sd+0xc0/0x110 [ 238.191475][ T7775] device_add+0x83b/0x1050 [ 238.195965][ T7775] wiphy_register+0x1d8b/0x2aa0 [ 238.200941][ T7775] ? cfg80211_event_work+0x40/0x40 [ 238.206114][ T7775] ? minstrel_ht_alloc+0x894/0xa20 [ 238.211323][ T7775] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 238.217472][ T7775] ieee80211_register_hw+0x2d48/0x39f0 [ 238.223032][ T7775] ? ieee80211_register_hw+0xee1/0x39f0 [ 238.228641][ T7775] ? ieee80211_register_hw+0xee1/0x39f0 [ 238.234251][ T7775] ? ieee80211_tasklet_handler+0x20/0x20 [ 238.239948][ T7775] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 238.245881][ T7775] ? __debug_object_init+0xed/0x440 [ 238.251148][ T7775] ? memset+0x1e/0x40 [ 238.255156][ T7775] ? __hrtimer_init+0x189/0x270 [ 238.260035][ T7775] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 238.265823][ T7775] ? memcpy+0x3c/0x60 [ 238.269836][ T7775] hwsim_new_radio_nl+0xab7/0xc90 [ 238.274916][ T7775] genl_family_rcv_msg_doit+0x22f/0x350 [ 238.280503][ T7775] ? end_current_label_crit_section+0x170/0x170 [ 238.286771][ T7775] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 238.292684][ T7775] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 238.298611][ T7775] ? bpf_lsm_capable+0x5/0x10 [ 238.303308][ T7775] ? security_capable+0x85/0xb0 [ 238.308209][ T7775] genl_rcv_msg+0x601/0x790 [ 238.312763][ T7775] ? genl_bind+0x360/0x360 [ 238.317188][ T7775] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 238.323571][ T7775] netlink_rcv_skb+0x1ef/0x440 [ 238.328372][ T7775] ? genl_bind+0x360/0x360 [ 238.332812][ T7775] ? netlink_ack+0x1160/0x1160 [ 238.337637][ T7775] ? down_read+0x1a8/0x2d0 [ 238.342087][ T7775] genl_rcv+0x24/0x40 [ 238.346082][ T7775] netlink_unicast+0x7ad/0x920 [ 238.350898][ T7775] netlink_sendmsg+0x8ad/0xbd0 [ 238.355703][ T7775] ? netlink_getsockopt+0x550/0x550 [ 238.360924][ T7775] ? apparmor_socket_sendmsg+0x8a/0x330 [ 238.366490][ T7775] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 238.371793][ T7775] ? security_socket_sendmsg+0x7c/0xa0 [ 238.377262][ T7775] ? netlink_getsockopt+0x550/0x550 [ 238.382485][ T7775] ____sys_sendmsg+0x5ed/0x9a0 [ 238.387289][ T7775] ? __sys_sendmsg_sock+0x30/0x30 [ 238.392325][ T7775] ? __import_iovec+0x306/0x510 [ 238.397245][ T7775] ? import_iovec+0x6f/0xa0 [ 238.401777][ T7775] ___sys_sendmsg+0x2a2/0x360 [ 238.406485][ T7775] ? __sys_sendmsg+0x2a0/0x2a0 [ 238.411403][ T7775] __se_sys_sendmsg+0x1c3/0x2b0 [ 238.416319][ T7775] ? __x64_sys_sendmsg+0x80/0x80 [ 238.421327][ T7775] ? lockdep_hardirqs_on+0x94/0x140 [ 238.426551][ T7775] do_syscall_64+0x4c/0xa0 [ 238.431002][ T7775] ? clear_bhb_loop+0x60/0xb0 [ 238.435696][ T7775] ? clear_bhb_loop+0x60/0xb0 [ 238.440483][ T7775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.446390][ T7775] RIP: 0033:0x7f288b39e0d9 [ 238.450823][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.470449][ T7775] RSP: 002b:00007f288c26a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.478883][ T7775] RAX: ffffffffffffffda RBX: 00007f288b626090 RCX: 00007f288b39e0d9 [ 238.486865][ T7775] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 238.494853][ T7775] RBP: 00007f288b435024 R08: 0000000000000000 R09: 0000000000000000 [ 238.502954][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.510938][ T7775] R13: 00007f288b626128 R14: 00007f288b626090 R15: 00007ffe342080c8 [ 238.518961][ T7775] [ 238.864428][ T7788] netlink: 'syz.0.1204': attribute type 10 has an invalid length. [ 239.517567][ T7812] netlink: 'syz.0.1212': attribute type 29 has an invalid length. [ 239.525738][ T7812] netlink: 'syz.0.1212': attribute type 29 has an invalid length. [ 239.637195][ T7816] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1214'. [ 239.660573][ T7814] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1213'. [ 239.666228][ T7816] netlink: 'syz.1.1214': attribute type 3 has an invalid length. [ 239.686976][ T7816] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 239.695130][ T7816] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1214'. [ 239.955364][ T7823] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1217'. [ 241.048363][ T7848] netlink: 'syz.1.1227': attribute type 39 has an invalid length. [ 241.307869][ T7851] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1228'. [ 241.358007][ T7852] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.364901][ T7852] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.372293][ T7851] netlink: 'syz.4.1228': attribute type 3 has an invalid length. [ 241.397081][ T7851] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 241.405623][ T7851] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1228'. [ 241.473450][ T7858] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1230'. [ 241.546300][ T7857] device syzkaller0 entered promiscuous mode [ 241.569121][ T7861] __sock_release: fasync list not empty! [ 241.579121][ T7857] device syzkaller0 left promiscuous mode [ 242.004939][ T4286] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 243.550339][ T7884] __nla_validate_parse: 4 callbacks suppressed [ 243.550382][ T7884] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1244'. [ 243.602337][ T7884] validate_nla: 1 callbacks suppressed [ 243.602370][ T7884] netlink: 'syz.1.1244': attribute type 3 has an invalid length. [ 243.629673][ T7884] netlink: 'syz.1.1244': attribute type 1 has an invalid length. [ 243.657851][ T7884] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1244'. [ 