last executing test programs: 18.069114666s ago: executing program 2 (id=4131): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0xfc, 0x0, 0x80040001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x6}, 0x3002, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x40000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000013006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) 17.775537215s ago: executing program 2 (id=4134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2f00020b, 0xf, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea107", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000008b8ed11a32c88d45cc440980b1000000000000000010400005386e0ffe041ffff950000000000000079f02dd57954f49375ec95c566ccdfec87619efd"], &(0x7f0000000440)='GPL\x00', 0x1d6500, 0x1a, &(0x7f0000000700)=""/26, 0x41000, 0x29, '\x00', r2, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x8, &(0x7f0000000400)=[r1, r1, r1, r1], &(0x7f00000007c0)=[{0x0, 0x5, 0x10008, 0x7}, {0x0, 0x1, 0x10, 0x8}, {0x2, 0x5, 0x10, 0x9}, {0x1, 0x5, 0x4}, {0x3, 0x2, 0x5, 0x1}, {0x4, 0x2, 0xf}, {0x5, 0x1, 0xe, 0x3}, {0x3, 0x3, 0xa, 0x4}], 0x10, 0xc5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24}, 0x94) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500020001400200000901", 0x3d}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e400002000100020000000000ff0200000000000000000001ffaaaaaa"], 0xfdef) close(r5) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0xfdef) 17.169410586s ago: executing program 2 (id=4137): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000085ea80000000003000000850000002c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) r6 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0xd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x70, 0x4, 0x2, 0x408, r3, 0xff, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0xa}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x3, 0x5, 0x8, 0x8, 0x0, 0x8, 0x2001, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x78e7d487aae118de, @perf_config_ext={0x8, 0xef8e}, 0x4800, 0xe516, 0x8, 0x6, 0x10000, 0x182030fb, 0x35f, 0x0, 0x6, 0x0, 0x6}, r6, 0xa, r2, 0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xc, 0x4, 0x7d6, 0x20300, r3, 0x6, '\x00', r5, r2, 0x2, 0x5, 0x4, 0x11}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.900116205s ago: executing program 2 (id=4141): socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10c002, 0xac5d, 0x0, 0x9, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="1400000028000b05d2600d00030009000100ff35", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000fc0)='\x00', 0x1}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) socket$kcm(0x11, 0x200000000000003, 0x300) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abe882755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x45, 0x0, 0x0, 0x3, 0x0, 0x7fffffff}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c00, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r7, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) 15.809287011s ago: executing program 2 (id=4149): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000200)={'some', 0x20, 0x4, 0x20, 0x1}, 0x2f) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xe, 0xfc, 0xff, 0x9, 0x0, 0x1fb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000180), 0x6}, 0x420, 0x6d4a, 0x8, 0x0, 0xd, 0x2, 0x7, 0x0, 0x7ffe, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xb67d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x8}, 0x358, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x4000c2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xffffffffffffffcc, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc909}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r5, 0x0, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x6, 0x9, 0x0, 0xd, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x4) 13.299562925s ago: executing program 2 (id=4164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2f00020b, 0xf, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea107", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000008b8ed11a32c88d45cc440980b1000000000000000010400005386e0ffe041ffff950000000000000079f02dd57954f49375ec95c566ccdfec87619efd"], &(0x7f0000000440)='GPL\x00', 0x1d6500, 0x1a, &(0x7f0000000700)=""/26, 0x41000, 0x29, '\x00', r2, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x8, &(0x7f0000000400)=[r1, r1, r1, r1], &(0x7f00000007c0)=[{0x0, 0x5, 0x10008, 0x7}, {0x0, 0x1, 0x10, 0x8}, {0x2, 0x5, 0x10, 0x9}, {0x1, 0x5, 0x4}, {0x3, 0x2, 0x5, 0x1}, {0x4, 0x2, 0xf}, {0x5, 0x1, 0xe, 0x3}, {0x3, 0x3, 0xa, 0x4}], 0x10, 0xc5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24}, 0x94) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500020001400200000901", 0x3d}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e400002000100020000000000ff0200000000000000000001ffaaaaaa"], 0xfdef) close(r5) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0xfdef) 5.813586185s ago: executing program 4 (id=4196): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r1 = getpid() r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000280)="68cabf2dfb58fc021d6b689866f05d48000c0088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bc95ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) socketpair(0x2, 0x3, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(0x0, r1, 0x3, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x2, 0x8}, 0x0, 0x3, 0xfffffffd, 0x0, 0x8, 0xdfd}, r1, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000100)="c6292691f2170fa4b67df39c1d6a46647443307d5bd4b31325", &(0x7f0000000280)=""/216, &(0x7f0000000400)="3186e42dc4e8a7b552c1335840f93447ab8c2d14fdbd13c7832aec321d320add25d55e6ff4358d201cb9da30570911cecfe1e2", &(0x7f0000000500)="cc26b432136a091785f74be49f9a37a9323f0408e4557c6424395e14e86210644204176323afd53c975c2b3c4f4cd7fab796dfa707827d2a7e2c80b7ab28082416b6d01b7887d131f9ad8765c4e5d4e8157cce9a3dfd3aebc20cc401d81e2a18b107c7014b8389cf9cecd37d321475c786fa67a96ed8a3ee4016f159e18f9b17102e9af404", 0x62, r4, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48}) close(0x3) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000002900000043"], 0x18}, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r0, 0x4) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x0, 0xf, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) 5.339011651s ago: executing program 3 (id=4198): r0 = socket$kcm(0x23, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYRES8=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r4, 0x4004743b, 0xf0ff1f00000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000001300)={&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000b80)=""/15, 0xf}, {&(0x7f0000000bc0)=""/202, 0xca}, {&(0x7f0000001000)=""/162, 0xa2}, {&(0x7f00000010c0)=""/207, 0xcf}, {&(0x7f00000011c0)=""/154, 0x9a}], 0x5}, 0x21) 4.840845458s ago: executing program 4 (id=4201): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x0, 0x1}, {0x10, 0x114}], 0x20}, 0x804) socket$kcm(0x29, 0x2, 0x0) 4.565770067s ago: executing program 3 (id=4204): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x5, 0xe, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x8000, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x1a, 0x0, 0x0, &(0x7f00000003c0), 0x18}, 0x20) r5 = socket$kcm(0x11, 0x0, 0x300) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x5, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES64=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040220080406037c09e8fe55a10a0015400600142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.502480019s ago: executing program 4 (id=4205): perf_event_open(&(0x7f00000016c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd887, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0x7}], 0x3}, 0x8001) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100), 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) 1.532445859s ago: executing program 4 (id=4207): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0xfc, 0x0, 0x80040001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x6}, 0x3002, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x40000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000013006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 1.414724703s ago: executing program 0 (id=4209): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x8000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0600000004000000990500000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00000300000000000000001000000000000000f1bbc07bf96f52c41edb60d0890c8e49b0d9c3035a4f", @ANYRES32], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr'], 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) perf_event_open(0x0, 0x0, 0xc, r5, 0x0) socketpair(0x22, 0x3, 0x0, &(0x7f0000000240)) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f6", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.369810324s ago: executing program 1 (id=4210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000004c0), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000ff00950000ac832c8da59d01f6420478a11b1c1b"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1}, 0x94) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)}], 0x1}, 0x8040) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 1.369185294s ago: executing program 4 (id=4211): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x8000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0600000004000000990500000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00000300000000000000001000000000000000f1bbc07bf96f52c41edb60d0890c8e49b0d9c3035a4f", @ANYRES32], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr'], 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) perf_event_open(0x0, 0x0, 0xc, r5, 0x0) socketpair(0x22, 0x3, 0x0, &(0x7f0000000240)) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf", 0x3a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.313396186s ago: executing program 3 (id=4212): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x0, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) socket$kcm(0x29, 0x8, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80086601, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x29}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.087456673s ago: executing program 1 (id=4213): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.062264204s ago: executing program 0 (id=4214): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 985.689617ms ago: executing program 4 (id=4215): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x1a, 0x0, 0x0, &(0x7f00000003c0), 0x18}, 0x20) socket$kcm(0x11, 0x0, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7c00, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040220080406037c09e8fe55a10a0015400600142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000083e0a8f54b04fa2d85803b00c000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r5, @ANYBLOB="00cb7030ee000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r2], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', 0x0, r5, 0x2, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="eb00a000000200", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYBLOB="ed5440433f174ee9acd06b04", @ANYRES8=r5, @ANYBLOB="000000000500"/21], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 924.038599ms ago: executing program 3 (id=4216): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000"], &(0x7f0000002680)=""/4106, 0x26, 0x100a, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000000300000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000001085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x8, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000200)="ba"}, 0x20) socket$kcm(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x7d) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) 868.922591ms ago: executing program 1 (id=4217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000004c0), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000ff00950000ac832c8da59d01f6420478a11b1c1b"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1}, 0x94) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 868.484941ms ago: executing program 0 (id=4218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000004c0), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000ff00950000ac832c8da59d01f6420478a11b1c1b"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1}, 0x94) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 540.155812ms ago: executing program 1 (id=4219): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)}, 0x40000000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="5c00000011006bcd9e3fe3dc6e48aa31086b030000000000000000000000000004001400feff12000dd34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x56}, {&(0x7f00000001c0)="0e3bfd8c1f47", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000001600)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/197, 