last executing test programs: 3.805463569s ago: executing program 0 (id=2692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000018000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x8, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) sendmsg$inet(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4) 3.80360048s ago: executing program 1 (id=2694): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{0x0, 0x21}], 0x1}, 0x4804) 3.710676374s ago: executing program 3 (id=2695): socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000005000000000000000000000085000000750000000000003be8c3392a660a59a429250b9d4a038ea32d00000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) 3.655688157s ago: executing program 2 (id=2696): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x50, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb0}, 0x10}, 0x94) 3.641341628s ago: executing program 0 (id=2697): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 3.532967024s ago: executing program 1 (id=2698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 3.393919161s ago: executing program 3 (id=2699): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x1}}, 0x80, 0x0, 0xfffffe08}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4002000000000041}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) 2.764390074s ago: executing program 2 (id=2700): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) r0 = socket$kcm(0x29, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xc6, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0xf884, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001880)="2e00000010008188e6b66aa73772ccb21ba1f84848000000de140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000800) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000001"], 0x0, 0x3e, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x5421, 0x604000000000000) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) 2.526888617s ago: executing program 1 (id=2701): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.521397077s ago: executing program 0 (id=2702): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x80, 0x9, 0xc, 0x5, 0x0, 0x0, 0x3, 0x400, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x12ab80, 0x8001}, 0x80, 0x400, 0x10, 0x0, 0x8, 0xa, 0x6, 0x0, 0x9000, 0x0, 0x100000001}, 0xffffffffffffffff, 0x9, r3, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, 0x0, 0x8040) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x4) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r7], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r1, 0xa, 0x2028}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0xf9, 0x3, 0x0, 0x0, 0x0, 0x62af, 0x62f02, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={0x0, 0x4}, 0x110, 0xfffffffffffffff0, 0x4b2, 0x5, 0x1000, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.390145734s ago: executing program 2 (id=2703): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f00000000c0), 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000002000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x83, &(0x7f0000000000), 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51", 0x49}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x2, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100000001, 0x100000000000001}, 0x13a1a, 0x2, 0xfffffffe, 0x4, 0x0, 0x4b, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[], 0xfdef) 1.470654632s ago: executing program 0 (id=2704): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000003c9500"/20, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x50, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb0}, 0x10}, 0x94) 1.441081984s ago: executing program 1 (id=2705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000018000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x8, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, 0x0, &(0x7f00000002c0)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) sendmsg$inet(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4) 1.414478596s ago: executing program 2 (id=2706): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 1.32517356s ago: executing program 3 (id=2707): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)='G', 0x1}], 0x1}, 0x20000000) sendmsg(r0, &(0x7f0000002cc0)={&(0x7f00000001c0)=@llc={0x1a, 0x0, 0xff, 0x3, 0xff, 0x3, @local}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000002c0)="39470edfb5f55e140afc94e44bb5bab00b0dcfeacf271efc670b81bdaec3565d37da78556e8ec6429fc04d5bb4ba5aed68716382a8e077a103f7c64d11e7084b9da33222ccbbf6ff588482d68ac96c8dd993429b5e59048549d7a802c69377ebab208f478771e7735beaac4fe5110a88f807aef6d0d7bca548cbc61a05807d68c5c9fc1d7c57928053fb", 0x8a}, {&(0x7f0000000380)="569f5682dfb26eb3be86df9ee4b69c106719c27d404441b1167ed7aca9ae4adcdf5d4aa690da9fc591d754e13a0a74ceb881383ae28bd6677c010387c6751a546b", 0x41}, {0x0}, {0x0}], 0x4, &(0x7f0000001a40)=[{0x40, 0x118, 0x0, "b984a8dfbeba90d1ea68b50778098d8db2a3fd1629e992913099120e9c18e55fd1bbf2b296b11b2a0f5c"}, {0x28, 0x0, 0x5, "8cd9943c4eaad9e78f8832b5b605645545a497e07852af"}, {0x1010, 0xff, 0x3, "b0f8cbf0e4c7a4b675fce5b7b847c9e3819183ba321ebaad56b4bca3a3fb9259d7f7e1f74e2ddb6058b90367a4a01357b9c54bc9f2df0a6d84ab6e96eae37c5d2d41d963c3ef472241d7091a0369bc16e40005d04bb2a1df5999b9d5091debb2fbfe2dcb1c9ddbed70d4a4a3ae563c4f371d1691453fb93194f2f0c6b3453d99063f1812f24cdbd589876f5da80dafd3eb60e86c55f447d8743e979b57f093751e26ae01543d38cc07f709e4985c52fc603fc0c3889ea17e517c9a97a8b252a2efbe2d2070b9b93624bcf582c72c49f8f664bb11abe2aaf820a888a597959ca1164d4285d81fab8a6c68ebf3a791d2f73b32a597fafd11ee279b10b8a83dcc219b5809c388b356a7f52cb8fba04b7f8ec3fa35bd91d3df08d64bfc9a14553656dc219d92d66111f555169d71552a5bded77cb9301a41d09b80cd49a452f70bd042305eb13804b1c1b9a76b4ea06a8c04694e94577a40e067f1bf659ef5f3c75fb270500ea52633c3c177d420ccbcfc3d5c331dfbbfc8fdc3e6ffbc96b4cfee2818c1392f8b856f4a0279ef5476cec4a934e32ab8cba78e9ef0abc1b595e576457cbf2231d06a60b18813c3786a08aa61941afe8611999df4c52a586866c1d289bc0fabd8f59ef638ee9226ee712a6a801252e661c34dae43a93bbf79a6f539ebb665c62f554877fe40e9c0b814899ebce0ea58e13646770636824e9c256267d97f89f90cf80b1484637ddc3a722de6abdf55e8dbadf0685d20ffba46ad444996b7ad8dc6ee2be5eea4ef305c6bcf47e8ed8d3cc8a1322bfa33a66a42b16cb7357213cb640901d059ce36834f09a83cb06723a9b160787a772785805aac4a8c3cfc353e791f1ef75663d6761de5bfd748f0362a832c5fd38a777e1b771c5e16d3353d2b6b289b28567dea676137c727a8ed638a2b0f95f2f3f6700fda38f22bf1eb0e47eea813cacf75fac6c51f52fc5b4681906ee4724aba4b42e9cd9656bba55fc2e51b23ec870ec96ace06bea3110aa7d2a0f017afd08b2adf59da33aec470c02a64d9ae9f2238cb1898688656c9244c9fd21c239c20eb3dd88517a8a8febce28eecad1f6f137efd4066e7f9785fc8183f4c81aa9a8a6500fd1484edc4d0d5690d75589466268d1915818172f73c3ffa72be38a9992406972d95c8f108705e36301214e74cbc97621e9912d38363f36718abc6611beff7f4deee2c8dd5c9d70871e63164b61f70a4df8120a52bd8503732f3d04dff27cea160708a731c15b3698ec800e53e5529a014ef70a1783ded50ee6d45adf936a923c68eba5842986ad84c14c22fc057ac9a61bfaf45c4f7953f7f66c12f887abb8fdb98bbb8e6b2aecb9690359418350b311f63b58a929417d97dbda5e320af6e0e850182d6accb29cce1022b7587fad2051933cfa8f758f954eae330813c3d13e38ccd2e4efc9c45e46fd0a387844ea9ff0050f020520992d7e114fd46bc64d9a956a8cda9cb011bd7c4174220a1d278f827eb86af5744e227506f39a543aad0c8d98f2877ace2f3a5c1a11480209764ef57e5aa518fc451488e11495b5f53f319b1bbbf753b5de37c6024a4d1759f5275d01961597480a92df04d9322cd13406f5e252f65eec190fdc4f9e1fb33edccbed2bcdc5abb050241a6566a33103888cf0a56a1dc59adaf011c5376467d5204dfa616976294f3008d82fe753baa387f311bbc6bfad100f4ca7ef886e026dfdd9205f97d7a8f2fa3e4f619bc9568a2ac894d967f14a066c95404e9e6410c772c5875e6384afd55b98d560d12c1687af14315f46bc2d3e943089bd88c434b0cb30daa51ec804a57e2c774ddb415d13f99ebe8cee746dbf86955bdfc37e9cdcb2d44785d6770bad5a8ee78b52ff2f02dfd5752011f3474c8050d8c291dd8c87c75e86142157e40d12f9278dec5b1a10cd43c746e8e524f4ca6df343c30b96fde51338098b437d4037622c9e1ce3f5cdb9f508a5506252949eab6a349e2fa485a2d56f0e09826a22ebc03bcfda27a1f3985f9539baee5ca193b3254bb3db7efa89aa6691d2a25404c15c7ade3b491367546e3ced3a46d2b6cfb7173b4632c5a1bdc5fb33c6297d3213726bd4e458507f5803e03906c9a90439931adf7fffbea9143c179bd38f8518eb6b8c14996df78b59af3e6303f7be2672e05a2193dd31814155203c53930ba6829c26f5d0715bd079b8ea6650ad333f9237957aa71cc4add71b84f9d5879daf3d1e61263df58993cd9b245fb33143ce4a28af1a32bb6edc332168b22a9178d6d1deff0bcaa5916db6002b68f90111b86b59e631b664aff4a0bd58d648ee05be22488f33282ed1d4887a7dc4d417f38f0db3a3a0c017011d4d4c63c10055e6a0c713a25dcef26a4192206e51957440996d37ea4d07dc3128429dcdffdec3ea91c62ca449e169c0ae2c14c612892658223c875ec52b52a3189eb17fc2f2c18edd49aecbf07d630409b8a3b84e2a15159631ffc209f497873d4b353fbe0ea279f93853f87182a0f3372614e171a9a91a60190d30b389014327d94410a7e92d46ee3f5b0031854e70b9746300f6fbf0b30ae33a7bbf53e2ef49b9aa08724e09a02d6de1a931440da6ff766be4fcfb2f8dfa347d6d0f9a4ebcfc6944f997d453169f572f89703659331de07480bf6e47d00d076b8c87d00f665cae90a54a310da69fd4d2a7c183138899936f3a374aa6ad8c537e1842b1b50b94a8c000543befb55e1df53f06afef29d0f2b26c85c4579276f19fe6443b5b7a21a028348fa97971538284c5c6a821fcfe6c19d4b6d503c8b50fb97067557857a5b1642e4165f6669f8469157bb911105d0da756d03545662d88b3e35a1021e8a6df17b1b1d09447f1666dbf9c21969b2f9ce07efa9c5b540dac6d9fac4cf1ab7ce19ca6b413fdadebbc93db6bfcac78a79606214afebbe41695469646744af03e8f6f96c7106932d68d5f0f6017b462375da9e31f4be70dd9c078c1192102b6bb2b8e07c87c70387965c091f67d81ca16aba7b7fd9f8289997fb1412d4d67da847310a0d44279ee62a92e516d092befe015990705e7743d48d76a5d5eee57c15fa528591fcee855daaac4a446483b58c92fdd1fb3957fae0f86bd1f71b21ecb5d026b6487273d2e7445f0aba0f9dcb93031cb813d90cb31dcbd78c68c3b48169dbbc4e02da4eac1fafd8efc9886374ce0203f28f259698574433819d592ba3e5d99717857361bf62d313b11b24c7a738ad74d694726112da53940bac77862beddbd5ad05dbe76ed1a3a40a781161dafc791a7bf3fda7c2fea731b58f6be9fc5175905c9241c8d993db5514703a97854a8e237bdc0ec260f74c64f5903f79ef1ad7c9d57e1b1b5d0362db8ea43ca1449ecc00d0fa16196d0417696742b07b0b9935abc4fa12ad670b8e47ff2c67bce215ee774079cd50584d19d24eda55ff865999a2e0b450f87a19b2a709ba15c854737cb8a15443f5ce29a5807c43e950537b21e2974f416ac0ef52f003d55caf53cabc1831ad2def74a25dfd2887bb0603967d0d705c23b475b06bf553a499fb3d1ba0cf60c3ad44277157915d1ae5d91cbf5a0208354e21ec79369723ec9c4bc9b211005f73caed882f7cd177f4d0db6ac13a31bdd02c0a764b039ff1762e965612ae79211b551872becc3aaa7fcf97dc3613bbff91526410ba45388870207cefcc2beafe60e7972ab21e198bb6735922f33b093e98e55242765d285eb8a9a92ce8e8deb87e44d15c37c93cd65374565912b7976c113af1f729ce5420270d780684fa98c074e6d0eed060f7ac667116bfcb0ce8e4b280607dc0220ac84f569b23fb3437d3d573c1d616203eb99cca4133072c5c35291c477c6585afa0e31c06f1bd359c6170486a0357ea6703d8acd9579afcc72676d5ccd59e354313f919790404ef0d7dced36688022710cb41891510386d25605db232a2d11ea1d5c29d9a66afbc2cfe428c4802e4e5088e3f0e88019ad8c848d1e69dd4cc8e868c87929c6f6dddf24496dcdf2741238f07b42ab00031cffd7bfb6901372297bb0433e34465df39054b2428eabb54eec6d6e29cc462c964427071c1a6fafdc5d034af7d1a91d067129eb1faf82d950a69d5d53ed59607be96e49466b2a3ffdbd4b4e8b54e53d22d338a69b9fcef9f5a83e48b1109c97b15572a013cbf63c9267568e6fdf6614dee88c5f375e057c925179a08c945b6fbc409b5eff0d0c439f2afe3f53e0edf0007fc564b438a4c94cfecf1505f27a02768fa96741daf75929fe9946a948eef46123d40f3c62d19ef71831d68f8a0d39ea6d0c2cec74e803baa31cbe10ade898cf10f7aa452805b47519ae5bf13f1168791537c3fac4d3754d5e9ddebee6153beb2097676c15a3f32c9b60d478d9532ec7b4d4f684a529093377733a1af67cba00030c1284091738eb3f5d6ea0cff03c0e2423a99461464f2ec12b3732d667673cac4b53b5e4ad577cf3dc5058be8dbcb0124e2cbbb70443035fcdf046b94e84581dfb239acd9716f3a8654847f9284668e2dc4dccdc9b634d8e2f4050800d6f46613b71199667281e3b22bdb4020e99d572d20ab46b756b5f283d044b1f52d9eda7c88f9c04d088e75c903574c97219797730e903c3bb31ae8ef14ffc866ac9ac0286e7c440b80d6894b4f05815459fb2ff6efc15343ee3bf939d273041b9b07d579a5358f9d64a17964cd95223de5b5e9263897eccfe6e0f6f17e02c504ae4c24f3c3c4a9b0a422bcd8c189c546fb4f85d87f4b4297f97575ddaf27c1929921faf81c23cfd255b8a402b8bdb6c0a039c6618d735ae262913089b7748473aec0ede084c7e148f94afa7b51c1fc2f004e3b12969cd8331664fd5cc457a1fa56b8be46bbbfabe3b267bf3db00ab46cc6b742fcdb1c3be4fb092b3fb937c9e571be6cd951edc7891ea5fbaec591c96aca3a37d78578b8946437521861a9f5d1f051b0f6df1ba3734d611fc7590e1948fdec35be10eeac634de4622ab1b8a5a06a4fca21ddc78d2cda0d9ecd7b250892e2c1f1ea2aab3ca7d5a74cf2324dfce3a24883f4ea64a1aa0c145394429bb9ba1760108b68960654d757505c5a0ca4023eedb23f717b213863b5cde842de2a652c1646ba67e1741f42430c50435618b48d0d8dc6cc45785b866af89346a8c7943040f1bcc7e4714f0dffea6fe3c39b404d91484106dff4b62ab42c1648ca659bfb401369203114199dce33d866402250edb357b28957f61866e01b0ba452ecd4e7d1060eae05113c76e9def3de6072800cc6e704251badae73aefe0229c636cca55401a77298012c7c0ab7ae22f2f73fde94ffed12e4c28e0b3475171ded91d09df17593c19a8be8a4825dfecbc5a3028d7ecce7f7bdc81ed3876ab7af314a2a06f87c8ffeab914461b2f092d28326df8748d5a8fcc311ae29b85977ce726de581fa75a4a0311cf760ff9824d8f391e759f1dd998529e30ee24d2053b4a6a3c599d560c1d0adb6d5524ca4e1e70b44d6ffec3fb537abecf4f6cc8f5c55c4aa71b0bc047c871f88669780a4cb074ac4629b05b997f25682d6f08763b805060180f636b781d8f2aeda9721a6ab180ecf13e71f33d72ec9e1b93c59a6f4612b861ea0738cd7fdcbeff08ddcbeca3265e486f6e1ca23317dd867f41bec97b1942012bad228747880fe1040a337b676ae39e58d9235866e54e1fa777786086f1e22f88e1aa79589eb18d9f208903a6ebfe7e7895c3830526d7e3e4f63bf0e09803169bad07ba70332a1c327ffc723ee7816bce973d1ce7cc635afe95c61b5"}, {0x88, 0x10a, 0x100, "e67bd1bb20c3445d3631f054bf43a469587fc6f132f23b8fd38eafee87318d30f24577d20c5a470d1563f73e895eda91e3f1191f07f09d2797f0d769607353c19b42bec1a951a84dba34b1efe129ca957beb14e667c104dbc3ac91222df8aa592d41e4bdc4a9083f6da87628fdfa2a128f6409e98a42"}, {0x58, 0x10f, 0x0, "aaea4b79e0132c2d39581c7627755b86700473f9f915c6e89e9107a3cde666df8acf5a4cd56ea302132e546c3628c46db98081db493425a1fc55b7836d7ec9ab4fed49926e0fabe5"}, {0x48, 0x3a, 0x2, "8c5b93cfb9906ae63664a9f5272e579d6e7b013d30a1d4a0c2b0e114722601f0ea2545bc10eb1a44667ef3b1baa00b83a81cdbcc"}, {0xc8, 0x10b, 0x55a5, "94e24facc4b2ef4b2b48ecb67e92b6d6f4c90d9f75a6ab505060b85cfc260357854e0591f3f6e91aa23b43d484eca32dcf24706c99d32d72227c7af5b98c331737294730d95120fd212a94130feddaf9a85dcca045164c10078da64e959964676fa115ce6a46d6b4cf7d5e3446f1f4cf1973e869e31047a596dfef8ca400aef5eb91d030a9c177a5ddbef6ff51784f375c951b807f91e78a79be6eca978fd65ccdcba45a84ec200347cd496a18d28e50ee"}], 0x1268}, 0x24004085) 1.200842137s ago: executing program 1 (id=2708): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x1}}, 0x80, 0x0, 0xfffffe08}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a6"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4002000000000041}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) 1.061065804s ago: executing program 3 (id=2709): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x50, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb0}, 0x10}, 0x94) 985.699238ms ago: executing program 2 (id=2710): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="131200001200"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4100, 0xaaf}, {&(0x7f0000000bc0)=""/209, 0xa5}, {&(0x7f0000001500)=""/208, 0xef}, {&(0x7f0000000340)=""/108, 0x75}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000001c0)=""/154, 0xaa}, {&(0x7f00000016c0)=""/220, 0xdb}, {&(0x7f0000001600)=""/172}, {&(0x7f0000000800)=""/199}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102) 939.593721ms ago: executing program 0 (id=2711): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) r0 = socket$kcm(0x29, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xc6, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0xf884, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001880)="2e00000010008188e6b66aa73772ccb21ba1f84848000000de140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000800) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000001"], 0x0, 0x3e, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x5421, 0x604000000000000) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) 689.131334ms ago: executing program 1 (id=2712): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 634.664457ms ago: executing program 0 (id=2713): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000003c9500"/20, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x50, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb0}, 0x10}, 0x94) 534.310642ms ago: executing program 3 (id=2714): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)='G', 0x1}], 0x1}, 0x20000000) sendmsg(r0, &(0x7f0000002cc0)={&(0x7f00000001c0)=@llc={0x1a, 0x0, 0xff, 0x3, 0xff, 0x3, @local}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000002c0)="39470edfb5f55e140afc94e44bb5bab00b0dcfeacf271efc670b81bdaec3565d37da78556e8ec6429fc04d5bb4ba5aed68716382a8e077a103f7c64d11e7084b9da33222ccbbf6ff588482d68ac96c8dd993429b5e59048549d7a802c69377ebab208f478771e7735beaac4fe5110a88f807aef6d0d7bca548cbc61a05807d68c5c9fc1d7c57928053fb", 0x8a}, {&(0x7f0000000380)="569f5682dfb26eb3be86df9ee4b69c106719c27d404441b1167ed7aca9ae4adcdf5d4aa690da9fc591d754e13a0a74ceb881383ae28bd6677c010387c6751a546b", 0x41}, {&(0x7f0000000580)="137856594ce0d0fd3a67eba3b393a3d6ad87cdd8a21c41d59bed098aaaf8c030087aa9e0c89d0269ad42fb2c696db1c2a560637997ed0ea65c961a71a4ae122ca5430142cd32d25cced6e650239e24713c9d047b1e26ed4cde55d4ea56d92a1ecbb0", 0x62}, {&(0x7f00000006c0)="1764c343d86b7dbf971197bbbab355bee32f3b0ba71ecea543589228", 0x1c}, {&(0x7f00000007c0)}, {0x0}], 0x6, &(0x7f0000001a40)=[{0x40, 0x118, 0x0, "b984a8dfbeba90d1ea68b50778098d8db2a3fd1629e992913099120e9c18e55fd1bbf2b296b11b2a0f5c"}, {0x28, 0x0, 0x5, "8cd9943c4eaad9e78f8832b5b605645545a497e07852af"}, {0x1010, 0xff, 