243.720826][ T7893] netlink: 'syz.4.1247': attribute type 10 has an invalid length. [ 243.933561][ T7893] team0: Device vxcan1 is of different type [ 244.938720][ T7915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.289273][ T7950] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1268'. [ 246.366289][ T7953] netlink: 'syz.0.1268': attribute type 3 has an invalid length. [ 246.380132][ T7953] netlink: 'syz.0.1268': attribute type 1 has an invalid length. [ 246.398398][ T7953] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1268'. [ 246.420782][ T7957] netlink: 'syz.2.1271': attribute type 10 has an invalid length. [ 246.542006][ T7959] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 246.609991][ T7959] team0: Device vxcan1 is of different type [ 246.683392][ T7965] netlink: 'syz.4.1274': attribute type 2 has an invalid length. [ 246.727773][ T7965] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1274'. [ 247.082043][ T7977] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1279'. [ 248.005133][ T7986] netlink: 'syz.1.1284': attribute type 2 has an invalid length. [ 248.024085][ T7986] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 248.033167][ T7986] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1284'. [ 248.536110][ T8007] team0: Device vxcan1 is of different type [ 248.887767][ T8012] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1292'. [ 249.166322][ T8031] validate_nla: 1 callbacks suppressed [ 249.166339][ T8031] netlink: 'syz.3.1297': attribute type 1 has an invalid length. [ 249.260435][ T8031] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1297'. [ 250.021766][ T8047] device syzkaller0 entered promiscuous mode [ 250.073900][ T8053] device syzkaller0 left promiscuous mode [ 250.221191][ T8062] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1307'. [ 250.411481][ T8068] netlink: 'syz.2.1308': attribute type 3 has an invalid length. [ 250.426808][ T8068] netlink: 'syz.2.1308': attribute type 1 has an invalid length. [ 250.434662][ T8068] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1308'. [ 252.150239][ T8074] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1310'. [ 252.302128][ T8062] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1307'. [ 252.317002][ T8065] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1308'. [ 253.030592][ T8113] netlink: 'syz.0.1328': attribute type 9 has an invalid length. [ 253.040018][ T8113] netlink: 108504 bytes leftover after parsing attributes in process `syz.0.1328'. [ 253.755519][ T8152] device lo entered promiscuous mode [ 253.812814][ T8152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.081682][ T8164] netlink: 'syz.1.1336': attribute type 10 has an invalid length. [ 254.159717][ T8164] team0: Port device wlan1 added [ 254.765368][ T8192] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 255.394752][ T8224] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1358'. [ 255.458788][ T8227] netlink: 'syz.0.1358': attribute type 3 has an invalid length. [ 255.485495][ T8227] netlink: 'syz.0.1358': attribute type 1 has an invalid length. [ 255.515922][ T8227] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1358'. [ 255.698352][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.705047][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.986052][ T8260] netlink: 'syz.4.1371': attribute type 3 has an invalid length. [ 256.023093][ T8260] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1371'. [ 257.647459][ T8305] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1384'. [ 257.860210][ T8321] netlink: 'syz.4.1386': attribute type 3 has an invalid length. [ 257.886974][ T8321] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 257.895237][ T8321] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1386'. [ 257.956968][ T8310] netlink: 'syz.0.1384': attribute type 10 has an invalid length. [ 257.970814][ T8310] team0: Port device bridge_slave_1 added [ 257.977992][ T8312] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1386'. [ 257.990853][ T8320] netlink: 'syz.2.1389': attribute type 9 has an invalid length. [ 257.998843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.028106][ T8320] netlink: 108504 bytes leftover after parsing attributes in process `syz.2.1389'. [ 258.200769][ T8335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1392'. [ 258.215852][ T8335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1392'. [ 258.257821][ T8335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1392'. [ 258.834036][ T8363] netlink: 'syz.3.1405': attribute type 9 has an invalid length. [ 262.083295][ T8381] netlink: 'syz.2.1414': attribute type 10 has an invalid length. [ 262.137606][ T8381] __nla_validate_parse: 2 callbacks suppressed [ 262.137623][ T8381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1414'. [ 262.225317][ T8381] device team0 entered promiscuous mode [ 262.242302][ T8388] netlink: 'syz.4.1415': attribute type 3 has an invalid length. [ 262.245604][ T8381] device team_slave_0 entered promiscuous mode [ 262.267737][ T8381] device team_slave_1 entered promiscuous mode [ 262.274106][ T8381] device netdevsim0 entered promiscuous mode [ 262.278648][ T8388] netlink: 'syz.4.1415': attribute type 1 has an invalid length. [ 262.314742][ T8388] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1415'. [ 262.324964][ T8391] netlink: 'syz.2.1414': attribute type 11 has an