0xc5}, {&(0x7f0000001300)=""/216, 0xd8}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000001400)=""/106, 0x6a}, {&(0x7f0000001480)}], 0x7, &(0x7f0000001540)=""/147, 0x93}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32, @ANYRESHEX=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 502.218683ms ago: executing program 0 (id=4220): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 405.291086ms ago: executing program 3 (id=4221): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) (async) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcc963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f1ad00bbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e01000000fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d33599a40283c5addc191b4aa023079ed0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e8332116dfcdd6071b976de8c473a7585436730db75da167481ab8921fe051b250106e7b09a8fff8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d8e5c599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d50622b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000000033e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd100002000057fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d19da92531b33023e82cdeb8be27f82ca830f409a21d1aec436b0230e4b1b376005bcf6e55fceffce6d184de1b89dc5ed8bdfa37e8f86ada4158a7713db2c6789e6ba90df2bc48944775e45134f2187359f74c9dff3c78fb36fe5f672a8ce6e5c404ed8d734b905c5a12a996d8836b4522dbc73e595c14db9523200000000"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYBLOB="466c43f66a662e354c119cb617882976fcd05daaf1f88dc75ee4aa6386cf8e2fd5309bdb26cb80002b422ba71e2721a9bd3caa5ab1b4c8c34f034e4259a94fa98caedc5e4db233c23590e68f8127132ec54c47994459b582222e449458bf27e451e70648b7434a16128bf93035684443eb76013bfd80db8f"], 0x12) 341.434349ms ago: executing program 1 (id=4222): socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd056fea56a888e", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r1, &(0x7f0000000400)="205b019bf1b129c727bc98d83a70364ce4a60f8af39c95b7d3c5dae4a505aa5daec6b1ae95372525af6655a60668256e61761cdc80f0fa8ddab94e68a127d7a497be9de170", &(0x7f0000000480)=""/17}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8, r5}, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 313.5259ms ago: executing program 0 (id=4223): r0 = gettid() r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x34, 0x5, 0xe, 0x80, 0x0, 0x3, 0x400, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xae8, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0xc00, 0x9, 0x3, 0x4, 0x1, 0x80, 0x7, 0x0, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r1, 0x0, 0x3, &(0x7f0000000180)='\n\t\x00'}, 0x30) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x600, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x68fc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0xc188, 0x9a, &(0x7f00000004c0)=""/154, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xd, 0x7ff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000640)=[{0x1, 0x1, 0x6, 0x9}, {0x1, 0x2, 0x2, 0x1}, {0x0, 0x4, 0x2, 0x9}, {0x0, 0x2, 0x8, 0x8}, {0x4, 0x4, 0x3, 0x7}, {0x5, 0x5, 0xd, 0x9}], 0x10, 0xfffffffe}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000780)=r7) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x7f, 0xfe, 0x9, 0x2046, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x4800) 211.022263ms ago: executing program 3 (id=4224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x6, &(0x7f0000000a80)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000ac0)='GPL\x00', 0x23009ce0, 0xf7, &(0x7f0000000b00)=""/247, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x8, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[0x1], &(0x7f0000000cc0)=[{0x3, 0x4, 0xd, 0xa}, {0x0, 0x3, 0xe, 0x2}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r6, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x51, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf2d, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x1b, r12, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x8, 0x9, 0x101}, 0x10, r13, 0x0, 0x0, &(0x7f0000000980)=[r10, r9, r10, r9, r9, r14, r9], 0x0, 0x10, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r11}, 0xc) 642.97µs ago: executing program 1 (id=4225): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x8000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0600000004000000990500000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00000300000000000000001000000000000000f1bbc07bf96f52c41edb60d0890c8e49b0d9c3035a4f", @ANYRES32], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr'], 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) perf_event_open(0x0, 0x0, 0xc, r5, 0x0) socketpair(0x22, 0x3, 0x0, &(0x7f0000000240)) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f6", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=4226): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x8000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0600000004000000990500000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00000300000000000000001000000000000000f1bbc07bf96f52c41edb60d0890c8e49b0d9c3035a4f", @ANYRES32], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr'], 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) perf_event_open(0x0, 0x0, 0xc, r5, 0x0) socketpair(0x22, 0x3, 0x0, &(0x7f0000000240)) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf", 0x3a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 454.143461][T14325] path_openat+0x15f3/0x2ee0 [ 454.148060][T14325] ? verify_lock_unused+0x140/0x140 [ 454.153258][T14325] ? do_syscall_64+0x4c/0xa0 [ 454.157848][T14325] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.163912][T14325] ? do_filp_open+0x430/0x430 [ 454.168596][T14325] do_filp_open+0x1f1/0x430 [ 454.173102][T14325] ? vfs_tmpfile+0x480/0x480 [ 454.177699][T14325] ? _raw_spin_unlock+0x24/0x40 [ 454.182720][T14325] ? alloc_fd+0x58f/0x630 [ 454.187055][T14325] do_sys_openat2+0x150/0x4b0 [ 454.191727][T14325] ? ct_nmi_exit+0x145/0x1c0 [ 454.196315][T14325] ? perf_trace_preemptirq_template+0xa8/0x320 [ 454.202471][T14325] ? do_sys_open+0xe0/0xe0 [ 454.206889][T14325] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 454.212869][T14325] ? lock_chain_count+0x20/0x20 [ 454.217713][T14325] ? exit_to_user_mode_loop+0xdc/0x110 [ 454.223177][T14325] __x64_sys_openat+0x135/0x160 [ 454.228029][T14325] do_syscall_64+0x4c/0xa0 [ 454.232445][T14325] ? clear_bhb_loop+0x60/0xb0 [ 454.237119][T14325] ? clear_bhb_loop+0x60/0xb0 [ 454.241799][T14325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.247690][T14325] RIP: 0033:0x7f8d7c15cfce [ 454.252100][T14325] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.271712][T14325] RSP: 002b:00007f8d7d016ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 454.280130][T14325] RAX: ffffffffffffffda RBX: 00007f8d7d0176c0 RCX: 00007f8d7c15cfce [ 454.288100][T14325] RDX: 0000000000000000 RSI: 00007f8d7d016f90 RDI: ffffffffffffff9c [ 454.296092][T14325] RBP: 00007f8d7d017090 R08: 0000000000000000 R09: 0000000000000000 [ 454.304179][T14325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.312162][T14325] R13: 00007f8d7c416038 R14: 00007f8d7c415fa0 R15: 00007ffff3ba9108 [ 454.320142][T14325] [ 454.335027][T14087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.351982][T14087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.361942][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 454.372064][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.969113][T14346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.040758][T14346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.092704][T14346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.190865][T14346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.337758][T14349] netlink: 'syz.3.3197': attribute type 10 has an invalid length. [ 455.390908][T14349] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3197'. [ 455.453331][T14361] netlink: 'syz.1.3200': attribute type 10 has an invalid length. [ 455.619026][T14361] team0: Device wg1 is of different type [ 455.689836][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 455.707993][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.736494][T14087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.806716][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 455.847985][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.932826][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 455.961834][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.983540][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.017036][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.040100][T14087] device veth0_vlan entered promiscuous mode [ 456.115419][T14087] device veth1_vlan entered promiscuous mode [ 456.146322][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 456.160447][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 456.177142][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.189568][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.201267][T14087] device veth0_macvtap entered promiscuous mode [ 456.223297][T14087] device veth1_macvtap entered promiscuous mode [ 456.280084][T14087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.320888][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 456.329933][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.352075][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.369573][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.388660][T14390] netlink: 'syz.3.3205': attribute type 2 has an invalid length. [ 456.420146][T14390] netlink: 'syz.3.3205': attribute type 11 has an invalid length. [ 456.453658][T14390] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3205'. [ 456.507153][T14087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.524368][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.536873][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.579036][T14087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.620636][T14087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.649779][T14087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.665370][T14087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.802832][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.832072][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.840174][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 456.878963][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.889043][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.914715][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 457.089260][T14416] netlink: 'syz.0.3214': attribute type 10 has an invalid length. [ 457.269726][T14416] team0: Device wg1 is of different type [ 457.552497][T14420] netlink: 'syz.4.3212': attribute type 10 has an invalid length. [ 457.602626][T14420] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3212'. [ 457.931997][ T4264] team0: Port device syz_tun removed [ 457.953481][T14434] netlink: 'syz.0.3218': attribute type 10 has an invalid length. [ 457.976906][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.999321][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.010763][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.019290][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.028498][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 458.036707][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.131313][ T6516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.243644][ T6516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.677511][ T6516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.768034][ T6516] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.783417][T14451] bridge0: port 4(hsr0) entered disabled state [ 458.818325][T14451] bridge0: port 3(dummy0) entered disabled state [ 458.835384][T14451] device bridge_slave_1 left promiscuous mode [ 458.851066][T14451] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.884498][T14451] device bridge_slave_0 left promiscuous mode [ 458.931922][T14451] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.117664][T14437] chnl_net:caif_netlink_parms(): no params data found [ 459.160778][T14459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.181595][T14459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.198806][T14459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.207115][T14459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.467410][T14460] netlink: 'syz.2.3225': attribute type 21 has an invalid length. [ 459.476084][T14460] netlink: 'syz.2.3225': attribute type 6 has an invalid length. [ 459.484334][T14460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3225'. [ 