last executing test programs: 2.535153854s ago: executing program 1 (id=1025): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) 2.384194803s ago: executing program 3 (id=1027): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x14, &(0x7f0000001a80)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f9, &(0x7f0000000080)) 2.318330932s ago: executing program 1 (id=1029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180)}, 0x11efa, 0x8, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.09552521s ago: executing program 2 (id=1031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x9, 0x17, 0x8, 0x4, 0x42, 0x1, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r0}, 0x38) 1.986093174s ago: executing program 3 (id=1033): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000340)=@caif=@dbg={0x25, 0xe, 0x6}, 0x80, 0x0}, 0x20000094) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x3fffffc, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000680), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4077, 0xfed}], 0x1}, 0x120) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x2000000, 0x6a, 0x0, &(0x7f00000009c0)="000035b1d44d1de88000000000000082012200ffdae2b349d07a51c9e3ec6c7dfcf095c3106d028e04fb826d545d2ba75e653ccdc0fe123cf9593681e817bb88b7ad3ce6134a9378880071f1d1f8558237910ec8bc8963d672966b05a90c6e74e66876198dacb5f9ca3b", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x3c) 1.882143018s ago: executing program 1 (id=1034): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x9, 0x6, 0xd1, 0x0, 0x7f, 0x600, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x2}, 0x22, 0x9, 0x7, 0x5, 0x9, 0x7, 0x4, 0x0, 0xf7, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xf, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003000b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000380)="a44f4cdc0bb03069467df14958680ee056ea2c08f5f71a35ba0fdd2aef0c27eac46951e1ecea6d7e0364139bc79de27804cf40f355f5eb030120821f811bdf405213d6e5e8abc1d9ecf4cbb8db39ac32ab9a28711bd8beea827bb464c11fa1f527f5cdf3974796a93626d7bb97cda3158bdd5db8b28061ccca90a7", 0x7b}, {&(0x7f0000000480)="ed0be90e43c9730e5451cec82a09cc4a1902c828212de92946720defa7210637f587cd91c80d59c2b6e459fb3e1ff0f7dad5e980a14a2fea70f9d893d04b1949d58432f3c9497ec5fcd218bfb2d8c152d9efd086fac820cd41c3", 0x5a}, {&(0x7f0000000500)="065f3a9b37b6e72d2c0323d16ceda4d4d14725f29ac463822f786b16be79160153240ec18f4a1ec50bb09cc48180b3506fea95f2b1113118a9b85b14012a56abcd80", 0x42}, {&(0x7f0000000600)="2ef4d2f014b4e05ded08074d63400f72bae5d33ed91866bb56f1fdec8c79431790ae23a477bf23dbb18c522c00b0fc8dd935e487aaf18ad416f4d7f2fcb0e3172bd114f9071497b2d2e251bc86af753d6dc739d6f9a703f71caa3a20bb327a98f0d27a224d900c053c4036500b925b7e6854ac45d8c2b03b972430dde4ded2312902cf06c8378b917de754e910658f8b8725876160e2c97e090e8416450c788ed426b010e6383b12db72c49e5f3b62084984366751b7", 0xb6}, {&(0x7f0000000580)="2a131f99cfed2a525fcb6aa01177b90d3990126bd2ee299ef6d77849e11ddc352cafb9510541", 0x26}, {&(0x7f00000006c0)="129ab0a51ef17f45b4875c18bcf29e31df80d0eb99db1055a63802f3796c6a7db99c54a4a7b41a534e0da662cb962195aff2e3ab743c2bf6154824060f0a8042ced91d7444a76f8ac106f3e35067669f784667e3c5be60bab613257cba86fd1e1162664c2ba0dd2611ef38db5ad151073d305a0b913a0158d909f0214a52c2b00d41c8ad9a3aa6bfa825c16625075c2f4501be9eab7e6731c5d01739930d26be60b76cebd3ad913e3a94f0999b9d3062dc0c1790107dcc5273eade87220e0c", 0xbf}, {&(0x7f00000002c0)="08b25bb78054191ea8f68cffa4e1c91ce4e922036b32", 0x16}, {&(0x7f00000001c0)="7607e11ba78122fbd66cfa89a7", 0xd}, {&(0x7f0000000800)}], 0x9, &(0x7f0000000940)=ANY=[@ANYRESDEC=r5], 0x138}, 0xc010) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000013ff0000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018570000100000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000a80)=""/198, 0xc6}, {&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000030c0)=""/4098, 0x1002}, {&(0x7f0000002080)=""/4098, 0x1002}, {&(0x7f0000000000)=""/92, 0x5c}], 0x5}, 0x40010022) recvmsg$kcm(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x7) 1.601525194s ago: executing program 2 (id=1036): perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0003000000410000000002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000004"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe06, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', r1}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000010100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000900000000000000008500000083000000bf09000000000000550901000000000095000000a407d77526e7c4dfffffffff7a8af8ff0000070000000000000000007b8af0ff00000000bfa100000000000007010007a5c34849679bf61c5f380149c000f8ffffffbfa400000000000007040098c8e93600f0ff93", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186a00000500000000000000490000001f13f8fffcffffffb7080000000000007b8af8ff00000000b708000004e200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x8000000, 0x28, &(0x7f0000000480)=""/40, 0x41000, 0x29, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0xd, 0x5, 0x3}, 0x10, 0x22595, r1, 0x3, &(0x7f0000000d80)=[0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0], &(0x7f0000000dc0)=[{0x5, 0x3, 0x2, 0x5}, {0x0, 0x4, 0xf, 0xb}, {0x1, 0x3, 0x3}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x9, 0x240b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x8000, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair(0x28, 0xa, 0x0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) 1.513885405s ago: executing program 1 (id=1038): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) 1.389154472s ago: executing program 2 (id=1040): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x9535a11c1d1849bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 1.323983349s ago: executing program 1 (id=1041): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x14, &(0x7f0000001a80)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f9, &(0x7f0000000080)) 1.289536694s ago: executing program 0 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180)}, 0x11efa, 0x8, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.124281855s ago: executing program 2 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180)}, 0x11efa, 0x8, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.01404347s ago: executing program 1 (id=1044): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000340)=@caif=@dbg={0x25, 0xe, 0x6}, 0x80, 0x0}, 0x20000094) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x3fffffc, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000680), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4077, 0xfed}], 0x1}, 0x120) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x2000000, 0x6a, 0x0, &(0x7f00000009c0)="000035b1d44d1de88000000000000082012200ffdae2b349d07a51c9e3ec6c7dfcf095c3106d028e04fb826d545d2ba75e653ccdc0fe123cf9593681e817bb88b7ad3ce6134a9378880071f1d1f8558237910ec8bc8963d672966b05a90c6e74e66876198dacb5f9ca3b", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x3c) 924.772771ms ago: executing program 0 (id=1045): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000003) 792.811128ms ago: executing program 3 (id=1046): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x9, 0x6, 0xd1, 0x0, 0x7f, 0x600, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x2}, 0x22, 0x9, 0x7, 0x5, 0x9, 0x7, 0x4, 0x0, 0xf7, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xf, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003000b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000380)="a44f4cdc0bb03069467df14958680ee056ea2c08f5f71a35ba0fdd2aef0c27eac46951e1ecea6d7e0364139bc79de27804cf40f355f5eb030120821f811bdf405213d6e5e8abc1d9ecf4cbb8db39ac32ab9a28711bd8beea827bb464c11fa1f527f5cdf3974796a93626d7bb97cda3158bdd5db8b28061ccca90a7", 0x7b}, {&(0x7f0000000480)="ed0be90e43c9730e5451cec82a09cc4a1902c828212de92946720defa7210637f587cd91c80d59c2b6e459fb3e1ff0f7dad5e980a14a2fea70f9d893d04b1949d58432f3c9497ec5fcd218bfb2d8c152d9efd086fac820cd41c3", 0x5a}, {&(0x7f0000000500)="065f3a9b37b6e72d2c0323d16ceda4d4d14725f29ac463822f786b16be79160153240ec18f4a1ec50bb09cc48180b3506fea95f2b1113118a9b85b14012a56abcd80", 0x42}, {&(0x7f0000000600)="2ef4d2f014b4e05ded08074d63400f72bae5d33ed91866bb56f1fdec8c79431790ae23a477bf23dbb18c522c00b0fc8dd935e487aaf18ad416f4d7f2fcb0e3172bd114f9071497b2d2e251bc86af753d6dc739d6f9a703f71caa3a20bb327a98f0d27a224d900c053c4036500b925b7e6854ac45d8c2b03b972430dde4ded2312902cf06c8378b917de754e910658f8b8725876160e2c97e090e8416450c788ed426b010e6383b12db72c49e5f3b62084984366751b7", 0xb6}, {&(0x7f0000000580)="2a131f99cfed2a525fcb6aa01177b90d3990126bd2ee299ef6d77849e11ddc352cafb9510541", 0x26}, {&(0x7f00000006c0)="129ab0a51ef17f45b4875c18bcf29e31df80d0eb99db1055a63802f3796c6a7db99c54a4a7b41a534e0da662cb962195aff2e3ab743c2bf6154824060f0a8042ced91d7444a76f8ac106f3e35067669f784667e3c5be60bab613257cba86fd1e1162664c2ba0dd2611ef38db5ad151073d305a0b913a0158d909f0214a52c2b00d41c8ad9a3aa6bfa825c16625075c2f4501be9eab7e6731c5d01739930d26be60b76cebd3ad913e3a94f0999b9d3062dc0c1790107dcc5273eade87220e0c", 0xbf}, {&(0x7f00000002c0)="08b25bb78054191ea8f68cffa4e1c91ce4e922036b32", 0x16}, {&(0x7f00000001c0)="7607e11ba78122fbd66cfa89a7", 0xd}, {&(0x7f0000000800)}], 0x9, &(0x7f0000000940)=ANY=[@ANYRESDEC=r5], 0x138}, 0xc010) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000013ff0000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018570000100000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000a80)=""/198, 0xc6}, {&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000030c0)=""/4098, 0x1002}, {&(0x7f0000002080)=""/4098, 0x1002}, {&(0x7f0000000000)=""/92, 0x5c}], 0x5}, 0x40010022) recvmsg$kcm(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x7) 560.230398ms ago: executing program 0 (id=1047): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) 555.284789ms ago: executing program 2 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x9, 0x17, 0x8, 0x4, 0x42, 0x1, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r0}, 0x38) 483.399418ms ago: executing program 3 (id=1049): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) 412.264747ms ago: executing program 0 (id=1050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18, 0x20040800}, 0x0) 315.518969ms ago: executing program 0 (id=1051): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x9535a11c1d1849bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d03"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 314.96953ms ago: executing program 3 (id=1052): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x14, &(0x7f0000001a80)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f9, &(0x7f0000000080)) 132.009143ms ago: executing program 2 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffff5b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x541b, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)}, 0x4c001) 88.906479ms ago: executing program 0 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180)}, 0x11efa, 0x8, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 3 (id=1055): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000003) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 52.123118][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.144882][ T5432] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. syzkaller login: [ 72.609659][ T5756] cgroup: Unknown subsys name 'net' [ 72.749794][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.369904][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.228694][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.244341][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.256978][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.265788][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.274037][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.281438][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.317607][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.325654][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.340662][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.348256][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.355009][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.364184][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.371546][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.372705][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.389621][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.398442][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.407194][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.415627][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.487438][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.495569][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.512160][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.523908][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.531810][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.539300][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.878721][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.918760][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.952195][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 77.056535][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 77.145402][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.153298][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.160508][ T5772] bridge_slave_0: entered allmulticast mode [ 77.168216][ T5772] bridge_slave_0: entered promiscuous mode [ 77.196617][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.203889][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.211008][ T5775] bridge_slave_0: entered allmulticast mode [ 77.220583][ T5775] bridge_slave_0: entered promiscuous mode [ 77.229077][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.236270][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.243561][ T5772] bridge_slave_1: entered allmulticast mode [ 77.250696][ T5772] bridge_slave_1: entered promiscuous mode [ 77.279239][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.286432][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.296279][ T5775] bridge_slave_1: entered allmulticast mode [ 77.303333][ T5775] bridge_slave_1: entered promiscuous mode [ 77.330275][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.338026][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.345339][ T5767] bridge_slave_0: entered allmulticast mode [ 77.352731][ T5767] bridge_slave_0: entered promiscuous mode [ 77.392671][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.405270][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.414857][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.422357][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.429684][ T5767] bridge_slave_1: entered allmulticast mode [ 77.437390][ T5767] bridge_slave_1: entered promiscuous mode [ 77.458913][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.507912][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.535306][ T5775] team0: Port device team_slave_0 added [ 77.541488][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.548762][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.556492][ T5781] bridge_slave_0: entered allmulticast mode [ 77.563660][ T5781] bridge_slave_0: entered promiscuous mode [ 77.584053][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.598254][ T5775] team0: Port device team_slave_1 added [ 77.604347][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.611523][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.619750][ T5781] bridge_slave_1: entered allmulticast mode [ 77.627120][ T5781] bridge_slave_1: entered promiscuous mode [ 77.646752][ T5772] team0: Port device team_slave_0 added [ 77.654993][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.697961][ T5772] team0: Port device team_slave_1 added [ 77.759321][ T5767] team0: Port device team_slave_0 added [ 77.766546][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.775970][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.802459][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.814915][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.822484][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.849205][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.871855][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.882555][ T5767] team0: Port device team_slave_1 added [ 77.890331][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.900283][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.907336][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.933484][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.953093][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.960061][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.986410][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.074761][ T5775] hsr_slave_0: entered promiscuous mode [ 78.081230][ T5775] hsr_slave_1: entered promiscuous mode [ 78.091000][ T5781] team0: Port device team_slave_0 added [ 78.099999][ T5781] team0: Port device team_slave_1 added [ 78.112008][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.118970][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.144953][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.157590][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.164690][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.190964][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.217286][ T5772] hsr_slave_0: entered promiscuous mode [ 78.224290][ T5772] hsr_slave_1: entered promiscuous mode [ 78.230435][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.238267][ T5772] Cannot create hsr debugfs directory [ 78.271183][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.278172][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.304490][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.317269][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.324493][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.351525][ T5777] Bluetooth: hci0: command tx timeout [ 78.357684][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.411909][ T5777] Bluetooth: hci2: command tx timeout [ 78.483601][ T5767] hsr_slave_0: entered promiscuous mode [ 78.490529][ T5767] hsr_slave_1: entered promiscuous mode [ 78.497146][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.502888][ T5777] Bluetooth: hci1: command tx timeout [ 78.506900][ T5767] Cannot create hsr debugfs directory [ 78.569316][ T5781] hsr_slave_0: entered promiscuous mode [ 78.577762][ T5777] Bluetooth: hci3: command tx timeout [ 78.583776][ T5781] hsr_slave_1: entered promiscuous mode [ 78.589911][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.597811][ T5781] Cannot create hsr debugfs directory [ 78.923031][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.935154][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.965819][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.976240][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.083321][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.094264][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.114504][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.126798][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.209898][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.232477][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.253037][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.275634][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.288152][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.346390][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.359360][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.370017][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.392661][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.399982][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.428900][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.436282][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.475378][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.482574][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.607609][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.665334][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.696926][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.704234][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.731042][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.766662][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.773904][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.813787][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.881933][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.904496][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.928763][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.935976][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.960153][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.967379][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.014205][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.077295][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.084483][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.126586][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.133820][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.187479][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.325419][ T5772] veth0_vlan: entered promiscuous mode [ 80.356173][ T5772] veth1_vlan: entered promiscuous mode [ 80.413016][ T5777] Bluetooth: hci0: command tx timeout [ 80.440865][ T5772] veth0_macvtap: entered promiscuous mode [ 80.461253][ T5772] veth1_macvtap: entered promiscuous mode [ 80.491877][ T5777] Bluetooth: hci2: command tx timeout [ 80.550541][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.567266][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.572974][ T5777] Bluetooth: hci1: command tx timeout [ 80.616179][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.649627][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.653075][ T5777] Bluetooth: hci3: command tx timeout [ 80.664726][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.674208][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.683760][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.720227][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.744298][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.779972][ T5775] veth0_vlan: entered promiscuous mode [ 80.808596][ T5775] veth1_vlan: entered promiscuous mode [ 80.891002][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.905115][ T5781] veth0_vlan: entered promiscuous mode [ 80.919714][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.954644][ T5781] veth1_vlan: entered promiscuous mode [ 81.007568][ T5775] veth0_macvtap: entered promiscuous mode [ 81.019276][ T5775] veth1_macvtap: entered promiscuous mode [ 81.040338][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.050152][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.061123][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.070101][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.083238][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.118145][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.139546][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.152483][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.164773][ T5781] veth0_macvtap: entered promiscuous mode [ 81.174435][ T5767] veth0_vlan: entered promiscuous mode [ 81.207497][ T5781] veth1_macvtap: entered promiscuous mode [ 81.219396][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.234125][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.245616][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.255641][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.290808][ T5767] veth1_vlan: entered promiscuous mode [ 81.339876][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.364945][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.382526][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.397559][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.409914][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.428403][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.439362][ C0] hrtimer: interrupt took 66544 ns [ 81.452194][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.475347][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.488818][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.509419][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.565270][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.576074][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.588394][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.598218][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.680883][ T5854] Zero length message leads to an empty skb [ 81.781545][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.814194][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.869052][ T5767] veth0_macvtap: entered promiscuous mode [ 81.944918][ T5767] veth1_macvtap: entered promiscuous mode [ 82.038132][ T5853] syz.1.2 (5853) used greatest stack depth: 20168 bytes left [ 82.042601][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.064310][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.074887][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.101720][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.114137][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.114136][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.132232][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.143673][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.160200][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.187844][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.213752][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.260525][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.282085][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.295782][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.312318][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.322674][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.343009][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.355266][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.384409][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.397644][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.407596][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.418629][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.449811][ T5860] netlink: 'syz.1.5': attribute type 33 has an invalid length. [ 82.462507][ T5860] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5'. [ 82.471535][ T5860] `: renamed from team0 (while UP) [ 82.493939][ T5777] Bluetooth: hci0: command tx timeout [ 82.572817][ T5777] Bluetooth: hci2: command tx timeout [ 82.577380][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.634250][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.652963][ T5777] Bluetooth: hci1: command tx timeout [ 82.732517][ T5777] Bluetooth: hci3: command tx timeout [ 82.895458][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.908117][ T5866] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.923448][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.994926][ T5866] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.036684][ T5865] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.079752][ T5869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.094678][ T5867] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.115186][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.144460][ T5871] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6'. [ 83.161935][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.002208][ T5871] syz.1.6 (5871) used greatest stack depth: 20016 bytes left [ 84.517311][ T5888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 84.526881][ T5888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 84.578934][ T5777] Bluetooth: hci0: command tx timeout [ 84.615623][ T5888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 84.652131][ T5777] Bluetooth: hci2: command tx timeout [ 84.732745][ T5777] Bluetooth: hci1: command tx timeout [ 84.818342][ T5777] Bluetooth: hci3: command tx timeout [ 84.870373][ T5897] netlink: 'syz.0.10': attribute type 33 has an invalid length. [ 84.878507][ T5897] `: renamed from team0 (while UP) [ 84.950387][ T5899] netlink: 'syz.1.12': attribute type 33 has an invalid length. [ 85.496209][ T5907] warning: `syz.3.