invalid length. [ 262.397250][ T8391] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1414'. [ 262.415175][ T8384] netlink: 'syz.2.1414': attribute type 11 has an invalid length. [ 262.436991][ T8381] bridge0: port 3(team0) entered blocking state [ 262.443719][ T8381] bridge0: port 3(team0) entered disabled state [ 262.447273][ T8384] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1414'. [ 262.453724][ T8381] bridge0: port 3(team0) entered blocking state [ 262.466849][ T8381] bridge0: port 3(team0) entered forwarding state [ 262.509947][ T8383] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1415'. [ 262.539140][ T8381] netlink: 'syz.2.1414': attribute type 21 has an invalid length. [ 262.559638][ T8381] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1414'. [ 262.895174][ T8378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.057462][ T8404] netlink: 'syz.4.1420': attribute type 10 has an invalid length. [ 263.245563][ T8407] netlink: 'syz.1.1422': attribute type 9 has an invalid length. [ 263.333701][ T8407] netlink: 108504 bytes leftover after parsing attributes in process `syz.1.1422'. [ 263.598496][ T8423] netlink: 'syz.0.1429': attribute type 3 has an invalid length. [ 263.606756][ T8423] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1429'. [ 263.696258][ T8432] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1431'. [ 263.749226][ T8434] netlink: 'syz.3.1432': attribute type 39 has an invalid length. [ 263.772908][ T8427] netlink: 'syz.1.1431': attribute type 3 has an invalid length. [ 263.815296][ T8427] netlink: 'syz.1.1431': attribute type 1 has an invalid length. [ 263.847198][ T8427] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1431'. [ 265.825943][ T8525] team0: Port device wlan1 added [ 266.025214][ T8536] device team0 entered promiscuous mode [ 266.049722][ T8536] device team_slave_0 entered promiscuous mode [ 266.067805][ T8536] device team_slave_1 entered promiscuous mode [ 266.083720][ T8536] device wlan1 entered promiscuous mode [ 266.133185][ T8536] bridge0: port 3(team0) entered blocking state [ 266.199780][ T8536] bridge0: port 3(team0) entered disabled state [ 266.232801][ T8543] netlink: 'syz.4.1470': attribute type 11 has an invalid length. [ 266.279020][ T8536] bridge0: port 3(team0) entered blocking state [ 266.285470][ T8536] bridge0: port 3(team0) entered forwarding state [ 266.342213][ T8540] netlink: 'syz.4.1470': attribute type 11 has an invalid length. [ 266.832718][ T8535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.413215][ T8558] validate_nla: 13 callbacks suppressed [ 267.413233][ T8558] netlink: 'syz.0.1476': attribute type 10 has an invalid length. [ 267.450724][ T8558] __nla_validate_parse: 12 callbacks suppressed [ 267.450740][ T8558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1476'. [ 267.497723][ T8558] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 267.541984][ T8566] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1480'. [ 267.639545][ T8568] netlink: 'syz.3.1480': attribute type 3 has an invalid length. [ 267.658603][ T8568] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 267.682191][ T8568] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1480'. [ 267.733407][ T8563] netlink: 'syz.2.1478': attribute type 9 has an invalid length. [ 267.747259][ T8563] netlink: 108504 bytes leftover after parsing attributes in process `syz.2.1478'. [ 268.547553][ T8601] FAULT_INJECTION: forcing a failure. [ 268.547553][ T8601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.561958][ T8601] CPU: 0 PID: 8601 Comm: syz.3.1491 Not tainted syzkaller #0 [ 268.569386][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.579476][ T8601] Call Trace: [ 268.582781][ T8601] [ 268.585736][ T8601] dump_stack_lvl+0x188/0x24e [ 268.590455][ T8601] ? show_regs_print_info+0x12/0x12 [ 268.595685][ T8601] ? load_image+0x410/0x410 [ 268.600239][ T8601] ? __lock_acquire+0x7c40/0x7c40 [ 268.605296][ T8601] ? __might_sleep+0xd0/0xd0 [ 268.609948][ T8601] should_fail_ex+0x390/0x4c0 [ 268.614671][ T8601] _copy_from_user+0x2c/0x170 [ 268.619497][ T8601] generic_map_update_batch+0x4dc/0x7f0 [ 268.625111][ T8601] ? rcu_read_unlock+0xa0/0xa0 [ 268.629953][ T8601] ? __fdget+0x17c/0x200 [ 268.634325][ T8601] ? rcu_read_unlock+0xa0/0xa0 [ 268.639120][ T8601] bpf_map_do_batch+0x475/0x5f0 [ 268.644007][ T8601] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 268.650567][ T8601] __sys_bpf+0x6f7/0x780 [ 268.654886][ T8601] ? bpf_link_show_fdinfo+0x380/0x380 [ 268.660337][ T8601] ? lock_chain_count+0x20/0x20 [ 268.665283][ T8601] __x64_sys_bpf+0x78/0x90 [ 268.669746][ T8601] do_syscall_64+0x4c/0xa0 [ 268.674199][ T8601] ? clear_bhb_loop+0x60/0xb0 [ 268.678907][ T8601] ? clear_bhb_loop+0x60/0xb0 [ 268.683647][ T8601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.689576][ T8601] RIP: 0033:0x7f9d8459e0d9 [ 268.694027][ T8601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.713678][ T8601] RSP: 002b:00007f9d827f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.722138][ T8601] RAX: ffffffffffffffda RBX: 00007f9d84825fa0 RCX: 00007f9d8459e0d9 [ 268.730154][ T8601] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 268.738247][ T8601] RBP: 00007f9d827f6090 R08: 0000000000000000 R09: 0000000000000000 [ 268.746247][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.754255][ T8601] R13: 00007f9d84826038 R14: 00007f9d84825fa0 R15: 00007ffdfdcbd3b8 [ 268.762299][ T8601] [ 269.575414][ T8627] netlink: 'syz.4.1496': attribute type 9 has an invalid length. [ 269.634459][ T8627] netlink: 108504 bytes leftover after parsing attributes in process `syz.4.1496'. [ 269.883122][ T8634] netlink: 'syz.1.1502': attribute type 2 has an invalid length. [ 271.392098][ T8634] device 0 entered promiscuous mode [ 271.631651][ T8670] netlink: 'syz.2.1514': attribute type 25 has an invalid length. [ 271.654489][ T8670] netlink: 'syz.2.1514': attribute type 29 has an invalid length. [ 271.664525][ T8670] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1514'. [ 271.999345][ T8701] netlink: 'syz.4.1525': attribute type 28 has an invalid length. [ 272.007498][ T8701] netlink: 'syz.4.1525': attribute type 4 has an invalid length. [ 272.026254][ T8701] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1525'. [ 273.259312][ T8718] netlink: 'syz.3.1528': attribute type 2 has an invalid length. [ 273.286613][ T8718] device 0 entered promiscuous mode [ 273.653351][ T8736] netlink: 'syz.0.1535': attribute type 9 has an invalid length. [ 273.670278][ T8736] netlink: 108504 bytes leftover after parsing attributes in process `syz.0.1535'. [ 275.323792][ T8768] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 275.748727][ T8780] netlink: 'syz.2.1549': attribute type 2 has an invalid length. [ 275.778098][ T8780] device 0 entered promiscuous mode [ 275.811700][ T8784] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1551'. [ 275.940253][ T8785] netlink: 'syz.4.1551': attribute type 3 has an invalid length. [ 275.973850][ T8785] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 276.002184][ T8785] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1551'. [ 276.163436][ T8796] netlink: 'syz.1.1554': attribute type 9 has an invalid length. [ 276.217124][ T8796] netlink: 108504 bytes leftover after parsing attributes in process `syz.1.1554'. [ 276.294572][ T8802] netlink: 'syz.0.1558': attribute type 7 has an invalid length. [ 276.303466][ T8802] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.1558'. [ 276.576450][ T8811] netlink: 'syz.0.1571': attribute type 9 has an invalid length. [ 276.590125][ T8811] netlink: 108504 bytes leftover after parsing attributes in process `syz.0.1571'. [ 277.088589][ T8828] netlink: 'syz.4.1564': attribute type 2 has an invalid length. [ 277.119884][ T8828] device 0 entered promiscuous mode [ 277.181593][ T8837] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1569'. [ 277.594798][ T8856] netlink: 108504 bytes leftover after parsing attributes in process `syz.4.1576'. [ 277.847163][ T8873] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1583'. [ 278.905431][ T8918] validate_nla: 3 callbacks suppressed [ 278.905466][ T8918] netlink: 'syz.3.1599': attribute type 9 has an invalid length. [ 278.920875][ T8918] netlink: 108504 bytes leftover after parsing attributes in process `syz.3.1599'. [ 279.497369][ T8937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.058735][ T8963] netlink: 'syz.2.1617': attribute type 29 has an invalid length. [ 280.148147][ T8963] netlink: 'syz.2.1617': attribute type 29 has an invalid length. [ 280.213964][ T8966] netlink: 'syz.2.1617': attribute type 29 has an invalid length. [ 281.252678][ T9005] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1634'. [ 281.518222][ T9014] netlink: 'syz.4.1635': attribute type 10 has an invalid length. [ 281.526243][ T9014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1635'. [ 281.536196][ T9014] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 281.547436][ T9011] netlink: 'syz.2.1633': attribute type 9 has an invalid length. [ 281.599702][ T9011] netlink: 108504 bytes leftover after parsing attributes in process `syz.2.1633'. [ 281.796642][ T9023] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1638'. [ 281.827950][ T9023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.165635][ T9043] FAULT_INJECTION: forcing a failure. [ 282.165635][ T9043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.216853][ T9043] CPU: 1 PID: 9043 Comm: syz.1.1647 Not tainted syzkaller #0 [ 282.224304][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.234472][ T9043] Call Trace: [ 282.237778][ T9043] [ 282.240732][ T9043] dump_stack_lvl+0x188/0x24e [ 282.245544][ T9043] ? show_regs_print_info+0x12/0x12 [ 282.250783][ T9043] ? load_image+0x410/0x410 [ 282.255316][ T9043] ? __lock_acquire+0x7c40/0x7c40 [ 282.260377][ T9043] ? __might_sleep+0xd0/0xd0 [ 282.265025][ T9043] should_fail_ex+0x390/0x4c0 [ 282.269761][ T9043] _copy_from_user+0x2c/0x170 [ 282.274485][ T9043] generic_map_update_batch+0x4dc/0x7f0 [ 282.280064][ T9043] ? rcu_read_unlock+0xa0/0xa0 [ 282.284897][ T9043] ? __fdget+0x17c/0x200 [ 282.289183][ T9043] ? rcu_read_unlock+0xa0/0xa0 [ 282.293994][ T9043] bpf_map_do_batch+0x475/0x5f0 [ 282.298882][ T9043] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 282.305334][ T9043] __sys_bpf+0x6f7/0x780 [ 282.309612][ T9043] ? bpf_link_show_fdinfo+0x380/0x380 [ 282.315404][ T9043] ? lock_chain_count+0x20/0x20 [ 282.320285][ T9043] __x64_sys_bpf+0x78/0x90 [ 282.324724][ T9043] do_syscall_64+0x4c/0xa0 [ 282.329170][ T9043] ? clear_bhb_loop+0x60/0xb0 [ 282.333876][ T9043] ? clear_bhb_loop+0x60/0xb0 [ 282.338593][ T9043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.344527][ T9043] RIP: 0033:0x7f57cb59e0d9 [ 282.348971][ T9043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.368601][ T9043] RSP: 