459.732270][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.739417][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.772187][T14437] device bridge_slave_0 entered promiscuous mode [ 459.794496][T14481] FAULT_INJECTION: forcing a failure. [ 459.794496][T14481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.805813][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.817477][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.819967][T14481] CPU: 1 PID: 14481 Comm: syz.1.3231 Not tainted syzkaller #0 [ 459.828167][T14437] device bridge_slave_1 entered promiscuous mode [ 459.831963][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.831976][T14481] Call Trace: [ 459.831982][T14481] [ 459.831989][T14481] dump_stack_lvl+0x188/0x24e [ 459.832020][T14481] ? show_regs_print_info+0x12/0x12 [ 459.832044][T14481] ? load_image+0x400/0x400 [ 459.832066][T14481] ? __lock_acquire+0x7d10/0x7d10 [ 459.873940][T14481] should_fail_ex+0x399/0x4d0 [ 459.878622][T14481] _copy_from_user+0x2c/0x170 [ 459.883297][T14481] ___sys_sendmsg+0x1c3/0x360 [ 459.887979][T14481] ? __sys_sendmsg+0x290/0x290 [ 459.892761][T14481] ? __lock_acquire+0x7d10/0x7d10 [ 459.897803][T14481] __se_sys_sendmsg+0x1bb/0x2a0 [ 459.902656][T14481] ? ct_nmi_exit+0x145/0x1c0 [ 459.907247][T14481] ? __x64_sys_sendmsg+0x80/0x80 [ 459.912195][T14481] ? lockdep_hardirqs_on+0x94/0x140 [ 459.917388][T14481] do_syscall_64+0x4c/0xa0 [ 459.921803][T14481] ? clear_bhb_loop+0x60/0xb0 [ 459.926476][T14481] ? clear_bhb_loop+0x60/0xb0 [ 459.931151][T14481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.937039][T14481] RIP: 0033:0x7f8d1cd9c799 [ 459.941447][T14481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.961048][T14481] RSP: 002b:00007f8d1aff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.969459][T14481] RAX: ffffffffffffffda RBX: 00007f8d1d015fa0 RCX: 00007f8d1cd9c799 [ 459.977427][T14481] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000f [ 459.985394][T14481] RBP: 00007f8d1aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 459.993361][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.001324][T14481] R13: 00007f8d1d016038 R14: 00007f8d1d015fa0 R15: 00007ffd8b7f6c28 [ 460.009304][T14481] [ 460.061802][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 460.118811][T14437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.317118][T14437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.354830][T14481] netlink: 'syz.1.3231': attribute type 21 has an invalid length. [ 460.439073][T14481] netlink: 'syz.1.3231': attribute type 6 has an invalid length. [ 460.536431][T14481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3231'. [ 460.758864][T14493] netlink: 'syz.2.3234': attribute type 10 has an invalid length. [ 460.791225][T14493] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.803933][T14493] bond0: (slave team0): Enslaving as an active interface with an up link [ 460.893783][T14437] team0: Port device team_slave_0 added [ 460.945244][T14437] team0: Port device team_slave_1 added [ 461.065356][T14437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.078912][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.106426][T14437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.191501][T14437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.198541][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.298400][T14437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.526855][T14437] device hsr_slave_0 entered promiscuous mode [ 461.534873][T14437] device hsr_slave_1 entered promiscuous mode [ 462.113007][T14544] netlink: 'syz.4.3247': attribute type 10 has an invalid length. [ 462.127172][T14544] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3247'. [ 462.140429][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 462.255546][T14557] netlink: 'syz.1.3249': attribute type 10 has an invalid length. [ 462.311780][T14554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3250'. [ 462.346879][T14554] device caif0 entered promiscuous mode [ 463.572062][T14586] bridge0: port 3(hsr0) entered disabled state [ 463.578488][T14586] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.586049][T14586] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.644161][ T6516] device hsr_slave_1 left promiscuous mode [ 463.661716][ T6516] bridge0: port 4(hsr0) entered disabled state [ 463.692233][ T6516] device bridge_slave_1 left promiscuous mode [ 463.708707][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.765593][ T6516] device bridge_slave_0 left promiscuous mode [ 463.775393][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.878787][ T6516] device veth0_macvtap left promiscuous mode [ 463.905103][ T6516] device veth1_vlan left promiscuous mode [ 463.920900][ T6516] device veth0_vlan left promiscuous mode [ 464.221549][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 464.485954][ T6516] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 464.998766][ T6516] team0 (unregistering): Port device macvlan0 removed [ 465.367307][ T6516] team0 (unregistering): Port device team_slave_1 removed [ 465.399728][ T6516] team0 (unregistering): Port device team_slave_0 removed [ 465.432644][ T6516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.466694][ T6516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.638193][ T6516] bond0 (unregistering): (slave team0): Releasing backup interface [ 465.667751][ T6516] bond0 (unregistering): Released all slaves [ 465.748468][T14601] netlink: 'syz.2.3262': attribute type 10 has an invalid length. [ 465.756368][T14601] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3262'. [ 465.765429][T14601] device hsr0 entered promiscuous mode [ 465.772410][T14601] bridge0: port 3(hsr0) entered blocking state [ 465.778731][T14601] bridge0: port 3(hsr0) entered disabled state [ 465.785915][T14601] bridge0: port 3(hsr0) entered blocking state [ 465.792142][T14601] bridge0: port 3(hsr0) entered forwarding state [ 465.859318][T14437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.927562][T14437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.967867][T14437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.013937][T14437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 466.041879][T14629] bridge0: port 3(hsr0) entered disabled state [ 466.083644][T14629] device bridge_slave_1 left promiscuous mode [ 466.139075][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.175834][ T4278] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 466.189140][T14629] device bridge_slave_0 left promiscuous mode [ 466.203762][T14629] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.302244][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 467.349134][T14637] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3275'. [ 467.629437][T14437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.773608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.827686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.053596][T14437] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.168303][T14437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 477.193551][T14437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.320491][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 477.365324][T14675] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3282'. [ 477.410661][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.440660][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.447816][ T6508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.533184][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 477.550485][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.559483][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.566653][ T6508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.602012][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 477.615221][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 477.661310][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 477.688128][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 477.731131][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 477.782742][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 477.804296][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 477.823261][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.857466][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.891371][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.924147][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 477.967534][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 477.982271][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 478.297708][T14704] bridge0: port 3(hsr0) entered disabled state [ 478.352155][T14704] device bridge_slave_1 left promiscuous mode [ 478.371206][T14704] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.124255][T14704] device bridge_slave_0 left promiscuous mode [ 479.130617][T14704] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.200336][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.249904][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.295222][T14437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.375848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.402396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.512746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.533880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.564524][T14732] netlink: 'syz.0.3294': attribute type 10 has an invalid length. [ 479.579453][T14732] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3294'. [ 479.601968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.613839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.683741][T14437] device veth0_vlan entered promiscuous mode [ 479.714353][T14734] netlink: 'syz.2.3295': attribute type 10 has an invalid length. [ 479.740502][T14734] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3295'. [ 479.768119][T14437] device veth1_vlan entered promiscuous mode [ 479.859452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 479.883031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 479.907871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.937338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.954703][T14437] device veth0_macvtap entered promiscuous mode [ 479.985619][T14437] device veth1_macvtap entered promiscuous mode [ 480.049934][T14437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.067616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.092496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.113456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.129009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.190059][T14437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.213917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.233100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.254452][T14437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.301039][T14437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.309796][T14437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.351608][T14437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.093542][T14781] delete_channel: no stack [ 482.648546][T14794] netlink: 'syz.2.3307': attribute type 10 has an invalid length. [ 482.705759][ T6541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.722100][ T6541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.796696][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.840896][ T6508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.849071][ T6508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.874854][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 483.044500][T14803] netlink: 'syz.1.3310': attribute type 10 has an invalid length. [ 483.066719][T14803] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3310'. [ 483.615750][T14830] netlink: 'syz.4.3318': attribute type 10 has an invalid length. [ 483.625125][T14830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3318'. [ 484.138047][T14824] bridge0: port 3(hsr0) entered disabled state [ 484.144905][T14824] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.153331][T14824] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.209006][T14830] netlink: 'syz.4.3318': attribute type 10 has an invalid length. [ 484.237687][T14830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3318'. [ 484.268480][T14831] netlink: 'syz.3.3319': attribute type 10 has an invalid length. [ 484.305368][T14831] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.316435][T14831] bond0: (slave team0): Enslaving as an active interface with an up link [ 484.513223][T14848] netlink: 'syz.0.3322': attribute type 21 has an invalid length. [ 485.353230][T14869] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3330'. [ 486.342217][T14859] netlink: 'syz.4.3327': attribute type 10 has