0x3, "b0f8cbf0e4c7a4b675fce5b7b847c9e3819183ba321ebaad56b4bca3a3fb9259d7f7e1f74e2ddb6058b90367a4a01357b9c54bc9f2df0a6d84ab6e96eae37c5d2d41d963c3ef472241d7091a0369bc16e40005d04bb2a1df5999b9d5091debb2fbfe2dcb1c9ddbed70d4a4a3ae563c4f371d1691453fb93194f2f0c6b3453d99063f1812f24cdbd589876f5da80dafd3eb60e86c55f447d8743e979b57f093751e26ae01543d38cc07f709e4985c52fc603fc0c3889ea17e517c9a97a8b252a2efbe2d2070b9b93624bcf582c72c49f8f664bb11abe2aaf820a888a597959ca1164d4285d81fab8a6c68ebf3a791d2f73b32a597fafd11ee279b10b8a83dcc219b5809c388b356a7f52cb8fba04b7f8ec3fa35bd91d3df08d64bfc9a14553656dc219d92d66111f555169d71552a5bded77cb9301a41d09b80cd49a452f70bd042305eb13804b1c1b9a76b4ea06a8c04694e94577a40e067f1bf659ef5f3c75fb270500ea52633c3c177d420ccbcfc3d5c331dfbbfc8fdc3e6ffbc96b4cfee2818c1392f8b856f4a0279ef5476cec4a934e32ab8cba78e9ef0abc1b595e576457cbf2231d06a60b18813c3786a08aa61941afe8611999df4c52a586866c1d289bc0fabd8f59ef638ee9226ee712a6a801252e661c34dae43a93bbf79a6f539ebb665c62f554877fe40e9c0b814899ebce0ea58e13646770636824e9c256267d97f89f90cf80b1484637ddc3a722de6abdf55e8dbadf0685d20ffba46ad444996b7ad8dc6ee2be5eea4ef305c6bcf47e8ed8d3cc8a1322bfa33a66a42b16cb7357213cb640901d059ce36834f09a83cb06723a9b160787a772785805aac4a8c3cfc353e791f1ef75663d6761de5bfd748f0362a832c5fd38a777e1b771c5e16d3353d2b6b289b28567dea676137c727a8ed638a2b0f95f2f3f6700fda38f22bf1eb0e47eea813cacf75fac6c51f52fc5b4681906ee4724aba4b42e9cd9656bba55fc2e51b23ec870ec96ace06bea3110aa7d2a0f017afd08b2adf59da33aec470c02a64d9ae9f2238cb1898688656c9244c9fd21c239c20eb3dd88517a8a8febce28eecad1f6f137efd4066e7f9785fc8183f4c81aa9a8a6500fd1484edc4d0d5690d75589466268d1915818172f73c3ffa72be38a9992406972d95c8f108705e36301214e74cbc97621e9912d38363f36718abc6611beff7f4deee2c8dd5c9d70871e63164b61f70a4df8120a52bd8503732f3d04dff27cea160708a731c15b3698ec800e53e5529a014ef70a1783ded50ee6d45adf936a923c68eba5842986ad84c14c22fc057ac9a61bfaf45c4f7953f7f66c12f887abb8fdb98bbb8e6b2aecb9690359418350b311f63b58a929417d97dbda5e320af6e0e850182d6accb29cce1022b7587fad2051933cfa8f758f954eae330813c3d13e38ccd2e4efc9c45e46fd0a387844ea9ff0050f020520992d7e114fd46bc64d9a956a8cda9cb011bd7c4174220a1d278f827eb86af5744e227506f39a543aad0c8d98f2877ace2f3a5c1a11480209764ef57e5aa518fc451488e11495b5f53f319b1bbbf753b5de37c6024a4d1759f5275d01961597480a92df04d9322cd13406f5e252f65eec190fdc4f9e1fb33edccbed2bcdc5abb050241a6566a33103888cf0a56a1dc59adaf011c5376467d5204dfa616976294f3008d82fe753baa387f311bbc6bfad100f4ca7ef886e026dfdd9205f97d7a8f2fa3e4f619bc9568a2ac894d967f14a066c95404e9e6410c772c5875e6384afd55b98d560d12c1687af14315f46bc2d3e943089bd88c434b0cb30daa51ec804a57e2c774ddb415d13f99ebe8cee746dbf86955bdfc37e9cdcb2d44785d6770bad5a8ee78b52ff2f02dfd5752011f3474c8050d8c291dd8c87c75e86142157e40d12f9278dec5b1a10cd43c746e8e524f4ca6df343c30b96fde51338098b437d4037622c9e1ce3f5cdb9f508a5506252949eab6a349e2fa485a2d56f0e09826a22ebc03bcfda27a1f3985f9539baee5ca193b3254bb3db7efa89aa6691d2a25404c15c7ade3b491367546e3ced3a46d2b6cfb7173b4632c5a1bdc5fb33c6297d3213726bd4e458507f5803e03906c9a90439931adf7fffbea9143c179bd38f8518eb6b8c14996df78b59af3e6303f7be2672e05a2193dd31814155203c53930ba6829c26f5d0715bd079b8ea6650ad333f9237957aa71cc4add71b84f9d5879daf3d1e61263df58993cd9b245fb33143ce4a28af1a32bb6edc332168b22a9178d6d1deff0bcaa5916db6002b68f90111b86b59e631b664aff4a0bd58d648ee05be22488f33282ed1d4887a7dc4d417f38f0db3a3a0c017011d4d4c63c10055e6a0c713a25dcef26a4192206e51957440996d37ea4d07dc3128429dcdffdec3ea91c62ca449e169c0ae2c14c612892658223c875ec52b52a3189eb17fc2f2c18edd49aecbf07d630409b8a3b84e2a15159631ffc209f497873d4b353fbe0ea279f93853f87182a0f3372614e171a9a91a60190d30b389014327d94410a7e92d46ee3f5b0031854e70b9746300f6fbf0b30ae33a7bbf53e2ef49b9aa08724e09a02d6de1a931440da6ff766be4fcfb2f8dfa347d6d0f9a4ebcfc6944f997d453169f572f89703659331de07480bf6e47d00d076b8c87d00f665cae90a54a310da69fd4d2a7c183138899936f3a374aa6ad8c537e1842b1b50b94a8c000543befb55e1df53f06afef29d0f2b26c85c4579276f19fe6443b5b7a21a028348fa97971538284c5c6a821fcfe6c19d4b6d503c8b50fb97067557857a5b1642e4165f6669f8469157bb911105d0da756d03545662d88b3e35a1021e8a6df17b1b1d09447f1666dbf9c21969b2f9ce07efa9c5b540dac6d9fac4cf1ab7ce19ca6b413fdadebbc93db6bfcac78a79606214afebbe41695469646744af03e8f6f96c7106932d68d5f0f6017b462375da9e31f4be70dd9c078c1192102b6bb2b8e07c87c70387965c091f67d81ca16aba7b7fd9f8289997fb1412d4d67da847310a0d44279ee62a92e516d092befe015990705e7743d48d76a5d5eee57c15fa528591fcee855daaac4a446483b58c92fdd1fb3957fae0f86bd1f71b21ecb5d026b6487273d2e7445f0aba0f9dcb93031cb813d90cb31dcbd78c68c3b48169dbbc4e02da4eac1fafd8efc9886374ce0203f28f259698574433819d592ba3e5d99717857361bf62d313b11b24c7a738ad74d694726112da53940bac77862beddbd5ad05dbe76ed1a3a40a781161dafc791a7bf3fda7c2fea731b58f6be9fc5175905c9241c8d993db5514703a97854a8e237bdc0ec260f74c64f5903f79ef1ad7c9d57e1b1b5d0362db8ea43ca1449ecc00d0fa16196d0417696742b07b0b9935abc4fa12ad670b8e47ff2c67bce215ee774079cd50584d19d24eda55ff865999a2e0b450f87a19b2a709ba15c854737cb8a15443f5ce29a5807c43e950537b21e2974f416ac0ef52f003d55caf53cabc1831ad2def74a25dfd2887bb0603967d0d705c23b475b06bf553a499fb3d1ba0cf60c3ad44277157915d1ae5d91cbf5a0208354e21ec79369723ec9c4bc9b211005f73caed882f7cd177f4d0db6ac13a31bdd02c0a764b039ff1762e965612ae79211b551872becc3aaa7fcf97dc3613bbff91526410ba45388870207cefcc2beafe60e7972ab21e198bb6735922f33b093e98e55242765d285eb8a9a92ce8e8deb87e44d15c37c93cd65374565912b7976c113af1f729ce5420270d780684fa98c074e6d0eed060f7ac667116bfcb0ce8e4b280607dc0220ac84f569b23fb3437d3d573c1d616203eb99cca4133072c5c35291c477c6585afa0e31c06f1bd359c6170486a0357ea6703d8acd9579afcc72676d5ccd59e354313f919790404ef0d7dced36688022710cb41891510386d25605db232a2d11ea1d5c29d9a66afbc2cfe428c4802e4e5088e3f0e88019ad8c848d1e69dd4cc8e868c87929c6f6dddf24496dcdf2741238f07b42ab00031cffd7bfb6901372297bb0433e34465df39054b2428eabb54eec6d6e29cc462c964427071c1a6fafdc5d034af7d1a91d067129eb1faf82d950a69d5d53ed59607be96e49466b2a3ffdbd4b4e8b54e53d22d338a69b9fcef9f5a83e48b1109c97b15572a013cbf63c9267568e6fdf6614dee88c5f375e057c925179a08c945b6fbc409b5eff0d0c439f2afe3f53e0edf0007fc564b438a4c94cfecf1505f27a02768fa96741daf75929fe9946a948eef46123d40f3c62d19ef71831d68f8a0d39ea6d0c2cec74e803baa31cbe10ade898cf10f7aa452805b47519ae5bf13f1168791537c3fac4d3754d5e9ddebee6153beb2097676c15a3f32c9b60d478d9532ec7b4d4f684a529093377733a1af67cba00030c1284091738eb3f5d6ea0cff03c0e2423a99461464f2ec12b3732d667673cac4b53b5e4ad577cf3dc5058be8dbcb0124e2cbbb70443035fcdf046b94e84581dfb239acd9716f3a8654847f9284668e2dc4dccdc9b634d8e2f4050800d6f46613b71199667281e3b22bdb4020e99d572d20ab46b756b5f283d044b1f52d9eda7c88f9c04d088e75c903574c97219797730e903c3bb31ae8ef14ffc866ac9ac0286e7c440b80d6894b4f05815459fb2ff6efc15343ee3bf939d273041b9b07d579a5358f9d64a17964cd95223de5b5e9263897eccfe6e0f6f17e02c504ae4c24f3c3c4a9b0a422bcd8c189c546fb4f85d87f4b4297f97575ddaf27c1929921faf81c23cfd255b8a402b8bdb6c0a039c6618d735ae262913089b7748473aec0ede084c7e148f94afa7b51c1fc2f004e3b12969cd8331664fd5cc457a1fa56b8be46bbbfabe3b267bf3db00ab46cc6b742fcdb1c3be4fb092b3fb937c9e571be6cd951edc7891ea5fbaec591c96aca3a37d78578b8946437521861a9f5d1f051b0f6df1ba3734d611fc7590e1948fdec35be10eeac634de4622ab1b8a5a06a4fca21ddc78d2cda0d9ecd7b250892e2c1f1ea2aab3ca7d5a74cf2324dfce3a24883f4ea64a1aa0c145394429bb9ba1760108b68960654d757505c5a0ca4023eedb23f717b213863b5cde842de2a652c1646ba67e1741f42430c50435618b48d0d8dc6cc45785b866af89346a8c7943040f1bcc7e4714f0dffea6fe3c39b404d91484106dff4b62ab42c1648ca659bfb401369203114199dce33d866402250edb357b28957f61866e01b0ba452ecd4e7d1060eae05113c76e9def3de6072800cc6e704251badae73aefe0229c636cca55401a77298012c7c0ab7ae22f2f73fde94ffed12e4c28e0b3475171ded91d09df17593c19a8be8a4825dfecbc5a3028d7ecce7f7bdc81ed3876ab7af314a2a06f87c8ffeab914461b2f092d28326df8748d5a8fcc311ae29b85977ce726de581fa75a4a0311cf760ff9824d8f391e759f1dd998529e30ee24d2053b4a6a3c599d560c1d0adb6d5524ca4e1e70b44d6ffec3fb537abecf4f6cc8f5c55c4aa71b0bc047c871f88669780a4cb074ac4629b05b997f25682d6f08763b805060180f636b781d8f2aeda9721a6ab180ecf13e71f33d72ec9e1b93c59a6f4612b861ea0738cd7fdcbeff08ddcbeca3265e486f6e1ca23317dd867f41bec97b1942012bad228747880fe1040a337b676ae39e58d9235866e54e1fa777786086f1e22f88e1aa79589eb18d9f208903a6ebfe7e7895c3830526d7e3e4f63bf0e09803169bad07ba70332a1c327ffc723ee7816bce973d1ce7cc635afe95c61b5"}, {0x88, 0x10a, 0x100, "e67bd1bb20c3445d3631f054bf43a469587fc6f132f23b8fd38eafee87318d30f24577d20c5a470d1563f73e895eda91e3f1191f07f09d2797f0d769607353c19b42bec1a951a84dba34b1efe129ca957beb14e667c104dbc3ac91222df8aa592d41e4bdc4a9083f6da87628fdfa2a128f6409e98a42"}, {0x58, 0x10f, 0x0, "aaea4b79e0132c2d39581c7627755b86700473f9f915c6e89e9107a3cde666df8acf5a4cd56ea302132e546c3628c46db98081db493425a1fc55b7836d7ec9ab4fed49926e0fabe5"}, {0x48, 0x3a, 0x2, "8c5b93cfb9906ae63664a9f5272e579d6e7b013d30a1d4a0c2b0e114722601f0ea2545bc10eb1a44667ef3b1baa00b83a81cdbcc"}, {0xc8, 0x10b, 0x55a5, "94e24facc4b2ef4b2b48ecb67e92b6d6f4c90d9f75a6ab505060b85cfc260357854e0591f3f6e91aa23b43d484eca32dcf24706c99d32d72227c7af5b98c331737294730d95120fd212a94130feddaf9a85dcca045164c10078da64e959964676fa115ce6a46d6b4cf7d5e3446f1f4cf1973e869e31047a596dfef8ca400aef5eb91d030a9c177a5ddbef6ff51784f375c951b807f91e78a79be6eca978fd65ccdcba45a84ec200347cd496a18d28e50ee"}], 0x1268}, 0x24004085) 75.393956ms ago: executing program 3 (id=2715): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x1}}, 0x80, 0x0, 0xfffffe08}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4002000000000041}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 2 (id=2716): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 387681][T11371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.412320][T11371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.431319][T11371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.446475][T11371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.641665][T11371] team0: Port device geneve1 added [ 405.946123][T11389] netlink: 209544 bytes leftover after parsing attributes in process `syz.0.1814'. [ 406.229331][T11396] FAULT_INJECTION: forcing a failure. [ 406.229331][T11396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.274710][T11396] CPU: 1 PID: 11396 Comm: syz.3.1817 Not tainted syzkaller #0 [ 406.282268][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 406.292481][T11396] Call Trace: [ 406.295820][T11396] [ 406.298894][T11396] dump_stack_lvl+0x18c/0x250 [ 406.303741][T11396] ? show_regs_print_info+0x20/0x20 [ 406.309018][T11396] ? load_image+0x420/0x420 [ 406.313598][T11396] ? __might_fault+0xaa/0x120 [ 406.318338][T11396] ? __lock_acquire+0x7d40/0x7d40 [ 406.323606][T11396] should_fail_ex+0x39d/0x4d0 [ 406.328718][T11396] _copy_from_user+0x2f/0xe0 [ 406.333808][T11396] ___sys_sendmsg+0x1c7/0x360 [ 406.336535][T11403] netlink: 'syz.0.1820': attribute type 10 has an invalid length. [ 406.338551][T11396] ? __sys_sendmsg+0x2a0/0x2a0 [ 406.338603][T11396] ? __lock_acquire+0x7d40/0x7d40 [ 406.347526][T11403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1820'. [ 406.351293][T11396] __se_sys_sendmsg+0x1c2/0x2b0 [ 406.351327][T11396] ? __x64_sys_sendmsg+0x80/0x80 [ 406.351362][T11396] ? syscall_enter_from_user_mode+0x2e/0x80 [ 406.351392][T11396] do_syscall_64+0x55/0xa0 [ 406.351410][T11396] ? clear_bhb_loop+0x40/0x90 [ 406.351435][T11396] ? clear_bhb_loop+0x40/0x90 [ 406.351463][T11396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.358318][T11403] net_ratelimit: 668 callbacks suppressed [ 406.358360][T11403] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 406.365624][T11396] RIP: 0033:0x7ff7cd79c819 [ 406.365649][T11396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.365667][T11396] RSP: 002b:00007ff7ce5d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.365688][T11396] RAX: ffffffffffffffda RBX: 00007ff7cda15fa0 RCX: 00007ff7cd79c819 [ 406.365704][T11396] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 406.365717][T11396] RBP: 00007ff7ce5d0090 R08: 0000000000000000 R09: 0000000000000000 [ 406.365730][T11396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.365742][T11396] R13: 00007ff7cda16038 R14: 00007ff7cda15fa0 R15: 00007ffcf262cb68 [ 406.365772][T11396] [ 406.652283][T11402] netlink: 'syz.1.1819': attribute type 10 has an invalid length. [ 406.660939][T11402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1819'. [ 406.672731][T11402] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 407.389256][T11420] syzkaller0: entered promiscuous mode [ 407.396165][T11420] syzkaller0: entered allmulticast mode [ 407.808714][T11431] FAULT_INJECTION: forcing a failure. [ 407.808714][T11431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.832367][T11431] CPU: 0 PID: 11431 Comm: syz.1.1830 Not tainted syzkaller #0 [ 407.840091][T11431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 407.850290][T11431] Call Trace: [ 407.853635][T11431] [ 407.856813][T11431] dump_stack_lvl+0x18c/0x250 [ 407.861659][T11431] ? show_regs_print_info+0x20/0x20 [ 407.866946][T11431] ? load_image+0x420/0x420 [ 407.871510][T11431] ? __might_fault+0xaa/0x120 [ 407.876347][T11431] ? __lock_acquire+0x7d40/0x7d40 [ 407.881440][T11431] should_fail_ex+0x39d/0x4d0 [ 407.886326][T11431] _copy_from_user+0x2f/0xe0 [ 407.891005][T11431] __sys_bpf+0x23e/0x890 [ 407.895364][T11431] ? bpf_link_show_fdinfo+0x390/0x390 [ 407.900907][T11431] __x64_sys_bpf+0x7c/0x90 [ 407.905394][T11431] do_syscall_64+0x55/0xa0 [ 407.909881][T11431] ? clear_bhb_loop+0x40/0x90 [ 407.914637][T11431] ? clear_bhb_loop+0x40/0x90 [ 407.919480][T11431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.925449][T11431] RIP: 0033:0x7f985199c819 [ 407.929932][T11431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.950557][T11431] RSP: 002b:00007f98528dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 407.959063][T11431] RAX: ffffffffffffffda RBX: 00007f9851c16090 RCX: 00007f985199c819 [ 407.967123][T11431] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 407.975243][T11431] RBP: 00007f98528dc090 R08: 0000000000000000 R09: 0000000000000000 [ 407.983372][T11431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.991431][T11431] R13: 00007f9851c16128 R14: 00007f9851c16090 R15: 00007ffdc35ee138 [ 407.999486][T11431] [ 410.874035][T11460] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1843'. [ 410.888027][T11460] openvswitch: netlink: Message has 20476 unknown bytes. [ 411.954471][T11485] raw_sendmsg: syz.2.1854 forgot to set AF_INET. Fix it! [ 414.818792][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 415.189225][T11553] netlink: 'syz.1.1876': attribute type 10 has an invalid length. [ 415.315331][T11553] team0: Port device geneve1 added [ 416.282126][T11577] FAULT_INJECTION: forcing a failure. [ 416.282126][T11577] name failslab, interval 1, probability 0, space 0, times 0 [ 416.320031][T11577] CPU: 0 PID: 11577 Comm: syz.2.1887 Not tainted syzkaller #0 [ 416.327721][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 416.337837][T11577] Call Trace: [ 416.341337][T11577] [ 416.344319][T11577] dump_stack_lvl+0x18c/0x250 [ 416.349101][T11577] ? show_regs_print_info+0x20/0x20 [ 416.354372][T11577] ? load_image+0x420/0x420 [ 416.358953][T11577] ? __might_sleep+0xe0/0xe0 [ 416.363626][T11577] ? __lock_acquire+0x7d40/0x7d40 [ 416.368886][T11577] should_fail_ex+0x39d/0x4d0 [ 416.373644][T11577] should_failslab+0x9/0x20 [ 416.378295][T11577] slab_pre_alloc_hook+0x59/0x310 [ 416.383484][T11577] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 416.389268][T11577] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 416.395404][T11577] __kmem_cache_alloc_node+0x53/0x250 [ 416.400966][T11577] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 416.406958][T11577] __kmalloc+0xa4/0x230 [ 416.411244][T11577] tomoyo_realpath_from_path+0xe3/0x5d0 [ 416.416960][T11577] tomoyo_path_number_perm+0x248/0x620 [ 416.422520][T11577] ? tomoyo_path_number_perm+0x217/0x620 [ 416.428353][T11577] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 416.433977][T11577] ? trace_call_bpf+0xc3/0x6c0 [ 416.438801][T11577] ? trace_call_bpf+0xc3/0x6c0 [ 416.443888][T11577] ? trace_call_bpf+0x5e9/0x6c0 [ 416.448838][T11577] ? __fget_files+0x28/0x4b0 [ 416.453609][T11577] ? __fget_files+0x28/0x4b0 [ 416.458272][T11577] security_file_ioctl+0x70/0xa0 [ 416.463448][T11577] __se_sys_ioctl+0x48/0x170 [ 416.468371][T11577] do_syscall_64+0x55/0xa0 [ 416.472929][T11577] ? clear_bhb_loop+0x40/0x90 [ 416.477765][T11577] ? clear_bhb_loop+0x40/0x90 [ 416.482520][T11577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.488565][T11577] RIP: 0033:0x7f5b9299c819 [ 416.493046][T11577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.512890][T11577] RSP: 002b:00007f5b9383a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.521371][T11577] RAX: ffffffffffffffda RBX: 00007f5b92c15fa0 RCX: 00007f5b9299c819 [ 416.529576][T11577] RDX: 0000000000000000 RSI: 0000000080047437 RDI: 0000000000000003 [ 416.537603][T11577] RBP: 00007f5b9383a090 R08: 0000000000000000 R09: 0000000000000000 [ 416.545719][T11577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.553835][T11577] R13: 00007f5b92c16038 R14: 00007f5b92c15fa0 R15: 00007ffe7c2e8a68 [ 416.561880][T11577] [ 416.606386][T11577] ERROR: Out of memory at tomoyo_realpath_from_path. [ 417.686661][T11603] netlink: 'syz.3.1895': attribute type 10 has an invalid length. [ 421.105675][T11654] netlink: 'syz.0.1913': attribute type 10 has an invalid length. [ 421.283529][T11654] team0: Port device geneve1 added [ 424.603511][T11667] netlink: 'syz.2.1920': attribute type 10 has an invalid length. [ 426.066519][T11711] netlink: 'syz.0.1937': attribute type 10 has an invalid length. [ 429.238073][T11731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1945'. [ 429.750380][T11745] FAULT_INJECTION: forcing a failure. [ 429.750380][T11745] name failslab, interval 1, probability 0, space 0, times 0 [ 429.764356][T11745] CPU: 0 PID: 11745 Comm: syz.0.1951 Not tainted syzkaller #0 [ 429.771972][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.782081][T11745] Call Trace: [ 429.785408][T11745] [ 429.788402][T11745] dump_stack_lvl+0x18c/0x250 [ 429.793162][T11745] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 429.799039][T11745] ? show_regs_print_info+0x20/0x20 [ 429.804318][T11745] ? load_image+0x420/0x420 [ 429.808879][T11745] ? mark_lock+0x94/0x320 [ 429.813266][T11745] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 429.819584][T11745] should_fail_ex+0x39d/0x4d0 [ 429.824445][T11745] should_failslab+0x9/0x20 [ 429.829302][T11745] slab_pre_alloc_hook+0x59/0x310 [ 429.834395][T11745] ? sctp_add_bind_addr+0x8c/0x360 [ 429.839588][T11745] __kmem_cache_alloc_node+0x53/0x250 [ 429.845251][T11745] ? sctp_add_bind_addr+0x8c/0x360 [ 429.850666][T11745] kmalloc_trace+0x2a/0xe0 [ 429.855159][T11745] sctp_add_bind_addr+0x8c/0x360 [ 429.860240][T11745] sctp_copy_local_addr_list+0x315/0x4f0 [ 429.866099][T11745] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 429.871852][T11745] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 429.878135][T11745] ? sctp_v4_is_any+0x35/0x60 [ 429.882929][T11745] ? sctp_copy_one_addr+0x8c/0x350 [ 429.888083][T11745] sctp_bind_addr_copy+0xb3/0x3c0 [ 429.893760][T11745] sctp_connect_new_asoc+0x2f9/0x6a0 [ 429.899198][T11745] ? __sctp_connect+0xd80/0xd80 [ 429.904235][T11745] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 429.909942][T11745] ? security_sctp_bind_connect+0x89/0xb0 [ 429.915815][T11745] sctp_sendmsg+0x1575/0x28c0 [ 429.920579][T11745] ? sctp_getsockopt+0xb60/0xb60 [ 429.925660][T11745] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.931953][T11745] ? lockdep_hardirqs_on+0x98/0x150 [ 429.937293][T11745] ? inet_sendmsg+0x178/0x2f0 [ 429.942026][T11745] ? inet_sendmsg+0xe9/0x2f0 [ 429.946786][T11745] ? inet_send_prepare+0x260/0x260 [ 