002b:00007f57cc507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.377063][ T9043] RAX: ffffffffffffffda RBX: 00007f57cb825fa0 RCX: 00007f57cb59e0d9 [ 282.385063][ T9043] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 282.393069][ T9043] RBP: 00007f57cc507090 R08: 0000000000000000 R09: 0000000000000000 [ 282.401036][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.409091][ T9043] R13: 00007f57cb826038 R14: 00007f57cb825fa0 R15: 00007ffc06bfb5a8 [ 282.417072][ T9043] [ 282.512423][ T9055] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1651'. [ 283.048493][ T9080] netlink: 'syz.4.1659': attribute type 39 has an invalid length. [ 283.124623][ T9082] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1660'. [ 283.201294][ T9089] netlink: 'syz.0.1660': attribute type 3 has an invalid length. [ 283.213658][ T9089] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 283.252471][ T9089] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1660'. [ 283.268357][ T9090] netlink: 'syz.3.1661': attribute type 9 has an invalid length. [ 283.277484][ T9090] netlink: 108504 bytes leftover after parsing attributes in process `syz.3.1661'. [ 283.365004][ T9091] netlink: 108504 bytes leftover after parsing attributes in process `syz.1.1662'. [ 283.920454][ T9125] validate_nla: 4 callbacks suppressed [ 283.920469][ T9125] netlink: 'syz.3.1675': attribute type 28 has an invalid length. [ 283.945290][ T9125] netlink: 'syz.3.1675': attribute type 4 has an invalid length. [ 283.979662][ T9125] __nla_validate_parse: 2 callbacks suppressed [ 283.979678][ T9125] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1675'. [ 284.124664][ T9137] netlink: 'syz.1.1678': attribute type 29 has an invalid length. [ 284.227879][ T9137] netlink: 'syz.1.1678': attribute type 29 has an invalid length. [ 284.236026][ T9140] netlink: 'syz.1.1678': attribute type 29 has an invalid length. [ 284.614503][ T9147] netlink: 'syz.2.1680': attribute type 9 has an invalid length. [ 284.634254][ T9147] netlink: 108504 bytes leftover after parsing attributes in process `syz.2.1680'. [ 285.416190][ T9175] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1690'. [ 285.568954][ T9184] netlink: 'syz.0.1690': attribute type 3 has an invalid length. [ 285.604535][ T9184] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 285.637063][ T9184] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1690'. [ 285.745774][ T9198] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1697'. [ 285.791552][ T9198] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 285.903201][ T9201] netlink: 'syz.3.1700': attribute type 9 has an invalid length. [ 285.976946][ T9201] netlink: 108504 bytes leftover after parsing attributes in process `syz.3.1700'. [ 286.828126][ T9249] netlink: 'syz.1.1717': attribute type 10 has an invalid length. [ 286.870265][ T9249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1717'. [ 286.915560][ T9249] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 286.976521][ T9254] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1719'. [ 287.051022][ T9257] netlink: 108504 bytes leftover after parsing attributes in process `syz.4.1718'. [ 287.071300][ T9261] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1719'. [ 287.976141][ T9301] FAULT_INJECTION: forcing a failure. [ 287.976141][ T9301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.993491][ T9301] CPU: 0 PID: 9301 Comm: syz.2.1736 Not tainted syzkaller #0 [ 288.000940][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.011035][ T9301] Call Trace: [ 288.014350][ T9301] [ 288.017311][ T9301] dump_stack_lvl+0x188/0x24e [ 288.022037][ T9301] ? show_regs_print_info+0x12/0x12 [ 288.027286][ T9301] ? load_image+0x410/0x410 [ 288.031835][ T9301] ? __lock_acquire+0x7c40/0x7c40 [ 288.036910][ T9301] ? __might_sleep+0xd0/0xd0 [ 288.041544][ T9301] should_fail_ex+0x390/0x4c0 [ 288.046300][ T9301] _copy_from_user+0x2c/0x170 [ 288.051025][ T9301] generic_map_update_batch+0x48d/0x7f0 [ 288.056641][ T9301] ? rcu_read_unlock+0xa0/0xa0 [ 288.061465][ T9301] ? __fdget+0x17c/0x200 [ 288.065750][ T9301] ? rcu_read_unlock+0xa0/0xa0 [ 288.070569][ T9301] bpf_map_do_batch+0x475/0x5f0 [ 288.075472][ T9301] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 288.081946][ T9301] __sys_bpf+0x6f7/0x780 [ 288.086254][ T9301] ? bpf_link_show_fdinfo+0x380/0x380 [ 288.091700][ T9301] ? lock_chain_count+0x20/0x20 [ 288.096609][ T9301] __x64_sys_bpf+0x78/0x90 [ 288.101161][ T9301] do_syscall_64+0x4c/0xa0 [ 288.105622][ T9301] ? clear_bhb_loop+0x60/0xb0 [ 288.110337][ T9301] ? clear_bhb_loop+0x60/0xb0 [ 288.115059][ T9301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.121001][ T9301] RIP: 0033:0x7f590199e0d9 [ 288.125455][ T9301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.145184][ T9301] RSP: 002b:00007f5902806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.153817][ T9301] RAX: ffffffffffffffda RBX: 00007f5901c25fa0 RCX: 00007f590199e0d9 [ 288.161834][ T9301] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 288.169841][ T9301] RBP: 00007f5902806090 R08: 0000000000000000 R09: 0000000000000000 [ 288.177975][ T9301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.185982][ T9301] R13: 00007f5901c26038 R14: 00007f5901c25fa0 R15: 00007ffffa534ab8 [ 288.194198][ T9301] [ 289.181088][ T9335] validate_nla: 8 callbacks suppressed [ 289.181108][ T9335] netlink: 'syz.2.1748': attribute type 39 has an