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.838854][ T5926] bridge_slave_1: left allmulticast mode [ 86.869820][ T5926] bridge_slave_1: left promiscuous mode [ 86.950344][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.372782][ T5931] netlink: 'syz.1.21': attribute type 27 has an invalid length. [ 87.461483][ T5926] bridge_slave_0: left allmulticast mode [ 87.578826][ T5926] bridge_slave_0: left promiscuous mode [ 87.609539][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.680877][ T5932] netlink: 'syz.1.21': attribute type 11 has an invalid length. [ 87.723909][ T5932] __nla_validate_parse: 21 callbacks suppressed [ 87.723924][ T5932] netlink: 212576 bytes leftover after parsing attributes in process `syz.1.21'. [ 87.890157][ T5935] netlink: 'syz.0.22': attribute type 33 has an invalid length. [ 87.926572][ T5935] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22'. [ 88.443257][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26'. [ 88.480578][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26'. [ 88.564263][ T5951] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26'. [ 88.602752][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26'. [ 89.374388][ T5966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'. [ 89.385003][ T5966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'. [ 89.427736][ T5966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'. [ 89.446678][ T5966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'. [ 90.069114][ T5972] netlink: 'syz.0.31': attribute type 4 has an invalid length. [ 90.329937][ T5978] netlink: 'syz.1.33': attribute type 33 has an invalid length. [ 90.633649][ T5984] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 90.835586][ T5991] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 91.962013][ T1188] cfg80211: failed to load regulatory.db [ 92.389028][ T6006] netlink: 'syz.3.39': attribute type 33 has an invalid length. [ 92.408591][ T6006] `: renamed from team0 (while UP) [ 92.801641][ T6014] __nla_validate_parse: 13 callbacks suppressed [ 92.801658][ T6014] netlink: 60 bytes leftover after parsing attributes in process `syz.1.40'. [ 92.919679][ T6017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.40'. [ 92.953226][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.40'. [ 93.115699][ T6009] pim6reg1: entered promiscuous mode [ 93.121293][ T6009] pim6reg1: entered allmulticast mode [ 93.389457][ T6025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 93.976319][ T6025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 94.010948][ T6028] netlink: 'syz.2.44': attribute type 33 has an invalid length. [ 94.022618][ T6028] netlink: 152 bytes leftover after parsing attributes in process `syz.2.44'. [ 94.032801][ T6028] `: renamed from team0 (while UP) [ 94.144129][ T6026] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 94.154640][ T6031] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 94.350253][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.46'. [ 94.380564][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.46'. [ 94.452604][ T6046] netlink: 'syz.2.48': attribute type 3 has an invalid length. [ 94.460418][ T6046] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 94.952777][ T6061] netlink: 'syz.0.54': attribute type 4 has an invalid length. [ 94.960598][ T6061] netlink: 'syz.0.54': attribute type 3 has an invalid length. [ 95.018629][ T6059] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 95.169772][ T6059] `: Device hsr_slave_0 failed to register rx_handler [ 95.661252][ T6069] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 95.674724][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.728062][ T6069] bridge_slave_1: left allmulticast mode [ 95.740045][ T6069] bridge_slave_1: left promiscuous mode [ 95.747877][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.176001][ T6080] netlink: 'syz.0.58': attribute type 10 has an invalid length. [ 96.187252][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.999262][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.059706][ T6080] bridge_slave_1: left allmulticast mode [ 97.075262][ T6080] bridge_slave_1: left promiscuous mode [ 97.086205][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.169769][ T6094] netlink: 'syz.2.61': attribute type 39 has an invalid length. [ 97.338444][ T6096] netlink: 'syz.2.61': attribute type 39 has an invalid length. [ 97.981922][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.025977][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.107962][ T6107] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 98.450412][ T6117] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 98.515963][ T6116] __nla_validate_parse: 12 callbacks suppressed [ 98.515982][ T6116] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.67'. [ 98.660034][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.687671][ T6117] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 98.767709][ T6121] bond0: entered promiscuous mode [ 98.774957][ T6121] bond_slave_0: entered promiscuous mode [ 98.780866][ T6121] bond_slave_1: entered promiscuous mode [ 98.788353][ T6121] batadv0: entered promiscuous mode [ 98.810040][ T6123] netlink: 132 bytes leftover after parsing attributes in process `syz.2.68'. [ 99.180340][ T6127] validate_nla: 2 callbacks suppressed [ 99.180375][ T6127] netlink: 'syz.0.70': attribute type 21 has an invalid length. [ 99.934180][ T6142] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.74'. [ 99.985475][ T6138] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 100.045885][ T6138] `: Device hsr_slave_0 failed to register rx_handler [ 100.173168][ T6142] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 100.267317][ T6144] netlink: 'syz.2.76': attribute type 10 has an invalid length. [ 100.295381][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.379204][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.469010][ T6144] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 100.566394][ T6144] syz.2.76 (6144) used greatest stack depth: 19560 bytes left [ 100.576698][ T6155] netlink: 'syz.3.78': attribute type 16 has an invalid length. [ 100.602387][ T6155] netlink: 'syz.3.78': attribute type 3 has an invalid length. [ 100.615356][ T6155] netlink: 132 bytes leftover after parsing attributes in process `syz.3.78'. [ 100.674929][ T6157] netlink: 'syz.0.79': attribute type 39 has an invalid length. [ 103.546645][ T6158] netlink: 'syz.0.79': attribute type 39 has an invalid length. [ 103.643668][ T6160] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 103.676376][ T6160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.704325][ T6160] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 103.728639][ T6163] bond0: entered promiscuous mode [ 103.737445][ T6163] bond_slave_0: entered promiscuous mode [ 103.743644][ T6163] bond_slave_1: entered promiscuous mode [ 103.749842][ T6163] batadv_slave_0: entered promiscuous mode [ 103.759168][ T6163] batadv0: entered promiscuous mode [ 104.106586][ T6171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.83'. [ 104.150630][ T6171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.83'. [ 104.223296][ T6173] netlink: 60 bytes leftover after parsing attributes in process `syz.3.83'. [ 104.282241][ T6179] netlink: 60 bytes leftover after parsing attributes in process `syz.3.83'. [ 104.368911][ T6171] pim6reg1: entered promiscuous mode [ 104.379985][ T6171] pim6reg1: entered allmulticast mode [ 105.120247][ T6188] netlink: 'syz.1.88': attribute type 10 has an invalid length. [ 105.550149][ T6192] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.88'. [ 105.746824][ T6188] `: Device hsr_slave_0 failed to register rx_handler [ 105.786505][ T6184] netlink: 830 bytes leftover after parsing attributes in process `syz.0.85'. [ 105.817370][ T6191] netlink: 'syz.0.85': attribute type 10 has an invalid length. [ 105.944784][ T6192] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 105.964613][ T6195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.89'. [ 106.018628][ T6195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.89'. [ 106.039317][ T6197] netlink: 60 bytes leftover after parsing attributes in process `syz.3.89'. [ 106.399163][ T6195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.89'. [ 106.430793][ T6202] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 106.460273][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.501513][ T6202] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 106.555126][ T6204] bond0: entered promiscuous mode [ 106.560238][ T6204] bond_slave_0: entered promiscuous mode [ 106.606310][ T6204] bond_slave_1: entered promiscuous mode [ 106.612716][ T6204] batadv_slave_0: entered promiscuous mode [ 106.619045][ T6204] batadv0: entered promiscuous mode [ 106.770416][ T6210] netlink: 'syz.3.93': attribute type 4 has an invalid length. [ 106.784980][ T6210] netlink: 'syz.3.93': attribute type 3 has an invalid length. [ 107.210697][ T6219] netlink: 'syz.3.96': attribute type 3 has an invalid length. [ 107.231674][ T6219] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 107.477223][ T6227] netlink: 'syz.2.97': attribute type 21 has an invalid length. [ 107.930782][ T6243] netlink: 'syz.0.101': attribute type 33 has an invalid length. [ 107.953008][ T6235] netlink: 'syz.2.99': attribute type 10 has an invalid length. [ 108.556953][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.576060][ T6254] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 108.595660][ T6256] bond0: entered promiscuous mode [ 108.600747][ T6256] bond_slave_0: entered promiscuous mode [ 108.607922][ T6256] bond_slave_1: entered promiscuous mode [ 108.616350][ T6256] batadv0: entered promiscuous mode [ 109.292586][ T6272] __nla_validate_parse: 13 callbacks suppressed [ 109.292652][ T6272] netlink: 830 bytes leftover after parsing attributes in process `syz.0.108'. [ 109.651364][ T6279] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.109'. [ 109.664050][ T6278] netlink: 152 bytes leftover after parsing attributes in process `syz.2.110'. [ 110.870033][ T6294] netlink: 830 bytes leftover after parsing attributes in process `syz.0.113'. [ 111.215344][ T6306] validate_nla: 4 callbacks suppressed [ 111.215385][ T6306] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 111.272370][ T6306] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.117'. [ 111.599307][ T6310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.118'. [ 111.641387][ T6310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.118'. [ 111.743133][ T6310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.118'. [ 111.771270][ T6310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.118'. [ 112.072721][ T6315] netlink: 830 bytes leftover after parsing attributes in process `syz.3.120'. [ 112.135230][ T6319] netlink: 'syz.2.122': attribute type 33 has an invalid length. [ 112.529105][ T6325] netlink: 'syz.0.124': attribute type 4 has an invalid length. [ 112.570491][ T6323] netlink: 'syz.3.123': attribute type 3 has an invalid length. [ 112.601679][ T6323] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 114.492715][ T6361] netlink: 'syz.1.135': attribute type 3 has an invalid length. [ 114.538227][ T6361] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 114.552850][ T6361] __nla_validate_parse: 12 callbacks suppressed [ 114.552865][ T6361] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.135'. [ 115.611768][ T6382] netlink: 'syz.0.140': attribute type 27 has an invalid length. [ 115.627538][ T6381] netlink: 'syz.2.142': attribute type 33 has an invalid length. [ 115.635766][ T6382] netlink: 164 bytes leftover after parsing attributes in process `syz.0.140'. [ 115.645345][ T6381] netlink: 152 bytes leftover after parsing attributes in process `syz.2.142'. [ 115.845992][ T6385] netlink: 'syz.0.140': attribute type 11 has an invalid length. [ 115.939627][ T6385] netlink: 212576 bytes leftover after parsing attributes in process `syz.0.140'. [ 116.054188][ T6390] netlink: 830 bytes leftover after parsing attributes in process `syz.3.143'. [ 117.516949][ T6401] netlink: 830 bytes leftover after parsing attributes in process `syz.3.144'. [ 117.803095][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.146'. [ 117.827336][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.146'. [ 117.873968][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.146'. [ 117.895328][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.146'. [ 118.078610][ T6421] bridge_slave_0: left allmulticast mode [ 118.101869][ T6421] bridge_slave_0: left promiscuous mode [ 118.141236][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.334861][ T6436] netlink: 'syz.0.160': attribute type 10 has an invalid length. [ 119.686912][ T6449] __nla_validate_parse: 7 callbacks suppressed [ 119.686958][ T6449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.157'. [ 119.726303][ T6451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.165'. [ 119.739740][ T6449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.157'. [ 119.776330][ T6451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.165'. [ 