an invalid length. [ 486.350191][T14859] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3327'. [ 486.955559][T14887] device syzkaller0 entered promiscuous mode [ 487.001305][T14893] netlink: 'syz.0.3336': attribute type 10 has an invalid length. [ 487.009422][T14893] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3336'. [ 487.033457][T14899] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3340'. [ 487.051786][T14896] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3339'. [ 487.065054][T14896] bridge_slave_1: default FDB implementation only supports local addresses [ 487.279350][T14913] netlink: 'syz.3.3344': attribute type 3 has an invalid length. [ 487.297107][T14913] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3344'. [ 488.650614][T14917] netlink: 'syz.1.3345': attribute type 10 has an invalid length. [ 489.281280][T14941] netlink: 'syz.0.3352': attribute type 10 has an invalid length. [ 489.289620][T14941] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3352'. [ 489.686035][T14957] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3356'. [ 489.940623][T14962] netlink: 'syz.4.3359': attribute type 3 has an invalid length. [ 489.958309][T14962] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3359'. [ 491.293535][T14955] netlink: 'syz.0.3358': attribute type 10 has an invalid length. [ 491.301674][T14956] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3357'. [ 491.596281][T14973] device syzkaller0 entered promiscuous mode [ 491.670953][T14975] netlink: 'syz.3.3365': attribute type 10 has an invalid length. [ 491.679692][T14975] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3365'. [ 491.693557][T14975] device hsr0 entered promiscuous mode [ 491.704730][T14975] bridge0: port 3(hsr0) entered blocking state [ 491.713583][T14975] bridge0: port 3(hsr0) entered disabled state [ 491.741873][T14975] bridge0: port 3(hsr0) entered blocking state [ 491.751378][T14975] bridge0: port 3(hsr0) entered forwarding state [ 491.838765][T14983] FAULT_INJECTION: forcing a failure. [ 491.838765][T14983] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 491.852220][T14983] CPU: 0 PID: 14983 Comm: syz.3.3366 Not tainted syzkaller #0 [ 491.859709][T14983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.869779][T14983] Call Trace: [ 491.873050][T14983] [ 491.875971][T14983] dump_stack_lvl+0x188/0x24e [ 491.880652][T14983] ? show_regs_print_info+0x12/0x12 [ 491.885848][T14983] ? load_image+0x400/0x400 [ 491.890366][T14983] ? __lock_acquire+0x7d10/0x7d10 [ 491.895401][T14983] ? verify_lock_unused+0x140/0x140 [ 491.900613][T14983] should_fail_ex+0x399/0x4d0 [ 491.905292][T14983] prepare_alloc_pages+0x1e2/0x5f0 [ 491.910419][T14983] __alloc_pages+0x130/0x4f0 [ 491.915012][T14983] ? zone_statistics+0x170/0x170 [ 491.919958][T14983] ? verify_lock_unused+0x140/0x140 [ 491.925164][T14983] __folio_alloc+0xe/0x30 [ 491.929496][T14983] vma_alloc_folio+0x4a3/0x900 [ 491.934259][T14983] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 491.940065][T14983] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 491.945793][T14983] ? shmem_replace_folio+0xee0/0xee0 [ 491.951092][T14983] ? xas_load+0x127/0x140 [ 491.955417][T14983] ? __filemap_get_folio+0x10f/0xdb0 [ 491.960704][T14983] ? __filemap_get_folio+0xb24/0xdb0 [ 491.965992][T14983] ? __filemap_get_folio+0x10f/0xdb0 [ 491.971283][T14983] ? page_cache_prev_miss+0x380/0x380 [ 491.976665][T14983] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 491.982643][T14983] ? do_user_addr_fault+0x7a0/0xb10 [ 491.987841][T14983] ? lock_chain_count+0x20/0x20 [ 491.992693][T14983] shmem_get_folio_gfp+0x1361/0x3400 [ 491.997997][T14983] shmem_write_begin+0xee/0x3f0 [ 492.002852][T14983] generic_perform_write+0x2fa/0x5c0 [ 492.008147][T14983] ? generic_file_direct_write+0x330/0x330 [ 492.013955][T14983] ? __file_remove_privs+0x5f0/0x5f0 [ 492.019235][T14983] ? rwsem_write_trylock+0x135/0x1c0 [ 492.024517][T14983] ? clear_nonspinnable+0x60/0x60 [ 492.029538][T14983] ? generic_write_checks_count+0x3d9/0x4c0 [ 492.035434][T14983] __generic_file_write_iter+0x148/0x2a0 [ 492.041076][T14983] generic_file_write_iter+0xab/0x2e0 [ 492.046456][T14983] vfs_write+0x4b1/0xa30 [ 492.050706][T14983] ? file_end_write+0x250/0x250 [ 492.055561][T14983] ? __fget_files+0x43d/0x4b0 [ 492.060243][T14983] ? __fdget_pos+0x2ae/0x360 [ 492.064837][T14983] ? ksys_write+0x71/0x250 [ 492.069261][T14983] ksys_write+0x14c/0x250 [ 492.073595][T14983] ? __ia32_sys_read+0x80/0x80 [ 492.078364][T14983] ? lockdep_hardirqs_on+0x94/0x140 [ 492.083560][T14983] do_syscall_64+0x4c/0xa0 [ 492.087972][T14983] ? clear_bhb_loop+0x60/0xb0 [ 492.092652][T14983] ? clear_bhb_loop+0x60/0xb0 [ 492.097329][T14983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.103215][T14983] RIP: 0033:0x7f58aa39c799 [ 492.107629][T14983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.127230][T14983] RSP: 002b:00007f58a85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 492.135647][T14983] RAX: ffffffffffffffda RBX: 00007f58aa615fa0 RCX: 00007f58aa39c799 [ 492.143612][T14983] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000007 [ 492.151579][T14983] RBP: 00007f58a85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 492.159547][T14983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.167517][T14983] R13: 00007f58aa616038 R14: 00007f58aa615fa0 R15: 00007fff65e82948 [ 492.175500][T14983] [ 492.238805][T14986] netlink: 'syz.1.3367': attribute type 21 has an invalid length. [ 494.729000][T15002] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3373'. [ 494.785492][T15004] netlink: 'syz.1.3374': attribute type 3 has an invalid length. [ 494.796257][T15004] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3374'. [ 495.928775][T14999] netlink: 'syz.3.3372': attribute type 10 has an invalid length. [ 496.278868][T15017] netlink: 'syz.4.3376': attribute type 10 has an invalid length. [ 496.288668][T15017] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3376'. [ 496.477784][T15025] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3382'. [ 496.562306][T15030] FAULT_INJECTION: forcing a failure. [ 496.562306][T15030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.596305][T15030] CPU: 0 PID: 15030 Comm: syz.2.3384 Not tainted syzkaller #0 [ 496.603853][T15030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.613950][T15030] Call Trace: [ 496.617271][T15030] [ 496.620235][T15030] dump_stack_lvl+0x188/0x24e [ 496.624980][T15030] ? show_regs_print_info+0x12/0x12 [ 496.630224][T15030] ? load_image+0x400/0x400 [ 496.634786][T15030] ? __might_fault+0xa6/0x120 [ 496.639546][T15030] should_fail_ex+0x399/0x4d0 [ 496.644280][T15030] copyin+0x1b/0x120 [ 496.648226][T15030] _copy_from_iter+0x447/0x1130 [ 496.653149][T15030] ? copyout_mc+0x110/0x110 [ 496.657696][T15030] ? __virt_addr_valid+0x188/0x540 [ 496.662855][T15030] ? __virt_addr_valid+0x188/0x540 [ 496.668014][T15030] ? __virt_addr_valid+0x465/0x540 [ 496.673192][T15030] ? __check_object_size+0x500/0xa40 [ 496.678537][T15030] netlink_sendmsg+0x755/0xbd0 [ 496.683369][T15030] ? netlink_getsockopt+0x550/0x550 [ 496.688622][T15030] ? aa_sock_msg_perm+0x94/0x150 [ 496.693599][T15030] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 496.698916][T15030] ? security_socket_sendmsg+0x7c/0xa0 [ 496.704430][T15030] ? netlink_getsockopt+0x550/0x550 [ 496.709673][T15030] ____sys_sendmsg+0x5be/0x970 [ 496.714509][T15030] ? __sys_sendmsg_sock+0x30/0x30 [ 496.719577][T15030] ? __import_iovec+0x315/0x500 [ 496.724499][T15030] ? import_iovec+0x6f/0xa0 [ 496.729060][T15030] ___sys_sendmsg+0x2a2/0x360 [ 496.733801][T15030] ? __sys_sendmsg+0x290/0x290 [ 496.738677][T15030] ? __lock_acquire+0x7d10/0x7d10 [ 496.743821][T15030] __se_sys_sendmsg+0x1bb/0x2a0 [ 496.748730][T15030] ? __x64_sys_sendmsg+0x80/0x80 [ 496.753763][T15030] ? lockdep_hardirqs_on+0x94/0x140 [ 496.759013][T15030] do_syscall_64+0x4c/0xa0 [ 496.763467][T15030] ? clear_bhb_loop+0x60/0xb0 [ 496.768183][T15030] ? clear_bhb_loop+0x60/0xb0 [ 496.772903][T15030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.778837][T15030] RIP: 0033:0x7f003fd9c799 [ 496.783284][T15030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.802934][T15030] RSP: 002b:00007f0040bf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.811387][T15030] RAX: ffffffffffffffda RBX: 00007f0040015fa0 RCX: 00007f003fd9c799 [ 496.819385][T15030] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 0000000000000005 [ 496.827387][T15030] RBP: 00007f0040bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 496.835385][T15030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.843383][T15030] R13: 00007f0040016038 R14: 00007f0040015fa0 R15: 00007ffcf06b4738 [ 496.851433][T15030] [ 497.214233][T15042] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3387'. [ 497.342272][T15045] netlink: 'syz.4.3390': attribute type 3 has an invalid length. [ 497.456043][T15045] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.3390'. [ 497.669002][T15056] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3393'. [ 497.921733][T15060] netlink: 'syz.4.3394': attribute type 10 has an invalid length. [ 497.930083][T15060] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3394'. [ 498.232716][ T6522] tipc: Subscription rejected, illegal request [ 498.455533][T15085] netlink: 'syz.2.3403': attribute type 10 has an invalid length. [ 498.467296][T15085] device hsr0 left promiscuous mode [ 498.506835][T15085] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 498.637964][T15094] netlink: 'syz.3.3407': attribute type 10 has an invalid length. [ 498.848886][T15098] netlink: 'syz.2.3409': attribute type 10 has an invalid length. [ 498.883874][T15098] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3409'. [ 498.904860][T15098] device hsr0 entered promiscuous mode [ 498.928774][T15098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 499.236857][T15110] delete_channel: no stack [ 501.290423][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.296856][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.508971][T15117] netlink: 'syz.3.3418': attribute type 21 has an invalid length. [ 501.525870][T15117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3418'. [ 501.540707][T15117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3418'. [ 501.571513][T15113] netlink: 'syz.2.3416': attribute type 10 has an invalid length. [ 501.584777][T15113] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3416'. [ 501.616399][T15119] netlink: 'syz.3.3418': attribute type 2 has an invalid length. [ 501.630326][T15119] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3418'. [ 502.694926][T15133] netlink: 'syz.0.3424': attribute type 10 has an invalid length. [ 502.704247][T15133] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3424'. [ 504.529775][T15161] netlink: 'syz.4.3432': attribute type 10 has an invalid length. [ 504.571405][T15161] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3432'. [ 504.935949][T15172] netlink: 'syz.3.3438': attribute type 10 has an invalid length. [ 504.955033][T15172] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3438'. [ 505.257380][T15181] FAULT_INJECTION: forcing a failure. [ 505.257380][T15181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.342192][T15181] CPU: 0 PID: 15181 Comm: syz.1.3441 Not tainted syzkaller #0 [ 505.349703][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.359766][T15181] Call Trace: [ 505.363050][T15181] [ 505.365986][T15181] dump_stack_lvl+0x188/0x24e [ 505.370684][T15181] ? show_regs_print_info+0x12/0x12 [ 505.375897][T15181] ? load_image+0x400/0x400 [ 505.380412][T15181] ? __lock_acquire+0x7d10/0x7d10 [ 505.385451][T15181] ? snprintf+0xe5/0x140 [ 505.389713][T15181] should_fail_ex+0x399/0x4d0 [ 505.394400][T15181] _copy_to_user+0x2c/0x130 [ 505.398917][T15181] simple_read_from_buffer+0xe3/0x150 [ 505.404308][T15181] proc_fail_nth_read+0x1a6/0x220 [ 505.409351][T15181] ? proc_fault_inject_write+0x310/0x310 [ 505.414998][T15181] ? fsnotify_perm+0x248/0x550 [ 505.419772][T15181] ? proc_fault_inject_write+0x310/0x310 [ 505.425416][T15181] vfs_read+0x2de/0xa00 [ 505.429593][T15181] ? kernel_read+0x1e0/0x1e0 [ 505.434195][T15181] ? __fget_files+0x28/0x4b0 [ 505.438795][T15181] ? __fget_files+0x28/0x4b0 [ 505.443395][T15181] ? __fget_files+0x43d/0x4b0 [ 505.448092][T15181] ? __fdget_pos+0x2ae/0x360 [ 505.452693][T15181] ? ksys_read+0x71/0x250 [ 505.457035][T15181] ksys_read+0x14c/0x250 [ 505.461294][T15181] ? vfs_write+0xa30/0xa30 [ 505.465731][T15181] ? lockdep_hardirqs_on+0x94/0x140 [ 505.470941][T15181] do_syscall_64+0x4c/0xa0 [ 505.475371][T15181] ? clear_bhb_loop+0x60/0xb0 [ 505.480054][T15181] ? clear_bhb_loop+0x60/0xb0 [ 505.484741][T15181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.490641][T15181] RIP: 0033:0x7f8d1cd5cfce [ 