invalid length. [ 289.405077][ T9336] __nla_validate_parse: 4 callbacks suppressed [ 289.405113][ T9336] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1747'. [ 292.358568][ T9344] netlink: 'syz.0.1750': attribute type 11 has an invalid length. [ 292.368376][ T9336] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 292.376857][ T9344] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1750'. [ 292.380241][ T9336] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 292.398937][ T9336] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 292.751185][ T9372] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1761'. [ 292.816038][ T9375] netlink: 'syz.1.1761': attribute type 3 has an invalid length. [ 292.830228][ T9375] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 292.861090][ T9375] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1761'. [ 292.917742][ T9377] netlink: 'syz.2.1762': attribute type 9 has an invalid length. [ 292.949348][ T9377] netlink: 108504 bytes leftover after parsing attributes in process `syz.2.1762'. [ 294.711151][ T9417] netlink: 'syz.3.1774': attribute type 9 has an invalid length. [ 294.727519][ T9417] netlink: 108504 bytes leftover after parsing attributes in process `syz.3.1774'. [ 294.825179][ T9424] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1781'. [ 294.940779][ T9429] netlink: 'syz.0.1781': attribute type 3 has an invalid length. [ 294.960695][ T9429] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 294.970386][ T9429] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1781'. [ 295.714762][ T9460] netlink: 'syz.4.1792': attribute type 4 has an invalid length. [ 295.779256][ T9460] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1792'. [ 296.000567][ T9466] netlink: 'syz.0.1793': attribute type 9 has an invalid length. [ 296.025794][ T9466] netlink: 108504 bytes leftover after parsing attributes in process `syz.0.1793'. [ 296.600015][ T9471] FAULT_INJECTION: forcing a failure. [ 296.600015][ T9471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.655961][ T9471] CPU: 0 PID: 9471 Comm: syz.3.1795 Not tainted syzkaller #0 [ 296.663417][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.673506][ T9471] Call Trace: [ 296.676856][ T9471] [ 296.679830][ T9471] dump_stack_lvl+0x188/0x24e [ 296.684563][ T9471] ? show_regs_print_info+0x12/0x12 [ 296.689816][ T9471] ? load_image+0x410/0x410 [ 296.694359][ T9471] ? __lock_acquire+0x7c40/0x7c40 [ 296.699420][ T9471] ? __might_sleep+0xd0/0xd0 [ 296.704064][ T9471] should_fail_ex+0x390/0x4c0 [ 296.708810][ T9471] _copy_from_user+0x2c/0x170 [ 296.713535][ T9471] generic_map_update_batch+0x4dc/0x7f0 [ 296.719853][ T9471] ? rcu_read_unlock+0xa0/0xa0 [ 296.724674][ T9471] ? __fdget+0x17c/0x200 [ 296.728964][ T9471] ? rcu_read_unlock+0xa0/0xa0 [ 296.733767][ T9471] bpf_map_do_batch+0x475/0x5f0 [ 296.738635][ T9471] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 296.745086][ T9471] __sys_bpf+0x6f7/0x780 [ 296.749518][ T9471] ? bpf_link_show_fdinfo+0x380/0x380 [ 296.755054][ T9471] ? lock_chain_count+0x20/0x20 [ 296.759973][ T9471] __x64_sys_bpf+0x78/0x90 [ 296.764432][ T9471] do_syscall_64+0x4c/0xa0 [ 296.768886][ T9471] ? clear_bhb_loop+0x60/0xb0 [ 296.773699][ T9471] ? clear_bhb_loop+0x60/0xb0 [ 296.778408][ T9471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.784366][ T9471] RIP: 0033:0x7f9d8459e0d9 [ 296.788826][ T9471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.808856][ T9471] RSP: 002b:00007f9d827f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.817421][ T9471] RAX: ffffffffffffffda RBX: 00007f9d84825fa0 RCX: 00007f9d8459e0d9 [ 296.825408][ T9471] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 296.833529][ T9471] RBP: 00007f9d827f6090 R08: 0000000000000000 R09: 0000000000000000 [ 296.841625][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.849606][ T9471] R13: 00007f9d84826038 R14: 00007f9d84825fa0 R15: 00007ffdfdcbd3b8 [ 296.857623][ T9471] [ 296.954269][ T9485] netlink: 'syz.4.1800': attribute type 10 has an invalid length. [ 297.092453][ T9493] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1803'. [ 297.173453][ T9497] netlink: 'syz.4.1803': attribute type 3 has an invalid length. [ 297.186870][ T9497] netlink: 'syz.4.1803': attribute type 1 has an invalid length. [ 297.197683][ T9497] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1803'. [ 297.227632][ T9499] netlink: 'syz.2.1805': attribute type 39 has an invalid length. [ 297.424231][ T9506] netlink: 'syz.2.1808': attribute type 9 has an invalid length. [ 297.433781][ T9506] netlink: 108504 bytes leftover after parsing attributes in process `syz.2.1808'. [ 297.495911][ T9508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1809'. [ 297.505221][ T9508] : renamed from caif0 [ 297.512635][ T9508] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 297.729375][ T9520] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1813'. [ 300.361016][ T9614] validate_nla: 11 callbacks suppressed [ 300.361036][ T9614] netlink: 'syz.3.1849': attribute type 9 has an invalid length. [ 300.394983][ T9614] __nla_validate_parse: 4 callbacks suppressed [ 300.395000][ T9614] netlink: 108504 bytes leftover after parsing attributes in process `syz.3.1849'. [ 300.714969][ T9631] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1856'. [ 300.797932][ T9638] netlink: 'syz.2.1856': attribute type 3 has an invalid length. [ 300.849485][ T9638] netlink: 