429.951973][T11745] ____sys_sendmsg+0x5ba/0x960 [ 429.956841][T11745] ? __lock_acquire+0x7d40/0x7d40 [ 429.961930][T11745] ? __asan_memset+0x22/0x40 [ 429.966566][T11745] ? __sys_sendmsg_sock+0x30/0x30 [ 429.971631][T11745] ? __import_iovec+0x5f2/0x850 [ 429.976530][T11745] ? import_iovec+0x73/0xa0 [ 429.981156][T11745] ___sys_sendmsg+0x2a6/0x360 [ 429.985889][T11745] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.990793][T11745] __se_sys_sendmsg+0x1c2/0x2b0 [ 429.995714][T11745] ? __x64_sys_sendmsg+0x80/0x80 [ 430.000801][T11745] ? lockdep_hardirqs_on+0x98/0x150 [ 430.006156][T11745] do_syscall_64+0x55/0xa0 [ 430.010722][T11745] ? clear_bhb_loop+0x40/0x90 [ 430.015542][T11745] ? clear_bhb_loop+0x40/0x90 [ 430.020296][T11745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.026244][T11745] RIP: 0033:0x7f417459c819 [ 430.030709][T11745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.050463][T11745] RSP: 002b:00007f4175397028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.059572][T11745] RAX: ffffffffffffffda RBX: 00007f4174815fa0 RCX: 00007f417459c819 [ 430.067694][T11745] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 430.075794][T11745] RBP: 00007f4175397090 R08: 0000000000000000 R09: 0000000000000000 [ 430.083822][T11745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.091840][T11745] R13: 00007f4174816038 R14: 00007f4174815fa0 R15: 00007fff2fe90308 [ 430.099884][T11745] [ 430.568653][T11764] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 430.782124][T11770] netlink: 'syz.2.1962': attribute type 10 has an invalid length. [ 431.418672][T11788] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 431.912063][T11807] netlink: 'syz.1.1978': attribute type 10 has an invalid length. [ 435.289587][T11826] netlink: 'syz.0.1985': attribute type 10 has an invalid length. [ 435.512313][T11835] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1988'. [ 435.625760][T11838] netlink: 'syz.0.1990': attribute type 10 has an invalid length. [ 437.033872][T11864] netlink: 'syz.3.1998': attribute type 10 has an invalid length. [ 438.069321][T11892] netlink: 'syz.3.2007': attribute type 10 has an invalid length. [ 438.361071][T11899] netlink: 'syz.1.2010': attribute type 10 has an invalid length. [ 438.476177][T11903] netlink: 'syz.3.2011': attribute type 10 has an invalid length. [ 439.884175][T11932] netlink: 'syz.1.2024': attribute type 10 has an invalid length. [ 440.855776][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.869081][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.289886][T11963] netlink: 'syz.0.2035': attribute type 10 has an invalid length. [ 441.835537][T11979] FAULT_INJECTION: forcing a failure. [ 441.835537][T11979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.857264][T11979] CPU: 1 PID: 11979 Comm: syz.1.2041 Not tainted syzkaller #0 [ 441.864830][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 441.875121][T11979] Call Trace: [ 441.878452][T11979] [ 441.881466][T11979] dump_stack_lvl+0x18c/0x250 [ 441.886230][T11979] ? show_regs_print_info+0x20/0x20 [ 441.891513][T11979] ? load_image+0x420/0x420 [ 441.896096][T11979] ? __lock_acquire+0x7d40/0x7d40 [ 441.901188][T11979] ? snprintf+0xe9/0x140 [ 441.905507][T11979] should_fail_ex+0x39d/0x4d0 [ 441.910260][T11979] _copy_to_user+0x2f/0xa0 [ 441.914745][T11979] simple_read_from_buffer+0xe7/0x150 [ 441.920291][T11979] proc_fail_nth_read+0x1e8/0x260 [ 441.925485][T11979] ? proc_fault_inject_write+0x360/0x360 [ 441.931195][T11979] ? fsnotify_perm+0x271/0x5e0 [ 441.936030][T11979] ? proc_fault_inject_write+0x360/0x360 [ 441.941724][T11979] vfs_read+0x28b/0x970 [ 441.945944][T11979] ? kernel_read+0x1e0/0x1e0 [ 441.950763][T11979] ? __fget_files+0x28/0x4b0 [ 441.955409][T11979] ? __fget_files+0x28/0x4b0 [ 441.960051][T11979] ? __fget_files+0x43d/0x4b0 [ 441.964794][T11979] ? __fdget_pos+0x2a3/0x330 [ 441.969434][T11979] ? ksys_read+0x75/0x260 [ 441.973813][T11979] ksys_read+0x150/0x260 [ 441.978195][T11979] ? vfs_write+0x990/0x990 [ 441.982674][T11979] ? lockdep_hardirqs_on+0x98/0x150 [ 441.987930][T11979] do_syscall_64+0x55/0xa0 [ 441.992396][T11979] ? clear_bhb_loop+0x40/0x90 [ 441.997120][T11979] ? clear_bhb_loop+0x40/0x90 [ 442.001962][T11979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.007902][T11979] RIP: 0033:0x7f985195d04e [ 442.012536][T11979] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.032206][T11979] RSP: 002b:00007f98528fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.040687][T11979] RAX: ffffffffffffffda RBX: 00007f98528fd6c0 RCX: 00007f985195d04e [ 442.048819][T11979] RDX: 000000000000000f RSI: 00007f98528fd0a0 RDI: 0000000000000004 [ 442.056834][T11979] RBP: 00007f98528fd090 R08: 0000000000000000 R09: 0000000000000000 [ 442.064851][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.072951][T11979] R13: 00007f9851c16038 R14: 00007f9851c15fa0 R15: 00007ffdc35ee138 [ 442.080980][T11979] [ 442.260986][T11990] netlink: 'syz.2.2044': attribute type 10 has an invalid length. [ 442.270128][T11990] bond0: (slave wlan1): Releasing backup interface [ 442.293819][T11990] team0: Port device wlan1 added [ 442.521770][T11997] netlink: 'syz.0.2046': attribute type 10 has an invalid length. [ 444.354874][T12035] netlink: 'syz.0.2058': attribute type 10 has an invalid length. [ 445.890309][T12063] FAULT_INJECTION: forcing a failure. [ 445.890309][T12063] name failslab, interval 1, probability 0, space 0, times 0 [ 445.904117][T12063] CPU: 1 PID: 12063 Comm: syz.2.2068 Not tainted syzkaller #0 [ 445.912177][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 445.922495][T12063] Call Trace: [ 445.925819][T12063] [ 445.928793][T12063] dump_stack_lvl+0x18c/0x250 [ 445.933549][T12063] ? show_regs_print_info+0x20/0x20 [ 445.938915][T12063] ? load_image+0x420/0x420 [ 445.943572][T12063] ? __might_sleep+0xe0/0xe0 [ 445.948355][T12063] ? __lock_acquire+0x7d40/0x7d40 [ 445.954145][T12063] should_fail_ex+0x39d/0x4d0 [ 445.958896][T12063] should_failslab+0x9/0x20 [ 445.963548][T12063] slab_pre_alloc_hook+0x59/0x310 [ 445.968731][T12063] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 445.974344][T12063] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 445.979942][T12063] __kmem_cache_alloc_node+0x53/0x250 [ 445.985478][T12063] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 445.991071][T12063] __kmalloc+0xa4/0x230 [ 445.995310][T12063] bpf_prog_test_run_skb+0x238/0x12b0 [ 446.000743][T12063] ? __fget_files+0x28/0x4b0 [ 446.005840][T12063] ? __fget_files+0x28/0x4b0 [ 446.010494][T12063] ? __fget_files+0x43d/0x4b0 [ 446.015417][T12063] ? cpu_online+0x60/0x60 [ 446.019804][T12063] bpf_prog_test_run+0x321/0x390 [ 446.024892][T12063] __sys_bpf+0x49d/0x890 [ 446.029350][T12063] ? bpf_link_show_fdinfo+0x390/0x390 [ 446.034796][T12063] ? lock_chain_count+0x20/0x20 [ 446.039963][T12063] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 446.046007][T12063] __x64_sys_bpf+0x7c/0x90 [ 446.050566][T12063] do_syscall_64+0x55/0xa0 [ 446.055027][T12063] ? clear_bhb_loop+0x40/0x90 [ 446.059828][T12063] ? clear_bhb_loop+0x40/0x90 [ 446.064570][T12063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.070752][T12063] RIP: 0033:0x7f5b9299c819 [ 446.075228][T12063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.094976][T12063] RSP: 002b:00007f5b9383a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.103539][T12063] RAX: ffffffffffffffda RBX: 00007f5b92c15fa0 RCX: 00007f5b9299c819 [ 446.111562][T12063] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 446.119586][T12063] RBP: 00007f5b9383a090 R08: 0000000000000000 R09: 0000000000000000 [ 446.127617][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.135735][T12063] R13: 00007f5b92c16038 R14: 00007f5b92c15fa0 R15: 00007ffe7c2e8a68 [ 446.143873][T12063] [ 446.227448][ T12] wlan1: Trigger new scan to find an IBSS to join [ 447.607562][T12104] FAULT_INJECTION: forcing a failure. [ 447.607562][T12104] name failslab, interval 1, probability 0, space 0, times 0 [ 447.668313][T12104] CPU: 1 PID: 12104 Comm: syz.1.2082 Not tainted syzkaller #0 [ 447.675964][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 447.686085][T12104] Call Trace: [ 447.689419][T12104] [ 447.692407][T12104] dump_stack_lvl+0x18c/0x250 [ 447.697261][T12104] ? show_regs_print_info+0x20/0x20 [ 447.702623][T12104] ? load_image+0x420/0x420 [ 447.707211][T12104] ? __might_sleep+0xe0/0xe0 [ 447.712034][T12104] ? __lock_acquire+0x7d40/0x7d40 [ 447.717127][T12104] should_fail_ex+0x39d/0x4d0 [ 447.721882][T12104] should_failslab+0x9/0x20 [ 447.726449][T12104] slab_pre_alloc_hook+0x59/0x310 [ 447.731625][T12104] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 447.737671][T12104] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 447.743448][T12104] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 447.749207][T12104] __kmem_cache_alloc_node+0x53/0x250 [ 447.754693][T12104] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 447.760557][T12104] __kmalloc+0xa4/0x230 [ 447.764779][T12104] tomoyo_realpath_from_path+0xe3/0x5d0 [ 447.770476][T12104] tomoyo_path_number_perm+0x248/0x620 [ 447.776123][T12104] ? tomoyo_path_number_perm+0x217/0x620 [ 447.781816][T12104] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 447.787326][T12104] ? ktime_get+0x7f/0x280 [ 447.791904][T12104] ? __fget_files+0x28/0x4b0 [ 447.796530][T12104] ? __fget_files+0x28/0x4b0 [ 447.801185][T12104] security_file_ioctl+0x70/0xa0 [ 447.806152][T12104] __se_sys_ioctl+0x48/0x170 [ 447.810784][T12104] do_syscall_64+0x55/0xa0 [ 447.815234][T12104] ? clear_bhb_loop+0x40/0x90 [ 447.819973][T12104] ? clear_bhb_loop+0x40/0x90 [ 447.824704][T12104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.830645][T12104] RIP: 0033:0x7f985199c819 [ 447.835105][T12104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.855068][T12104] RSP: 002b:00007f98528dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.863523][T12104] RAX: ffffffffffffffda RBX: 00007f9851c16090 RCX: 00007f985199c819 [ 447.871529][T12104] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000009 [ 447.879537][T12104] RBP: 00007f98528dc090 R08: 0000000000000000 R09: 0000000000000000 [ 447.887851][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.896062][T12104] R13: 00007f9851c16128 R14: 00007f9851c16090 R15: 00007ffdc35ee138 [ 447.904088][T12104] [ 447.921579][T12104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 448.320051][T12120] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2090'. [ 448.334285][T12120] netlink: zone id is out of range [ 448.339839][T12120] netlink: zone id is out of range [ 448.345843][T12120] netlink: zone id is out of range [ 448.354042][T12120] netlink: zone id is out of range [ 448.359655][T12120] netlink: zone id is out of range [ 448.369071][T12120] netlink: zone id is out of range [ 448.375931][T12120] netlink: zone id is out of range [ 448.386452][T12120] netlink: zone id is out of range [ 448.393069][T12120] netlink: zone id is out of range [ 448.399350][T12120] netlink: zone id is out of range [ 448.583931][T12125] netlink: 'syz.3.2092': attribute type 29 has an invalid length. [ 448.592310][T12125] netlink: 'syz.3.2092': attribute type 29 has an invalid length. [ 448.851165][T12131] netlink: 'syz.3.2096': attribute type 10 has an invalid length. [ 449.030381][T12139] FAULT_INJECTION: forcing a failure. [ 449.030381][T12139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.050898][T12139] CPU: 1 PID: 12139 Comm: syz.1.2098 Not tainted syzkaller #0 [ 449.058545][T12139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 449.068984][T12139] Call Trace: [ 449.072483][T12139] [ 449.075465][T12139] dump_stack_lvl+0x18c/0x250 [ 449.080330][T12139] ? show_regs_print_info+0x20/0x20 [ 449.085590][T12139] ? load_image+0x420/0x420 [ 449.090158][T12139] ? __might_fault+0xaa/0x120 [ 449.094999][T12139] ? __lock_acquire+0x7d40/0x7d40 [ 449.100096][T12139] should_fail_ex+0x39d/0x4d0 [ 449.104942][T12139] _copy_from_user+0x2f/0xe0 [ 449.109800][T12139] ____sys_sendmsg+0x2fd/0x960 [ 449.114715][T12139] ? __lock_acquire+0x7d40/0x7d40 [ 449.119804][T12139] ? __sys_sendmsg_sock+0x30/0x30 [ 449.124972][T12139] ? __import_iovec+0x5f2/0x850 [ 449.129869][T12139] ? import_iovec+0x73/0xa0 [ 449.134412][T12139] ___sys_sendmsg+0x2a6/0x360 [ 449.139235][T12139] ? __sys_sendmsg+0x2a0/0x2a0 [ 449.144055][T12139] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 449.150348][T12139] __se_sys_sendmsg+0x1c2/0x2b0 [ 449.155238][T12139] ? hrtimer_interrupt+0x7bb/0x9c0 [ 449.160396][T12139] ? __x64_sys_sendmsg+0x80/0x80 [ 449.165461][T12139] ? lockdep_hardirqs_on+0x98/0x150 [ 449.170815][T12139] do_syscall_64+0x55/0xa0 [ 449.175266][T12139] ? clear_bhb_loop+0x40/0x90 [ 449.179978][T12139] ? clear_bhb_loop+0x40/0x90 [ 449.184783][T12139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.190742][T12139] RIP: 0033:0x7f985199c819 [ 449.195289][T12139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.215124][T12139] RSP: 002b:00007f98528fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.223588][T12139] RAX: ffffffffffffffda RBX: 00007f9851c15fa0 RCX: 00007f985199c819 [ 449.231681][T12139] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000007 [ 449.239688][T12139] RBP: 00007f98528fd090 R08: 0000000000000000 R09: 0000000000000000 [ 449.247696][T12139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.255785][T12139] R13: 00007f9851c16038 R14: 00007f9851c15fa0 R15: 00007ffdc35ee138 [ 449.263896][T12139] [ 449.272233][ T12] wlan1: Trigger new scan to find an IBSS to join [ 449.544800][T12149] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 449.554647][T12149] bond0: (slave wlan1): Releasing backup interface [ 449.568194][T12149] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 449.583814][T12149] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 449.615017][T12149] team0: Port device wlan1 added [ 449.646402][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'. [ 449.834808][T12159] netlink: 'syz.3.2105': attribute type 10 has an invalid length. [ 449.965635][T12166] netlink: 'syz.3.2108': attribute type 10 has an invalid length. [ 449.976559][T12166] bond0: (slave wlan1): Releasing backup interface [ 449.989473][T12166] team0: Port device wlan1 added [ 450.222946][ T42] wlan1: Creating new IBSS network, BSSID 0e:e6:fa:c8:80:cf [ 451.374861][T12198] team0: Port device team_slave_0 removed [ 452.203589][T12217] netlink: 'syz.3.2130': attribute type 10 has an invalid length. [ 452.237125][ T8007] wlan1: Trigger new scan to find an IBSS to join [ 452.244784][ T42] wlan1: Trigger new scan to find an IBSS to join [ 453.424608][T12247] netlink: 'syz.2.2142': attribute type 10 has an invalid length. [ 454.786501][T12285] netlink: 'syz.1.2159': attribute type 10 has an invalid length. [ 454.843365][T12285] team0: Device wg1 is of different type [ 455.721591][T12305] netlink: 'syz.0.2168': attribute type 10 has an invalid length. [ 455.982865][T12310] netlink: 'syz.2.2170': attribute type 10 has an invalid length. [ 456.511870][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.531501][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.540126][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.551248][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.561310][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 456.569020][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 457.190853][ T42] wlan1: Trigger new scan to find an IBSS to join [ 458.621401][ T51] Bluetooth: hci4: command tx timeout [ 458.819074][ T8007] wlan1: Creating new IBSS network, BSSID 3a:5c:e4:bf:ae:dc [ 458.849424][T12310] team0: Port device wlan1 removed [ 459.005738][T12310] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 459.019600][T12317] FAULT_INJECTION: forcing a failure. [ 459.019600][T12317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.072087][T12317] CPU: 0 PID: 12317 Comm: syz.0.2172 Not tainted syzkaller #0 [ 459.079644][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 459.090179][T12317] Call Trace: [ 459.093500][T12317] [ 459.096496][T12317] dump_stack_lvl+0x18c/0x250 [ 459.101329][T12317] ? show_regs_print_info+0x20/0x20 [ 459.106580][T12317] ? load_image+0x420/0x420 [ 459.111228][T12317] ? __might_fault+0xaa/0x120 [ 459.115965][T12317] ? __lock_acquire+0x7d40/0x7d40 [ 459.121059][T12317] should_fail_ex+0x39d/0x4d0 [ 459.125820][T12317] _copy_from_user+0x2f/0xe0 [ 459.130481][T12317] br_dev_siocdevprivate+0x119/0x1540 [ 459.136008][T12317] ? do_raw_spin_unlock+0x121/0x230 [ 459.141271][T12317] ? br_handle_local_finish+0x20/0x20 [ 459.146976][T12317] ? __mutex_lock+0x956/0xcc0 [ 459.151887][T12317] ? __mutex_lock+0x4f9/0xcc0 [ 459.156983][T12317] ? dev_ioctl+0x83c/0x1140 [ 459.161613][T12317] ? mutex_lock_nested+0x20/0x20 [ 459.166688][T12317] ? full_name_hash+0x92/0xe0 [ 459.171701][T12317] ? dev_ifsioc+0x958/0xc40 [ 459.176352][T12317] dev_ioctl+0x84c/0x1140 [ 459.180783][T12317] sock_ioctl+0x74c/0x7e0 [ 459.185162][T12317] ? sock_poll+0x3e0/0x3e0 [ 459.189634][T12317] ? bpf_lsm_file_ioctl+0x9/0x10 [ 459.194634][T12317] ? security_file_ioctl+0x80/0xa0 [ 459.199879][T12317] ? sock_poll+0x3e0/0x3e0 [ 459.204351][T12317] __se_sys_ioctl+0xfd/0x170 [ 459.209094][T12317] do_syscall_64+0x55/0xa0 [ 459.213812][T12317] ? clear_bhb_loop+0x40/0x90 [ 459.218538][T12317] ? clear_bhb_loop+0x40/0x90 [ 459.223609][T12317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.229736][T12317] RIP: 0033:0x7f417459c819 [ 459.234288][T12317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.254214][T12317] RSP: 002b:00007f4175397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.262706][T12317] RAX: ffffffffffffffda RBX: 00007f4174815fa0 RCX: 00007f417459c819 [ 459.270747][T12317] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 459.278861][T12317] RBP: 00007f4175397090 R08: 0000000000000000 R09: 0000000000000000 [ 459.287093][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.295123][T12317] R13: 00007f4174816038 R14: 00007f4174815fa0 R15: 00007fff2fe90308 [ 459.303340][T12317] [ 460.191715][T12318] chnl_net:caif_netlink_parms(): no params data found [ 460.570240][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.577819][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.599532][T12318] bridge_slave_0: entered allmulticast mode [ 460.607484][T12318] bridge_slave_0: entered promiscuous mode [ 460.616777][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.624492][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.632292][T12318] bridge_slave_1: entered allmulticast mode [ 460.639642][T12318] bridge_slave_1: entered promiscuous mode [ 