119.789650][ T6453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.157'. [ 119.799394][ T6454] netlink: 'syz.3.155': attribute type 27 has an invalid length. [ 119.811694][ T6454] netlink: 164 bytes leftover after parsing attributes in process `syz.3.155'. [ 119.830022][ T6451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.165'. [ 119.845234][ T6451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.165'. [ 119.875800][ T6449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.157'. [ 119.971463][ T6458] netlink: 'syz.3.155': attribute type 11 has an invalid length. [ 120.042336][ T6458] netlink: 212576 bytes leftover after parsing attributes in process `syz.3.155'. [ 121.276082][ T6484] netlink: 'syz.0.167': attribute type 33 has an invalid length. [ 122.640973][ T6504] netlink: 'syz.2.177': attribute type 33 has an invalid length. [ 123.276410][ T6517] netlink: 'syz.2.179': attribute type 33 has an invalid length. [ 124.899485][ T6540] __nla_validate_parse: 23 callbacks suppressed [ 124.899523][ T6540] netlink: 830 bytes leftover after parsing attributes in process `syz.3.186'. [ 125.077368][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.531274][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'. [ 125.569838][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'. [ 125.608795][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'. [ 125.620090][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'. [ 125.732420][ T6554] netlink: 'syz.3.193': attribute type 33 has an invalid length. [ 125.740436][ T6554] netlink: 152 bytes leftover after parsing attributes in process `syz.3.193'. [ 125.856066][ T6558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.191'. [ 125.885270][ T6558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.191'. [ 125.970463][ T6558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.191'. [ 125.998005][ T6558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.191'. [ 128.588489][ T6605] netlink: 'syz.0.214': attribute type 33 has an invalid length. [ 128.636546][ T6606] netlink: 'syz.1.206': attribute type 33 has an invalid length. [ 129.909839][ T6628] __nla_validate_parse: 20 callbacks suppressed [ 129.909873][ T6628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.213'. [ 129.968706][ T6633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.213'. [ 130.090160][ T6638] netlink: 'syz.2.217': attribute type 33 has an invalid length. [ 130.108332][ T6638] netlink: 152 bytes leftover after parsing attributes in process `syz.2.217'. [ 130.494466][ T6639] netlink: 14 bytes leftover after parsing attributes in process `syz.0.219'. [ 131.360243][ T6655] netlink: 'syz.2.223': attribute type 3 has an invalid length. [ 131.369659][ T6655] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.223'. [ 131.581056][ T6659] netlink: 'syz.3.225': attribute type 10 has an invalid length. [ 131.599664][ T6659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.225'. [ 131.631103][ T6659] `: entered promiscuous mode [ 131.654269][ T6659] team_slave_0: entered promiscuous mode [ 131.683242][ T6659] team_slave_1: entered promiscuous mode [ 131.704594][ T6659] `: entered allmulticast mode [ 131.719993][ T6659] team_slave_0: entered allmulticast mode [ 131.742079][ T6659] team_slave_1: entered allmulticast mode [ 131.763600][ T6659] bridge0: port 3(`) entered blocking state [ 131.790693][ T6659] bridge0: port 3(`) entered disabled state [ 131.818166][ T6659] bridge0: port 3(`) entered blocking state [ 131.824492][ T6659] bridge0: port 3(`) entered forwarding state [ 131.907805][ T6658] delete_channel: no stack [ 132.066439][ T6669] netlink: 830 bytes leftover after parsing attributes in process `syz.0.228'. [ 132.140687][ T6675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.229'. [ 132.175006][ T6675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.229'. [ 132.191506][ T6672] netlink: 60 bytes leftover after parsing attributes in process `syz.2.229'. [ 132.596691][ T6683] netlink: 'syz.3.233': attribute type 33 has an invalid length. [ 132.764492][ T6689] netlink: 'syz.1.236': attribute type 3 has an invalid length. [ 132.896207][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911740][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.220710][ T6703] netlink: 'syz.2.242': attribute type 17 has an invalid length. [ 133.256406][ T6703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.590691][ T6708] netlink: 'syz.2.243': attribute type 39 has an invalid length. [ 133.639840][ T6711] netlink: 'syz.2.243': attribute type 39 has an invalid length. [ 133.886071][ T6718] netlink: 'syz.1.247': attribute type 3 has an invalid length. [ 133.902255][ T6720] netlink: 'syz.0.248': attribute type 33 has an invalid length. [ 134.184830][ T6726] netlink: 'syz.1.251': attribute type 33 has an invalid length. [ 135.155556][ T6743] __nla_validate_parse: 10 callbacks suppressed [ 135.155573][ T6743] netlink: 830 bytes leftover after parsing attributes in process `syz.3.253'. [ 135.470077][ T6758] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.258'. [ 135.525386][ T6761] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.259'. [ 135.727225][ T6769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.263'. [ 135.824132][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.265'. [ 135.927027][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.265'. [ 135.939932][ T6774] netlink: 60 bytes leftover after parsing attributes in process `syz.1.265'. [ 135.961480][ T6776] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.266'. [ 135.990563][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.265'. [ 136.011982][ T6776] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.266'. [ 136.612149][ T6793] validate_nla: 5 callbacks suppressed [ 136.612166][ T6793] netlink: 'syz.2.272': attribute type 3 has an invalid length. [ 136.630412][ T6793] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 136.820357][ T6795] netlink: set zone limit has 8 unknown bytes [ 137.307799][ T6815] netlink: 'syz.1.282': attribute type 3 has an invalid length. [ 137.352134][ T6815] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 140.379048][ T6824] __nla_validate_parse: 8 callbacks suppressed [ 140.379063][ T6824] netlink: 830 bytes leftover after parsing attributes in process `syz.1.284'. [ 140.549368][ T6835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.288'. [ 140.559587][ T6835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.288'. [ 140.627126][ T6835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.288'. [ 140.639365][ T6835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.288'. [ 140.955287][ T6843] netlink: 188 bytes leftover after parsing attributes in process `syz.3.292'. [ 141.105570][ T6843] netlink: 'syz.3.292': attribute type 10 has an invalid length. [ 141.686425][ T6857] netlink: 'syz.0.296': attribute type 33 has an invalid length. [ 141.706688][ T6857] netlink: 152 bytes leftover after parsing attributes in process `syz.0.296'. [ 142.360371][ T6865] netlink: 830 bytes leftover after parsing attributes in process `syz.1.298'. [ 142.536869][ T6867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 142.814515][ T6867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 142.882772][ T6875] netlink: 'syz.0.301': attribute type 33 has an invalid length. [ 143.573446][ T6887] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 145.357682][ T6928] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 145.387330][ T6928] __nla_validate_parse: 10 callbacks suppressed [ 145.387372][ T6928] netlink: 5 bytes leftover after parsing attributes in process `syz.0.319'. [ 146.327172][ T6945] netlink: 830 bytes leftover after parsing attributes in process `syz.3.325'. [ 146.534431][ T6951] netlink: 'syz.2.327': attribute type 33 has an invalid length. [ 146.561721][ T6951] netlink: 152 bytes leftover after parsing attributes in process `syz.2.327'. [ 146.697801][ T6957] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 146.722263][ T6958] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.329'. [ 146.738358][ T6957] netlink: 5 bytes leftover after parsing attributes in process `syz.3.330'. [ 146.945447][ T6965] netlink: 'syz.1.332': attribute type 33 has an invalid length. [ 146.964628][ T6965] netlink: 152 bytes leftover after parsing attributes in process `syz.1.332'. [ 147.065152][ T6963] netlink: 830 bytes leftover after parsing attributes in process `syz.0.331'. [ 147.235380][ T6969] netlink: 'syz.3.334': attribute type 3 has an invalid length. [ 147.252312][ T6969] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 147.269395][ T6969] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.334'. [ 147.495552][ T6979] netlink: 830 bytes leftover after parsing attributes in process `syz.0.337'. [ 148.074562][ T6997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.343'. [ 148.102708][ T7001] netlink: 'syz.0.345': attribute type 33 has an invalid length. [ 148.467746][ T7009] netlink: 'syz.3.348': attribute type 3 has an invalid length. [ 148.496357][ T7009] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 149.170018][ T7027] netlink: 'syz.2.356': attribute type 12 has an invalid length. [ 150.092349][ T7047] netlink: 'syz.3.360': attribute type 33 has an invalid length. [ 150.852720][ T7064] netlink: 'syz.2.369': attribute type 3 has an invalid length. [ 150.891685][ T7064] __nla_validate_parse: 14 callbacks suppressed [ 150.891701][ T7064] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.369'. [ 151.334571][ T7079] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.371'. [ 151.593801][ T7085] netlink: 5 bytes leftover after parsing attributes in process `syz.2.376'. [ 152.194455][ T7094] validate_nla: 4 callbacks suppressed [ 152.194475][ T7094] netlink: 'syz.1.377': attribute type 9 has an invalid length. [ 152.361835][ T7094] netlink: 399 bytes leftover after parsing attributes in process `syz.1.377'. [ 152.554294][ T7104] netlink: 'syz.2.380': attribute type 33 has an invalid length. [ 152.585090][ T7104] netlink: 152 bytes leftover after parsing attributes in process `syz.2.380'. [ 152.975284][ T7108] netlink: 'syz.0.381': attribute type 3 has an invalid length. [ 153.024604][ T7108] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 153.061700][ T7108] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.381'. [ 153.505817][ T7122] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 153.543150][ T7122] netlink: 5 bytes leftover after parsing attributes in process `syz.0.393'. [ 153.584546][ T7123] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 153.622362][ T7123] netlink: 5 bytes leftover after parsing attributes in process `syz.2.387'. [ 154.528995][ T7143] netlink: 'syz.2.394': attribute type 33 has an invalid length. [ 154.555351][ T7143] netlink: 152 bytes leftover after parsing attributes in process `syz.2.394'. [ 155.145338][ T7153] netlink: 'syz.3.395': attribute type 3 has an invalid length. [ 155.214248][ T7153] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 155.282943][ T7153] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.395'. [ 155.718675][ T7162] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 156.236327][ T7179] __nla_validate_parse: 2 callbacks suppressed [ 156.236343][ T7179] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.403'. [ 156.324347][ T7181] netlink: 152 bytes leftover after parsing attributes in process `syz.2.405'. [ 156.766150][ T7190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.406'. [ 156.875775][ T7190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.406'. [ 156.938951][ T7193] netlink: 60 bytes leftover after parsing attributes in process `syz.3.406'. [ 156.997273][ T7190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.406'. [ 157.211427][ T7196] validate_nla: 5 callbacks suppressed [ 157.211443][ T7196] netlink: 'syz.0.409': attribute type 3 has an invalid length. [ 157.293276][ T7196] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 157.338752][ T7196] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.409'. [ 157.867440][ T7211] netlink: 'syz.2.413': attribute type 9 has an invalid length. [ 157.888663][ T7211] netlink: 399 bytes leftover after parsing attributes in process `syz.2.413'. [ 158.185109][ T7217] netlink: 'syz.0.415': attribute type 1 has an invalid length. [ 158.221962][ T7217] netlink: 5 bytes leftover after parsing attributes in process `syz.0.415'. [ 158.332806][ T7222] netlink: 'syz.1.416': attribute type 33 has an invalid length. [ 158.370033][ T7222] netlink: 152 bytes leftover after parsing attributes in process `syz.1.416'. [ 160.061390][ T7260] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 160.530071][ T7269] netlink: 'syz.1.432': attribute type 33 has an invalid length. [ 162.064205][ T7302] __nla_validate_parse: 10 callbacks suppressed [ 162.064240][ T7302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.444'. [ 162.148102][ T7302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.444'. [ 164.806037][ T7305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.444'. [ 164.821279][ T7309] netlink: 830 bytes leftover after parsing attributes in process `syz.3.446'. [ 164.838873][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.444'. [ 164.989725][ T7315] netlink: 'syz.0.448': attribute type 33 has an invalid length. [ 165.017929][ T7315] netlink: 152 bytes leftover after parsing attributes in process `syz.0.448'. [ 166.086230][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.456'. [ 166.114019][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.456'. [ 166.156852][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.456'. [ 166.170320][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.456'. [ 166.246315][ T7344] netlink: 'syz.0.455': attribute type 23 has an invalid length. [ 