'syz.2.1856': attribute type 1 has an invalid length. [ 300.872731][ T9638] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1856'. [ 302.043747][ T9666] netlink: 'syz.2.1868': attribute type 9 has an invalid length. [ 302.076899][ T9666] netlink: 108504 bytes leftover after parsing attributes in process `syz.2.1868'. [ 302.555810][ T9692] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1878'. [ 302.677374][ T9704] netlink: 'syz.0.1878': attribute type 3 has an invalid length. [ 302.699269][ T9704] netlink: 'syz.0.1878': attribute type 1 has an invalid length. [ 302.707318][ T9704] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1878'. [ 303.639546][ T9718] netlink: 'syz.0.1887': attribute type 21 has an invalid length. [ 303.665688][ T9718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1887'. [ 303.982156][ T9728] netlink: 'syz.4.1888': attribute type 9 has an invalid length. [ 303.990357][ T9728] netlink: 108504 bytes leftover after parsing attributes in process `syz.4.1888'. [ 304.286292][ T9731] FAULT_INJECTION: forcing a failure. [ 304.286292][ T9731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.307283][ T9731] CPU: 0 PID: 9731 Comm: syz.0.1889 Not tainted syzkaller #0 [ 304.314726][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.324816][ T9731] Call Trace: [ 304.328127][ T9731] [ 304.331082][ T9731] dump_stack_lvl+0x188/0x24e [ 304.335807][ T9731] ? show_regs_print_info+0x12/0x12 [ 304.341050][ T9731] ? load_image+0x410/0x410 [ 304.345610][ T9731] ? __lock_acquire+0x7c40/0x7c40 [ 304.350946][ T9731] ? __might_sleep+0xd0/0xd0 [ 304.356528][ T9731] should_fail_ex+0x390/0x4c0 [ 304.361270][ T9731] _copy_from_user+0x2c/0x170 [ 304.366005][ T9731] generic_map_update_batch+0x48d/0x7f0 [ 304.371621][ T9731] ? rcu_read_unlock+0xa0/0xa0 [ 304.376434][ T9731] ? __fdget+0x17c/0x200 [ 304.380762][ T9731] ? rcu_read_unlock+0xa0/0xa0 [ 304.385585][ T9731] bpf_map_do_batch+0x475/0x5f0 [ 304.390476][ T9731] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 304.396923][ T9731] __sys_bpf+0x6f7/0x780 [ 304.401188][ T9731] ? bpf_link_show_fdinfo+0x380/0x380 [ 304.406616][ T9731] ? lock_chain_count+0x20/0x20 [ 304.411488][ T9731] __x64_sys_bpf+0x78/0x90 [ 304.415917][ T9731] do_syscall_64+0x4c/0xa0 [ 304.420346][ T9731] ? clear_bhb_loop+0x60/0xb0 [ 304.425031][ T9731] ? clear_bhb_loop+0x60/0xb0 [ 304.429804][ T9731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.435710][ T9731] RIP: 0033:0x7f7a6eb9e0d9 [ 304.440130][ T9731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.459852][ T9731] RSP: 002b:00007f7a6fa1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.468279][ T9731] RAX: ffffffffffffffda RBX: 00007f7a6ee25fa0 RCX: 00007f7a6eb9e0d9 [ 304.476256][ T9731] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 304.484230][ T9731] RBP: 00007f7a6fa1a090 R08: 0000000000000000 R09: 0000000000000000 [ 304.492394][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.500372][ T9731] R13: 00007f7a6ee26038 R14: 00007f7a6ee25fa0 R15: 00007ffe32f6fc58 [ 304.508373][ T9731] [ 304.790839][ T9748] netlink: 'syz.3.1896': attribute type 25 has an invalid length. [ 304.795280][ T9753] netlink: 'syz.2.1894': attribute type 9 has an invalid length. [ 304.878946][ T9755] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1896'. [ 304.889538][ T9753] netlink: 108504 bytes leftover after parsing attributes in process `syz.2.1894'. [ 305.481342][ T9772] validate_nla: 1 callbacks suppressed [ 305.481361][ T9772] netlink: 'syz.1.1904': attribute type 28 has an invalid length. [ 305.497627][ T9772] netlink: 'syz.1.1904': attribute type 4 has an invalid length. [ 305.505752][ T9772] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1904'. [ 305.964114][ T9793] netlink: 'syz.4.1913': attribute type 21 has an invalid length. [ 305.977593][ T9793] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1913'. [ 306.357155][ T9811] netlink: 'syz.0.1916': attribute type 9 has an invalid length. [ 306.366888][ T9811] netlink: 108504 bytes leftover after parsing attributes in process `syz.0.1916'. [ 306.728306][ T9830] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.735249][ T9830] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.832827][ T9836] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1927'. [ 307.652151][ T9867] netlink: 'syz.1.1936': attribute type 9 has an invalid length. [ 307.682017][ T9867] netlink: 108504 bytes leftover after parsing attributes in process `syz.1.1936'. [ 307.761505][ T9873] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1940'. [ 307.813843][ T9873] netlink: 'syz.3.1940': attribute type 3 has an invalid length. [ 307.846959][ T9873] netlink: 'syz.3.1940': attribute type 1 has an invalid length. [ 307.872647][ T9873] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1940'. [ 307.889284][ T9878] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 307.895870][ T9878] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 308.186084][ C0] [ 308.186093][ C0] ================================ [ 308.186098][ C0] WARNING: inconsistent lock state [ 308.186117][ C0] syzkaller #0 Not tainted [ 308.186125][ C0] -------------------------------- [ 308.186129][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 308.186136][ C0] syz.1.1949/9890 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 308.186153][ C0] ffff88807c48e238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 308.186202][ C0] {INITIAL