460.696027][T12318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.702253][ T51] Bluetooth: hci4: command tx timeout [ 460.725925][T12318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.851381][T12318] team0: Port device team_slave_0 added [ 460.862348][T12318] team0: Port device team_slave_1 added [ 460.899781][T12318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.907570][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.936487][T12318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.948360][T12345] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2179'. [ 460.967125][T12318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.976316][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.005149][T12318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.129549][T12318] hsr_slave_0: entered promiscuous mode [ 461.145243][T12318] hsr_slave_1: entered promiscuous mode [ 461.155344][T12318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.175336][T12318] Cannot create hsr debugfs directory [ 461.261043][ T49] wlan1: Trigger new scan to find an IBSS to join [ 461.390073][T12356] netlink: 'syz.1.2184': attribute type 10 has an invalid length. [ 462.781536][ T51] Bluetooth: hci4: command tx timeout [ 464.273477][T12356] team0: Port device wlan1 removed [ 464.287430][T12356] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 464.294715][T12356] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 464.312091][T12356] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 464.879039][ T51] Bluetooth: hci4: command tx timeout [ 465.387908][T12318] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.626932][T12318] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.678547][T12380] FAULT_INJECTION: forcing a failure. [ 465.678547][T12380] name failslab, interval 1, probability 0, space 0, times 0 [ 465.693867][T12380] CPU: 0 PID: 12380 Comm: syz.0.2192 Not tainted syzkaller #0 [ 465.701402][T12380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.711954][T12380] Call Trace: [ 465.715304][T12380] [ 465.718301][T12380] dump_stack_lvl+0x18c/0x250 [ 465.723047][T12380] ? show_regs_print_info+0x20/0x20 [ 465.728311][T12380] ? load_image+0x420/0x420 [ 465.732881][T12380] ? __might_sleep+0xe0/0xe0 [ 465.737544][T12380] ? __lock_acquire+0x7d40/0x7d40 [ 465.742722][T12380] should_fail_ex+0x39d/0x4d0 [ 465.747492][T12380] should_failslab+0x9/0x20 [ 465.752062][T12380] slab_pre_alloc_hook+0x59/0x310 [ 465.757250][T12380] ? call_usermodehelper_setup+0x8e/0x260 [ 465.763021][T12380] __kmem_cache_alloc_node+0x53/0x250 [ 465.768787][T12380] ? call_usermodehelper_setup+0x8e/0x260 [ 465.774567][T12380] kmalloc_trace+0x2a/0xe0 [ 465.779127][T12380] call_usermodehelper_setup+0x8e/0x260 [ 465.784730][T12380] ? __request_module+0x600/0x600 [ 465.789891][T12380] __request_module+0x3bb/0x600 [ 465.794862][T12380] ? end_current_label_crit_section+0x170/0x170 [ 465.801143][T12380] ? module_enforce_rwx_sections+0x150/0x150 [ 465.807229][T12380] ? apparmor_capable+0x137/0x1a0 [ 465.812297][T12380] ? capable+0x88/0xe0 [ 465.816437][T12380] ? dev_load+0x21/0x1f0 [ 465.820802][T12380] devinet_ioctl+0x133/0x1c40 [ 465.825519][T12380] ? __might_fault+0xc6/0x120 [ 465.830240][T12380] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 465.835389][T12380] ? _copy_from_user+0xa5/0xe0 [ 465.840536][T12380] ? get_user_ifreq+0x12b/0x180 [ 465.845420][T12380] inet_ioctl+0x392/0x560 [ 465.849782][T12380] ? tomoyo_path_number_perm+0x217/0x620 [ 465.855455][T12380] ? inet_shutdown+0x370/0x370 [ 465.860256][T12380] ? slab_free_freelist_hook+0x130/0x1a0 [ 465.865940][T12380] ? tomoyo_path_number_perm+0x500/0x620 [ 465.871636][T12380] ? __kmem_cache_free+0xba/0x1e0 [ 465.877258][T12380] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 465.882788][T12380] sock_do_ioctl+0xfc/0x310 [ 465.887336][T12380] ? sock_show_fdinfo+0xb0/0xb0 [ 465.892290][T12380] sock_ioctl+0x5ba/0x7e0 [ 465.896843][T12380] ? sock_poll+0x3e0/0x3e0 [ 465.901317][T12380] ? bpf_lsm_file_ioctl+0x9/0x10 [ 465.906384][T12380] ? security_file_ioctl+0x80/0xa0 [ 465.911786][T12380] ? sock_poll+0x3e0/0x3e0 [ 465.916494][T12380] __se_sys_ioctl+0xfd/0x170 [ 465.921128][T12380] do_syscall_64+0x55/0xa0 [ 465.925667][T12380] ? clear_bhb_loop+0x40/0x90 [ 465.930474][T12380] ? clear_bhb_loop+0x40/0x90 [ 465.935214][T12380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.941151][T12380] RIP: 0033:0x7f417459c819 [ 465.945690][T12380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.965425][T12380] RSP: 002b:00007f4175397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.973875][T12380] RAX: ffffffffffffffda RBX: 00007f4174815fa0 RCX: 00007f417459c819 [ 465.981879][T12380] RDX: 0000200000000100 RSI: 0000000000008915 RDI: 0000000000000003 [ 465.989880][T12380] RBP: 00007f4175397090 R08: 0000000000000000 R09: 0000000000000000 [ 465.997914][T12380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.006205][T12380] R13: 00007f4174816038 R14: 00007f4174815fa0 R15: 00007fff2fe90308 [ 466.014245][T12380] [ 466.105846][T12318] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.196076][T12318] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.232242][ T12] wlan1: Creating new IBSS network, BSSID 7a:98:e1:2e:23:71 [ 466.351086][T12387] netlink: 'syz.2.2194': attribute type 10 has an invalid length. [ 466.368727][T12387] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2194'. [ 466.400474][T12387] hsr0: entered promiscuous mode [ 466.499915][T12318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 466.510473][T12318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 466.522567][T12318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.534153][T12318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 466.630245][T12318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.660185][T12318] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.676012][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.683512][ T8017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.709103][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.716594][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.987671][T12318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.047850][T12318] veth0_vlan: entered promiscuous mode [ 467.063044][T12318] veth1_vlan: entered promiscuous mode [ 467.100004][T12318] veth0_macvtap: entered promiscuous mode [ 467.117442][T12318] veth1_macvtap: entered promiscuous mode [ 467.139590][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.150470][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.163175][T12318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.179252][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.190531][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.201723][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.212469][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.222725][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.237340][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.247684][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.265386][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.280547][T12318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.298393][T12318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.307337][T12318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.317185][T12318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.334044][T12318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.526835][T12404] FAULT_INJECTION: forcing a failure. [ 467.526835][T12404] name failslab, interval 1, probability 0, space 0, times 0 [ 467.557942][ T8007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.568223][T12404] CPU: 1 PID: 12404 Comm: syz.1.2197 Not tainted syzkaller #0 [ 467.575849][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 467.586005][T12404] Call Trace: [ 467.589384][T12404] [ 467.592368][T12404] dump_stack_lvl+0x18c/0x250 [ 467.597141][T12404] ? show_regs_print_info+0x20/0x20 [ 467.602429][T12404] ? load_image+0x420/0x420 [ 467.607008][T12404] ? __might_sleep+0xe0/0xe0 [ 467.611680][T12404] ? __lock_acquire+0x7d40/0x7d40 [ 467.616864][T12404] should_fail_ex+0x39d/0x4d0 [ 467.621618][T12404] should_failslab+0x9/0x20 [ 467.626187][T12404] slab_pre_alloc_hook+0x59/0x310 [ 467.631306][T12404] ? __get_vm_area_node+0x125/0x370 [ 467.636602][T12404] __kmem_cache_alloc_node+0x53/0x250 [ 467.642054][T12404] ? __get_vm_area_node+0x125/0x370 [ 467.647322][T12404] kmalloc_node_trace+0x26/0xe0 [ 467.652435][T12404] __get_vm_area_node+0x125/0x370 [ 467.657635][T12404] __vmalloc_node_range+0x36e/0x1330 [ 467.662996][T12404] ? netlink_sendmsg+0x602/0xbf0 [ 467.668095][T12404] ? netlink_insert+0x109f/0x13a0 [ 467.673216][T12404] ? netlink_data_ready+0x10/0x10 [ 467.678418][T12404] ? free_vm_area+0x50/0x50 [ 467.683219][T12404] ? netlink_sendmsg+0x602/0xbf0 [ 467.688280][T12404] vmalloc+0x79/0x90 [ 467.692244][T12404] ? netlink_sendmsg+0x602/0xbf0 [ 467.697257][T12404] netlink_sendmsg+0x602/0xbf0 [ 467.702124][T12404] ? netlink_getsockopt+0x590/0x590 [ 467.707573][T12404] ? aa_sock_msg_perm+0x94/0x150 [ 467.711197][ T8007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.712652][T12404] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 467.712684][T12404] ? security_socket_sendmsg+0x80/0xa0 [ 467.730918][T12404] ? netlink_getsockopt+0x590/0x590 [ 467.736736][T12404] ____sys_sendmsg+0x5ba/0x960 [ 467.741542][T12404] ? __asan_memset+0x22/0x40 [ 467.746169][T12404] ? __sys_sendmsg_sock+0x30/0x30 [ 467.751227][T12404] ? __import_iovec+0x5f2/0x850 [ 467.756122][T12404] ? import_iovec+0x73/0xa0 [ 467.760759][T12404] ___sys_sendmsg+0x2a6/0x360 [ 467.765476][T12404] ? get_pid_task+0x20/0x1e0 [ 467.770311][T12404] ? __sys_sendmsg+0x2a0/0x2a0 [ 467.775130][T12404] ? __lock_acquire+0x7d40/0x7d40 [ 467.780207][T12404] __se_sys_sendmsg+0x1c2/0x2b0 [ 467.785093][T12404] ? __x64_sys_sendmsg+0x80/0x80 [ 467.790409][T12404] ? lockdep_hardirqs_on+0x98/0x150 [ 467.795742][T12404] do_syscall_64+0x55/0xa0 [ 467.800286][T12404] ? clear_bhb_loop+0x40/0x90 [ 467.804998][T12404] ? clear_bhb_loop+0x40/0x90 [ 467.809711][T12404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.816074][T12404] RIP: 0033:0x7f985199c819 [ 467.820533][T12404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.840524][T12404] RSP: 002b:00007f98528dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.848996][T12404] RAX: ffffffffffffffda RBX: 00007f9851c16090 RCX: 00007f985199c819 [ 467.857042][T12404] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 467.865255][T12404] RBP: 00007f98528dc090 R08: 0000000000000000 R09: 0000000000000000 [ 467.873258][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.881446][T12404] R13: 00007f9851c16128 R14: 00007f9851c16090 R15: 00007ffdc35ee138 [ 467.889559][T12404] [ 467.902349][T12404] syz.1.2197: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 467.917625][T12404] CPU: 0 PID: 12404 Comm: syz.1.2197 Not tainted syzkaller #0 [ 467.925324][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 467.935441][T12404] Call Trace: [ 467.938774][T12404] [ 467.941753][T12404] dump_stack_lvl+0x18c/0x250 [ 467.946601][T12404] ? show_regs_print_info+0x20/0x20 [ 467.951864][T12404] ? load_image+0x420/0x420 [ 467.956448][T12404] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 467.962997][T12404] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 467.969570][T12404] warn_alloc+0x246/0x340 [ 467.973976][T12404] ? __get_vm_area_node+0x125/0x370 [ 467.979260][T12404] ? zone_watermark_ok_safe+0x230/0x230 [ 467.984884][T12404] ? rcu_is_watching+0x15/0xb0 [ 467.989794][T12404] ? __get_vm_area_node+0x356/0x370 [ 467.995165][T12404] __vmalloc_node_range+0x393/0x1330 [ 468.000529][T12404] ? netlink_insert+0x109f/0x13a0 [ 468.005723][T12404] ? netlink_data_ready+0x10/0x10 [ 468.010805][T12404] ? free_vm_area+0x50/0x50 [ 468.015628][T12404] ? netlink_sendmsg+0x602/0xbf0 [ 468.020616][T12404] vmalloc+0x79/0x90 [ 468.024663][T12404] ? netlink_sendmsg+0x602/0xbf0 [ 468.029741][T12404] netlink_sendmsg+0x602/0xbf0 [ 468.034581][T12404] ? netlink_getsockopt+0x590/0x590 [ 468.039917][T12404] ? aa_sock_msg_perm+0x94/0x150 [ 468.044987][T12404] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 468.050408][T12404] ? security_socket_sendmsg+0x80/0xa0 [ 468.055907][T12404] ? netlink_getsockopt+0x590/0x590 [ 468.061405][T12404] ____sys_sendmsg+0x5ba/0x960 [ 468.066218][T12404] ? __asan_memset+0x22/0x40 [ 468.070938][T12404] ? __sys_sendmsg_sock+0x30/0x30 [ 468.075998][T12404] ? __import_iovec+0x5f2/0x850 [ 468.081064][T12404] ? import_iovec+0x73/0xa0 [ 468.085615][T12404] ___sys_sendmsg+0x2a6/0x360 [ 468.090406][T12404] ? get_pid_task+0x20/0x1e0 [ 468.095044][T12404] ? __sys_sendmsg+0x2a0/0x2a0 [ 468.099870][T12404] ? __lock_acquire+0x7d40/0x7d40 [ 468.104949][T12404] __se_sys_sendmsg+0x1c2/0x2b0 [ 468.109926][T12404] ? __x64_sys_sendmsg+0x80/0x80 [ 468.114905][T12404] ? lockdep_hardirqs_on+0x98/0x150 [ 468.120145][T12404] do_syscall_64+0x55/0xa0 [ 468.124594][T12404] ? clear_bhb_loop+0x40/0x90 [ 468.129394][T12404] ? clear_bhb_loop+0x40/0x90 [ 468.134156][T12404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.140170][T12404] RIP: 0033:0x7f985199c819 [ 468.144620][T12404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.164276][T12404] RSP: 002b:00007f98528dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.172738][T12404] RAX: ffffffffffffffda RBX: 00007f9851c16090 RCX: 00007f985199c819 [ 468.180753][T12404] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 468.188949][T12404] RBP: 00007f98528dc090 R08: 0000000000000000 R09: 0000000000000000 [ 468.197187][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.205748][T12404] R13: 00007f9851c16128 R14: 00007f9851c16090 R15: 00007ffdc35ee138 [ 468.213815][T12404] [ 468.231593][ T1143] wlan1: Trigger new scan to find an IBSS to join [ 468.252513][T12407] netlink: 'syz.0.2196': attribute type 10 has an invalid length. [ 468.298076][T12404] Mem-Info: [ 468.306709][T12404] active_anon:5267 inactive_anon:0 isolated_anon:0 [ 468.306709][T12404] active_file:19407 inactive_file:40081 isolated_file:0 [ 468.306709][T12404] unevictable:768 dirty:180 writeback:0 [ 468.306709][T12404] slab_reclaimable:10428 slab_unreclaimable:95643 [ 468.306709][T12404] mapped:25977 shmem:1361 pagetables:471 [ 468.306709][T12404] sec_pagetables:0 bounce:0 [ 468.306709][T12404] kernel_misc_reclaimable:0 [ 468.306709][T12404] free:1332663 free_pcp:9582 free_cma:0 [ 468.358060][T12404] Node 0 active_anon:21068kB inactive_anon:0kB active_file:77628kB inactive_file:160124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103908kB dirty:720kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11116kB pagetables:1884kB sec_pagetables:0kB all_unreclaimable? no [ 468.393563][T12404] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 468.425686][T12404] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.519357][T12404] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 468.539790][T12404] Node 0 DMA32 free:1416684kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21132kB inactive_anon:0kB active_file:77628kB inactive_file:159296kB unevictable:1536kB writepending:716kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:19388kB local_pcp:10028kB free_cma:0kB [ 468.575301][T12404] lowmem_reserve[]: 0 0 0 0 0 [ 468.580302][T12404] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.608111][T12404] lowmem_reserve[]: 0 0 0 0 0 [ 468.614525][T12404] Node 1 Normal free:3898348kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18084kB local_pcp:11940kB free_cma:0kB [ 468.645673][T12404] lowmem_reserve[]: 0 0 0 0 0 [ 468.650590][T12404] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 468.668139][T12404] Node 0 DMA32: 1669*4kB (M) 1615*8kB (UME) 1294*16kB (UM) 1130*32kB (UME) 601*64kB (UME) 364*128kB (UME) 251*256kB (UME) 120*512kB (UME) 41*1024kB (UM) 3*2048kB (M) 264*4096kB (UM) = 1416684kB [ 468.715639][T12404] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 468.730560][T12404] Node 1 Normal: 255*4kB (UME) 56*8kB (UME) 31*16kB (UME) 66*32kB (UME) 16*64kB (UME) 10*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898348kB [ 468.763341][T12404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.777560][T12404] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.788058][T12404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.798924][T12404] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.811068][T12404] 60849 total pagecache pages [ 468.815821][T12404] 0 pages in swap cache [ 468.820169][T12404] Free swap = 124996kB [ 468.825043][T12404] Total swap = 124996kB [ 468.829264][T12404] 2097051 pages RAM [ 468.834947][T12404] 0 pages HighMem/MovableOnly [ 468.839693][T12404] 416927 pages reserved [ 468.848413][T12404] 0 pages cma reserved [ 470.421974][ T8017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.431724][ T8017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.880596][T12416] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2202'. [ 470.910426][T12416] net_ratelimit: 102 callbacks suppressed [ 470.910449][T12416] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 471.154557][T12424] netlink: 'syz.3.2203': attribute type 10 has an invalid length. [ 471.343338][T12424] team0: Device hsr_slave_0 failed to register rx_handler [ 471.534778][T12424] syz.3.2203 (12424) used greatest stack depth: 17448 bytes left [ 472.221434][ T42] wlan1: Creating new IBSS network, BSSID e6:cd:7e:57:2b:5e [ 473.803719][T12472] netlink: 'syz.0.2219': attribute type 10 has an invalid length. [ 473.941148][T12472] team0: Device hsr_slave_0 failed to register rx_handler [ 474.986373][T12472] syz.0.2219 (12472) used greatest stack depth: 16872 bytes left [ 476.882635][T12513] netlink: 'syz.1.2234': attribute type 10 has an invalid length. [ 477.053483][T12513] team0: Device hsr_slave_0 failed to register rx_handler [ 477.911160][T12542] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2244'. [ 478.189574][T12549] FAULT_INJECTION: forcing a failure. [ 478.189574][T12549] name failslab, interval 1, probability 0, space 0, times 0 [ 478.242991][T12549] CPU: 1 PID: 12549 Comm: syz.0.2246 Not tainted syzkaller #0 [ 478.250557][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.260778][T12549] Call Trace: [ 478.264209][T12549] [ 478.267199][T12549] dump_stack_lvl+0x18c/0x250 [ 478.271963][T12549] ? show_regs_print_info+0x20/0x20 [ 478.277323][T12549] ? load_image+0x420/0x420 [ 478.282251][T12549] ? __might_sleep+0xe0/0xe0 [ 478.286910][T12549] ? __lock_acquire+0x7d40/0x7d40 [ 