505.495064][T15181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 505.514682][T15181] RSP: 002b:00007f8d1aff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 505.523113][T15181] RAX: ffffffffffffffda RBX: 00007f8d1aff66c0 RCX: 00007f8d1cd5cfce [ 505.531091][T15181] RDX: 000000000000000f RSI: 00007f8d1aff60a0 RDI: 0000000000000004 [ 505.539068][T15181] RBP: 00007f8d1aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 505.547047][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.555028][T15181] R13: 00007f8d1d016038 R14: 00007f8d1d015fa0 R15: 00007ffd8b7f6c28 [ 505.563028][T15181] [ 506.226934][T15192] netlink: 'syz.1.3444': attribute type 10 has an invalid length. [ 506.262193][T15192] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3444'. [ 508.585883][T15235] FAULT_INJECTION: forcing a failure. [ 508.585883][T15235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.608461][T15235] CPU: 1 PID: 15235 Comm: syz.0.3458 Not tainted syzkaller #0 [ 508.615974][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.626120][T15235] Call Trace: [ 508.629396][T15235] [ 508.632330][T15235] dump_stack_lvl+0x188/0x24e [ 508.637037][T15235] ? show_regs_print_info+0x12/0x12 [ 508.642264][T15235] ? load_image+0x400/0x400 [ 508.646796][T15235] ? __lock_acquire+0x7d10/0x7d10 [ 508.651846][T15235] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 508.658015][T15235] should_fail_ex+0x399/0x4d0 [ 508.662687][T15235] _copy_from_user+0x2c/0x170 [ 508.667361][T15235] iovec_from_user+0x143/0x360 [ 508.672132][T15235] __import_iovec+0x6d/0x500 [ 508.676729][T15235] import_iovec+0x6f/0xa0 [ 508.681057][T15235] ___sys_sendmsg+0x252/0x360 [ 508.685749][T15235] ? __sys_sendmsg+0x290/0x290 [ 508.690527][T15235] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 508.696264][T15235] __se_sys_sendmsg+0x1bb/0x2a0 [ 508.701123][T15235] ? __x64_sys_sendmsg+0x80/0x80 [ 508.706098][T15235] ? syscall_enter_from_user_mode+0x2a/0x80 [ 508.712015][T15235] do_syscall_64+0x4c/0xa0 [ 508.716431][T15235] ? clear_bhb_loop+0x60/0xb0 [ 508.721104][T15235] ? clear_bhb_loop+0x60/0xb0 [ 508.725784][T15235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.731672][T15235] RIP: 0033:0x7f6a41d9c799 [ 508.736081][T15235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.755685][T15235] RSP: 002b:00007f6a42cd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.764097][T15235] RAX: ffffffffffffffda RBX: 00007f6a42015fa0 RCX: 00007f6a41d9c799 [ 508.772064][T15235] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 508.780024][T15235] RBP: 00007f6a42cd8090 R08: 0000000000000000 R09: 0000000000000000 [ 508.787987][T15235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.795951][T15235] R13: 00007f6a42016038 R14: 00007f6a42015fa0 R15: 00007ffe5ac0af28 [ 508.803926][T15235] [ 509.004225][T15239] netlink: 'syz.2.3459': attribute type 10 has an invalid length. [ 509.032454][T15239] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3459'. [ 509.288811][T15258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.296767][T15258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.948277][T15258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.959027][T15258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.225476][T15272] netlink: 'syz.4.3469': attribute type 10 has an invalid length. [ 510.235735][T15272] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3469'. [ 510.561946][T15281] netlink: 'syz.3.3473': attribute type 10 has an invalid length. [ 510.580985][T15281] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3473'. [ 510.929578][T15294] FAULT_INJECTION: forcing a failure. [ 510.929578][T15294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.960528][T15294] CPU: 0 PID: 15294 Comm: syz.4.3479 Not tainted syzkaller #0 [ 510.968047][T15294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.978123][T15294] Call Trace: [ 510.981412][T15294] [ 510.984353][T15294] dump_stack_lvl+0x188/0x24e [ 510.989060][T15294] ? show_regs_print_info+0x12/0x12 [ 510.994371][T15294] ? load_image+0x400/0x400 [ 510.998901][T15294] ? __lock_acquire+0x7d10/0x7d10 [ 511.003962][T15294] ? snprintf+0xe5/0x140 [ 511.008228][T15294] should_fail_ex+0x399/0x4d0 [ 511.012922][T15294] _copy_to_user+0x2c/0x130 [ 511.017437][T15294] simple_read_from_buffer+0xe3/0x150 [ 511.022807][T15294] proc_fail_nth_read+0x1a6/0x220 [ 511.027827][T15294] ? proc_fault_inject_write+0x310/0x310 [ 511.033453][T15294] ? fsnotify_perm+0x248/0x550 [ 511.038209][T15294] ? proc_fault_inject_write+0x310/0x310 [ 511.043837][T15294] vfs_read+0x2de/0xa00 [ 511.047995][T15294] ? kernel_read+0x1e0/0x1e0 [ 511.052580][T15294] ? __fget_files+0x28/0x4b0 [ 511.057168][T15294] ? __fget_files+0x28/0x4b0 [ 511.061761][T15294] ? __fget_files+0x43d/0x4b0 [ 511.066458][T15294] ? __fdget_pos+0x2ae/0x360 [ 511.071042][T15294] ? ksys_read+0x71/0x250 [ 511.075371][T15294] ksys_read+0x14c/0x250 [ 511.079611][T15294] ? vfs_write+0xa30/0xa30 [ 511.084027][T15294] ? lockdep_hardirqs_on+0x94/0x140 [ 511.089250][T15294] do_syscall_64+0x4c/0xa0 [ 511.093662][T15294] ? clear_bhb_loop+0x60/0xb0 [ 511.098333][T15294] ? clear_bhb_loop+0x60/0xb0 [ 511.103004][T15294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.108889][T15294] RIP: 0033:0x7f8d7c15cfce [ 511.113304][T15294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 511.132927][T15294] RSP: 002b:00007f8d7d016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 511.141340][T15294] RAX: ffffffffffffffda RBX: 00007f8d7d0176c0 RCX: 00007f8d7c15cfce [ 511.149304][T15294] RDX: 000000000000000f RSI: 00007f8d7d0170a0 RDI: 0000000000000004 [ 511.157266][T15294] RBP: 00007f8d7d017090 R08: 0000000000000000 R09: 0000000000000000 [ 511.165231][T15294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.173194][T15294] R13: 00007f8d7c416038 R14: 00007f8d7c415fa0 R15: 00007ffff3ba9108 [ 511.181169][T15294] [ 511.412243][T15304] netlink: 'syz.1.3482': attribute type 10 has an invalid length. [ 513.164221][T15330] device syzkaller0 entered promiscuous mode [ 513.210224][T15328] netlink: 'syz.4.3490': attribute type 10 has an invalid length. [ 513.250585][T15328] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3490'. [ 513.294092][T15335] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 513.299951][T15335] syzkaller0: Linktype set failed because interface is up [ 513.480138][T15331] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3491'. [ 513.533976][T15331] device batadv_slave_1 entered promiscuous mode [ 518.531665][T15385] netlink: 'syz.2.3507': attribute type 10 has an invalid length. [ 518.550428][T15385] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3507'. [ 521.974390][T15437] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3522'. [ 522.008082][T15440] netlink: 'syz.3.3523': attribute type 10 has an invalid length. [ 522.232058][T15444] netlink: 'syz.1.3525': attribute type 10 has an invalid length. [ 522.240174][T15444] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3525'. [ 522.654806][T15454] netlink: 'syz.1.3529': attribute type 10 has an invalid length. [ 522.674201][T15454] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3529'. [ 524.876900][T15475] netlink: 'syz.4.3537': attribute type 10 has an invalid length. [ 525.107418][T15475] device veth0_vlan left promiscuous mode [ 525.133136][T15475] device veth0_vlan entered promiscuous mode [ 525.142686][T15475] team0: Device veth0_vlan failed to register rx_handler [ 525.204956][T15473] bridge0: port 3(hsr0) entered disabled state [ 525.319077][T15473] device bridge_slave_1 left promiscuous mode [ 525.333373][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.348414][T15473] device bridge_slave_0 left promiscuous mode [ 525.364930][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.586681][T15480] netlink: 'syz.2.3538': attribute type 10 has an invalid length. [ 525.595352][T15484] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3539'. [ 525.607474][T15488] netlink: 'syz.0.3540': attribute type 10 has an invalid length. [ 525.687167][T15488] device veth0_vlan left promiscuous mode [ 525.707353][T15488] device veth0_vlan entered promiscuous mode [ 525.737845][T15488] team0: Device veth0_vlan failed to register rx_handler [ 526.167888][T15504] netlink: 'syz.3.3544': attribute type 10 has an invalid length. [ 526.191993][T15504] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3544'. [ 528.159417][T15528] netlink: 'syz.1.3551': attribute type 10 has an invalid length. [ 528.168821][T15528] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3551'. [ 528.269695][T15534] netlink: 'syz.3.3553': attribute type 10 has an invalid length. [ 528.278762][T15534] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3553'. [ 528.638445][T15545] netlink: 'syz.1.3558': attribute type 10 has an invalid length. [ 528.688938][T15545] team0: Port device wlan1 removed [ 528.746623][T15545] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 528.765382][T15550] netlink: 'syz.1.3558': attribute type 10 has an invalid length. [ 528.783745][T15550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3558'. [ 528.822435][T15550] device team0 entered promiscuous mode [ 528.846505][T15550] device team_slave_0 entered promiscuous mode [ 528.863291][T15550] device team_slave_1 entered promiscuous mode [ 528.890940][T15550] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.933387][T15550] bond0: (slave team0): Releasing backup interface [ 528.963359][T15550] bridge0: port 4(team0) entered blocking state [ 528.980127][T15550] bridge0: port 4(team0) entered disabled state [ 529.002525][T15555] netlink: 'syz.2.3560': attribute type 10 has an invalid length. [ 529.042766][T15555] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3560'. [ 529.394865][T15578] netlink: 'syz.1.3568': attribute type 10 has an invalid length. [ 529.403094][T15578] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3568'. [ 529.526611][T15582] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3569'. [ 530.835922][T15588] device syzkaller0 entered promiscuous mode [ 530.925670][T15594] validate_nla: 1 callbacks suppressed [ 530.925728][T15594] netlink: 'syz.4.3573': attribute type 2 has an invalid length. [ 530.960146][T15594] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3573'. [ 532.316288][T15606] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3573'. [ 532.326492][T15605] netlink: 'syz.0.3576': attribute type 10 has an invalid length. [ 532.359509][T15605] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 532.437011][T15609] netlink: 'syz.0.3576': attribute type 10 has an invalid length. [ 532.460364][T15609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3576'. [ 532.469566][T15609] device team0 entered promiscuous mode [ 532.504766][T15609] device team_slave_0 entered promiscuous mode [ 532.521091][T15609] device team_slave_1 entered promiscuous mode [ 532.538345][T15609] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.556763][T15609] bond0: (slave team0): Releasing backup interface [ 532.624352][T15609] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 532.679680][T15621] netlink: 'syz.4.3581': attribute type 10 has an invalid length. [ 532.698990][T15621] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3581'. [ 532.916932][T15624] netlink: 'syz.1.3583': attribute type 10 has an invalid length. [ 532.947659][T15624] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3583'. [ 533.957134][T15652] netlink: 'syz.3.3594': attribute type 3 has an invalid length. [ 533.976209][T15652] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3594'. [ 534.061389][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 534.064148][T15657] netlink: 'syz.2.3596': attribute type 2 has an invalid length. [ 534.090388][T15657] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3596'. [ 534.523556][T15677] netlink: 'syz.3.3603': attribute type 10 has an invalid length. [ 534.531796][T15677] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3603'. [ 534.565882][T15677] netlink: 'syz.3.3603': attribute type 10 has an invalid length. [ 534.574740][T15677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3603'. [ 534.584590][T15677] device dummy0 entered promiscuous mode [ 534.596929][T15677] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 535.153168][T15679] FAULT_INJECTION: forcing a failure. [ 535.153168][T15679] name failslab, interval 1, probability 0, space 0, times 0 [ 535.167616][T15679] CPU: 0 PID: 15679 Comm: syz.4.3604 Not tainted syzkaller #0 [ 535.175112][T15679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.185170][T15679] Call Trace: [ 535.188435][T15679] [ 535.191360][T15679] dump_stack_lvl+0x188/0x24e [ 535.196033][T15679] ? show_regs_print_info+0x12/0x12 [ 535.201236][T15679] ? load_image+0x400/0x400 [ 535.205727][T15679] ? __might_sleep+0xd0/0xd0 [ 535.210301][T15679] ? __lock_acquire+0x7d10/0x7d10 [ 