USE} state was registered at: [ 308.186207][ C0] lock_acquire+0x1bb/0x4a0 [ 308.186227][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 308.186244][ C0] trie_update_elem+0xbe/0xd40 [ 308.186262][ C0] bpf_map_update_value+0x59d/0x670 [ 308.186280][ C0] map_update_elem+0x4fa/0x6a0 [ 308.186298][ C0] __sys_bpf+0x4ec/0x780 [ 308.186315][ C0] __x64_sys_bpf+0x78/0x90 [ 308.186332][ C0] do_syscall_64+0x4c/0xa0 [ 308.186352][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.186374][ C0] irq event stamp: 1168 [ 308.186382][ C0] hardirqs last enabled at (1167): [] syscall_enter_from_user_mode+0x21/0x80 [ 308.186403][ C0] hardirqs last disabled at (1168): [] exc_debug+0x6e/0x130 [ 308.186426][ C0] softirqs last enabled at (1154): [] bpf_obj_get_next_id+0x11a/0x1c0 [ 308.186451][ C0] softirqs last disabled at (1152): [] bpf_obj_get_next_id+0x104/0x1c0 [ 308.186475][ C0] [ 308.186475][ C0] other info that might help us debug this: [ 308.186479][ C0] Possible unsafe locking scenario: [ 308.186479][ C0] [ 308.186483][ C0] CPU0 [ 308.186485][ C0] ---- [ 308.186488][ C0] lock(&trie->lock); [ 308.186496][ C0] [ 308.186499][ C0] lock(&trie->lock); [ 308.186507][ C0] [ 308.186507][ C0] *** DEADLOCK *** [ 308.186507][ C0] [ 308.186510][ C0] no locks held by syz.1.1949/9890. [ 308.186517][ C0] [ 308.186517][ C0] stack backtrace: [ 308.186522][ C0] CPU: 0 PID: 9890 Comm: syz.1.1949 Not tainted syzkaller #0 [ 308.186537][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.186546][ C0] Call Trace: [ 308.186552][ C0] <#DB> [ 308.186557][ C0] dump_stack_lvl+0x188/0x24e [ 308.186580][ C0] ? show_regs_print_info+0x12/0x12 [ 308.186604][ C0] ? print_usage_bug+0x42a/0x690 [ 308.186625][ C0] ? verify_lock_unused+0x15/0x140 [ 308.186647][ C0] lock_acquire+0x2df/0x4a0 [ 308.186672][ C0] ? perf_output_begin_forward+0xa7/0xa70 [ 308.186691][ C0] ? trie_delete_elem+0x8e/0x620 [ 308.186710][ C0] ? read_lock_is_recursive+0x10/0x10 [ 308.186732][ C0] ? look_up_lock_class+0x75/0x140 [ 308.186749][ C0] ? verify_lock_unused+0x15/0x140 [ 308.186770][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 308.186787][ C0] ? trie_delete_elem+0x8e/0x620 [ 308.186807][ C0] ? _raw_spin_lock+0x40/0x40 [ 308.186824][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 308.186843][ C0] trie_delete_elem+0x8e/0x620 [ 308.186868][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 308.186886][ C0] bpf_overflow_handler+0x50b/0x790 [ 308.186903][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 308.186927][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 308.186944][ C0] ? perf_swevent_overflow+0x230/0x230 [ 308.186965][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 308.186989][ C0] __perf_event_overflow+0x457/0x630 [ 308.187014][ C0] perf_swevent_event+0x315/0x570 [ 308.187037][ C0] ? perf_tp_event+0xc10/0xc10 [ 308.187065][ C0] perf_bp_event+0x311/0x3f0 [ 308.187088][ C0] ? perf_trace_lock_acquire+0x101/0x3f0 [ 308.187106][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 308.187143][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 308.187161][ C0] ? read_lock_is_recursive+0x10/0x10 [ 308.187185][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 308.187209][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 308.187227][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 308.187246][ C0] notify_die+0x141/0x1a0 [ 308.187265][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 308.187290][ C0] notify_debug+0x20/0x30 [ 308.187308][ C0] exc_debug+0xd9/0x130 [ 308.187330][ C0] asm_exc_debug+0x1a/0x40 [ 308.187348][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 308.187372][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 308.187385][ C0] RSP: 0018:ffffc9000e897d48 EFLAGS: 00050202 [ 308.187398][ C0] RAX: ffffffff8415c301 RBX: 0000000000000050 RCX: 000000000000004f [ 308.187408][ C0] RDX: 0000000000000050 RSI: 0000200000000301 RDI: ffffc9000e897dc1 [ 308.187418][ C0] RBP: 0000000000000000 R08: ffffc9000e897e0f R09: 1ffff92001d12fc1 [ 308.187429][ C0] R10: dffffc0000000000 R11: fffff52001d12fc2 R12: 00007fffffffefb0 [ 308.187440][ C0] R13: 0000000000000050 R14: ffffc9000e897dc0 R15: 0000200000000300 [ 308.187455][ C0] ? _copy_from_user+0x21/0x170 [ 308.187476][ C0] [ 308.187480][ C0] [ 308.187485][ C0] _copy_from_user+0xf4/0x170 [ 308.187502][ C0] __sys_bpf+0x2ea/0x780 [ 308.187523][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 308.187551][ C0] ? lock_chain_count+0x20/0x20 [ 308.187576][ C0] __x64_sys_bpf+0x78/0x90 [ 308.187596][ C0] do_syscall_64+0x4c/0xa0 [ 308.187615][ C0] ? clear_bhb_loop+0x60/0xb0 [ 308.187634][ C0] ? clear_bhb_loop+0x60/0xb0 [ 308.187655][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.187680][ C0] RIP: 0033:0x7f57cb59e0d9 [ 308.187692][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.187705][ C0] RSP: 002b:00007f57cc507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.187721][ C0] RAX: ffffffffffffffda RBX: 00007f57cb825fa0 RCX: 00007f57cb59e0d9 [ 308.187732][ C0] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 308.187742][ C0] RBP: 00007f57cb635024 R08: 0000000000000000 R09: 0000000000000000 [ 308.187751][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.187761][ C0] R13: 00007f57cb826038 R14: 00007f57cb825fa0 R15: 00007ffc06bfb5a8 [ 308.187780][ C0] [ 317.138976][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.145320][ T1280] ieee802154 phy1 wpan1: encryption failed: -22