478.292020][T12549] should_fail_ex+0x39d/0x4d0 [ 478.296987][T12549] should_failslab+0x9/0x20 [ 478.301586][T12549] slab_pre_alloc_hook+0x59/0x310 [ 478.306980][T12549] ? apparmor_sk_alloc_security+0x77/0x100 [ 478.312871][T12549] __kmem_cache_alloc_node+0x53/0x250 [ 478.318342][T12549] ? apparmor_sk_alloc_security+0x77/0x100 [ 478.324219][T12549] kmalloc_trace+0x2a/0xe0 [ 478.328774][T12549] apparmor_sk_alloc_security+0x77/0x100 [ 478.334475][T12549] security_sk_alloc+0x6e/0xa0 [ 478.339507][T12549] sk_prot_alloc+0x101/0x210 [ 478.344180][T12549] ? sk_alloc+0x24/0x360 [ 478.348518][T12549] sk_alloc+0x3a/0x360 [ 478.352659][T12549] ? bpf_ctx_init+0x163/0x1a0 [ 478.357412][T12549] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 478.363206][T12549] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 478.368651][T12549] ? __fget_files+0x28/0x4b0 [ 478.373311][T12549] ? __fget_files+0x28/0x4b0 [ 478.377976][T12549] ? __fget_files+0x43d/0x4b0 [ 478.383042][T12549] ? cpu_online+0x60/0x60 [ 478.387444][T12549] bpf_prog_test_run+0x321/0x390 [ 478.392465][T12549] __sys_bpf+0x49d/0x890 [ 478.396787][T12549] ? bpf_link_show_fdinfo+0x390/0x390 [ 478.402519][T12549] ? lock_chain_count+0x20/0x20 [ 478.407592][T12549] __x64_sys_bpf+0x7c/0x90 [ 478.412259][T12549] do_syscall_64+0x55/0xa0 [ 478.416792][T12549] ? clear_bhb_loop+0x40/0x90 [ 478.421540][T12549] ? clear_bhb_loop+0x40/0x90 [ 478.426300][T12549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.432257][T12549] RIP: 0033:0x7f417459c819 [ 478.436732][T12549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.457108][T12549] RSP: 002b:00007f4175376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.465605][T12549] RAX: ffffffffffffffda RBX: 00007f4174816090 RCX: 00007f417459c819 [ 478.473645][T12549] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 478.481705][T12549] RBP: 00007f4175376090 R08: 0000000000000000 R09: 0000000000000000 [ 478.489808][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.498080][T12549] R13: 00007f4174816128 R14: 00007f4174816090 R15: 00007fff2fe90308 [ 478.506198][T12549] [ 478.550501][T12551] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2247'. [ 482.471204][T12616] netlink: 'syz.0.2271': attribute type 3 has an invalid length. [ 482.479334][T12616] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2271'. [ 482.623941][T12618] netlink: 'syz.3.2272': attribute type 17 has an invalid length. [ 482.645961][T12618] netlink: 'syz.3.2272': attribute type 16 has an invalid length. [ 482.656473][T12618] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2272'. [ 482.728050][T12620] FAULT_INJECTION: forcing a failure. [ 482.728050][T12620] name failslab, interval 1, probability 0, space 0, times 0 [ 482.770867][T12620] CPU: 0 PID: 12620 Comm: syz.0.2273 Not tainted syzkaller #0 [ 482.778511][T12620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 482.788715][T12620] Call Trace: [ 482.792033][T12620] [ 482.794998][T12620] dump_stack_lvl+0x18c/0x250 [ 482.799727][T12620] ? show_regs_print_info+0x20/0x20 [ 482.805146][T12620] ? load_image+0x420/0x420 [ 482.809695][T12620] ? __might_sleep+0xe0/0xe0 [ 482.814411][T12620] ? __lock_acquire+0x7d40/0x7d40 [ 482.819474][T12620] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 482.825494][T12620] should_fail_ex+0x39d/0x4d0 [ 482.830218][T12620] should_failslab+0x9/0x20 [ 482.834767][T12620] slab_pre_alloc_hook+0x59/0x310 [ 482.839932][T12620] ? lockdep_hardirqs_on+0x98/0x150 [ 482.845166][T12620] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 482.850923][T12620] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 482.856505][T12620] __kmem_cache_alloc_node+0x53/0x250 [ 482.861918][T12620] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 482.867527][T12620] __kmalloc+0xa4/0x230 [ 482.871729][T12620] bpf_prog_test_run_skb+0x238/0x12b0 [ 482.877138][T12620] ? __fget_files+0x28/0x4b0 [ 482.881956][T12620] ? __fget_files+0x28/0x4b0 [ 482.886683][T12620] ? __fget_files+0x43d/0x4b0 [ 482.891613][T12620] ? cpu_online+0x60/0x60 [ 482.896108][T12620] bpf_prog_test_run+0x321/0x390 [ 482.901184][T12620] __sys_bpf+0x49d/0x890 [ 482.905498][T12620] ? bpf_link_show_fdinfo+0x390/0x390 [ 482.910999][T12620] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.917201][T12620] __x64_sys_bpf+0x7c/0x90 [ 482.921657][T12620] do_syscall_64+0x55/0xa0 [ 482.926277][T12620] ? clear_bhb_loop+0x40/0x90 [ 482.931012][T12620] ? clear_bhb_loop+0x40/0x90 [ 482.935726][T12620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.941670][T12620] RIP: 0033:0x7f417459c819 [ 482.946135][T12620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.965795][T12620] RSP: 002b:00007f4175397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.974253][T12620] RAX: ffffffffffffffda RBX: 00007f4174815fa0 RCX: 00007f417459c819 [ 482.982268][T12620] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 482.990407][T12620] RBP: 00007f4175397090 R08: 0000000000000000 R09: 0000000000000000 [ 482.998426][T12620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.006452][T12620] R13: 00007f4174816038 R14: 00007f4174815fa0 R15: 00007fff2fe90308 [ 483.014622][T12620] [ 483.672952][T12640] sctp: [Deprecated]: syz.0.2281 (pid 12640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.672952][T12640] Use struct sctp_sack_info instead [ 484.035350][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 484.165040][T12651] tun0: tun_chr_ioctl cmd 1074025694 [ 484.181392][T12649] tun0: tun_chr_ioctl cmd 1074025698 [ 484.353540][T12654] netlink: 'syz.1.2284': attribute type 17 has an invalid length. [ 484.371221][T12654] netlink: 'syz.1.2284': attribute type 16 has an invalid length. [ 484.404499][T12654] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2284'. [ 484.892113][T12668] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2291'. [ 484.917685][T12668] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 485.217076][T12676] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2294'. [ 485.570552][T12682] netlink: 'syz.1.2295': attribute type 10 has an invalid length. [ 485.610434][T12682] veth0_vlan: left promiscuous mode [ 485.633129][T12682] veth0_vlan: entered promiscuous mode [ 485.713139][T12682] team0: Device veth0_vlan failed to register rx_handler [ 486.243393][T12699] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.2300'. [ 486.268472][T12699] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 486.289843][T12700] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.2300'. [ 486.334878][T12700] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 486.406973][T12694] netlink: 'syz.0.2298': attribute type 17 has an invalid length. [ 486.421196][T12694] netlink: 'syz.0.2298': attribute type 16 has an invalid length. [ 486.430833][T12694] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2298'. [ 486.562567][T12706] FAULT_INJECTION: forcing a failure. [ 486.562567][T12706] name failslab, interval 1, probability 0, space 0, times 0 [ 486.606051][T12706] CPU: 1 PID: 12706 Comm: syz.1.2303 Not tainted syzkaller #0 [ 486.613637][T12706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 486.623997][T12706] Call Trace: [ 486.627333][T12706] [ 486.630301][T12706] dump_stack_lvl+0x18c/0x250 [ 486.635041][T12706] ? show_regs_print_info+0x20/0x20 [ 486.640558][T12706] ? load_image+0x420/0x420 [ 486.645202][T12706] should_fail_ex+0x39d/0x4d0 [ 486.650040][T12706] should_failslab+0x9/0x20 [ 486.654718][T12706] slab_pre_alloc_hook+0x59/0x310 [ 486.660167][T12706] kmem_cache_alloc+0x5a/0x2d0 [ 486.665021][T12706] ? __nf_conntrack_alloc+0x99/0x380 [ 486.670391][T12706] __nf_conntrack_alloc+0x99/0x380 [ 486.675563][T12706] init_conntrack+0x177/0xf10 [ 486.680404][T12706] ? early_drop+0x7f0/0x7f0 [ 486.684951][T12706] ? nf_conntrack_find_get+0x650/0x650 [ 486.690450][T12706] ? __siphash_unaligned+0x22e/0x3a0 [ 486.695779][T12706] nf_conntrack_in+0xc06/0x15c0 [ 486.700691][T12706] ? nf_ct_pernet+0x270/0x270 [ 486.705508][T12706] ? ip6t_do_table+0x1d9/0x1510 [ 486.710497][T12706] ? ip6t_alloc_initial_table+0x640/0x640 [ 486.716352][T12706] ? ipv6_defrag+0x2d6/0x3a0 [ 486.721019][T12706] ? ipv6_conntrack_in+0x20/0x20 [ 486.726005][T12706] nf_hook_slow+0xbd/0x200 [ 486.730487][T12706] __ip6_local_out+0x784/0x8a0 [ 486.735402][T12706] ? __ip6_local_out+0x60c/0x8a0 [ 486.740469][T12706] ? ip6_dst_hoplimit+0x350/0x350 [ 486.745630][T12706] ? __ip6_local_out+0x8a0/0x8a0 [ 486.750619][T12706] ? read_lock_is_recursive+0x20/0x20 [ 486.756159][T12706] ip6_local_out+0x2a/0x130 [ 486.760722][T12706] ? ip6_send_skb+0x10f/0x380 [ 486.765585][T12706] ip6_send_skb+0x1d5/0x380 [ 486.770147][T12706] rawv6_push_pending_frames+0x6ee/0x8d0 [ 486.775847][T12706] ? raw6_getfrag+0x3a0/0x3a0 [ 486.780575][T12706] ? rawv6_send_hdrinc+0x1640/0x1640 [ 486.786008][T12706] rawv6_sendmsg+0x131b/0x1770 [ 486.790846][T12706] ? compat_rawv6_ioctl+0x70/0x70 [ 486.796097][T12706] ? aa_sk_perm+0x83c/0x970 [ 486.800665][T12706] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 486.807123][T12706] ? inet_sendmsg+0x7c/0x2f0 [ 486.811808][T12706] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 486.817233][T12706] ? security_socket_sendmsg+0x80/0xa0 [ 486.822945][T12706] ? inet_send_prepare+0x260/0x260 [ 486.828192][T12706] ____sys_sendmsg+0x5ba/0x960 [ 486.833078][T12706] ? __lock_acquire+0x7d40/0x7d40 [ 486.838145][T12706] ? __asan_memset+0x22/0x40 [ 486.842853][T12706] ? __sys_sendmsg_sock+0x30/0x30 [ 486.848005][T12706] ? __import_iovec+0x5f2/0x850 [ 486.852901][T12706] ? import_iovec+0x73/0xa0 [ 486.857478][T12706] ___sys_sendmsg+0x2a6/0x360 [ 486.862230][T12706] ? get_pid_task+0x20/0x1e0 [ 486.866973][T12706] ? __sys_sendmsg+0x2a0/0x2a0 [ 486.871999][T12706] ? __lock_acquire+0x7d40/0x7d40 [ 486.877095][T12706] __se_sys_sendmsg+0x1c2/0x2b0 [ 486.882015][T12706] ? __x64_sys_sendmsg+0x80/0x80 [ 486.887040][T12706] ? lockdep_hardirqs_on+0x98/0x150 [ 486.892540][T12706] do_syscall_64+0x55/0xa0 [ 486.897258][T12706] ? clear_bhb_loop+0x40/0x90 [ 486.901978][T12706] ? clear_bhb_loop+0x40/0x90 [ 486.906783][T12706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.912796][T12706] RIP: 0033:0x7f985199c819 [ 486.917246][T12706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.936898][T12706] RSP: 002b:00007f98528fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.945374][T12706] RAX: ffffffffffffffda RBX: 00007f9851c15fa0 RCX: 00007f985199c819 [ 486.953467][T12706] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 486.961651][T12706] RBP: 00007f98528fd090 R08: 0000000000000000 R09: 0000000000000000 [ 486.969830][T12706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.977832][T12706] R13: 00007f9851c16038 R14: 00007f9851c15fa0 R15: 00007ffdc35ee138 [ 486.985938][T12706] [ 488.041859][T12730] netlink: 'syz.0.2313': attribute type 17 has an invalid length. [ 488.049854][T12730] netlink: 'syz.0.2313': attribute type 16 has an invalid length. [ 488.100971][T12730] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2313'. [ 488.426606][T12734] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 488.467022][T12734] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2315'. [ 488.646924][T12747] FAULT_INJECTION: forcing a failure. [ 488.646924][T12747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.673503][T12747] CPU: 1 PID: 12747 Comm: syz.1.2318 Not tainted syzkaller #0 [ 488.681243][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 488.691376][T12747] Call Trace: [ 488.694791][T12747] [ 488.697862][T12747] dump_stack_lvl+0x18c/0x250 [ 488.702727][T12747] ? show_regs_print_info+0x20/0x20 [ 488.708010][T12747] ? load_image+0x420/0x420 [ 488.712856][T12747] ? __lock_acquire+0x7d40/0x7d40 [ 488.718094][T12747] ? snprintf+0xe9/0x140 [ 488.723658][T12747] should_fail_ex+0x39d/0x4d0 [ 488.728448][T12747] _copy_to_user+0x2f/0xa0 [ 488.733070][T12747] simple_read_from_buffer+0xe7/0x150 [ 488.738607][T12747] proc_fail_nth_read+0x1e8/0x260 [ 488.743712][T12747] ? proc_fault_inject_write+0x360/0x360 [ 488.749442][T12747] ? fsnotify_perm+0x271/0x5e0 [ 488.754713][T12747] ? proc_fault_inject_write+0x360/0x360 [ 488.760428][T12747] vfs_read+0x28b/0x970 [ 488.764827][T12747] ? kernel_read+0x1e0/0x1e0 [ 488.769617][T12747] ? __fget_files+0x28/0x4b0 [ 488.774268][T12747] ? __fget_files+0x28/0x4b0 [ 488.779133][T12747] ? __fget_files+0x43d/0x4b0 [ 488.783972][T12747] ? __fdget_pos+0x2a3/0x330 [ 488.788611][T12747] ? ksys_read+0x75/0x260 [ 488.792999][T12747] ksys_read+0x150/0x260 [ 488.797573][T12747] ? vfs_write+0x990/0x990 [ 488.802156][T12747] ? lockdep_hardirqs_on+0x98/0x150 [ 488.807425][T12747] do_syscall_64+0x55/0xa0 [ 488.811888][T12747] ? clear_bhb_loop+0x40/0x90 [ 488.816808][T12747] ? clear_bhb_loop+0x40/0x90 [ 488.821571][T12747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.827517][T12747] RIP: 0033:0x7f985195d04e [ 488.831992][T12747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 488.852103][T12747] RSP: 002b:00007f98528dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.860587][T12747] RAX: ffffffffffffffda RBX: 00007f98528dc6c0 RCX: 00007f985195d04e [ 488.868630][T12747] RDX: 000000000000000f RSI: 00007f98528dc0a0 RDI: 0000000000000008 [ 488.876755][T12747] RBP: 00007f98528dc090 R08: 0000000000000000 R09: 0000000000000000 [ 488.884776][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.892795][T12747] R13: 00007f9851c16128 R14: 00007f9851c16090 R15: 00007ffdc35ee138 [ 488.900848][T12747] [ 489.794628][T12765] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2324'. [ 490.005371][T12768] netlink: 'syz.2.2325': attribute type 17 has an invalid length. [ 490.027437][T12768] netlink: 'syz.2.2325': attribute type 16 has an invalid length. [ 490.046280][T12768] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2325'. [ 490.314942][T12774] FAULT_INJECTION: forcing a failure. [ 490.314942][T12774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.384095][T12774] CPU: 0 PID: 12774 Comm: syz.3.2326 Not tainted syzkaller #0 [ 490.391670][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 490.401871][T12774] Call Trace: [ 490.405207][T12774] [ 490.408224][T12774] dump_stack_lvl+0x18c/0x250 [ 490.413036][T12774] ? show_regs_print_info+0x20/0x20 [ 490.418334][T12774] ? load_image+0x420/0x420 [ 490.423014][T12774] ? __lock_acquire+0x7d40/0x7d40 [ 490.428215][T12774] ? snprintf+0xe9/0x140 [ 490.432639][T12774] should_fail_ex+0x39d/0x4d0 [ 490.437404][T12774] _copy_to_user+0x2f/0xa0 [ 490.441899][T12774] simple_read_from_buffer+0xe7/0x150 [ 490.447352][T12774] proc_fail_nth_read+0x1e8/0x260 [ 490.452450][T12774] ? proc_fault_inject_write+0x360/0x360 [ 490.458712][T12774] ? fsnotify_perm+0x271/0x5e0 [ 490.463592][T12774] ? proc_fault_inject_write+0x360/0x360 [ 490.469480][T12774] vfs_read+0x28b/0x970 [ 490.473758][T12774] ? kernel_read+0x1e0/0x1e0 [ 490.478422][T12774] ? __fget_files+0x28/0x4b0 [ 490.483081][T12774] ? __fget_files+0x28/0x4b0 [ 490.487742][T12774] ? __fget_files+0x43d/0x4b0 [ 490.492503][T12774] ? __fdget_pos+0x2a3/0x330 [ 490.497167][T12774] ? ksys_read+0x75/0x260 [ 490.501602][T12774] ksys_read+0x150/0x260 [ 490.506066][T12774] ? vfs_write+0x990/0x990 [ 490.510521][T12774] ? lockdep_hardirqs_on+0x98/0x150 [ 490.515765][T12774] do_syscall_64+0x55/0xa0 [ 490.520219][T12774] ? clear_bhb_loop+0x40/0x90 [ 490.524931][T12774] ? clear_bhb_loop+0x40/0x90 [ 490.529679][T12774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.535608][T12774] RIP: 0033:0x7f6e35f5d04e [ 490.540054][T12774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.560357][T12774] RSP: 002b:00007f6e36dc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.568989][T12774] RAX: ffffffffffffffda RBX: 00007f6e36dca6c0 RCX: 00007f6e35f5d04e [ 490.576994][T12774] RDX: 000000000000000f RSI: 00007f6e36dca0a0 RDI: 000000000000000b [ 490.585006][T12774] RBP: 00007f6e36dca090 R08: 0000000000000000 R09: 0000000000000000 [ 490.593100][T12774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.601103][T12774] R13: 00007f6e36216128 R14: 00007f6e36216090 R15: 00007fffcf7dd308 [ 490.609213][T12774] [ 490.865023][T12781] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.2331'. [ 490.913978][T12781] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 491.472928][T12793] FAULT_INJECTION: forcing a failure. [ 491.472928][T12793] name failslab, interval 1, probability 0, space 0, times 0 [ 491.547012][T12793] CPU: 1 PID: 12793 Comm: syz.1.2335 Not tainted syzkaller #0 [ 491.554668][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 491.565296][T12793] Call Trace: [ 491.568628][T12793] [ 491.571603][T12793] dump_stack_lvl+0x18c/0x250 [ 491.576366][T12793] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.582591][T12793] ? show_regs_print_info+0x20/0x20 [ 491.587868][T12793] ? load_image+0x420/0x420 [ 491.592463][T12793] should_fail_ex+0x39d/0x4d0 [ 491.597246][T12793] should_failslab+0x9/0x20 [ 491.601912][T12793] slab_pre_alloc_hook+0x59/0x310 [ 491.607098][T12793] ? bpf_test_init+0x9f/0x140 [ 491.611837][T12793] ? bpf_test_init+0x9f/0x140 [ 491.616607][T12793] __kmem_cache_alloc_node+0x53/0x250 [ 491.622137][T12793] ? bpf_test_init+0x9f/0x140 [ 491.626871][T12793] __kmalloc+0xa4/0x230 [ 491.631106][T12793] bpf_test_init+0x9f/0x140 [ 491.635677][T12793] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 491.641130][T12793] ? dev_put+0x80/0x80 [ 491.645332][T12793] ? dev_put+0x80/0x80 [ 491.649461][T12793] bpf_prog_test_run+0x321/0x390 [ 491.654460][T12793] __sys_bpf+0x49d/0x890 [ 491.658852][T12793] ? bpf_link_show_fdinfo+0x390/0x390 [ 491.664450][T12793] ? lock_chain_count+0x20/0x20 [ 491.669373][T12793] __x64_sys_bpf+0x7c/0x90 [ 491.674021][T12793] do_syscall_64+0x55/0xa0 [ 491.678500][T12793] ? clear_bhb_loop+0x40/0x90 [ 491.683335][T12793] ? clear_bhb_loop+0x40/0x90 [ 491.688172][T12793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.694147][T12793] RIP: 0033:0x7f985199c819 [ 491.698667][T12793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.718696][T12793] RSP: 002b:00007f98528fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.727191][T12793] RAX: ffffffffffffffda RBX: 00007f9851c15fa0 RCX: 00007f985199c819 [ 491.735229][T12793] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 491.743296][T12793] RBP: 00007f98528fd090 R08: 0000000000000000 R09: 0000000000000000 [ 491.751461][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.759560][T12793] R13: 00007f9851c16038 R14: 00007f9851c15fa0 R15: 00007ffdc35ee138 [ 491.767679][T12793] [ 491.903363][T12799] netlink: 'syz.2.2337': attribute type 17 has an invalid length. [ 491.940424][T12801] FAULT_INJECTION: forcing a failure. [ 