166.260600][ T7344] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 166.537955][ T7344] syz_tun: entered promiscuous mode [ 166.552640][ T7344] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 166.784510][ T7350] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 166.814173][ T7349] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 167.286627][ T7371] netlink: 'syz.0.463': attribute type 33 has an invalid length. [ 167.301311][ T7371] __nla_validate_parse: 2 callbacks suppressed [ 167.301340][ T7371] netlink: 152 bytes leftover after parsing attributes in process `syz.0.463'. [ 167.981579][ T7389] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 168.000565][ T7389] netlink: 5 bytes leftover after parsing attributes in process `syz.0.470'. [ 168.063436][ T7387] netlink: 830 bytes leftover after parsing attributes in process `syz.1.468'. [ 168.109648][ T7384] netlink: 'syz.3.469': attribute type 23 has an invalid length. [ 168.205545][ T7384] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 168.351234][ T7384] syz_tun: entered promiscuous mode [ 168.383956][ T7384] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 168.721122][ T7384] syz.3.469 (7384) used greatest stack depth: 18568 bytes left [ 169.168639][ T7417] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 169.181500][ T7417] netlink: 5 bytes leftover after parsing attributes in process `syz.1.480'. [ 169.354053][ T7422] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.481'. [ 170.063488][ T7439] netlink: 'syz.1.487': attribute type 23 has an invalid length. [ 170.105783][ T7439] netlink: 'syz.1.487': attribute type 10 has an invalid length. [ 170.231126][ T7439] syz_tun: entered promiscuous mode [ 170.260630][ T7439] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 170.727013][ T7461] netlink: 188 bytes leftover after parsing attributes in process `syz.2.492'. [ 170.912307][ T7463] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 170.937838][ T7463] netlink: 5 bytes leftover after parsing attributes in process `syz.1.493'. [ 172.600140][ T7475] netlink: 'syz.2.498': attribute type 33 has an invalid length. [ 172.613043][ T7475] netlink: 152 bytes leftover after parsing attributes in process `syz.2.498'. [ 172.745701][ T7482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.499'. [ 172.772853][ T7482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.499'. [ 172.825302][ T7482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.499'. [ 172.849594][ T7482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.499'. [ 173.057416][ T7491] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 173.132961][ T7491] netlink: 5 bytes leftover after parsing attributes in process `syz.2.502'. [ 173.885707][ T7512] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 173.932131][ T7512] netlink: 5 bytes leftover after parsing attributes in process `syz.3.509'. [ 174.125122][ T7521] netlink: 'syz.1.511': attribute type 33 has an invalid length. [ 174.183464][ T7521] netlink: 152 bytes leftover after parsing attributes in process `syz.1.511'. [ 174.802583][ T7527] netlink: 60 bytes leftover after parsing attributes in process `syz.0.512'. [ 174.827372][ T7527] netlink: 60 bytes leftover after parsing attributes in process `syz.0.512'. [ 175.973597][ T7556] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 176.067856][ T7560] netlink: 'syz.0.524': attribute type 39 has an invalid length. [ 176.382276][ T7568] netlink: 'syz.0.526': attribute type 33 has an invalid length. [ 177.400046][ T7586] netlink: 'syz.3.534': attribute type 21 has an invalid length. [ 177.448403][ T7586] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 177.467320][ T7593] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 177.707629][ T7599] netlink: 'syz.1.537': attribute type 33 has an invalid length. [ 177.716965][ T7599] __nla_validate_parse: 15 callbacks suppressed [ 177.717030][ T7599] netlink: 152 bytes leftover after parsing attributes in process `syz.1.537'. [ 178.355257][ T1125] tipc: Subscription rejected, illegal request [ 178.565712][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.546'. [ 178.616254][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.546'. [ 178.660176][ T7626] netlink: 60 bytes leftover after parsing attributes in process `syz.3.546'. [ 178.742082][ T7627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.546'. [ 178.764892][ T7625] netlink: 'syz.0.548': attribute type 1 has an invalid length. [ 178.789389][ T7625] netlink: 5 bytes leftover after parsing attributes in process `syz.0.548'. [ 179.053382][ T7637] netlink: 'syz.1.551': attribute type 39 has an invalid length. [ 179.277783][ T7643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.552'. [ 179.596969][ T7651] netlink: 'syz.1.556': attribute type 33 has an invalid length. [ 179.636978][ T7651] netlink: 152 bytes leftover after parsing attributes in process `syz.1.556'. [ 179.710027][ T7656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.558'. [ 179.802360][ T7656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.558'. [ 182.114877][ T7710] validate_nla: 36 callbacks suppressed [ 182.114922][ T7710] netlink: 'syz.2.573': attribute type 33 has an invalid length. [ 183.176277][ T7731] __nla_validate_parse: 76 callbacks suppressed [ 183.176314][ T7731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.578'. [ 183.268521][ T7731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.578'. [ 183.356194][ T7734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.578'. [ 183.429598][ T7731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.578'. [ 183.463034][ T7736] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 183.498242][ T7736] netlink: 5 bytes leftover after parsing attributes in process `syz.0.580'. [ 183.874568][ T7746] netlink: 830 bytes leftover after parsing attributes in process `syz.2.584'. [ 183.951466][ T7751] netlink: 'syz.3.585': attribute type 33 has an invalid length. [ 183.981976][ T7751] netlink: 152 bytes leftover after parsing attributes in process `syz.3.585'. [ 184.571026][ T7754] netlink: 'syz.0.587': attribute type 17 has an invalid length. [ 184.626591][ T7754] netlink: 'syz.0.587': attribute type 16 has an invalid length. [ 184.660687][ T7754] netlink: 152 bytes leftover after parsing attributes in process `syz.0.587'. [ 184.798239][ T7763] netlink: 'syz.3.589': attribute type 33 has an invalid length. [ 184.841881][ T7763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.589'. [ 185.393646][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.592'. [ 185.788573][ T7782] netlink: 'syz.0.595': attribute type 1 has an invalid length. [ 187.812450][ T7832] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 188.488417][ T7842] netlink: 'syz.1.610': attribute type 17 has an invalid length. [ 188.496806][ T7842] netlink: 'syz.1.610': attribute type 16 has an invalid length. [ 188.505175][ T7842] __nla_validate_parse: 11 callbacks suppressed [ 188.505188][ T7842] netlink: 152 bytes leftover after parsing attributes in process `syz.1.610'. [ 188.735594][ T7844] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 188.766847][ T7844] netlink: 5 bytes leftover after parsing attributes in process `syz.3.611'. [ 188.988550][ T7852] netlink: 'syz.2.615': attribute type 3 has an invalid length. [ 189.004952][ T7854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.614'. [ 189.025488][ T7854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.614'. [ 189.037340][ T7852] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 189.046048][ T7852] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.615'. [ 189.056105][ T7856] netlink: 'syz.1.616': attribute type 33 has an invalid length. [ 189.070761][ T7856] netlink: 152 bytes leftover after parsing attributes in process `syz.1.616'. [ 189.097652][ T7854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.614'. [ 189.109706][ T7854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.614'. [ 189.425916][ T7865] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.620'. [ 189.458019][ T7862] netlink: 830 bytes leftover after parsing attributes in process `syz.3.619'. [ 189.829349][ T7873] FAULT_INJECTION: forcing a failure. [ 189.829349][ T7873] name failslab, interval 1, probability 0, space 0, times 1 [ 189.870941][ T7873] CPU: 1 PID: 7873 Comm: syz.0.622 Not tainted syzkaller #0 [ 189.878310][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.888429][ T7873] Call Trace: [ 189.891758][ T7873] [ 189.894744][ T7873] dump_stack_lvl+0x18c/0x250 [ 189.899489][ T7873] ? show_regs_print_info+0x20/0x20 [ 189.904740][ T7873] ? load_image+0x400/0x400 [ 189.909308][ T7873] should_fail_ex+0x39d/0x4d0 [ 189.914057][ T7873] should_failslab+0x9/0x20 [ 189.918617][ T7873] slab_pre_alloc_hook+0x59/0x310 [ 189.923729][ T7873] kmem_cache_alloc+0x5a/0x2d0 [ 189.928542][ T7873] ? skb_clone+0x1eb/0x370 [ 189.933011][ T7873] skb_clone+0x1eb/0x370 [ 189.937311][ T7873] __netlink_deliver_tap+0x41c/0x830 [ 189.942662][ T7873] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.947909][ T7873] netlink_deliver_tap+0x19c/0x1b0 [ 189.953065][ T7873] netlink_dump+0x94b/0xe50 [ 189.957628][ T7873] ? netlink_lookup+0x200/0x200 [ 189.962580][ T7873] ? ns_capable+0x89/0xe0 [ 189.966961][ T7873] ? __inet_diag_dump_start+0x886/0x9f0 [ 189.972584][ T7873] __netlink_dump_start+0x5f1/0x810 [ 189.977828][ T7873] inet_diag_rcv_msg_compat+0x215/0x440 [ 189.983408][ T7873] ? __inet_diag_dump+0x380/0x380 [ 189.988735][ T7873] ? sock_diag_rcv_msg+0xd1/0x600 [ 189.993808][ T7873] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 189.999543][ T7873] ? inet_diag_dump_start_compat+0x20/0x20 [ 190.005363][ T7873] ? inet_diag_dump+0x50/0x50 [ 190.010062][ T7873] ? __inet_diag_dump+0x380/0x380 [ 190.015104][ T7873] sock_diag_rcv_msg+0x3d8/0x600 [ 190.020092][ T7873] netlink_rcv_skb+0x241/0x4d0 [ 190.024878][ T7873] ? sock_diag_bind+0xb0/0xb0 [ 190.029571][ T7873] ? netlink_ack+0x1180/0x1180 [ 190.034357][ T7873] ? __lock_acquire+0x7d40/0x7d40 [ 190.039408][ T7873] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.044626][ T7873] sock_diag_rcv+0x2a/0x40 [ 190.049057][ T7873] netlink_unicast+0x751/0x8d0 [ 190.053847][ T7873] netlink_sendmsg+0x8d0/0xbf0 [ 190.058647][ T7873] ? netlink_getsockopt+0x590/0x590 [ 190.063873][ T7873] ? aa_sock_msg_perm+0x94/0x150 [ 190.068833][ T7873] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 190.074152][ T7873] ? security_socket_sendmsg+0x80/0xa0 [ 190.079645][ T7873] ? netlink_getsockopt+0x590/0x590 [ 190.084872][ T7873] ____sys_sendmsg+0x5ba/0x960 [ 190.089667][ T7873] ? __asan_memset+0x22/0x40 [ 190.094284][ T7873] ? __sys_sendmsg_sock+0x30/0x30 [ 190.099331][ T7873] ? __import_iovec+0x5f2/0x850 [ 190.104205][ T7873] ? import_iovec+0x73/0xa0 [ 190.108738][ T7873] ___sys_sendmsg+0x2a6/0x360 [ 190.113435][ T7873] ? get_pid_task+0x20/0x1e0 [ 190.118066][ T7873] ? __sys_sendmsg+0x2a0/0x2a0 [ 190.122879][ T7873] ? __lock_acquire+0x7d40/0x7d40 [ 190.127953][ T7873] __se_sys_sendmsg+0x1c2/0x2b0 [ 190.132846][ T7873] ? __x64_sys_sendmsg+0x80/0x80 [ 190.137840][ T7873] ? lockdep_hardirqs_on+0x98/0x150 [ 190.143072][ T7873] do_syscall_64+0x55/0xa0 [ 190.147509][ T7873] ? clear_bhb_loop+0x40/0x90 [ 190.152209][ T7873] ? clear_bhb_loop+0x40/0x90 [ 190.156916][ T7873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.162827][ T7873] RIP: 0033:0x7f261759acb9 [ 190.167275][ T7873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.186903][ T7873] RSP: 002b:00007f26183c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.195350][ T7873] RAX: ffffffffffffffda RBX: 00007f2617815fa0 RCX: 00007f261759acb9 [ 190.203353][ T7873] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 190.211346][ T7873] RBP: 00007f26183c3090 R08: 0000000000000000 R09: 0000000000000000 [ 190.219340][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.227329][ T7873] R13: 00007f2617816038 R14: 00007f2617815fa0 R15: 00007ffe44b81fb8 [ 190.235345][ T7873] [ 190.770750][ T7886] netlink: 'syz.0.626': attribute type 3 has an invalid length. [ 190.792502][ T7886] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 190.904925][ T7892] netlink: 'syz.1.629': attribute type 33 has an invalid length. [ 191.497196][ T7906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.533740][ T7908] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 191.573174][ T7908] batman_adv: batadv0: Adding interface: ` [ 191.579187][ T7908] batman_adv: batadv0: The MTU of interface ` is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.641622][ T7908] batman_adv: batadv0: Not using interface ` (retrying later): interface not active [ 193.325437][ T7950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.348545][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.355060][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.451476][ T7973] validate_nla: 2 callbacks suppressed [ 194.459826][ T7973] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 194.468539][ T7973] __nla_validate_parse: 9 callbacks suppressed [ 194.468573][ T7973] netlink: 5 bytes leftover after parsing attributes in process `syz.2.653'. [ 194.748767][ T7979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.654'. [ 195.543324][ T7979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.654'. [ 195.559982][ T7980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.654'. [ 195.602381][ T7981] netlink: 60 bytes leftover after parsing attributes in process `syz.0.654'. [ 195.724089][ T7989] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.656'. [ 196.087442][ T8000] netlink: 830 bytes leftover after parsing attributes in process `syz.2.660'. [ 196.242347][ T7998] netlink: 'syz.3.661': attribute type 10 has an invalid length. [ 196.529771][ T7998] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 196.550080][ T7998] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.796657][ T8016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.664'. [ 196.841283][ T8016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.664'. [ 196.874753][ T8017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.664'. [ 196.963940][ T8019] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 197.328979][ T8031] netlink: 'syz.1.667': attribute type 9 has an invalid length. [ 198.580129][ T8053] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 199.195147][ T8070] FAULT_INJECTION: forcing a failure. [ 199.195147][ T8070] name failslab, interval 1, probability 0, space 0, times 0 [ 199.235971][ T8070] CPU: 1 PID: 8070 Comm: syz.0.681 Not tainted syzkaller #0 [ 199.243442][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.253556][ T8070] Call Trace: [ 199.256891][ T8070] [ 199.259875][ T8070] dump_stack_lvl+0x18c/0x250 [ 199.264616][ T8070] ? verify_lock_unused+0x140/0x140 [ 199.269889][ T8070] ? show_regs_print_info+0x20/0x20 [ 199.275147][ T8070] ? load_image+0x400/0x400 [ 199.279722][ T8070] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 199.286370][ T8070] ? crng_make_state+0x350/0x700 [ 199.291373][ T8070] ? lockdep_hardirqs_on+0x98/0x150 [ 199.296647][ T8070] should_fail_ex+0x39d/0x4d0 [ 199.301405][ T8070] should_failslab+0x9/0x20 [ 199.305986][ T8070] slab_pre_alloc_hook+0x59/0x310 [ 199.311076][ T8070] ? sctp_add_bind_addr+0x8c/0x360 [ 199.316222][ T8070] __kmem_cache_alloc_node+0x53/0x250 [ 199.321639][ T8070] ? sctp_add_bind_addr+0x8c/0x360 [ 199.326781][ T8070] kmalloc_trace+0x2a/0xe0 [ 199.331245][ T8070] sctp_add_bind_addr+0x8c/0x360 [ 199.336233][ T8070] sctp_copy_local_addr_list+0x315/0x4f0 [ 199.341908][ T8070] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 199.347664][ T8070] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 199.353768][ T8070] ? sctp_v4_is_any+0x35/0x60 [ 199.358477][ T8070] ? sctp_copy_one_addr+0x8c/0x350 [ 199.363634][ T8070] sctp_bind_addr_copy+0xb3/0x3c0 [ 199.368694][ T8070] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 199.375076][ T8070] sctp_connect_new_asoc+0x2f9/0x6a0 [ 199.380392][ T8070] ? __sctp_connect+0xd80/0xd80 [ 199.385271][ T8070] ? __local_bh_enable_ip+0x13a/0x1c0 [ 199.390702][ T8070] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 199.396292][ T8070] ? security_sctp_bind_connect+0x89/0xb0 [ 199.402049][ T8070] sctp_sendmsg+0x1575/0x28c0 [ 199.406793][ T8070] ? sctp_getsockopt+0xb60/0xb60 [ 199.411775][ T8070] ? aa_sk_perm+0x83c/0x970 [ 199.416329][ T8070] ? aa_af_perm+0x330/0x330 [ 199.420967][ T8070] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 199.427444][ T8070] ? sock_rps_record_flow+0x19/0x3f0 [ 199.432806][ T8070] ? inet_sendmsg+0xe9/0x2f0 [ 199.437445][ T8070] ? inet_send_prepare+0x260/0x260 [ 199.442609][ T8070] ____sys_sendmsg+0x5ba/0x960 [ 199.447407][ T8070] ? __lock_acquire+0x7d40/0x7d40 [ 199.452478][ T8070] ? __asan_memset+0x22/0x40 [ 199.457135][ T8070] ? __sys_sendmsg_sock+0x30/0x30 [ 199.462192][ T8070] ? __import_iovec+0x5f2/0x850 [ 199.467116][ T8070] ? import_iovec+0x73/0xa0 [ 199.471671][ T8070] ___sys_sendmsg+0x2a6/0x360 [ 199.476383][ T8070] ? get_pid_task+0x20/0x1e0 [ 199.481073][ T8070] ? __sys_sendmsg+0x2a0/0x2a0 [ 199.485902][ T8070] ? __lock_acquire+0x7d40/0x7d40 [ 199.491003][ T8070] __se_sys_sendmsg+0x1c2/0x2b0 [ 199.495904][ T8070] ? __x64_sys_sendmsg+0x80/0x80 [ 199.500907][ T8070] ? lockdep_hardirqs_on+0x98/0x150 [ 199.506140][ T8070] do_syscall_64+0x55/0xa0 [ 199.510573][ T8070] ? clear_bhb_loop+0x40/0x90 [ 199.515285][ T8070] ? clear_bhb_loop+0x40/0x90 [ 199.520001][ T8070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.525942][ T8070] RIP: 0033:0x7f261759acb9 [ 199.530388][ T8070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.550104][ T8070] RSP: 002b:00007f26183c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.558997][ T8070] RAX: ffffffffffffffda RBX: 00007f2617815fa0 RCX: 00007f261759acb9 [ 199.570227][ T8070] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000e [ 199.578239][ T8070] RBP: 00007f26183c3090 R08: 0000000000000000 R09: 0000000000000000 [ 199.586236][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.594236][ T8070] R13: 00007f2617816038 R14: 00007f2617815fa0 R15: 00007ffe44b81fb8 [ 199.602260][ T8070] [ 199.725034][ T8074] __nla_validate_parse: 12 callbacks suppressed [ 199.725082][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.683'. [ 199.790552][ T8079] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.685'. [ 199.793726][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.683'. [ 199.844355][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 199.870190][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 199.880240][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.683'. [ 199.915255][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.683'. [ 199.943973][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 199.984200][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 200.264043][ T8085] netlink: 830 bytes leftover after parsing attributes in process `syz.3.687'. [ 200.394801][ T8092] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 200.665353][ T8101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.467810][ T8118] sock: sock_set_timeout: `syz.2.698' (pid 8118) tries to set negative timeout [ 201.521854][ T8124] sock: sock_set_timeout: `syz.0.700' (pid 8124) tries to set negative timeout [ 201.696109][ T8126] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 201.704434][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 201.704476][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 201.704527][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 201.704572][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 201.823904][ T8130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.897801][ T8137] FAULT_INJECTION: forcing a failure. [ 201.897801][ T8137] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 201.944457][ T8137] CPU: 1 PID: 8137 Comm: syz.3.704 Not tainted syzkaller #0 [ 201.951821][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.961918][ T8137] Call Trace: [ 201.965224][ T8137] [ 201.968175][ T8137] dump_stack_lvl+0x18c/0x250 [ 201.972887][ T8137] ? show_regs_print_info+0x20/0x20 [ 201.978111][ T8137] ? load_image+0x400/0x400 [ 201.982649][ T8137] ? __might_fault+0xaa/0x120 [ 201.987343][ T8137] ? __lock_acquire+0x7d40/0x7d40 [ 201.992394][ T8137] should_fail_ex+0x39d/0x4d0 [ 201.997107][ T8137] _copy_from_user+0x2f/0xe0 [ 202.001718][ T8137] sk_setsockopt+0x2b2/0x2bc0 [ 202.006423][ T8137] ? sockopt_capable+0x60/0x60 [ 202.011222][ T8137] ? aa_sk_perm+0x83c/0x970 [ 202.015756][ T8137] ? __fget_files+0x28/0x4b0 [ 202.020479][ T8137] ? aa_af_perm+0x330/0x330 [ 202.025017][ T8137] ? __fget_files+0x28/0x4b0 [ 202.029637][ T8137] ? __fget_files+0x28/0x4b0 [ 202.034252][ T8137] ? aa_sock_opt_perm+0x74/0x100 [ 202.039214][ T8137] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 202.044787][ T8137] ? security_socket_setsockopt+0x7e/0xa0 [ 202.050540][ T8137] do_sock_setsockopt+0x11b/0x1a0 [ 202.055606][ T8137] __x64_sys_setsockopt+0x182/0x200 [ 202.060845][ T8137] do_syscall_64+0x55/0xa0 [ 202.065283][ T8137] ? clear_bhb_loop+0x40/0x90 [ 202.069997][ T8137] ? clear_bhb_loop+0x40/0x90 [ 202.074702][ T8137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.080620][ T8137] RIP: 0033:0x7f15d259acb9 [ 202.085062][ T8137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.104685][ T8137] RSP: 002b:00007f15d3484028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.113306][ T8137] RAX: ffffffffffffffda RBX: 00007f15d2815fa0 RCX: 00007f15d259acb9 [ 202.121309][ T8137] RDX: 0000000000000014 RSI: 0000000000000001 RDI: 0000000000000004 [ 202.129309][ T8137] RBP: 00007f15d3484090 R08: 0000000000000010 R09: 0000000000000000 [ 202.137309][ T8137] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 202.145300][ T8137] R13: 00007f15d2816038 R14: 00007f15d2815fa0 R15: 00007ffc57caf208 [ 202.153307][ T8137] [ 202.209396][ T8139] netlink: 'syz.2.705': attribute type 10 has an invalid length. [ 202.218861][ T8139] batman_adv: batadv0: Adding interface: vlan1 [ 202.230906][ T8139] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.258130][ T8139] batman_adv: batadv0: Interface activated: vlan1 [ 202.960425][ T8154] netlink: 'syz.2.711': attribute type 3 has an invalid length. [ 203.290222][ T8159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.579441][ T8169] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 204.038865][ T8182] FAULT_INJECTION: forcing a failure. [ 204.038865][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 204.062060][ T8182] CPU: 0 PID: 8182 Comm: syz.3.721 Not tainted syzkaller #0 [ 204.069410][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.079504][ T8182] Call Trace: [ 204.082825][ T8182] [ 204.085807][ T8182] dump_stack_lvl+0x18c/0x250 [ 204.090538][ T8182] ? show_regs_print_info+0x20/0x20 [ 204.095777][ T8182] ? load_image+0x400/0x400 [ 204.100338][ T8182] ? __might_sleep+0xe0/0xe0 [ 204.104952][ T8182] ? __lock_acquire+0x7d40/0x7d40 [ 204.110003][ T8182] should_fail_ex+0x39d/0x4d0 [ 204.114719][ T8182] should_failslab+0x9/0x20 [ 204.119255][ T8182] slab_pre_alloc_hook+0x59/0x310 [ 204.124320][ T8182] ? tomoyo_encode+0x28b/0x540 [ 204.129118][ T8182] ? tomoyo_encode+0x28b/0x540 [ 204.133910][ T8182] __kmem_cache_alloc_node+0x53/0x250 [ 204.139325][ T8182] ? tomoyo_encode+0x28b/0x540 [ 204.144121][ T8182] __kmalloc+0xa4/0x230 [ 204.148357][ T8182] tomoyo_encode+0x28b/0x540 [ 204.152974][ T8182] tomoyo_realpath_from_path+0x592/0x5d0 [ 204.158644][ T8182] tomoyo_path_number_perm+0x248/0x620 [ 204.164157][ T8182] ? tomoyo_path_number_perm+0x217/0x620 [ 204.169823][ T8182] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 204.175317][ T8182] ? ksys_write+0x1c4/0x260 [ 204.179880][ T8182] ? __fget_files+0x28/0x4b0 [ 204.184497][ T8182] ? __fget_files+0x28/0x4b0 [ 204.189127][ T8182] security_file_ioctl+0x70/0xa0 [ 204.194101][ T8182] __se_sys_ioctl+0x48/0x170 [ 204.198742][ T8182] do_syscall_64+0x55/0xa0 [ 204.203208][ T8182] ? clear_bhb_loop+0x40/0x90 [ 204.207916][ T8182] ? clear_bhb_loop+0x40/0x90 [ 204.212626][ T8182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.218547][ T8182] RIP: 0033:0x7f15d259acb9 [ 204.222985][ T8182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.242701][ T8182] RSP: 002b:00007f15d3484028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.251135][ T8182] RAX: ffffffffffffffda RBX: 00007f15d2815fa0 RCX: 00007f15d259acb9 [ 204.259123][ T8182] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 204.267116][ T8182] RBP: 00007f15d3484090 R08: 0000000000000000 R09: 0000000000000000 [ 204.275103][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.283095][ T8182] R13: 00007f15d2816038 R14: 00007f15d2815fa0 R15: 00007ffc57caf208 [ 204.291105][ T8182] [ 204.329719][ T8182] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.276643][ T8204] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 205.289815][ T8202] __nla_validate_parse: 20 callbacks suppressed [ 205.289843][ T8202] netlink: 830 bytes leftover after parsing attributes in process `syz.0.727'. [ 205.332064][ T8204] netlink: 5 bytes leftover after parsing attributes in process `syz.1.728'. [ 205.496013][ T8211] netlink: 'syz.3.729': attribute type 3 has an invalid length. [ 205.521634][ T8211] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 205.529325][ T8211] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.729'. [ 205.877037][ T8215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'. [ 205.917648][ T8215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'. [ 205.975007][ T8215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'. [ 206.024064][ T8215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'. [ 206.314785][ T8228] netlink: 'syz.1.735': attribute type 3 has an invalid length. [ 206.353293][ T8228] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.735'. [ 206.396541][ T8233] netlink: 'syz.3.738': attribute type 3 has an invalid length. [ 206.422850][ T8228] netlink: 44 bytes leftover after parsing attributes in process `syz.1.735'. [ 206.443582][ T8233] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 206.451383][ T8233] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.738'. [ 206.515997][ T8230] sock: sock_set_timeout: `syz.0.737' (pid 8230) tries to set negative timeout [ 207.198649][ T8248] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 207.520906][ T8260] netlink: 'syz.0.747': attribute type 3 has an invalid length. [ 207.547695][ T8260] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 207.885613][ T8265] sock: sock_set_timeout: `syz.1.749' (pid 8265) tries to set negative timeout [ 207.995223][ T8272] netlink: 'syz.0.752': attribute type 33 has an invalid length. [ 208.798088][ T8288] netlink: 'syz.3.756': attribute type 33 has an invalid length. [ 209.576747][ T8306] FAULT_INJECTION: forcing a failure. [ 209.576747][ T8306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.604263][ T8306] CPU: 0 PID: 8306 Comm: syz.0.762 Not tainted syzkaller #0 [ 209.611624][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.621707][ T8306] Call Trace: [ 209.625006][ T8306] [ 209.627973][ T8306] dump_stack_lvl+0x18c/0x250 [ 209.632691][ T8306] ? show_regs_print_info+0x20/0x20 [ 209.637913][ T8306] ? load_image+0x400/0x400 [ 209.642446][ T8306] ? __might_fault+0xaa/0x120 [ 209.647183][ T8306] ? __lock_acquire+0x7d40/0x7d40 [ 209.652232][ T8306] should_fail_ex+0x39d/0x4d0 [ 209.656946][ T8306] _copy_to_user+0x2f/0xa0 [ 209.661435][ T8306] bpf_test_finish+0x4e7/0x650 [ 209.666249][ T8306] ? convert___skb_to_skb+0x590/0x590 [ 209.671647][ T8306] ? convert_skb_to___skb+0x420/0x420 [ 209.677054][ T8306] ? slab_build_skb+0x25f/0x3f0 [ 209.682467][ T8306] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 