535.215318][T15679] should_fail_ex+0x399/0x4d0 [ 535.219978][T15679] should_failslab+0x5/0x20 [ 535.224473][T15679] slab_pre_alloc_hook+0x59/0x310 [ 535.229497][T15679] ? kvmalloc_node+0x6c/0x180 [ 535.234175][T15679] __kmem_cache_alloc_node+0x4f/0x260 [ 535.239547][T15679] ? kvmalloc_node+0x6c/0x180 [ 535.244221][T15679] __kmalloc_node+0xa0/0x240 [ 535.248813][T15679] kvmalloc_node+0x6c/0x180 [ 535.253314][T15679] bpf_test_run_xdp_live+0x209/0x1a90 [ 535.258683][T15679] ? bpf_dispatcher_xdp+0x800/0x1000 [ 535.263964][T15679] ? text_poke_copy+0x79/0x90 [ 535.268639][T15679] ? bpf_dispatcher_xdp+0x800/0x1000 [ 535.273922][T15679] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 535.279816][T15679] ? bpf_dispatcher_xdp+0x800/0x1000 [ 535.285101][T15679] ? xdp_convert_md_to_buff+0x330/0x330 [ 535.290664][T15679] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 535.296906][T15679] ? bpf_test_init+0x119/0x140 [ 535.301661][T15679] ? xdp_convert_md_to_buff+0x5b/0x330 [ 535.307113][T15679] bpf_prog_test_run_xdp+0x736/0xf10 [ 535.312403][T15679] ? dev_put+0x80/0x80 [ 535.316477][T15679] ? dev_put+0x80/0x80 [ 535.320539][T15679] bpf_prog_test_run+0x31e/0x390 [ 535.325478][T15679] __sys_bpf+0x62b/0x780 [ 535.329717][T15679] ? bpf_link_show_fdinfo+0x380/0x380 [ 535.335094][T15679] ? lock_chain_count+0x20/0x20 [ 535.339949][T15679] __x64_sys_bpf+0x78/0x90 [ 535.344359][T15679] do_syscall_64+0x4c/0xa0 [ 535.348775][T15679] ? clear_bhb_loop+0x60/0xb0 [ 535.353448][T15679] ? clear_bhb_loop+0x60/0xb0 [ 535.358122][T15679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.364007][T15679] RIP: 0033:0x7f8d7c19c799 [ 535.368415][T15679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.388014][T15679] RSP: 002b:00007f8d7d017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 535.396419][T15679] RAX: ffffffffffffffda RBX: 00007f8d7c415fa0 RCX: 00007f8d7c19c799 [ 535.404382][T15679] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 535.412343][T15679] RBP: 00007f8d7d017090 R08: 0000000000000000 R09: 0000000000000000 [ 535.420303][T15679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.428261][T15679] R13: 00007f8d7c416038 R14: 00007f8d7c415fa0 R15: 00007ffff3ba9108 [ 535.436236][T15679] [ 536.355985][T15715] netlink: 'syz.2.3618': attribute type 21 has an invalid length. [ 536.369078][T15715] netlink: 'syz.2.3618': attribute type 6 has an invalid length. [ 536.382595][T15715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3618'. [ 536.658158][T15728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3622'. [ 537.371724][T15734] FAULT_INJECTION: forcing a failure. [ 537.371724][T15734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.490487][T15734] CPU: 0 PID: 15734 Comm: syz.3.3625 Not tainted syzkaller #0 [ 537.498026][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.508095][T15734] Call Trace: [ 537.511386][T15734] [ 537.514328][T15734] dump_stack_lvl+0x188/0x24e [ 537.519044][T15734] ? show_regs_print_info+0x12/0x12 [ 537.524268][T15734] ? load_image+0x400/0x400 [ 537.528806][T15734] ? __lock_acquire+0x7d10/0x7d10 [ 537.533868][T15734] should_fail_ex+0x399/0x4d0 [ 537.538570][T15734] _copy_from_user+0x2c/0x170 [ 537.543272][T15734] iovec_from_user+0x143/0x360 [ 537.548065][T15734] __import_iovec+0x6d/0x500 [ 537.552698][T15734] import_iovec+0x6f/0xa0 [ 537.557068][T15734] ___sys_sendmsg+0x252/0x360 [ 537.561789][T15734] ? __sys_sendmsg+0x290/0x290 [ 537.566624][T15734] ? __lock_acquire+0x7d10/0x7d10 [ 537.571719][T15734] __se_sys_sendmsg+0x1bb/0x2a0 [ 537.576604][T15734] ? ct_nmi_exit+0x145/0x1c0 [ 537.581230][T15734] ? __x64_sys_sendmsg+0x80/0x80 [ 537.586231][T15734] ? lockdep_hardirqs_on+0x94/0x140 [ 537.591472][T15734] do_syscall_64+0x4c/0xa0 [ 537.595915][T15734] ? clear_bhb_loop+0x60/0xb0 [ 537.600618][T15734] ? clear_bhb_loop+0x60/0xb0 [ 537.605322][T15734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.611239][T15734] RIP: 0033:0x7f58aa39c799 [ 537.615672][T15734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.635296][T15734] RSP: 002b:00007f58a85f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.643732][T15734] RAX: ffffffffffffffda RBX: 00007f58aa615fa0 RCX: 00007f58aa39c799 [ 537.651719][T15734] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 537.659704][T15734] RBP: 00007f58a85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 537.667688][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.675670][T15734] R13: 00007f58aa616038 R14: 00007f58aa615fa0 R15: 00007fff65e82948 [ 537.683690][T15734] [ 538.021170][T15742] netlink: 'syz.2.3628': attribute type 10 has an invalid length. [ 538.029032][T15742] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3628'. [ 538.422000][T15757] netlink: 'syz.1.3634': attribute type 10 has an invalid length. [ 538.430044][T15757] device team0 left promiscuous mode [ 538.447972][T15757] device team_slave_0 left promiscuous mode [ 538.455038][T15757] device team_slave_1 left promiscuous mode [ 538.461958][T15757] bridge0: port 4(team0) entered disabled state [ 538.497097][T15761] FAULT_INJECTION: forcing a failure. [ 538.497097][T15761] name failslab, interval 1, probability 0, space 0, times 0 [ 538.516391][T15761] CPU: 0 PID: 15761 Comm: syz.2.3635 Not tainted syzkaller #0 [ 538.523899][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 538.533963][T15761] Call Trace: [ 538.537242][T15761] [ 538.540165][T15761] dump_stack_lvl+0x188/0x24e [ 538.544848][T15761] ? sctp_sendmsg+0x15b0/0x2940 [ 538.549709][T15761] ? ___sys_sendmsg+0x2a2/0x360 [ 538.554569][T15761] ? show_regs_print_info+0x12/0x12 [ 538.559775][T15761] ? load_image+0x400/0x400 [ 538.564291][T15761] should_fail_ex+0x399/0x4d0 [ 538.568973][T15761] should_failslab+0x5/0x20 [ 538.573474][T15761] slab_pre_alloc_hook+0x59/0x310 [ 538.578510][T15761] ? sctp_add_bind_addr+0x89/0x350 [ 538.583630][T15761] __kmem_cache_alloc_node+0x4f/0x260 [ 538.589003][T15761] ? sctp_add_bind_addr+0x89/0x350 [ 538.594122][T15761] kmalloc_trace+0x26/0xe0 [ 538.598545][T15761] sctp_add_bind_addr+0x89/0x350 [ 538.603486][T15761] sctp_copy_local_addr_list+0x311/0x4e0 [ 538.609120][T15761] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 538.614840][T15761] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 538.620910][T15761] ? sctp_v4_is_any+0x31/0x50 [ 538.625588][T15761] ? sctp_copy_one_addr+0x93/0x660 [ 538.630696][T15761] sctp_bind_addr_copy+0xaf/0x3c0 [ 538.635719][T15761] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 538.642047][T15761] sctp_connect_new_asoc+0x2f5/0x6a0 [ 538.647334][T15761] ? __sctp_connect+0xd80/0xd80 [ 538.652179][T15761] ? __local_bh_enable_ip+0x136/0x1c0 [ 538.657547][T15761] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 538.663084][T15761] ? security_sctp_bind_connect+0x85/0xb0 [ 538.668798][T15761] sctp_sendmsg+0x15b0/0x2940 [ 538.673482][T15761] ? aa_sk_perm+0x741/0x950 [ 538.677982][T15761] ? sctp_getsockopt+0x8a0/0x8a0 [ 538.682922][T15761] ? __might_fault+0xa6/0x120 [ 538.687596][T15761] ? aa_af_perm+0x340/0x340 [ 538.692092][T15761] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 538.698509][T15761] ? inet_sendmsg+0xe5/0x2f0 [ 538.703103][T15761] ? inet_send_prepare+0x260/0x260 [ 538.708246][T15761] ____sys_sendmsg+0x5be/0x970 [ 538.713015][T15761] ? __sys_sendmsg_sock+0x30/0x30 [ 538.718038][T15761] ? __import_iovec+0x315/0x500 [ 538.722896][T15761] ? import_iovec+0x6f/0xa0 [ 538.727396][T15761] ___sys_sendmsg+0x2a2/0x360 [ 538.732076][T15761] ? __sys_sendmsg+0x290/0x290 [ 538.736851][T15761] ? trace_call_bpf+0xbf/0x6b0 [ 538.741630][T15761] __se_sys_sendmsg+0x1bb/0x2a0 [ 538.746482][T15761] ? __x64_sys_sendmsg+0x80/0x80 [ 538.751429][T15761] ? lockdep_hardirqs_on+0x94/0x140 [ 538.756622][T15761] do_syscall_64+0x4c/0xa0 [ 538.761036][T15761] ? clear_bhb_loop+0x60/0xb0 [ 538.765706][T15761] ? clear_bhb_loop+0x60/0xb0 [ 538.770378][T15761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.776265][T15761] RIP: 0033:0x7f003fd9c799 [ 538.780675][T15761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.800273][T15761] RSP: 002b:00007f0040bf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.808677][T15761] RAX: ffffffffffffffda RBX: 00007f0040015fa0 RCX: 00007f003fd9c799 [ 538.816640][T15761] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 538.824605][T15761] RBP: 00007f0040bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 538.832565][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.840535][T15761] R13: 00007f0040016038 R14: 00007f0040015fa0 R15: 00007ffcf06b4738 [ 538.848514][T15761] [ 541.235827][T15757] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.252298][T15757] bond0: (slave team0): Enslaving as an active interface with an up link [ 541.357114][T15770] netlink: 'syz.0.3638': attribute type 10 has an invalid length. [ 541.400697][T15770] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3638'. [ 541.740008][T15783] netlink: 'syz.0.3642': attribute type 10 has an invalid length. [ 541.768781][T15783] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3642'. [ 543.032439][T15803] FAULT_INJECTION: forcing a failure. [ 543.032439][T15803] name failslab, interval 1, probability 0, space 0, times 0 [ 543.088147][T15803] CPU: 0 PID: 15803 Comm: syz.4.3646 Not tainted syzkaller #0 [ 543.095669][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.105741][T15803] Call Trace: [ 543.109032][T15803] [ 543.111976][T15803] dump_stack_lvl+0x188/0x24e [ 543.116694][T15803] ? show_regs_print_info+0x12/0x12 [ 543.121919][T15803] ? load_image+0x400/0x400 [ 543.126444][T15803] ? __might_sleep+0xd0/0xd0 [ 543.131047][T15803] ? __lock_acquire+0x7d10/0x7d10 [ 543.136098][T15803] should_fail_ex+0x399/0x4d0 [ 543.140795][T15803] should_failslab+0x5/0x20 [ 543.145312][T15803] slab_pre_alloc_hook+0x59/0x310 [ 543.150354][T15803] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 543.155921][T15803] __kmem_cache_alloc_node+0x4f/0x260 [ 543.161318][T15803] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 543.166892][T15803] __kmalloc+0xa0/0x240 [ 543.171082][T15803] bpf_prog_test_run_skb+0x234/0x12a0 [ 543.176472][T15803] ? lockdep_hardirqs_on+0x94/0x140 [ 543.181688][T15803] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 543.187869][T15803] ? cpu_online+0xa0/0xa0 [ 543.192223][T15803] bpf_prog_test_run+0x31e/0x390 [ 543.197188][T15803] __sys_bpf+0x62b/0x780 [ 543.201458][T15803] ? bpf_link_show_fdinfo+0x380/0x380 [ 543.206886][T15803] ? __sys_bpf+0x1/0x780 [ 543.211150][T15803] __x64_sys_bpf+0x78/0x90 [ 543.215586][T15803] do_syscall_64+0x4c/0xa0 [ 543.220018][T15803] ? clear_bhb_loop+0x60/0xb0 [ 543.224709][T15803] ? clear_bhb_loop+0x60/0xb0 [ 543.229408][T15803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.235322][T15803] RIP: 0033:0x7f8d7c19c799 [ 543.239753][T15803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.259380][T15803] RSP: 002b:00007f8d7d017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.267814][T15803] RAX: ffffffffffffffda RBX: 00007f8d7c415fa0 RCX: 00007f8d7c19c799 [ 543.275809][T15803] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 543.283797][T15803] RBP: 00007f8d7d017090 R08: 0000000000000000 R09: 0000000000000000 [ 543.291797][T15803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.299779][T15803] R13: 00007f8d7c416038 R14: 00007f8d7c415fa0 R15: 00007ffff3ba9108 [ 543.307787][T15803] [ 543.921866][T15817] netlink: 'syz.3.3650': attribute type 10 has an invalid length. [ 543.975803][T15817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3650'. [ 543.989199][T15817] device team0 entered promiscuous mode [ 543.995673][T15817] device team_slave_0 entered promiscuous mode [ 544.003181][T15817] device team_slave_1 entered promiscuous mode [ 544.023967][T15817] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.044059][T15817] bond0: (slave team0): Releasing backup interface [ 544.063667][T15817] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 544.079731][T15823] netlink: 'syz.4.3651': attribute type 10 has an invalid length. [ 544.211894][T15826] netlink: 'syz.1.3653': attribute type 10 has an invalid length. [ 544.230592][T15826] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3653'. [ 544.560299][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 544.813270][T15839] netlink: 'syz.1.3657': attribute type 10 has an invalid length. [ 544.840576][T15839] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3657'. [ 545.752490][T15861] netlink: 'syz.0.3665': attribute type 10 has an invalid length. [ 545.770361][T15861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3665'. [ 545.783253][T15861] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.793323][T15861] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 546.366524][T15870] netlink: 'syz.4.3667': attribute type 10 has an invalid length. [ 546.656910][T15878] netlink: 'syz.2.3670': attribute type 