491.940424][T12801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.964752][T12801] CPU: 1 PID: 12801 Comm: syz.0.2338 Not tainted syzkaller #0 [ 491.965454][T12799] netlink: 'syz.2.2337': attribute type 16 has an invalid length. [ 491.972554][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 491.972572][T12801] Call Trace: [ 491.972583][T12801] [ 491.972594][T12801] dump_stack_lvl+0x18c/0x250 [ 491.972642][T12801] ? show_regs_print_info+0x20/0x20 [ 491.972679][T12801] ? load_image+0x420/0x420 [ 491.972715][T12801] ? __might_fault+0xaa/0x120 [ 491.972743][T12801] ? __lock_acquire+0x7d40/0x7d40 [ 492.021513][T12801] should_fail_ex+0x39d/0x4d0 [ 492.026257][T12801] _copy_from_user+0x2f/0xe0 [ 492.030917][T12801] ___sys_sendmsg+0x1c7/0x360 [ 492.035838][T12801] ? __sys_sendmsg+0x2a0/0x2a0 [ 492.040789][T12801] ? __lock_acquire+0x7d40/0x7d40 [ 492.045921][T12801] __se_sys_sendmsg+0x1c2/0x2b0 [ 492.051006][T12801] ? __x64_sys_sendmsg+0x80/0x80 [ 492.056103][T12801] ? lockdep_hardirqs_on+0x98/0x150 [ 492.061361][T12801] do_syscall_64+0x55/0xa0 [ 492.065909][T12801] ? clear_bhb_loop+0x40/0x90 [ 492.070634][T12801] ? clear_bhb_loop+0x40/0x90 [ 492.075374][T12801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.081317][T12801] RIP: 0033:0x7f417459c819 [ 492.085782][T12801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.105533][T12801] RSP: 002b:00007f4175397028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.114006][T12801] RAX: ffffffffffffffda RBX: 00007f4174815fa0 RCX: 00007f417459c819 [ 492.122222][T12801] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 492.130322][T12801] RBP: 00007f4175397090 R08: 0000000000000000 R09: 0000000000000000 [ 492.138640][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.146659][T12801] R13: 00007f4174816038 R14: 00007f4174815fa0 R15: 00007fff2fe90308 [ 492.154796][T12801] [ 492.173193][T12799] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2337'. [ 493.712927][T12828] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2346'. [ 493.789710][T12828] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 494.252701][ T8023] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 494.554540][T12838] netlink: 'syz.2.2349': attribute type 17 has an invalid length. [ 494.607733][T12838] netlink: 'syz.2.2349': attribute type 16 has an invalid length. [ 494.629410][T12838] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2349'. [ 495.683396][T12864] bridge_slave_1: left allmulticast mode [ 495.767306][T12864] bridge_slave_1: left promiscuous mode [ 495.798985][T12864] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.914335][T12864] bridge_slave_0: left allmulticast mode [ 495.937084][T12864] bridge_slave_0: left promiscuous mode [ 495.952499][T12864] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.702997][T12878] netlink: 'syz.2.2363': attribute type 17 has an invalid length. [ 496.760726][T12878] netlink: 'syz.2.2363': attribute type 16 has an invalid length. [ 496.772269][T12878] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2363'. [ 497.163795][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 498.082303][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.094186][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.103075][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.122417][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.133827][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 498.143728][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.368987][T12908] netlink: 'syz.3.2376': attribute type 17 has an invalid length. [ 498.377693][T12908] netlink: 'syz.3.2376': attribute type 16 has an invalid length. [ 498.387245][T12908] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2376'. [ 498.752772][T12918] bridge0: port 3(batadv0) entered disabled state [ 498.877093][T12918] bridge_slave_1: left allmulticast mode [ 498.895884][T12918] bridge_slave_1: left promiscuous mode [ 498.908160][T12918] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.026167][T12918] bridge_slave_0: left allmulticast mode [ 499.040477][T12918] bridge_slave_0: left promiscuous mode [ 499.088522][T12918] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.639815][T12901] chnl_net:caif_netlink_parms(): no params data found [ 499.793760][T12901] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.801341][T12901] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.808734][T12901] bridge_slave_0: entered allmulticast mode [ 499.816439][T12901] bridge_slave_0: entered promiscuous mode [ 499.825878][T12901] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.833882][T12901] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.841267][T12901] bridge_slave_1: entered allmulticast mode [ 499.849145][T12901] bridge_slave_1: entered promiscuous mode [ 499.891939][T12901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.906213][T12901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.942918][T12901] team0: Port device team_slave_0 added [ 499.952821][T12901] team0: Port device team_slave_1 added [ 499.984306][T12901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.992244][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.019132][T12901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.034585][T12901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.041788][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.068348][T12901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.117605][T12901] hsr_slave_0: entered promiscuous mode [ 500.124598][T12901] hsr_slave_1: entered promiscuous mode [ 500.131096][T12901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.138912][T12901] Cannot create hsr debugfs directory [ 500.221315][ T51] Bluetooth: hci3: command tx timeout [ 500.303093][T12901] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.438894][T12901] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.468158][T12941] netlink: 'syz.3.2385': attribute type 17 has an invalid length. [ 500.477458][T12941] netlink: 'syz.3.2385': attribute type 16 has an invalid length. [ 500.485747][T12941] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2385'. [ 500.492796][ T8023] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.573314][T12901] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.912610][T12901] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.933083][T12901] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 500.945394][T12901] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 500.961176][T12901] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.127130][T12957] netlink: 'syz.3.2389': attribute type 10 has an invalid length. [ 501.245959][T12957] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 501.271070][T12901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.312198][T12901] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.336437][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.343724][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.396725][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.404073][ T8023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.837134][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.843833][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.017511][T12901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.132041][T12901] veth0_vlan: entered promiscuous mode [ 502.171073][T12901] veth1_vlan: entered promiscuous mode [ 502.229766][T12901] veth0_macvtap: entered promiscuous mode [ 502.255679][T12901] veth1_macvtap: entered promiscuous mode [ 502.281198][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.295612][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.302803][ T51] Bluetooth: hci3: command tx timeout [ 502.319525][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.330859][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.344434][T12901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.361848][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.372801][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.382951][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.393773][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.403979][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.414611][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.425034][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.436100][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.450011][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.463793][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.478333][T12901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.499543][T12901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.509110][T12901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.519271][T12901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.528614][T12901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.617691][ T8023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.634183][ T8023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.666780][ T8007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.675690][ T8007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.547342][T12985] bridge_slave_1: left allmulticast mode [ 503.590239][T12985] bridge_slave_1: left promiscuous mode [ 503.633254][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.829292][T12985] bridge_slave_0: left allmulticast mode [ 503.836445][T12985] bridge_slave_0: left promiscuous mode [ 503.849226][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.381987][ T51] Bluetooth: hci3: command tx timeout [ 504.551684][T13000] netlink: 'syz.0.2396': attribute type 17 has an invalid length. [ 504.569181][T13000] netlink: 'syz.0.2396': attribute type 16 has an invalid length. [ 504.588150][T13000] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2396'. [ 504.692999][T13006] netlink: 'syz.0.2400': attribute type 10 has an invalid length. [ 504.870412][T13008] netlink: 'syz.3.2404': attribute type 9 has an invalid length. [ 504.895328][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 504.904343][T13008] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2404'. [ 504.931131][T13008] netlink: 'syz.3.2404': attribute type 41 has an invalid length. [ 504.970891][T13008] netlink: 'syz.3.2404': attribute type 41 has an invalid length. [ 505.126357][T13017] FAULT_INJECTION: forcing a failure. [ 505.126357][T13017] name failslab, interval 1, probability 0, space 0, times 0 [ 505.140537][T13017] CPU: 0 PID: 13017 Comm: syz.0.2408 Not tainted syzkaller #0 [ 505.148105][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 505.158333][T13017] Call Trace: [ 505.161660][T13017] [ 505.164631][T13017] dump_stack_lvl+0x18c/0x250 [ 505.169384][T13017] ? show_regs_print_info+0x20/0x20 [ 505.174662][T13017] ? load_image+0x420/0x420 [ 505.179229][T13017] ? __might_sleep+0xe0/0xe0 [ 505.183880][T13017] ? __lock_acquire+0x7d40/0x7d40 [ 505.189140][T13017] should_fail_ex+0x39d/0x4d0 [ 505.193889][T13017] should_failslab+0x9/0x20 [ 505.198490][T13017] slab_pre_alloc_hook+0x59/0x310 [ 505.203759][T13017] ? tomoyo_encode+0x28b/0x540 [ 505.208573][T13017] ? tomoyo_encode+0x28b/0x540 [ 505.213386][T13017] __kmem_cache_alloc_node+0x53/0x250 [ 505.218823][T13017] ? tomoyo_encode+0x28b/0x540 [ 505.223621][T13017] __kmalloc+0xa4/0x230 [ 505.227837][T13017] tomoyo_encode+0x28b/0x540 [ 505.232602][T13017] tomoyo_realpath_from_path+0x592/0x5d0 [ 505.238279][T13017] tomoyo_path_number_perm+0x248/0x620 [ 505.243779][T13017] ? tomoyo_path_number_perm+0x217/0x620 [ 505.249534][T13017] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 505.255119][T13017] ? ktime_get+0x7f/0x280 [ 505.259510][T13017] ? __fget_files+0x28/0x4b0 [ 505.264137][T13017] ? __fget_files+0x28/0x4b0 [ 505.268771][T13017] security_file_ioctl+0x70/0xa0 [ 505.273743][T13017] __se_sys_ioctl+0x48/0x170 [ 505.278410][T13017] do_syscall_64+0x55/0xa0 [ 505.282891][T13017] ? clear_bhb_loop+0x40/0x90 [ 505.287601][T13017] ? clear_bhb_loop+0x40/0x90 [ 505.292331][T13017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.298405][T13017] RIP: 0033:0x7f417459c819 [ 505.302872][T13017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.322993][T13017] RSP: 002b:00007f4175397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.331453][T13017] RAX: ffffffffffffffda RBX: 00007f4174815fa0 RCX: 00007f417459c819 [ 505.339453][T13017] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000036 [ 505.347555][T13017] RBP: 00007f4175397090 R08: 0000000000000000 R09: 0000000000000000 [ 505.355560][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.363558][T13017] R13: 00007f4174816038 R14: 00007f4174815fa0 R15: 00007fff2fe90308 [ 505.371665][T13017] [ 505.446448][T13017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.797736][T13027] netlink: 'syz.0.2411': attribute type 10 has an invalid length. [ 506.096815][T13034] netlink: 'syz.2.2415': attribute type 10 has an invalid length. [ 506.257707][T13040] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 506.296860][T13040] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.2417'. [ 506.462697][ T51] Bluetooth: hci3: command tx timeout [ 507.322096][T13065] netlink: 'syz.0.2427': attribute type 10 has an invalid length. [ 507.347885][T13067] netlink: 'syz.1.2428': attribute type 17 has an invalid length. [ 507.361900][T13067] netlink: 'syz.1.2428': attribute type 16 has an invalid length. [ 507.369999][T13067] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2428'. [ 507.634166][T13074] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2431'. [ 507.652770][T13074] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2431'. [ 507.682541][T13076] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2431'. [ 508.377508][T13093] netlink: 'syz.3.2438': attribute type 10 has an invalid length. [ 509.283333][T13106] netlink: 'syz.2.2442': attribute type 17 has an invalid length. [ 509.297161][T13106] netlink: 'syz.2.2442': attribute type 16 has an invalid length. [ 509.318819][T13106] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2442'. [ 510.197968][T13123] netlink: 'syz.0.2449': attribute type 10 has an invalid length. [ 511.039860][T13138] netlink: 'syz.2.2454': attribute type 10 has an invalid length. [ 511.183197][T13138] veth0_vlan: left promiscuous mode [ 511.202675][T13138] veth0_vlan: entered promiscuous mode [ 511.266446][T13138] batman_adv: batadv0: Interface activated: vlan1 [ 511.318820][T13138] team0: Device veth0_vlan failed to register rx_handler [ 511.929999][T13138] batman_adv: batadv0: Interface deactivated: vlan1 [ 512.113660][T13153] netlink: 'syz.0.2461': attribute type 10 has an invalid length. [ 512.444775][T13162] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2465'. [ 512.471720][T13162] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2465'. [ 512.497350][T13162] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2465'. [ 512.923237][T13180] netlink: 'syz.1.2472': attribute type 10 has an invalid length. [ 513.155065][T13185] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2473'. [ 513.179185][T13185] netlink: del zone limit has 8 unknown bytes [ 513.830450][T13180] veth0_vlan: left promiscuous mode [ 513.894318][T13180] veth0_vlan: entered promiscuous mode [ 513.925523][T13180] team0: Device veth0_vlan failed to register rx_handler [ 514.114065][T13195] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 514.505991][T13212] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2482'. [ 514.548072][T13212] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2482'. [ 514.593230][T13212] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2482'. [ 514.989429][T13225] netlink: 'syz.1.2488': attribute type 10 has an invalid length. [ 515.230099][T13225] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 515.711995][T13236] netlink: 'syz.0.2490': attribute type 21 has an invalid length. [ 515.721068][T13241] netlink: 'syz.3.2493': attribute type 17 has an invalid length. [ 515.749352][T13241] netlink: 'syz.3.2493': attribute type 16 has an invalid length. [ 515.776867][T13241] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2493'. [ 516.313861][T13244] netlink: 'syz.2.2494': attribute type 10 has an invalid length. [ 516.333256][T13244] veth0_vlan: left promiscuous mode [ 516.358480][T13244] veth0_vlan: entered promiscuous mode [ 516.448372][T13244] batman_adv: batadv0: Interface activated: vlan1 [ 516.468520][T13244] team0: Device veth0_vlan failed to register rx_handler [ 516.754395][T13244] batman_adv: batadv0: Interface deactivated: vlan1 [ 517.671739][T13263] netlink: 'syz.2.2500': attribute type 10 has an invalid length. [ 518.236777][T13271] netlink: 'syz.3.2504': attribute type 17 has an invalid length. [ 518.274288][T13271] netlink: 'syz.3.2504': attribute type 16 has an invalid length. [ 518.300416][T13271] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2504'. [ 518.684573][T13288] netlink: 'syz.1.2509': attribute type 10 has an invalid length. [ 518.733494][T13288] veth0_vlan: left promiscuous mode [ 518.867822][T13288] veth0_vlan: entered promiscuous mode [ 518.986928][T13288] team0: Device veth0_vlan failed to register rx_handler [ 519.695161][T13306] netlink: 'syz.0.2515': attribute type 10 has an invalid length. [ 519.981662][T13317] netlink: 'syz.2.2518': attribute type 17 has an invalid length. [ 519.990277][T13317] netlink: 'syz.2.2518': attribute type 16 has an invalid length. [ 520.008116][T13317] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2518'. [ 521.037721][ T8023] bond0: (slave wlan1): Releasing backup interface [ 521.050045][ T8023] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 521.079191][ T8023] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 521.142933][T13344] netlink: 'syz.0.2528': attribute type 10 has an invalid length. [ 521.238791][T13349] netlink: 'syz.1.2530': attribute type 17 has an invalid length. [ 521.275910][T13349] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2530'. [ 521.700794][T13352] validate_nla: 1 callbacks suppressed [ 521.700814][T13352] netlink: 'syz.3.2529': attribute type 21 has an invalid length. [ 522.311488][ T8023] hsr_slave_0: left promiscuous mode [ 522.318984][ T8023] hsr_slave_1: left promiscuous mode [ 522.327505][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.340300][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.353056][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.361392][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.398538][ T8023] bridge_slave_1: left allmulticast mode [ 522.418473][ T8023] bridge_slave_1: left promiscuous mode [ 