209.687882][ T8306] ? cpu_online+0x60/0x60 [ 209.692237][ T8306] bpf_prog_test_run+0x321/0x390 [ 209.697205][ T8306] __sys_bpf+0x49d/0x890 [ 209.701482][ T8306] ? bpf_link_show_fdinfo+0x390/0x390 [ 209.706883][ T8306] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 209.713089][ T8306] __x64_sys_bpf+0x7c/0x90 [ 209.717548][ T8306] do_syscall_64+0x55/0xa0 [ 209.721999][ T8306] ? clear_bhb_loop+0x40/0x90 [ 209.726720][ T8306] ? clear_bhb_loop+0x40/0x90 [ 209.731434][ T8306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.737376][ T8306] RIP: 0033:0x7f261759acb9 [ 209.741837][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.761473][ T8306] RSP: 002b:00007f26183c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.769910][ T8306] RAX: ffffffffffffffda RBX: 00007f2617815fa0 RCX: 00007f261759acb9 [ 209.777985][ T8306] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 209.785975][ T8306] RBP: 00007f26183c3090 R08: 0000000000000000 R09: 0000000000000000 [ 209.793986][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.801980][ T8306] R13: 00007f2617816038 R14: 00007f2617815fa0 R15: 00007ffe44b81fb8 [ 209.809979][ T8306] [ 210.539548][ T8322] __nla_validate_parse: 18 callbacks suppressed [ 210.539580][ T8322] netlink: 60 bytes leftover after parsing attributes in process `syz.2.768'. [ 210.734612][ T8322] netlink: 60 bytes leftover after parsing attributes in process `syz.2.768'. [ 210.750376][ T8334] netlink: 830 bytes leftover after parsing attributes in process `syz.1.770'. [ 210.775928][ T8329] netlink: 60 bytes leftover after parsing attributes in process `syz.2.768'. [ 210.795462][ T8331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.768'. [ 211.050867][ T8340] validate_nla: 14 callbacks suppressed [ 211.050901][ T8340] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 211.076816][ T8340] netlink: 5 bytes leftover after parsing attributes in process `syz.2.773'. [ 211.220369][ T8347] netlink: 'syz.1.776': attribute type 33 has an invalid length. [ 211.229737][ T8347] netlink: 152 bytes leftover after parsing attributes in process `syz.1.776'. [ 211.441060][ T8342] netlink: 'syz.0.775': attribute type 2 has an invalid length. [ 211.713813][ T8350] netlink: 'syz.1.777': attribute type 29 has an invalid length. [ 211.728491][ T8350] netlink: 'syz.1.777': attribute type 29 has an invalid length. [ 211.753808][ T8350] netlink: 'syz.1.777': attribute type 29 has an invalid length. [ 212.194188][ T8361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.781'. [ 212.207320][ T8361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.781'. [ 212.336811][ T8366] netlink: 60 bytes leftover after parsing attributes in process `syz.2.781'. [ 212.379103][ T8367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.993530][ T8377] bridge0: entered promiscuous mode [ 213.000768][ T8377] bridge0: entered allmulticast mode [ 213.118018][ T8379] netlink: 'syz.2.787': attribute type 33 has an invalid length. [ 213.232228][ T8382] netlink: 'syz.0.788': attribute type 3 has an invalid length. [ 213.514760][ T8391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.539491][ T8408] bridge0: entered promiscuous mode [ 214.562578][ T8408] bridge0: entered allmulticast mode [ 214.659930][ T8412] netlink: 'syz.0.800': attribute type 3 has an invalid length. [ 214.800139][ T8417] netlink: 'syz.1.801': attribute type 33 has an invalid length. [ 215.016787][ T8422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.519783][ T8440] FAULT_INJECTION: forcing a failure. [ 215.519783][ T8440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.548899][ T8440] CPU: 1 PID: 8440 Comm: syz.2.810 Not tainted syzkaller #0 [ 215.556257][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.566357][ T8440] Call Trace: [ 215.569678][ T8440] [ 215.572658][ T8440] dump_stack_lvl+0x18c/0x250 [ 215.577399][ T8440] ? show_regs_print_info+0x20/0x20 [ 215.582654][ T8440] ? load_image+0x400/0x400 [ 215.587218][ T8440] ? __might_fault+0xaa/0x120 [ 215.591947][ T8440] should_fail_ex+0x39d/0x4d0 [ 215.596690][ T8440] copyin+0x1a/0x90 [ 215.600561][ T8440] _copy_from_iter+0x404/0x12e0 [ 215.605465][ T8440] ? copyin+0x70/0x90 [ 215.609511][ T8440] ? copyout_mc+0x70/0x70 [ 215.613900][ T8440] ? copyout_mc+0x70/0x70 [ 215.618290][ T8440] ? __virt_addr_valid+0x18c/0x540 [ 215.623459][ T8440] ? page_copy_sane+0x16a/0x270 [ 215.628365][ T8440] copy_page_from_iter+0x7b/0x100 [ 215.633447][ T8440] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 215.639338][ T8440] unix_stream_sendmsg+0x562/0xbf0 [ 215.644524][ T8440] ? unix_show_fdinfo+0x270/0x270 [ 215.649593][ T8440] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 215.656059][ T8440] ? __might_fault+0xaa/0x120 [ 215.660793][ T8440] ? aa_sock_msg_perm+0x94/0x150 [ 215.665798][ T8440] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.671129][ T8440] ? security_socket_sendmsg+0x80/0xa0 [ 215.676630][ T8440] ? unix_show_fdinfo+0x270/0x270 [ 215.681711][ T8440] ____sys_sendmsg+0x5ba/0x960 [ 215.686547][ T8440] ? __sys_sendmsg_sock+0x30/0x30 [ 215.691620][ T8440] ? __import_iovec+0x3fa/0x850 [ 215.696542][ T8440] ? import_iovec+0x73/0xa0 [ 215.701107][ T8440] ___sys_sendmsg+0x2a6/0x360 [ 215.705848][ T8440] ? __sys_sendmsg+0x2a0/0x2a0 [ 215.710718][ T8440] ? __lock_acquire+0x7d40/0x7d40 [ 215.715860][ T8440] __se_sys_sendmsg+0x1c2/0x2b0 [ 215.720765][ T8440] ? __x64_sys_sendmsg+0x80/0x80 [ 215.725787][ T8440] ? lockdep_hardirqs_on+0x98/0x150 [ 215.731044][ T8440] do_syscall_64+0x55/0xa0 [ 215.735504][ T8440] ? clear_bhb_loop+0x40/0x90 [ 215.740220][ T8440] ? clear_bhb_loop+0x40/0x90 [ 215.744932][ T8440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.750858][ T8440] RIP: 0033:0x7f24f479acb9 [ 215.755306][ T8440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.774946][ T8440] RSP: 002b:00007f24f5641028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.783393][ T8440] RAX: ffffffffffffffda RBX: 00007f24f4a15fa0 RCX: 00007f24f479acb9 [ 215.791385][ T8440] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000004 [ 215.799443][ T8440] RBP: 00007f24f5641090 R08: 0000000000000000 R09: 0000000000000000 [ 215.807449][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.815440][ T8440] R13: 00007f24f4a16038 R14: 00007f24f4a15fa0 R15: 00007fffbddf99f8 [ 215.823450][ T8440] [ 216.169319][ T8443] __nla_validate_parse: 11 callbacks suppressed [ 216.169384][ T8443] netlink: 830 bytes leftover after parsing attributes in process `syz.3.811'. [ 216.256024][ T8448] validate_nla: 1 callbacks suppressed [ 216.256057][ T8448] netlink: 'syz.1.814': attribute type 33 has an invalid length. [ 216.286458][ T8448] netlink: 152 bytes leftover after parsing attributes in process `syz.1.814'. [ 216.689513][ T8458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.330260][ T8463] netlink: 'syz.1.818': attribute type 2 has an invalid length. [ 217.449039][ T8473] netlink: 'syz.3.822': attribute type 3 has an invalid length. [ 217.498201][ T8473] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.822'. [ 217.809969][ T8478] netlink: 830 bytes leftover after parsing attributes in process `syz.0.824'. [ 217.976047][ T8480] netlink: 'syz.1.826': attribute type 33 has an invalid length. [ 217.987720][ T8480] netlink: 152 bytes leftover after parsing attributes in process `syz.1.826'. [ 218.283528][ T8487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.383393][ T8495] netlink: 'syz.2.838': attribute type 33 has an invalid length. [ 218.398900][ T8493] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 218.416351][ T8495] netlink: 152 bytes leftover after parsing attributes in process `syz.2.838'. [ 218.446586][ T8493] netlink: 5 bytes leftover after parsing attributes in process `syz.3.830'. [ 218.933212][ T8509] netlink: 'syz.3.833': attribute type 3 has an invalid length. [ 218.941030][ T8509] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.833'. [ 219.259752][ T8517] netlink: 830 bytes leftover after parsing attributes in process `syz.1.837'. [ 219.304495][ T8519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.839'. [ 219.357819][ T8521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.546841][ T8527] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 219.601437][ T8529] netlink: 'syz.2.843': attribute type 33 has an invalid length. [ 219.926640][ T8535] netlink: 'syz.0.845': attribute type 3 has an invalid length. [ 221.380575][ T8556] __nla_validate_parse: 8 callbacks suppressed [ 221.380593][ T8556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.851'. [ 221.406494][ T8559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.851'. [ 221.420097][ T8560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.851'. [ 221.497857][ T8565] netlink: 'syz.3.855': attribute type 3 has an invalid length. [ 221.507610][ T8565] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.855'. [ 221.572579][ T8563] netlink: 'syz.0.854': attribute type 3 has an invalid length. [ 221.580295][ T8563] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.854'. [ 221.661940][ T8571] netlink: 'syz.2.856': attribute type 33 has an invalid length. [ 221.686768][ T8571] netlink: 152 bytes leftover after parsing attributes in process `syz.2.856'. [ 222.037962][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.864'. [ 222.078797][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.864'. [ 222.144152][ T8588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.864'. [ 222.207316][ T8585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.235104][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.864'. [ 222.395641][ T8592] netlink: 'syz.0.866': attribute type 3 has an invalid length. [ 222.744319][ T8603] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 222.969061][ T8613] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 223.344351][ T8622] netlink: 'syz.1.877': attribute type 3 has an invalid length. [ 223.833840][ T8635] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 223.911209][ T8637] FAULT_INJECTION: forcing a failure. [ 223.911209][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 223.939021][ T8637] CPU: 0 PID: 8637 Comm: syz.3.884 Not tainted syzkaller #0 [ 223.946389][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.956459][ T8637] Call Trace: [ 223.959767][ T8637] [ 223.962718][ T8637] dump_stack_lvl+0x18c/0x250 [ 223.967427][ T8637] ? show_regs_print_info+0x20/0x20 [ 223.972649][ T8637] ? load_image+0x400/0x400 [ 223.977186][ T8637] should_fail_ex+0x39d/0x4d0 [ 223.981885][ T8637] should_failslab+0x9/0x20 [ 223.986428][ T8637] slab_pre_alloc_hook+0x59/0x310 [ 223.991479][ T8637] kmem_cache_alloc+0x5a/0x2d0 [ 223.996281][ T8637] ? skb_clone+0x1eb/0x370 [ 224.000749][ T8637] skb_clone+0x1eb/0x370 [ 224.005017][ T8637] __netlink_deliver_tap+0x41c/0x830 [ 224.010349][ T8637] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.015572][ T8637] netlink_deliver_tap+0x19c/0x1b0 [ 224.020710][ T8637] netlink_dump+0x94b/0xe50 [ 224.025236][ T8637] ? netlink_lookup+0x200/0x200 [ 224.030113][ T8637] ? ns_capable+0x89/0xe0 [ 224.034464][ T8637] ? __inet_diag_dump_start+0x886/0x9f0 [ 224.040030][ T8637] __netlink_dump_start+0x5f1/0x810 [ 224.045263][ T8637] inet_diag_rcv_msg_compat+0x215/0x440 [ 224.050836][ T8637] ? __inet_diag_dump+0x380/0x380 [ 224.055893][ T8637] ? sock_diag_rcv_msg+0xd1/0x600 [ 224.060952][ T8637] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 224.066692][ T8637] ? inet_diag_dump_start_compat+0x20/0x20 [ 224.072522][ T8637] ? inet_diag_dump+0x50/0x50 [ 224.077237][ T8637] ? __inet_diag_dump+0x380/0x380 [ 224.082285][ T8637] sock_diag_rcv_msg+0x3d8/0x600 [ 224.087255][ T8637] netlink_rcv_skb+0x241/0x4d0 [ 224.092045][ T8637] ? sock_diag_bind+0xb0/0xb0 [ 224.096777][ T8637] ? netlink_ack+0x1180/0x1180 [ 224.101572][ T8637] ? __lock_acquire+0x7d40/0x7d40 [ 224.106618][ T8637] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.111852][ T8637] sock_diag_rcv+0x2a/0x40 [ 224.116319][ T8637] netlink_unicast+0x751/0x8d0 [ 224.121136][ T8637] netlink_sendmsg+0x8d0/0xbf0 [ 224.125928][ T8637] ? netlink_getsockopt+0x590/0x590 [ 224.131153][ T8637] ? aa_sock_msg_perm+0x94/0x150 [ 224.136122][ T8637] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 224.141429][ T8637] ? security_socket_sendmsg+0x80/0xa0 [ 224.146901][ T8637] ? netlink_getsockopt+0x590/0x590 [ 224.152122][ T8637] ____sys_sendmsg+0x5ba/0x960 [ 224.156904][ T8637] ? __asan_memset+0x22/0x40 [ 224.161511][ T8637] ? __sys_sendmsg_sock+0x30/0x30 [ 224.166552][ T8637] ? __import_iovec+0x5f2/0x850 [ 224.171422][ T8637] ? import_iovec+0x73/0xa0 [ 224.175947][ T8637] ___sys_sendmsg+0x2a6/0x360 [ 224.180648][ T8637] ? get_pid_task+0x20/0x1e0 [ 224.185283][ T8637] ? __sys_sendmsg+0x2a0/0x2a0 [ 224.190083][ T8637] ? __lock_acquire+0x7d40/0x7d40 [ 224.195169][ T8637] __se_sys_sendmsg+0x1c2/0x2b0 [ 224.200069][ T8637] ? __x64_sys_sendmsg+0x80/0x80 [ 224.205046][ T8637] ? lockdep_hardirqs_on+0x98/0x150 [ 224.210272][ T8637] do_syscall_64+0x55/0xa0 [ 224.214711][ T8637] ? clear_bhb_loop+0x40/0x90 [ 224.219410][ T8637] ? clear_bhb_loop+0x40/0x90 [ 224.224116][ T8637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.230029][ T8637] RIP: 0033:0x7f15d259acb9 [ 224.234456][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.254076][ T8637] RSP: 002b:00007f15d3484028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.262524][ T8637] RAX: ffffffffffffffda RBX: 00007f15d2815fa0 RCX: 00007f15d259acb9 [ 224.270523][ T8637] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 224.278524][ T8637] RBP: 00007f15d3484090 R08: 0000000000000000 R09: 0000000000000000 [ 224.286514][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.294538][ T8637] R13: 00007f15d2816038 R14: 00007f15d2815fa0 R15: 00007ffc57caf208 [ 224.302570][ T8637] [ 224.414152][ T8641] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 224.446520][ T8639] netlink: 