10 has an invalid length. [ 546.669474][T15878] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3670'. [ 546.975354][T15894] netlink: 'syz.1.3677': attribute type 10 has an invalid length. [ 546.987380][T15894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3677'. [ 547.014909][T15894] device team0 entered promiscuous mode [ 547.027147][T15894] device team_slave_0 entered promiscuous mode [ 547.034423][T15894] device team_slave_1 entered promiscuous mode [ 547.041841][T15894] bond0: (slave team0): Releasing backup interface [ 547.060911][T15894] bridge0: port 4(team0) entered blocking state [ 547.076257][T15894] bridge0: port 4(team0) entered disabled state [ 547.092194][T15889] netlink: 'syz.3.3674': attribute type 10 has an invalid length. [ 547.100467][T15889] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3674'. [ 547.627460][T15914] netlink: 'syz.3.3683': attribute type 10 has an invalid length. [ 547.635807][T15914] device team0 left promiscuous mode [ 547.641298][T15914] device team_slave_0 left promiscuous mode [ 547.647698][T15914] device team_slave_1 left promiscuous mode [ 547.655737][T15914] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.664750][T15914] bond0: (slave team0): Enslaving as an active interface with an up link [ 548.995822][T15945] netlink: 'syz.4.3696': attribute type 10 has an invalid length. [ 552.258083][T15952] netlink: 'syz.4.3697': attribute type 10 has an invalid length. [ 552.288551][T15952] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3697'. [ 553.349356][T15977] netlink: 'syz.3.3710': attribute type 10 has an invalid length. [ 553.379282][T15977] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3710'. [ 553.406430][T15979] netlink: 'syz.0.3711': attribute type 10 has an invalid length. [ 553.435351][T15979] device team0 left promiscuous mode [ 553.441584][T15979] device team_slave_0 left promiscuous mode [ 553.448666][T15979] device team_slave_1 left promiscuous mode [ 553.477431][T15979] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.497406][T15979] bond0: (slave team0): Enslaving as an active interface with an up link [ 553.650438][T15984] netlink: 'syz.4.3713': attribute type 10 has an invalid length. [ 553.680478][T15984] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3713'. [ 556.595650][T15995] FAULT_INJECTION: forcing a failure. [ 556.595650][T15995] name failslab, interval 1, probability 0, space 0, times 0 [ 556.629179][T15995] CPU: 1 PID: 15995 Comm: syz.3.3718 Not tainted syzkaller #0 [ 556.636717][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.646809][T15995] Call Trace: [ 556.650118][T15995] [ 556.653090][T15995] dump_stack_lvl+0x188/0x24e [ 556.657836][T15995] ? show_regs_print_info+0x12/0x12 [ 556.663108][T15995] ? load_image+0x400/0x400 [ 556.667674][T15995] ? __might_sleep+0xd0/0xd0 [ 556.672312][T15995] ? __lock_acquire+0x7d10/0x7d10 [ 556.677414][T15995] should_fail_ex+0x399/0x4d0 [ 556.682162][T15995] should_failslab+0x5/0x20 [ 556.686697][T15995] slab_pre_alloc_hook+0x59/0x310 [ 556.691767][T15995] ? prepend_path+0xa68/0xc20 [ 556.696485][T15995] ? tomoyo_encode+0x27e/0x540 [ 556.701304][T15995] __kmem_cache_alloc_node+0x4f/0x260 [ 556.706744][T15995] ? tomoyo_encode+0x27e/0x540 [ 556.711554][T15995] __kmalloc+0xa0/0x240 [ 556.715773][T15995] tomoyo_encode+0x27e/0x540 [ 556.720437][T15995] tomoyo_realpath_from_path+0x58e/0x5d0 [ 556.726159][T15995] ? tomoyo_path_number_perm+0x205/0x650 [ 556.731848][T15995] tomoyo_path_number_perm+0x22f/0x650 [ 556.737369][T15995] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 556.742875][T15995] ? ksys_write+0x1c0/0x250 [ 556.747428][T15995] ? common_file_perm+0x171/0x1c0 [ 556.752636][T15995] ? __fget_files+0x28/0x4b0 [ 556.757265][T15995] ? __fget_files+0x28/0x4b0 [ 556.761960][T15995] security_file_ioctl+0x6c/0xa0 [ 556.766960][T15995] __se_sys_ioctl+0x48/0x170 [ 556.771610][T15995] do_syscall_64+0x4c/0xa0 [ 556.776085][T15995] ? clear_bhb_loop+0x60/0xb0 [ 556.780798][T15995] ? clear_bhb_loop+0x60/0xb0 [ 556.785522][T15995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.791453][T15995] RIP: 0033:0x7f58aa39c799 [ 556.795923][T15995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.815575][T15995] RSP: 002b:00007f58a85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.824036][T15995] RAX: ffffffffffffffda RBX: 00007f58aa615fa0 RCX: 00007f58aa39c799 [ 556.832047][T15995] RDX: 00007ffffffff000 RSI: 00000000c004743e RDI: 0000000000000005 [ 556.840058][T15995] RBP: 00007f58a85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 556.848061][T15995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.856069][T15995] R13: 00007f58aa616038 R14: 00007f58aa615fa0 R15: 00007fff65e82948 [ 556.864145][T15995] [ 557.315560][T15995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 558.139745][T16010] netlink: 'syz.1.3722': attribute type 39 has an invalid length. [ 558.905442][T16023] netlink: 'syz.4.3724': attribute type 10 has an invalid length. [ 558.915290][T16023] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3724'. [ 559.160097][T16031] netlink: 'syz.4.3729': attribute type 10 has an invalid length. [ 559.409264][T16035] netlink: 'syz.3.3730': attribute type 10 has an invalid length. [ 559.439960][T16035] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3730'. [ 559.662585][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 561.015557][T16061] netlink: 'syz.1.3740': attribute type 2 has an invalid length. [ 561.040734][T16063] netlink: 'syz.2.3739': attribute type 10 has an invalid length. [ 561.061533][T16063] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3739'. [ 561.286963][T16071] netlink: 'syz.2.3743': attribute type 10 has an invalid length. [ 561.392215][T16079] device syzkaller0 entered promiscuous mode [ 561.400760][T16079] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 562.029318][T16085] FAULT_INJECTION: forcing a failure. [ 562.029318][T16085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.044485][T16085] CPU: 0 PID: 16085 Comm: syz.0.3758 Not tainted syzkaller #0 [ 562.051984][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.062048][T16085] Call Trace: [ 562.065326][T16085] [ 562.068235][T16085] dump_stack_lvl+0x188/0x24e [ 562.072900][T16085] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 562.079032][T16085] ? show_regs_print_info+0x12/0x12 [ 562.084212][T16085] ? load_image+0x400/0x400 [ 562.088700][T16085] should_fail_ex+0x399/0x4d0 [ 562.093357][T16085] _copy_from_user+0x2c/0x170 [ 562.098015][T16085] __sys_bpf+0x2ea/0x780 [ 562.102258][T16085] ? bpf_link_show_fdinfo+0x380/0x380 [ 562.107644][T16085] ? lock_chain_count+0x20/0x20 [ 562.112481][T16085] __x64_sys_bpf+0x78/0x90 [ 562.116894][T16085] do_syscall_64+0x4c/0xa0 [ 562.121360][T16085] ? clear_bhb_loop+0x60/0xb0 [ 562.126057][T16085] ? clear_bhb_loop+0x60/0xb0 [ 562.130751][T16085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.136632][T16085] RIP: 0033:0x7f6a41d9c799 [ 562.141023][T16085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.160609][T16085] RSP: 002b:00007f6a42cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.169002][T16085] RAX: ffffffffffffffda RBX: 00007f6a42015fa0 RCX: 00007f6a41d9c799 [ 562.176955][T16085] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 562.184909][T16085] RBP: 00007f6a42cd8090 R08: 0000000000000000 R09: 0000000000000000 [ 562.192865][T16085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.200816][T16085] R13: 00007f6a42016038 R14: 00007f6a42015fa0 R15: 00007ffe5ac0af28 [ 562.208811][T16085] [ 562.750436][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.756768][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.483609][T16111] netlink: 'syz.2.3753': attribute type 10 has an invalid length. [ 563.494007][T16111] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3753'. [ 563.871488][T16127] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3760'. [ 563.883848][T16127] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3760'. [ 563.961334][T16130] netlink: 'syz.3.3761': attribute type 10 has an invalid length. [ 565.429697][T16151] netlink: 'syz.2.3769': attribute type 10 has an invalid length. [ 565.438584][T16151] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3769'. [ 565.944201][T16172] netlink: 'syz.2.3776': attribute type 10 has an invalid length. [ 567.294459][T16190] netlink: 'syz.2.3783': attribute type 10 has an invalid length. [ 567.303129][T16190] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3783'. [ 568.518632][T16207] FAULT_INJECTION: forcing a failure. [ 568.518632][T16207] name failslab, interval 1, probability 0, space 0, times 0 [ 568.634870][T16207] CPU: 0 PID: 16207 Comm: syz.0.3789 Not tainted syzkaller #0 [ 568.642392][T16207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.652466][T16207] Call Trace: [ 568.655753][T16207] [ 568.658700][T16207] dump_stack_lvl+0x188/0x24e [ 568.663409][T16207] ? show_regs_print_info+0x12/0x12 [ 568.668636][T16207] ? load_image+0x400/0x400 [ 568.673162][T16207] ? __might_sleep+0xd0/0xd0 [ 568.677767][T16207] ? __lock_acquire+0x7d10/0x7d10 [ 568.682821][T16207] should_fail_ex+0x399/0x4d0 [ 568.687520][T16207] should_failslab+0x5/0x20 [ 568.692038][T16207] slab_pre_alloc_hook+0x59/0x310 [ 568.697086][T16207] ? tomoyo_encode+0x27e/0x540 [ 568.701876][T16207] __kmem_cache_alloc_node+0x4f/0x260 [ 568.707270][T16207] ? tomoyo_encode+0x27e/0x540 [ 568.712052][T16207] __kmalloc+0xa0/0x240 [ 568.716238][T16207] tomoyo_encode+0x27e/0x540 [ 568.720864][T16207] tomoyo_realpath_from_path+0x58e/0x5d0 [ 568.726531][T16207] ? tomoyo_path_number_perm+0x205/0x650 [ 568.732190][T16207] tomoyo_path_number_perm+0x22f/0x650 [ 568.737674][T16207] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 568.743155][T16207] ? ksys_write+0x1c0/0x250 [ 568.747685][T16207] ? common_file_perm+0x171/0x1c0 [ 568.752759][T16207] ? __fget_files+0x28/0x4b0 [ 568.757369][T16207] ? __fget_files+0x28/0x4b0 [ 568.761987][T16207] security_file_ioctl+0x6c/0xa0 [ 568.767469][T16207] __se_sys_ioctl+0x48/0x170 [ 568.772083][T16207] do_syscall_64+0x4c/0xa0 [ 568.776515][T16207] ? clear_bhb_loop+0x60/0xb0 [ 568.781211][T16207] ? clear_bhb_loop+0x60/0xb0 [ 568.785908][T16207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.791817][T16207] RIP: 0033:0x7f6a41d9c799 [ 568.796258][T16207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.815884][T16207] RSP: 002b:00007f6a42cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.824317][T16207] RAX: ffffffffffffffda RBX: 00007f6a42015fa0 RCX: 00007f6a41d9c799 [ 568.832296][T16207] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000f [ 568.840277][T16207] RBP: 00007f6a42cd8090 R08: 0000000000000000 R09: 0000000000000000 [ 568.848250][T16207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.856229][T16207] R13: 00007f6a42016038 R14: 00007f6a42015fa0 R15: 00007ffe5ac0af28 [ 568.864224][T16207] [ 568.929257][T16207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 569.905423][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 571.460055][T16228] netlink: 'syz.4.3794': attribute type 10 has an invalid length. [ 571.665083][T16236] netlink: 'syz.2.3796': attribute type 10 has an invalid length. [ 571.683474][T16236] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3796'. [ 573.469197][T16259] netlink: 'syz.1.3806': attribute type 10 has an invalid length. [ 573.607620][T16259] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 573.626963][T16270] netlink: 'syz.3.3809': attribute type 10 has an invalid length. [ 573.797587][T16274] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3811'. [ 573.840455][T16272] netlink: 'syz.3.3810': attribute type 10 has an invalid length. [ 573.851274][T16272] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3810'. [ 573.862707][T16274] netlink: 'syz.1.3811': attribute type 2 has an invalid length. [ 573.891148][T16274] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3811'. [ 574.459963][T16299] netlink: 'syz.1.3820': attribute type 10 has an invalid length. [ 574.500532][T16299] device team0 left promiscuous mode [ 574.505874][T16299] device team_slave_0 left promiscuous mode [ 574.540775][T16299] device team_slave_1 left promiscuous mode [ 574.547026][T16299] bridge0: port 4(team0) entered disabled state [ 574.641835][T16299] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.706468][T16299] bond0: (slave team0): Enslaving as an active interface with an up link [ 574.754482][T16307] netlink: 'syz.4.3824': attribute type 10 has an invalid length. [ 574.780573][T16307] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3824'. [ 575.295873][T16323] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3827'. [ 575.335784][T16323] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 576.605107][T16340] netlink: 'syz.4.3836': attribute type 10 has an invalid length. [ 