522.432975][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.509269][ T8023] bridge_slave_0: left allmulticast mode [ 522.519295][ T8023] bridge_slave_0: left promiscuous mode [ 522.534789][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.690415][ T8023] veth1_macvtap: left promiscuous mode [ 522.703198][ T8023] veth1_vlan: left promiscuous mode [ 523.591802][ T8023] team0 (unregistering): Port device geneve1 removed [ 523.726212][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 523.739227][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 523.748997][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 523.758058][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 523.766663][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 523.786107][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 524.366882][ T8023] team0 (unregistering): Port device team_slave_1 removed [ 524.423827][ T8023] team0 (unregistering): Port device team_slave_0 removed [ 524.476810][ T8023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.489306][ T8023] bond_slave_1 (unregistering): left promiscuous mode [ 524.496557][ T8023] bond_slave_1 (unregistering): left allmulticast mode [ 524.554887][ T8023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.566528][ T8023] bond_slave_0 (unregistering): left promiscuous mode [ 524.573969][ T8023] bond_slave_0 (unregistering): left allmulticast mode [ 524.967502][ T8023] team0 (unregistering): Port device bond0 removed [ 525.009030][ T8023] bond0 (unregistering): Released all slaves [ 525.114139][T13376] netlink: 'syz.2.2539': attribute type 10 has an invalid length. [ 525.307302][T13388] netlink: 'syz.2.2540': attribute type 17 has an invalid length. [ 525.317614][T13388] netlink: 'syz.2.2540': attribute type 16 has an invalid length. [ 525.348195][T13388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2540'. [ 525.901755][ T51] Bluetooth: hci0: command tx timeout [ 525.995833][T13401] netlink: 'syz.1.2545': attribute type 10 has an invalid length. [ 526.050369][T13401] veth0_vlan: left promiscuous mode [ 526.106434][T13401] veth0_vlan: entered promiscuous mode [ 526.160136][T13401] team0: Device veth0_vlan failed to register rx_handler [ 526.392584][T13409] netlink: 'syz.2.2547': attribute type 10 has an invalid length. [ 526.428216][T13382] chnl_net:caif_netlink_parms(): no params data found [ 526.631447][T13382] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.639026][T13382] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.647317][T13382] bridge_slave_0: entered allmulticast mode [ 526.655169][T13382] bridge_slave_0: entered promiscuous mode [ 526.664592][T13382] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.674874][T13382] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.682584][T13382] bridge_slave_1: entered allmulticast mode [ 526.690587][T13382] bridge_slave_1: entered promiscuous mode [ 526.738928][ T8023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.887288][ T8023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.919474][T13382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.969061][T13382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.059074][ T8023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.158159][T13382] team0: Port device team_slave_0 added [ 527.183403][T13382] team0: Port device team_slave_1 added [ 527.219899][ T8023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.246921][T13382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.258735][T13382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.293344][T13382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.310075][T13382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.321299][T13382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.348714][T13382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.400185][T13382] hsr_slave_0: entered promiscuous mode [ 527.406933][T13382] hsr_slave_1: entered promiscuous mode [ 527.414156][T13382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.422871][T13382] Cannot create hsr debugfs directory [ 527.980996][ T51] Bluetooth: hci0: command tx timeout [ 528.440229][ T8023] bond0: (slave wlan1): Releasing backup interface [ 528.598488][T13382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 528.609617][T13382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 528.632446][T13382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 528.650029][T13382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 528.717837][ T8023] hsr_slave_0: left promiscuous mode [ 528.728719][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.736488][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.745694][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.760752][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.770254][ T8023] batman_adv: batadv0: Removing interface: vlan1 [ 528.796864][ T8023] veth1_macvtap: left promiscuous mode [ 528.803067][ T8023] veth1_vlan: left promiscuous mode [ 529.028251][ T8023] team0 (unregistering): Port device geneve1 removed [ 529.525833][ T8023] team0 (unregistering): Port device team_slave_1 removed [ 529.580266][ T8023] team0 (unregistering): Port device team_slave_0 removed [ 529.637496][ T8023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.696158][ T8023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.032707][ T8023] team0 (unregistering): Port device bond0 removed [ 530.067067][ T51] Bluetooth: hci0: command tx timeout [ 530.076223][ T8023] bond0 (unregistering): Released all slaves [ 530.229488][T13382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.260440][T13382] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.275014][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.282461][ T8007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.319540][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.326769][ T8007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.582976][T13382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.637351][T13382] veth0_vlan: entered promiscuous mode [ 530.650473][T13382] veth1_vlan: entered promiscuous mode [ 530.686831][T13382] veth0_macvtap: entered promiscuous mode [ 530.699284][T13382] veth1_macvtap: entered promiscuous mode [ 530.719971][T13382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.730920][T13382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.741485][T13382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.754224][T13382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.764925][T13382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.775981][T13382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.788104][T13382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.806980][T13382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.818038][T13382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.832679][T13382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.843566][T13382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.853965][T13382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.866050][T13382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.876237][T13382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.886816][T13382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.898626][T13382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.914755][T13382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.923643][T13382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.933081][T13382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.950120][T13382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.033278][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.047679][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.081918][ T8007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.089987][ T8007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.143829][ T51] Bluetooth: hci0: command tx timeout [ 532.816989][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 532.831320][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 532.843011][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 532.884393][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 532.893925][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 532.902162][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 532.967574][ T8023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.017267][T13480] netlink: 'syz.3.2556': attribute type 10 has an invalid length. [ 533.518414][T13480] veth0_vlan: left promiscuous mode [ 533.649534][T13480] veth0_vlan: entered promiscuous mode [ 533.684393][T13480] team0: Device veth0_vlan failed to register rx_handler [ 533.769219][T13483] netlink: 'syz.1.2557': attribute type 10 has an invalid length. [ 533.937583][ T8023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.972543][T13494] netlink: 'syz.3.2563': attribute type 10 has an invalid length. [ 533.998755][T13494] veth0_vlan: left promiscuous mode [ 534.031408][T13494] veth0_vlan: entered promiscuous mode [ 534.049580][T13494] team0: Device veth0_vlan failed to register rx_handler [ 534.130044][T13496] netlink: 'syz.0.2562': attribute type 10 has an invalid length. [ 534.302965][T13496] veth0_vlan: left promiscuous mode [ 534.362763][T13496] veth0_vlan: entered promiscuous mode [ 534.407504][T13496] team0: Device veth0_vlan failed to register rx_handler [ 534.652270][ T8023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.669535][T13503] netlink: 'syz.3.2566': attribute type 10 has an invalid length. [ 534.696590][T13503] veth0_vlan: left promiscuous mode [ 534.743330][T13503] veth0_vlan: entered promiscuous mode [ 534.791379][T13503] team0: Device veth0_vlan failed to register rx_handler [ 534.985932][ T8023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.005507][T13505] netlink: 'syz.0.2567': attribute type 10 has an invalid length. [ 535.015781][T13505] veth0_vlan: left promiscuous mode [ 535.022470][ T5084] Bluetooth: hci1: command tx timeout [ 535.075993][T13505] veth0_vlan: entered promiscuous mode [ 535.148512][T13505] team0: Device veth0_vlan failed to register rx_handler [ 535.607548][T13514] netlink: 'syz.1.2571': attribute type 10 has an invalid length. [ 535.639536][T13514] veth0_vlan: left promiscuous mode [ 535.689873][T13514] veth0_vlan: entered promiscuous mode [ 535.728419][T13514] team0: Device veth0_vlan failed to register rx_handler [ 535.915131][T13519] netlink: 'syz.0.2572': attribute type 10 has an invalid length. [ 535.931265][T13519] veth0_vlan: left promiscuous mode [ 535.939849][T13519] veth0_vlan: entered promiscuous mode [ 535.948862][T13519] team0: Device veth0_vlan failed to register rx_handler [ 536.027372][T13522] netlink: 'syz.3.2573': attribute type 10 has an invalid length. [ 536.048394][T13522] veth0_vlan: left promiscuous mode [ 536.059557][T13522] veth0_vlan: entered promiscuous mode [ 536.097593][T13522] team0: Device veth0_vlan failed to register rx_handler [ 537.097468][T13478] chnl_net:caif_netlink_parms(): no params data found [ 537.107192][ T5084] Bluetooth: hci1: command tx timeout [ 537.730122][T13562] netlink: 'syz.0.2581': attribute type 10 has an invalid length. [ 537.747140][T13562] veth0_vlan: left promiscuous mode [ 537.779544][T13562] veth0_vlan: entered promiscuous mode [ 537.795482][T13562] team0: Device veth0_vlan failed to register rx_handler [ 538.008073][T13567] veth0_vlan: left promiscuous mode [ 538.038084][T13567] veth0_vlan: entered promiscuous mode [ 538.083433][T13567] team0: Device veth0_vlan failed to register rx_handler [ 538.189951][T13571] validate_nla: 1 callbacks suppressed [ 538.189971][T13571] netlink: 'syz.0.2584': attribute type 17 has an invalid length. [ 538.224581][T13571] netlink: 'syz.0.2584': attribute type 16 has an invalid length. [ 538.240928][T13571] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2584'. [ 538.466535][T13578] netlink: 'syz.1.2586': attribute type 10 has an invalid length. [ 538.507342][T13578] veth0_vlan: left promiscuous mode [ 538.529100][T13578] veth0_vlan: entered promiscuous mode [ 538.574528][T13578] team0: Device veth0_vlan failed to register rx_handler [ 538.987495][T13582] netlink: 'syz.0.2587': attribute type 10 has an invalid length. [ 539.012617][T13582] veth0_vlan: left promiscuous mode [ 539.045911][T13582] veth0_vlan: entered promiscuous mode [ 539.118102][T13582] team0: Device veth0_vlan failed to register rx_handler [ 539.185355][ T5084] Bluetooth: hci1: command tx timeout [ 539.384787][T13478] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.420797][T13478] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.428165][T13478] bridge_slave_0: entered allmulticast mode [ 539.470964][T13478] bridge_slave_0: entered promiscuous mode [ 539.857438][T13478] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.885317][T13478] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.916097][T13478] bridge_slave_1: entered allmulticast mode [ 539.924315][T13478] bridge_slave_1: entered promiscuous mode [ 540.075674][T13478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.104492][T13478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.156223][ T8023] bond0: (slave wlan1): Releasing backup interface [ 540.276517][T13478] team0: Port device team_slave_0 added [ 540.329750][T13478] team0: Port device team_slave_1 added [ 540.555287][T13478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.591492][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.647081][T13478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.659872][T13620] netlink: 'syz.0.2595': attribute type 10 has an invalid length. [ 540.692640][T13620] veth0_vlan: left promiscuous mode [ 540.731479][T13620] veth0_vlan: entered promiscuous mode [ 540.798256][T13620] team0: Device veth0_vlan failed to register rx_handler [ 541.048413][T13478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.061098][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.088527][T13478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.166373][T13625] netlink: 'syz.3.2596': attribute type 10 has an invalid length. [ 541.197511][T13625] veth0_vlan: left promiscuous mode [ 541.204011][T13625] veth0_vlan: entered promiscuous mode [ 541.213206][T13625] team0: Device veth0_vlan failed to register rx_handler [ 541.260972][ T5084] Bluetooth: hci1: command tx timeout [ 541.324296][ T8023] hsr_slave_0: left promiscuous mode [ 541.380916][ T8023] hsr_slave_1: left promiscuous mode [ 541.395255][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.409816][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.429530][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.448530][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.484231][ T8023] batman_adv: batadv0: Removing interface: vlan1 [ 541.962847][ T8023] veth1_macvtap: left promiscuous mode [ 541.968829][ T8023] veth1_vlan: left promiscuous mode [ 542.175002][ T8023] team0 (unregistering): Port device geneve1 removed [ 542.682811][ T8023] team0 (unregistering): Port device team_slave_1 removed [ 542.782364][ T8023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.838242][ T8023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.218029][ T8023] team0 (unregistering): Port device bond0 removed [ 543.257632][ T8023] bond0 (unregistering): Released all slaves [ 543.308263][T13638] netlink: 'syz.0.2598': attribute type 10 has an invalid length. [ 543.319064][T13638] veth0_vlan: left promiscuous mode [ 543.326135][T13638] veth0_vlan: entered promiscuous mode [ 543.338655][T13638] team0: Device veth0_vlan failed to register rx_handler [ 543.557122][T13649] netlink: 'syz.1.2599': attribute type 10 has an invalid length. [ 543.593744][T13649] veth0_vlan: left promiscuous mode [ 543.642769][T13649] veth0_vlan: entered promiscuous mode [ 543.733754][T13649] team0: Device veth0_vlan failed to register rx_handler [ 543.942282][T13478] hsr_slave_0: entered promiscuous mode [ 543.954662][T13478] hsr_slave_1: entered promiscuous mode [ 544.178312][T13660] netlink: 'syz.0.2610': attribute type 10 has an invalid length. [ 544.202389][T13660] veth0_vlan: left promiscuous mode [ 544.216850][T13660] veth0_vlan: entered promiscuous mode [ 544.239679][T13660] team0: Device veth0_vlan failed to register rx_handler [ 544.341323][T13658] netlink: 'syz.3.2603': attribute type 10 has an invalid length. [ 544.350580][T13658] veth0_vlan: left promiscuous mode [ 544.386903][T13658] veth0_vlan: entered promiscuous mode [ 544.469671][T13658] team0: Device veth0_vlan failed to register rx_handler [ 545.983931][T13699] bridge_slave_1: left allmulticast mode [ 546.066036][T13699] bridge_slave_1: left promiscuous mode [ 546.107757][T13699] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.139182][T13699] bridge_slave_0: left allmulticast mode [ 546.147500][T13699] bridge_slave_0: left promiscuous mode [ 546.178645][T13699] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.764640][T13703] netlink: 'syz.1.2612': attribute type 10 has an invalid length. [ 546.799389][T13710] netlink: 'syz.3.2615': attribute type 10 has an invalid length. [ 546.829797][T13710] veth0_vlan: left promiscuous mode [ 546.898877][T13710] veth0_vlan: entered promiscuous mode [ 547.030940][T13710] team0: Device veth0_vlan failed to register rx_handler [ 547.217079][T13713] netlink: 'syz.1.2616': attribute type 10 has an invalid length. [ 547.230182][T13713] veth0_vlan: left promiscuous mode [ 547.245703][T13713] veth0_vlan: entered promiscuous mode [ 547.255364][T13713] team0: Device veth0_vlan failed to register rx_handler [ 547.558285][T13478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 547.636228][T13478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 547.671567][T13478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 547.838612][T13478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 547.958043][T13730] netlink: 'syz.0.2621': attribute type 10 has an invalid length. [ 548.034963][T13730] veth0_vlan: left promiscuous mode [ 548.088255][T13730] veth0_vlan: entered promiscuous mode [ 548.105186][T13730] team0: Device veth0_vlan failed to register rx_handler [ 548.884192][T13478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.937872][T13748] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 548.966160][T13748] veth0_vlan: left promiscuous mode [ 549.035316][T13748] veth0_vlan: entered promiscuous mode [ 549.068345][T13748] team0: Device veth0_vlan failed to register rx_handler [ 