'syz.0.885': attribute type 2 has an invalid length. [ 224.580086][ T8648] netlink: 'syz.1.888': attribute type 3 has an invalid length. [ 225.058812][ T8665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.134656][ T8668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.324705][ T8674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.136910][ T8690] `: Port device wlan1 added [ 227.330032][ T8696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.376791][ T8701] __nla_validate_parse: 22 callbacks suppressed [ 227.376828][ T8701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.909'. [ 227.394774][ T8701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.909'. [ 227.449265][ T8701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.909'. [ 227.479096][ T8701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.909'. [ 227.570825][ T8703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.595026][ T8706] validate_nla: 1 callbacks suppressed [ 227.595041][ T8706] netlink: 'syz.3.911': attribute type 19 has an invalid length. [ 227.611781][ T8706] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.911'. [ 227.860045][ T8714] netlink: 763 bytes leftover after parsing attributes in process `syz.3.914'. [ 228.077124][ T8716] netlink: 830 bytes leftover after parsing attributes in process `syz.0.916'. [ 228.308701][ T8732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.920'. [ 228.335589][ T8732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.920'. [ 228.356525][ T8732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.920'. [ 228.496160][ T8734] netlink: 'syz.3.922': attribute type 3 has an invalid length. [ 228.588474][ T8738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.976757][ T8749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.553189][ T8766] netlink: 'syz.0.933': attribute type 3 has an invalid length. [ 229.787950][ T8775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.933623][ T8779] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 229.986256][ T8779] `: Port device wlan1 added [ 230.066503][ T8783] veth1_virt_wifi: entered allmulticast mode [ 230.697385][ T8800] netlink: 'syz.1.948': attribute type 3 has an invalid length. [ 231.053446][ T8804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.496706][ T8820] netlink: 'syz.2.958': attribute type 3 has an invalid length. [ 231.879959][ T8828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.052678][ T8835] FAULT_INJECTION: forcing a failure. [ 232.052678][ T8835] name failslab, interval 1, probability 0, space 0, times 0 [ 232.093598][ T8835] CPU: 0 PID: 8835 Comm: syz.2.966 Not tainted syzkaller #0 [ 232.100959][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.111046][ T8835] Call Trace: [ 232.114369][ T8835] [ 232.117364][ T8835] dump_stack_lvl+0x18c/0x250 [ 232.122082][ T8835] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.128291][ T8835] ? show_regs_print_info+0x20/0x20 [ 232.133534][ T8835] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.139752][ T8835] should_fail_ex+0x39d/0x4d0 [ 232.144500][ T8835] should_failslab+0x9/0x20 [ 232.149050][ T8835] slab_pre_alloc_hook+0x59/0x310 [ 232.154163][ T8835] kmem_cache_alloc+0x5a/0x2d0 [ 232.158985][ T8835] ? skb_clone+0x1eb/0x370 [ 232.163461][ T8835] skb_clone+0x1eb/0x370 [ 232.167754][ T8835] __netlink_deliver_tap+0x41c/0x830 [ 232.173107][ T8835] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.178436][ T8835] netlink_deliver_tap+0x19c/0x1b0 [ 232.183656][ T8835] netlink_dump+0x94b/0xe50 [ 232.188234][ T8835] ? netlink_lookup+0x200/0x200 [ 232.193143][ T8835] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.199367][ T8835] __netlink_dump_start+0x5f1/0x810 [ 232.204621][ T8835] xsk_diag_handler_dump+0x1a1/0x240 [ 232.209961][ T8835] ? __lock_acquire+0x7d40/0x7d40 [ 232.215036][ T8835] ? xp_dma_sync_for_device_slow+0x50/0x50 [ 232.220900][ T8835] ? xsk_diag_handler_dump+0x240/0x240 [ 232.226424][ T8835] ? sock_diag_lock_handler+0x19/0x280 [ 232.232022][ T8835] ? sock_diag_lock_handler+0x19/0x280 [ 232.237535][ T8835] ? xp_dma_sync_for_device_slow+0x50/0x50 [ 232.243398][ T8835] sock_diag_rcv_msg+0x3d8/0x600 [ 232.248399][ T8835] netlink_rcv_skb+0x241/0x4d0 [ 232.253212][ T8835] ? sock_diag_bind+0xb0/0xb0 [ 232.257942][ T8835] ? netlink_ack+0x1180/0x1180 [ 232.262757][ T8835] ? __lock_acquire+0x7d40/0x7d40 [ 232.267859][ T8835] ? __rcu_read_unlock+0x7c/0xd0 [ 232.272856][ T8835] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.278108][ T8835] sock_diag_rcv+0x2a/0x40 [ 232.282613][ T8835] netlink_unicast+0x751/0x8d0 [ 232.287443][ T8835] netlink_sendmsg+0x8d0/0xbf0 [ 232.292260][ T8835] ? netlink_getsockopt+0x590/0x590 [ 232.297576][ T8835] ? aa_sock_msg_perm+0x94/0x150 [ 232.302548][ T8835] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 232.307865][ T8835] ? security_socket_sendmsg+0x80/0xa0 [ 232.313355][ T8835] ? netlink_getsockopt+0x590/0x590 [ 232.318602][ T8835] ____sys_sendmsg+0x5ba/0x960 [ 232.323419][ T8835] ? __asan_memset+0x22/0x40 [ 232.328061][ T8835] ? __sys_sendmsg_sock+0x30/0x30 [ 232.333119][ T8835] ? __import_iovec+0x5f2/0x850 [ 232.338014][ T8835] ? import_iovec+0x73/0xa0 [ 232.342582][ T8835] ___sys_sendmsg+0x2a6/0x360 [ 232.347299][ T8835] ? __sys_sendmsg+0x2a0/0x2a0 [ 232.352117][ T8835] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 232.358417][ T8835] __se_sys_sendmsg+0x1c2/0x2b0 [ 232.363301][ T8835] ? __x64_sys_sendmsg+0x80/0x80 [ 232.368292][ T8835] ? lockdep_hardirqs_on+0x98/0x150 [ 232.373525][ T8835] do_syscall_64+0x55/0xa0 [ 232.378144][ T8835] ? clear_bhb_loop+0x40/0x90 [ 232.382857][ T8835] ? clear_bhb_loop+0x40/0x90 [ 232.387569][ T8835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.393498][ T8835] RIP: 0033:0x7f24f479acb9 [ 232.397949][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.417669][ T8835] RSP: 002b:00007f24f5641028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.426109][ T8835] RAX: ffffffffffffffda RBX: 00007f24f4a15fa0 RCX: 00007f24f479acb9 [ 232.434098][ T8835] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 232.442088][ T8835] RBP: 00007f24f5641090 R08: 0000000000000000 R09: 0000000000000000 [ 232.450159][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.458167][ T8835] R13: 00007f24f4a16038 R14: 00007f24f4a15fa0 R15: 00007fffbddf99f8 [ 232.466180][ T8835] [ 232.624652][ T8845] netlink: 'syz.1.969': attribute type 3 has an invalid length. [ 232.634351][ T8845] __nla_validate_parse: 12 callbacks suppressed [ 232.634365][ T8845] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.969'. [ 232.925182][ T8856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.967364][ T8852] netlink: 830 bytes leftover after parsing attributes in process `syz.1.972'. [ 233.167535][ T8863] netlink: 830 bytes leftover after parsing attributes in process `syz.3.976'. [ 233.358515][ T8873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.978'. [ 233.369221][ T8874] netlink: 'syz.0.980': attribute type 3 has an invalid length. [ 233.381997][ T8873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.978'. [ 233.410625][ T8874] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.980'. [ 233.440942][ T8873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.978'. [ 233.462536][ T8873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.978'. [ 233.672979][ T8878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.990'. [ 233.719433][ T8884] netlink: 'syz.2.984': attribute type 3 has an invalid length. [ 233.750537][ T8878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.990'. [ 233.907609][ T8888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.634565][ T8905] netlink: 'syz.3.992': attribute type 11 has an invalid length. [ 234.865264][ T8911] netlink: 'syz.3.995': attribute type 3 has an invalid length. [ 235.024271][ T8915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.803937][ T8935] netlink: 'syz.0.1006': attribute type 3 has an invalid length. [ 236.124880][ T8949] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 236.146054][ T8949] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 236.495962][ T8961] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 236.738041][ T8964] netlink: 'syz.2.1018': attribute type 3 has an invalid length. [ 237.761388][ T8992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.919944][ T8997] __nla_validate_parse: 24 callbacks suppressed [ 237.919960][ T8997] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1033'. [ 237.975704][ T8999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1034'. [ 238.018681][ T8999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1034'. [ 238.047505][ T8999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1034'. [ 238.093384][ T8999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1034'. [ 238.405336][ T9014] validate_nla: 1 callbacks suppressed [ 238.405352][ T9014] netlink: 'syz.2.1040': attribute type 3 has an invalid length. [ 238.462723][ T9014] netlink: 61155 bytes leftover after parsing attributes in process `syz.2.1040'. [ 238.999184][ T9025] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1044'. [ 239.050891][ T9029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1046'. [ 239.072300][ T9029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1046'. [ 239.124981][ T9029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1046'. [ 239.520247][ T9040] netlink: 'syz.0.1051': attribute type 3 has an invalid length. [ 239.746527][ T9044] [ 239.748928][ T9044] ============================================ [ 239.755128][ T9044] WARNING: possible recursive locking detected [ 239.761335][ T9044] syzkaller #0 Not tainted [ 239.765783][ T9044] -------------------------------------------- [ 239.771947][ T9044] syz.2.1053/9044 is trying to acquire lock: [ 239.777951][ T9044] ffff88805f30fa38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 239.786921][ T9044] [ 239.786921][ T9044] but task is already holding lock: [ 239.794669][ T9044] ffff88807a84ea38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xcd/0xea0 [ 239.803615][ T9044] [ 239.803615][ T9044] other info that might help us debug this: [ 239.811723][ T9044] Possible unsafe locking scenario: [ 239.811723][ T9044] [ 239.819203][ T9044] CPU0 [ 239.822512][ T9044] ---- [ 239.825841][ T9044] lock(&trie->lock); [ 239.829946][ T9044] lock(&trie->lock); [ 239.834097][ T9044] [ 239.834097][ T9044] *** DEADLOCK *** [ 239.834097][ T9044] [ 239.842361][ T9044] May be due to missing lock nesting notation [ 239.842361][ T9044] [ 239.850709][ T9044] 3 locks held by syz.2.1053/9044: [ 239.855931][ T9044] #0: ffffffff8d12ffe0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x41d/0x720 [ 239.865929][ T9044] #1: ffff88807a84ea38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xcd/0xea0 [ 239.875311][ T9044] #2: ffffffff8d12ffe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xe6/0x3e0 [ 239.884711][ T9044] [ 239.884711][ T9044] stack backtrace: [ 239.890633][ T9044] CPU: 1 PID: 9044 Comm: syz.2.1053 Not tainted syzkaller #0 [ 239.898053][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.908148][ T9044] Call Trace: [ 239.911475][ T9044] [ 239.914481][ T9044] dump_stack_lvl+0x18c/0x250 [ 239.919245][ T9044] ? show_regs_print_info+0x20/0x20 [ 239.924523][ T9044] ? print_deadlock_bug+0x435/0x5d0 [ 239.929775][ T9044] __lock_acquire+0x5dbc/0x7d40 [ 239.934673][ T9044] ? copy_from_kernel_nofault+0x168/0x310 [ 239.940456][ T9044] ? mark_lock+0x94/0x320 [ 239.944829][ T9044] ? ex_get_fixup_type+0x70/0x70 [ 239.949818][ T9044] ? verify_lock_unused+0x140/0x140 [ 239.955089][ T9044] ? __lock_acquire+0x1273/0x7d40 [ 239.960188][ T9044] lock_acquire+0x19e/0x420 [ 239.964735][ T9044] ? trie_delete_elem+0x96/0x6a0 [ 239.969721][ T9044] ? spurious_kernel_fault_check+0x130/0x130 [ 239.975757][ T9044] ? read_lock_is_recursive+0x20/0x20 [ 239.981254][ T9044] ? spurious_kernel_fault+0x11d/0x510 [ 239.986770][ T9044] ? exc_page_fault+0x8c/0x100 [ 239.991574][ T9044] _raw_spin_lock_irqsave+0xb4/0x100 [ 239.996929][ T9044] ? trie_delete_elem+0x96/0x6a0 [ 240.001910][ T9044] ? _raw_spin_lock+0x40/0x40 [ 240.006636][ T9044] trie_delete_elem+0x96/0x6a0 [ 240.011460][ T9044] ? __asan_memset+0x22/0x40 [ 240.016104][ T9044] ? bpf_probe_read_compat+0x14f/0x170 [ 240.021624][ T9044] bpf_prog_9dc0996bccb7470f+0x68/0x6c [ 240.027140][ T9044] bpf_trace_run2+0x1d9/0x3e0 [ 240.031861][ T9044] ? bpf_trace_run2+0xe6/0x3e0 [ 240.036671][ T9044] ? bpf_trace_run1+0x3d0/0x3d0 [ 240.041559][ T9044] ? trie_update_elem+0x6cf/0xea0 [ 240.046631][ T9044] ? percpu_ref_put+0x17e/0x230 [ 240.051520][ T9044] ? trie_update_elem+0x6cf/0xea0 [ 240.056602][ T9044] kfree+0xf4/0x190 [ 240.060453][ T9044] trie_update_elem+0x6cf/0xea0 [ 240.065353][ T9044] bpf_map_update_value+0x660/0x720 [ 240.070628][ T9044] map_update_elem+0x57b/0x700 [ 240.075441][ T9044] __sys_bpf+0x6b5/0x890 [ 240.079732][ T9044] ? bpf_link_show_fdinfo+0x390/0x390 [ 240.085158][ T9044] ? lock_chain_count+0x20/0x20 [ 240.090069][ T9044] __x64_sys_bpf+0x7c/0x90 [ 240.094537][ T9044] do_syscall_64+0x55/0xa0 [ 240.099004][ T9044] ? clear_bhb_loop+0x40/0x90 [ 240.103769][ T9044] ? clear_bhb_loop+0x40/0x90 [ 240.108491][ T9044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.114457][ T9044] RIP: 0033:0x7f24f479acb9 [ 240.118918][ T9044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.138816][ T9044] RSP: 002b:00007f24f5620028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.147277][ T9044] RAX: ffffffffffffffda RBX: 00007f24f4a16090 RCX: 00007f24f479acb9 [ 240.155286][ T9044] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 240.163398][ T9044] RBP: 00007f24f4808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 240.171403][ T9044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.179408][ T9044] R13: 00007f24f4a16128 R14: 00007f24f4a16090 R15: 00007fffbddf99f8 [ 240.187435][ T9044]