549.249912][T13478] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.277916][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.285381][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.339916][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.347287][ T8007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.531348][T13755] netlink: 'syz.3.2626': attribute type 10 has an invalid length. [ 549.540199][T13755] veth0_vlan: left promiscuous mode [ 549.582153][T13755] veth0_vlan: entered promiscuous mode [ 549.618335][T13755] team0: Device veth0_vlan failed to register rx_handler [ 550.016170][T13478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.302291][T13478] veth0_vlan: entered promiscuous mode [ 550.439580][T13478] veth1_vlan: entered promiscuous mode [ 550.623963][T13478] veth0_macvtap: entered promiscuous mode [ 550.688303][T13478] veth1_macvtap: entered promiscuous mode [ 550.754291][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.771940][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.787055][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.800478][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.816820][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.837916][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.850553][T13478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.879649][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.895984][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.906494][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.917699][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.935778][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.954487][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.965927][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.984043][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.996065][T13478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.030300][T13478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.039211][T13478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.053920][T13478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.064603][T13478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.240832][T13492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.256165][T13492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.300256][T13492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.311661][T13492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.455957][T13795] netlink: 'syz.3.2640': attribute type 10 has an invalid length. [ 551.481491][T13795] veth0_vlan: left promiscuous mode [ 551.534554][T13795] veth0_vlan: entered promiscuous mode [ 551.581222][T13795] team0: Device veth0_vlan failed to register rx_handler [ 552.072034][T13803] netlink: 'syz.2.2559': attribute type 10 has an invalid length. [ 552.491075][T13803] veth0_vlan: left promiscuous mode [ 552.523260][T13803] veth0_vlan: entered promiscuous mode [ 552.538884][T13803] team0: Device veth0_vlan failed to register rx_handler [ 554.087488][T13846] netlink: 'syz.2.2637': attribute type 10 has an invalid length. [ 554.349703][T13846] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 554.385096][T13853] netlink: 'syz.1.2645': attribute type 10 has an invalid length. [ 554.413589][T13853] veth0_vlan: left promiscuous mode [ 554.445431][T13853] veth0_vlan: entered promiscuous mode [ 554.512489][T13853] team0: Device veth0_vlan failed to register rx_handler [ 554.707234][T13856] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 554.735441][T13856] veth0_vlan: left promiscuous mode [ 554.774101][T13856] veth0_vlan: entered promiscuous mode [ 554.819862][T13856] team0: Device veth0_vlan failed to register rx_handler [ 555.029513][T13859] netlink: 'syz.0.2647': attribute type 10 has an invalid length. [ 555.062829][T13859] veth0_vlan: left promiscuous mode [ 555.091753][T13859] veth0_vlan: entered promiscuous mode [ 555.158724][T13859] team0: Device veth0_vlan failed to register rx_handler [ 555.468297][T13872] netlink: 'syz.3.2649': attribute type 17 has an invalid length. [ 555.496172][T13872] netlink: 'syz.3.2649': attribute type 16 has an invalid length. [ 555.520852][T13872] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2649'. [ 555.712766][T13880] netlink: 'syz.1.2653': attribute type 10 has an invalid length. [ 555.762746][T13880] veth0_vlan: left promiscuous mode [ 555.803114][T13880] veth0_vlan: entered promiscuous mode [ 555.901159][T13880] team0: Device veth0_vlan failed to register rx_handler [ 556.586298][T13888] netlink: 'syz.0.2654': attribute type 10 has an invalid length. [ 556.804570][T13888] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 556.842957][T13894] netlink: 'syz.2.2656': attribute type 10 has an invalid length. [ 556.856330][T13894] veth0_vlan: left promiscuous mode [ 556.915089][T13894] veth0_vlan: entered promiscuous mode [ 556.956470][T13894] team0: Device veth0_vlan failed to register rx_handler [ 557.369828][T13909] netlink: 'syz.3.2660': attribute type 10 has an invalid length. [ 557.409384][T13909] veth0_vlan: left promiscuous mode [ 557.441315][T13909] veth0_vlan: entered promiscuous mode [ 557.449500][T13909] team0: Device veth0_vlan failed to register rx_handler [ 557.524304][T13912] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2661'. [ 557.559712][T13915] veth0_vlan: left promiscuous mode [ 557.621304][T13915] veth0_vlan: entered promiscuous mode [ 557.681709][T13915] team0: Device veth0_vlan failed to register rx_handler [ 558.108501][T13929] veth0_vlan: left promiscuous mode [ 558.134489][T13929] veth0_vlan: entered promiscuous mode [ 558.215472][T13929] team0: Device veth0_vlan failed to register rx_handler [ 559.073213][T13933] veth0_vlan: left promiscuous mode [ 559.095546][T13933] veth0_vlan: entered promiscuous mode [ 559.128353][T13933] team0: Device veth0_vlan failed to register rx_handler [ 560.545797][T13975] validate_nla: 5 callbacks suppressed [ 560.545839][T13975] netlink: 'syz.3.2679': attribute type 10 has an invalid length. [ 560.581981][T13975] veth0_vlan: left promiscuous mode [ 560.725256][T13975] veth0_vlan: entered promiscuous mode [ 560.806777][T13975] team0: Device veth0_vlan failed to register rx_handler [ 561.132216][T13982] netlink: 'syz.1.2681': attribute type 10 has an invalid length. [ 561.155053][T13982] veth0_vlan: left promiscuous mode [ 561.180034][T13982] veth0_vlan: entered promiscuous mode [ 561.264752][T13982] team0: Device veth0_vlan failed to register rx_handler [ 561.550770][T13988] netlink: 'syz.0.2684': attribute type 17 has an invalid length. [ 561.559413][T13988] netlink: 'syz.0.2684': attribute type 16 has an invalid length. [ 561.568276][T13988] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2684'. [ 561.736986][T13992] netlink: 'syz.1.2685': attribute type 10 has an invalid length. [ 561.749084][T13992] veth0_vlan: left promiscuous mode [ 561.783612][T13992] veth0_vlan: entered promiscuous mode [ 561.882753][T13992] team0: Device veth0_vlan failed to register rx_handler [ 562.065627][T13995] bridge_slave_1: left allmulticast mode [ 562.079536][T13995] bridge_slave_1: left promiscuous mode [ 562.087151][T13995] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.214747][T13995] bridge_slave_0: left allmulticast mode [ 562.231344][T13995] bridge_slave_0: left promiscuous mode [ 562.240215][T13995] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.518499][T14003] netlink: 'syz.1.2688': attribute type 10 has an invalid length. [ 562.532420][T14003] veth0_vlan: left promiscuous mode [ 562.566211][T14003] veth0_vlan: entered promiscuous mode [ 562.664088][T14003] team0: Device veth0_vlan failed to register rx_handler [ 563.065310][T14012] netlink: 'syz.2.2691': attribute type 10 has an invalid length. [ 563.074345][T14012] veth0_vlan: left promiscuous mode [ 563.082725][T14012] veth0_vlan: entered promiscuous mode [ 563.095508][T14012] team0: Device veth0_vlan failed to register rx_handler [ 563.285248][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.291874][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.414031][T14018] netlink: 'syz.3.2695': attribute type 17 has an invalid length. [ 563.437891][T14018] netlink: 'syz.3.2695': attribute type 16 has an invalid length. [ 563.477459][T14018] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2695'. [ 563.693867][T14022] netlink: 'syz.0.2697': attribute type 10 has an invalid length. [ 563.725114][T14022] veth0_vlan: left promiscuous mode [ 563.758861][T14022] veth0_vlan: entered promiscuous mode [ 563.854504][T14022] team0: Device veth0_vlan failed to register rx_handler [ 564.291323][T14024] veth0_vlan: left promiscuous mode [ 564.299908][T14024] veth0_vlan: entered promiscuous mode [ 564.308904][T14024] team0: Device veth0_vlan failed to register rx_handler [ 565.687072][T14050] validate_nla: 2 callbacks suppressed [ 565.687093][T14050] netlink: 'syz.2.2706': attribute type 10 has an invalid length. [ 565.721446][T14050] veth0_vlan: left promiscuous mode [ 565.743920][T14050] veth0_vlan: entered promiscuous mode [ 565.781411][T14050] team0: Device veth0_vlan failed to register rx_handler [ 566.145070][T14062] netlink: 'syz.0.2711': attribute type 10 has an invalid length. [ 566.419304][T14067] netlink: 'syz.1.2712': attribute type 10 has an invalid length. [ 566.438527][T14067] veth0_vlan: left promiscuous mode [ 566.519878][T14067] veth0_vlan: entered promiscuous mode [ 566.577373][T14067] team0: Device veth0_vlan failed to register rx_handler [ 567.066598][ T8017] [ 567.069098][ T8017] ====================================================== [ 567.076160][ T8017] WARNING: possible circular locking dependency detected [ 567.083400][ T8017] syzkaller #0 Not tainted [ 567.087942][ T8017] ------------------------------------------------------ [ 567.095179][ T8017] kworker/u4:19/8017 is trying to acquire lock: [ 567.101510][ T8017] ffff888021700d00 (team->team_lock_key#4){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 567.111329][ T8017] [ 567.111329][ T8017] but task is already holding lock: [ 567.118743][ T8017] ffff88807e688768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 567.129173][ T8017] [ 567.129173][ T8017] which lock already depends on the new lock. [ 567.129173][ T8017] [ 567.139630][ T8017] [ 567.139630][ T8017] the existing dependency chain (in reverse order) is: [ 567.148778][ T8017] [ 567.148778][ T8017] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 567.156595][ T8017] __mutex_lock+0x136/0xcc0 [ 567.161689][ T8017] ieee80211_open+0x144/0x200 [ 567.167200][ T8017] __dev_open+0x2cb/0x430 [ 567.172107][ T8017] dev_open+0xab/0x190 [ 567.176746][ T8017] team_add_slave+0x75f/0x29a0 [ 567.182108][ T8017] do_setlink+0xdfe/0x4130 [ 567.187357][ T8017] rtnl_newlink+0x17da/0x20a0 [ 567.192715][ T8017] rtnetlink_rcv_msg+0x869/0xfa0 [ 567.198221][ T8017] netlink_rcv_skb+0x241/0x4d0 [ 567.203586][ T8017] netlink_unicast+0x751/0x8d0 [ 567.208929][ T8017] netlink_sendmsg+0x8d0/0xbf0 [ 567.214280][ T8017] ____sys_sendmsg+0x5ba/0x960 [ 567.219700][ T8017] ___sys_sendmsg+0x2a6/0x360 [ 567.224950][ T8017] __se_sys_sendmsg+0x1c2/0x2b0 [ 567.230558][ T8017] do_syscall_64+0x55/0xa0 [ 567.235722][ T8017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.242200][ T8017] [ 567.242200][ T8017] -> #0 (team->team_lock_key#4){+.+.}-{3:3}: [ 567.250449][ T8017] __lock_acquire+0x2df1/0x7d40 [ 567.255869][ T8017] lock_acquire+0x19e/0x420 [ 567.260925][ T8017] __mutex_lock+0x136/0xcc0 [ 567.266059][ T8017] team_del_slave+0x32/0x1c0 [ 567.271369][ T8017] team_device_event+0x28d/0xa20 [ 567.277082][ T8017] notifier_call_chain+0x197/0x380 [ 567.282751][ T8017] unregister_netdevice_many_notify+0x100d/0x1900 [ 567.289713][ T8017] unregister_netdevice_queue+0x32c/0x370 [ 567.295984][ T8017] _cfg80211_unregister_wdev+0x16b/0x580 [ 567.302167][ T8017] ieee80211_remove_interfaces+0x49e/0x690 [ 567.308787][ T8017] ieee80211_unregister_hw+0x5d/0x2a0 [ 567.314792][ T8017] mac80211_hwsim_del_radio+0x289/0x480 [ 567.320884][ T8017] hwsim_exit_net+0x58d/0x650 [ 567.326107][ T8017] cleanup_net+0x70a/0xbb0 [ 567.331076][ T8017] process_scheduled_works+0xa5d/0x15d0 [ 567.337349][ T8017] worker_thread+0xa55/0xfc0 [ 567.342496][ T8017] kthread+0x2fa/0x390 [ 567.347117][ T8017] ret_from_fork+0x48/0x80 [ 567.352086][ T8017] ret_from_fork_asm+0x11/0x20 [ 567.357407][ T8017] [ 567.357407][ T8017] other info that might help us debug this: [ 567.357407][ T8017] [ 567.367751][ T8017] Possible unsafe locking scenario: [ 567.367751][ T8017] [ 567.375228][ T8017] CPU0 CPU1 [ 567.380620][ T8017] ---- ---- [ 567.386022][ T8017] lock(&rdev->wiphy.mtx); [ 567.390647][ T8017] lock(team->team_lock_key#4); [ 567.398137][ T8017] lock(&rdev->wiphy.mtx); [ 567.405271][ T8017] lock(team->team_lock_key#4); [ 567.410272][ T8017] [ 567.410272][ T8017] *** DEADLOCK *** [ 567.410272][ T8017] [ 567.418447][ T8017] 5 locks held by kworker/u4:19/8017: [ 567.423858][ T8017] #0: ffff888140048938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 567.435002][ T8017] #1: ffffc900189afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 567.445774][ T8017] #2: ffffffff8e3b5710 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 567.455413][ T8017] #3: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 567.465411][ T8017] #4: ffff88807e688768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 567.476341][ T8017] [ 567.476341][ T8017] stack backtrace: [ 567.482282][ T8017] CPU: 0 PID: 8017 Comm: kworker/u4:19 Not tainted syzkaller #0 [ 567.489958][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 567.500052][ T8017] Workqueue: netns cleanup_net [ 567.504866][ T8017] Call Trace: [ 567.508181][ T8017] [ 567.511341][ T8017] dump_stack_lvl+0x18c/0x250 [ 567.516064][ T8017] ? load_image+0x420/0x420 [ 567.520787][ T8017] ? show_regs_print_info+0x20/0x20 [ 567.526059][ T8017] ? print_circular_bug+0x12b/0x1a0 [ 567.531304][ T8017] check_noncircular+0x2fc/0x400 [ 567.536283][ T8017] ? print_deadlock_bug+0x5d0/0x5d0 [ 567.541694][ T8017] ? lockdep_lock+0xf5/0x230 [ 567.546324][ T8017] ? _find_first_zero_bit+0xd3/0x100 [ 567.551906][ T8017] __lock_acquire+0x2df1/0x7d40 [ 567.556805][ T8017] ? verify_lock_unused+0x140/0x140 [ 567.562069][ T8017] ? verify_lock_unused+0x140/0x140 [ 567.567415][ T8017] lock_acquire+0x19e/0x420 [ 567.571960][ T8017] ? team_del_slave+0x32/0x1c0 [ 567.576924][ T8017] ? __might_sleep+0xe0/0xe0 [ 567.581672][ T8017] ? read_lock_is_recursive+0x20/0x20 [ 567.587164][ T8017] __mutex_lock+0x136/0xcc0 [ 567.591691][ T8017] ? team_del_slave+0x32/0x1c0 [ 567.596600][ T8017] ? __lock_acquire+0x7d40/0x7d40 [ 567.601681][ T8017] ? rcu_is_watching+0x15/0xb0 [ 567.606579][ T8017] ? trace_contention_end+0x39/0xe0 [ 567.611903][ T8017] ? __mutex_lock+0x315/0xcc0 [ 567.616611][ T8017] ? team_del_slave+0x32/0x1c0 [ 567.621410][ T8017] ? mutex_lock_nested+0x20/0x20 [ 567.626391][ T8017] ? bond_netdev_event+0xeb/0xf20 [ 567.631452][ T8017] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 567.637142][ T8017] team_del_slave+0x32/0x1c0 [ 567.641758][ T8017] team_device_event+0x28d/0xa20 [ 567.646984][ T8017] notifier_call_chain+0x197/0x380 [ 567.652153][ T8017] unregister_netdevice_many_notify+0x100d/0x1900 [ 567.658603][ T8017] ? lock_chain_count+0x20/0x20 [ 567.663492][ T8017] ? unregister_netdevice_many+0x20/0x20 [ 567.669162][ T8017] ? kernfs_remove_by_name_ns+0x117/0x150 [ 567.674934][ T8017] ? __lock_acquire+0x7d40/0x7d40 [ 567.679996][ T8017] unregister_netdevice_queue+0x32c/0x370 [ 567.685750][ T8017] ? list_netdevice+0x730/0x730 [ 567.690658][ T8017] ? kernfs_remove_by_name_ns+0x117/0x150 [ 567.696432][ T8017] _cfg80211_unregister_wdev+0x16b/0x580 [ 567.702120][ T8017] ieee80211_remove_interfaces+0x49e/0x690 [ 567.707979][ T8017] ? ieee80211_do_stop+0x1e20/0x1e20 [ 567.713301][ T8017] ? rcu_is_watching+0x15/0xb0 [ 567.718114][ T8017] ieee80211_unregister_hw+0x5d/0x2a0 [ 567.723607][ T8017] mac80211_hwsim_del_radio+0x289/0x480 [ 567.729186][ T8017] ? rhashtable_remove_fast+0xc00/0xc00 [ 567.734859][ T8017] hwsim_exit_net+0x58d/0x650 [ 567.739582][ T8017] ? hwsim_init_net+0x90/0x90 [ 567.744291][ T8017] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 567.750124][ T8017] cleanup_net+0x70a/0xbb0 [ 567.754670][ T8017] ? ops_free_list+0x3b0/0x3b0 [ 567.759482][ T8017] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.764854][ T8017] ? process_scheduled_works+0x96f/0x15d0 [ 567.770787][ T8017] ? process_scheduled_works+0x96f/0x15d0 [ 567.776649][ T8017] process_scheduled_works+0xa5d/0x15d0 [ 567.782336][ T8017] ? worker_attach_to_pool+0x380/0x380 [ 567.788007][ T8017] ? assign_work+0x3d2/0x5d0 [ 567.792728][ T8017] worker_thread+0xa55/0xfc0 [ 567.797363][ T8017] kthread+0x2fa/0x390 [ 567.801465][ T8017] ? pr_cont_work+0x560/0x560 [ 567.806620][ T8017] ? kthread_blkcg+0xd0/0xd0 [ 567.811586][ T8017] ret_from_fork+0x48/0x80 [ 567.816037][ T8017] ? kthread_blkcg+0xd0/0xd0 [ 567.820744][ T8017] ret_from_fork_asm+0x11/0x20 [ 567.825647][ T8017] [ 567.844170][ T8017] team0: Port device wlan1 removed [ 567.858049][T14077] netlink: 'syz.2.2716': attribute type 10 has an invalid length. [ 567.868229][T14077] veth0_vlan: left promiscuous mode [ 567.890242][T14077] veth0_vlan: entered promiscuous mode [ 567.927902][T14077] team0: Device veth0_vlan failed to register rx_handler [ 568.084615][ T8017] hsr_slave_0: left promiscuous mode [ 568.098090][ T8017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.107302][ T8017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.115822][ T8017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.130773][ T8017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.138645][ T8017] batman_adv: batadv0: Removing interface: vlan1 [ 568.145818][ T8017] bridge_slave_1: left allmulticast mode [ 568.153013][ T8017] bridge_slave_1: left promiscuous mode [ 568.158765][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.167745][ T8017] bridge_slave_0: left allmulticast mode [ 568.173629][ T8017] bridge_slave_0: left promiscuous mode [ 568.179520][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.190323][ T8017] veth1_macvtap: left promiscuous mode [ 568.196303][ T8017] veth1_vlan: left promiscuous mode [ 568.320448][ T8017] team0 (unregistering): Port device geneve1 removed [ 568.575972][ T8017] team0 (unregistering): Port device team_slave_1 removed [ 568.612747][ T8017] team0 (unregistering): Port device team_slave_0 removed [ 568.642679][ T8017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.677486][ T8017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.838578][ T8017] team0 (unregistering): Port device bond0 removed [ 568.870398][ T8017] bond0 (unregistering): Released all slaves