576.614337][T16340] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3836'. [ 577.235797][T16363] netlink: 'syz.1.3841': attribute type 10 has an invalid length. [ 577.359717][T16363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3841'. [ 577.697952][T16372] device syzkaller0 entered promiscuous mode [ 580.154344][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 580.293990][T16409] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3851'. [ 582.086536][T16399] netlink: 'syz.2.3850': attribute type 10 has an invalid length. [ 582.095871][T16399] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3850'. [ 582.137601][T16410] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.3853'. [ 582.162462][T16411] netlink: 'syz.4.3853': attribute type 2 has an invalid length. [ 582.180571][T16413] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3853'. [ 585.997119][T16461] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3865'. [ 586.486404][T16457] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3865'. [ 586.802135][T16457] team0: Port device team_slave_0 removed [ 586.809106][T16457] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 586.834456][T16462] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3868'. [ 586.846178][T16461] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 586.859399][T16456] netlink: 'syz.3.3866': attribute type 10 has an invalid length. [ 586.880999][T16456] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3866'. [ 586.890382][T16461] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 586.900590][T16464] netlink: 'syz.0.3868': attribute type 2 has an invalid length. [ 586.908569][T16468] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3868'. [ 586.920899][T16461] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 590.059641][T16484] netlink: 'syz.2.3871': attribute type 12 has an invalid length. [ 590.069012][T16484] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.3871'. [ 590.461142][T16504] IPv6: NLM_F_CREATE should be specified when creating new route [ 590.469239][T16504] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3878'. [ 590.749766][T16512] netlink: 'syz.0.3880': attribute type 10 has an invalid length. [ 590.769321][T16512] bond0: (slave wlan1): Releasing backup interface [ 590.788009][T16512] team0: Port device wlan1 added [ 590.992725][T16516] netlink: 'syz.3.3882': attribute type 10 has an invalid length. [ 591.002740][T16516] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3882'. [ 591.274974][T16524] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3886'. [ 591.298731][T16524] netlink: 'syz.3.3886': attribute type 2 has an invalid length. [ 591.308287][T16524] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3886'. [ 593.680342][T16542] netlink: 'syz.4.3888': attribute type 12 has an invalid length. [ 593.698455][T16542] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.3888'. [ 596.824733][T16559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3895'. [ 597.196587][T16578] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3900'. [ 597.256949][T16580] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3900'. [ 597.464365][T16578] team0: Port device team_slave_0 removed [ 597.493357][T16578] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 597.549871][T16572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3899'. [ 599.592641][T16598] netlink: 'syz.0.3904': attribute type 12 has an invalid length. [ 599.606357][T16598] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.3904'. [ 600.838362][T16642] FAULT_INJECTION: forcing a failure. [ 600.838362][T16642] name failslab, interval 1, probability 0, space 0, times 0 [ 600.872399][T16642] CPU: 0 PID: 16642 Comm: syz.2.3918 Not tainted syzkaller #0 [ 600.879914][T16642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.889979][T16642] Call Trace: [ 600.893261][T16642] [ 600.896196][T16642] dump_stack_lvl+0x188/0x24e [ 600.900896][T16642] ? show_regs_print_info+0x12/0x12 [ 600.906115][T16642] ? load_image+0x400/0x400 [ 600.910637][T16642] ? __might_sleep+0xd0/0xd0 [ 600.915237][T16642] ? __lock_acquire+0x7d10/0x7d10 [ 600.920283][T16642] should_fail_ex+0x399/0x4d0 [ 600.924980][T16642] should_failslab+0x5/0x20 [ 600.929495][T16642] slab_pre_alloc_hook+0x59/0x310 [ 600.934538][T16642] kmem_cache_alloc+0x56/0x2f0 [ 600.939296][T16642] ? sk_prot_alloc+0x57/0x210 [ 600.943981][T16642] sk_prot_alloc+0x57/0x210 [ 600.948495][T16642] ? sk_alloc+0x20/0x340 [ 600.952733][T16642] sk_alloc+0x36/0x340 [ 600.956800][T16642] inet6_create+0x7ef/0x1240 [ 600.961387][T16642] ? inet6_create+0x7f/0x1240 [ 600.966061][T16642] __sock_create+0x4a2/0x940 [ 600.970653][T16642] udp_sock_create6+0xd3/0x6a0 [ 600.975406][T16642] ? lockdep_softirqs_off+0x430/0x430 [ 600.980775][T16642] ? inet6_hash+0x80/0x80 [ 600.985106][T16642] ? rcu_is_watching+0x11/0xa0 [ 600.989866][T16642] ? rxrpc_lookup_local+0xd15/0x1530 [ 600.995145][T16642] rxrpc_lookup_local+0xd8b/0x1530 [ 601.000257][T16642] ? rxrpc_process_local_events+0xa50/0xa50 [ 601.006156][T16642] ? lockdep_hardirqs_on+0x94/0x140 [ 601.011349][T16642] ? _local_bh_enable+0xa0/0xa0 [ 601.016197][T16642] rxrpc_sendmsg+0x3f1/0x890 [ 601.020798][T16642] ? rxrpc_getsockopt+0x150/0x150 [ 601.025821][T16642] ____sys_sendmsg+0x5be/0x970 [ 601.030586][T16642] ? __sys_sendmsg_sock+0x30/0x30 [ 601.035605][T16642] ? __import_iovec+0x315/0x500 [ 601.040458][T16642] ? import_iovec+0x6f/0xa0 [ 601.044955][T16642] ___sys_sendmsg+0x2a2/0x360 [ 601.049633][T16642] ? __sys_sendmsg+0x290/0x290 [ 601.054406][T16642] ? __lock_acquire+0x7d10/0x7d10 [ 601.059443][T16642] __se_sys_sendmsg+0x1bb/0x2a0 [ 601.064291][T16642] ? __x64_sys_sendmsg+0x80/0x80 [ 601.069236][T16642] ? lockdep_hardirqs_on+0x94/0x140 [ 601.074429][T16642] do_syscall_64+0x4c/0xa0 [ 601.078838][T16642] ? clear_bhb_loop+0x60/0xb0 [ 601.083510][T16642] ? clear_bhb_loop+0x60/0xb0 [ 601.088179][T16642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.094065][T16642] RIP: 0033:0x7f003fd9c799 [ 601.098472][T16642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.118067][T16642] RSP: 002b:00007f0040bf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.126473][T16642] RAX: ffffffffffffffda RBX: 00007f0040015fa0 RCX: 00007f003fd9c799 [ 601.134437][T16642] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 601.142400][T16642] RBP: 00007f0040bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 601.150361][T16642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.158321][T16642] R13: 00007f0040016038 R14: 00007f0040015fa0 R15: 00007ffcf06b4738 [ 601.166294][T16642] [ 601.383576][T16649] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3921'. [ 601.417113][T16651] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3921'. [ 601.484771][T16649] team0: Port device team_slave_0 removed [ 601.521347][T16649] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 601.591399][T16662] FAULT_INJECTION: forcing a failure. [ 601.591399][T16662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.629472][T16662] CPU: 1 PID: 16662 Comm: syz.4.3925 Not tainted syzkaller #0 [ 601.636990][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.647065][T16662] Call Trace: [ 601.650361][T16662] [ 601.653304][T16662] dump_stack_lvl+0x188/0x24e [ 601.658009][T16662] ? show_regs_print_info+0x12/0x12 [ 601.663233][T16662] ? load_image+0x400/0x400 [ 601.667766][T16662] ? __lock_acquire+0x7d10/0x7d10 [ 601.672821][T16662] should_fail_ex+0x399/0x4d0 [ 601.677521][T16662] _copy_from_user+0x2c/0x170 [ 601.682221][T16662] __sys_bpf+0x2ea/0x780 [ 601.686488][T16662] ? bpf_link_show_fdinfo+0x380/0x380 [ 601.691891][T16662] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 601.698080][T16662] __x64_sys_bpf+0x78/0x90 [ 601.702520][T16662] do_syscall_64+0x4c/0xa0 [ 601.706958][T16662] ? clear_bhb_loop+0x60/0xb0 [ 601.711652][T16662] ? clear_bhb_loop+0x60/0xb0 [ 601.716350][T16662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.722259][T16662] RIP: 0033:0x7f8d7c19c799 [ 601.726706][T16662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.746337][T16662] RSP: 002b:00007f8d7d017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.754778][T16662] RAX: ffffffffffffffda RBX: 00007f8d7c415fa0 RCX: 00007f8d7c19c799 [ 601.762774][T16662] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 601.770767][T16662] RBP: 00007f8d7d017090 R08: 0000000000000000 R09: 0000000000000000 [ 601.778762][T16662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.786752][T16662] R13: 00007f8d7c416038 R14: 00007f8d7c415fa0 R15: 00007ffff3ba9108 [ 601.794737][T16662] [ 603.758207][T16679] netlink: 'syz.0.3929': attribute type 10 has an invalid length. [ 603.874709][T16688] FAULT_INJECTION: forcing a failure. [ 603.874709][T16688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.923397][T16688] CPU: 0 PID: 16688 Comm: syz.0.3933 Not tainted syzkaller #0 [ 603.930906][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.940980][T16688] Call Trace: [ 603.944271][T16688] [ 603.947213][T16688] dump_stack_lvl+0x188/0x24e [ 603.951928][T16688] ? show_regs_print_info+0x12/0x12 [ 603.957154][T16688] ? load_image+0x400/0x400 [ 603.961683][T16688] ? __lock_acquire+0x7d10/0x7d10 [ 603.966734][T16688] should_fail_ex+0x399/0x4d0 [ 603.971431][T16688] _copy_from_user+0x2c/0x170 [ 603.976130][T16688] ___sys_sendmsg+0x1c3/0x360 [ 603.980829][T16688] ? __sys_sendmsg+0x290/0x290 [ 603.985586][T16688] ? __lock_acquire+0x7d10/0x7d10 [ 603.990610][T16688] __se_sys_sendmsg+0x1bb/0x2a0 [ 603.995463][T16688] ? __x64_sys_sendmsg+0x80/0x80 [ 604.000411][T16688] ? lockdep_hardirqs_on+0x94/0x140 [ 604.005635][T16688] do_syscall_64+0x4c/0xa0 [ 604.010070][T16688] ? clear_bhb_loop+0x60/0xb0 [ 604.014763][T16688] ? clear_bhb_loop+0x60/0xb0 [ 604.019459][T16688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.025370][T16688] RIP: 0033:0x7f6a41d9c799 [ 604.029793][T16688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.049417][T16688] RSP: 002b:00007f6a42cd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.057838][T16688] RAX: ffffffffffffffda RBX: 00007f6a42015fa0 RCX: 00007f6a41d9c799 [ 604.065812][T16688] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 604.073790][T16688] RBP: 00007f6a42cd8090 R08: 0000000000000000 R09: 0000000000000000 [ 604.081763][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.089738][T16688] R13: 00007f6a42016038 R14: 00007f6a42015fa0 R15: 00007ffe5ac0af28 [ 604.097738][T16688] [ 604.802505][T16697] netlink: 'syz.1.3936': attribute type 10 has an invalid length. [ 604.837572][T16697] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3936'. [ 604.861141][T16700] netlink: 'syz.0.3937': attribute type 10 has an invalid length. [ 605.187562][T16711] FAULT_INJECTION: forcing a failure. [ 605.187562][T16711] name failslab, interval 1, probability 0, space 0, times 0 [ 605.258192][T16711] CPU: 0 PID: 16711 Comm: syz.3.3942 Not tainted syzkaller #0 [ 605.265718][T16711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 605.275790][T16711] Call Trace: [ 605.279078][T16711] [ 605.282017][T16711] dump_stack_lvl+0x188/0x24e [ 605.286724][T16711] ? show_regs_print_info+0x12/0x12 [ 605.291957][T16711] ? load_image+0x400/0x400 [ 605.296490][T16711] ? __might_sleep+0xd0/0xd0 [ 605.301108][T16711] ? __lock_acquire+0x7d10/0x7d10 [ 605.306164][T16711] should_fail_ex+0x399/0x4d0 [ 605.310874][T16711] should_failslab+0x5/0x20 [ 605.315394][T16711] slab_pre_alloc_hook+0x59/0x310 [ 605.320442][T16711] kmem_cache_alloc_node+0x5a/0x320 [ 605.325664][T16711] ? __alloc_skb+0xfc/0x7e0 [ 605.330206][T16711] __alloc_skb+0xfc/0x7e0 [ 605.334552][T16711] ? mark_lock+0x94/0x320 [ 605.338907][T16711] alloc_skb_with_frags+0xa7/0x710 [ 605.344050][T16711] sock_alloc_send_pskb+0x87f/0x9a0 [ 605.349296][T16711] ? sock_kzfree_s+0x50/0x50 [ 605.353904][T16711] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 605.359819][T16711] ? _raw_spin_unlock+0x40/0x40 [ 605.364674][T16711] ? __stack_depot_save+0x35/0x460 [ 605.369801][T16711] __ip_append_data+0x25fb/0x3850 [ 605.369840][T16711] ? __local_bh_enable_ip+0x136/0x1c0 [ 605.369869][T16711] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 605.385101][T16711] ? ip_route_output_key_hash+0x139/0x330 [ 605.390844][T16711] ? ip_setup_cork+0x850/0x850 [ 605.395630][T16711] ? ipv4_mtu+0x2c8/0x3e0 [ 605.399979][T16711] ? ip_setup_cork+0x532/0x850 [ 605.404776][T16711] ip_make_skb+0x227/0x440 [ 605.409222][T16711] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 605.414091][T16711] ? ip_flush_pending_frames+0x250/0x250 [ 605.419762][T16711] udp_sendmsg+0x1afb/0x23b0 [ 605.424380][T16711] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 605.429256][T16711] ? udp_cmsg_send+0x350/0x350 [ 605.434040][T16711] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 605.440034][T16711] ? lock_chain_count+0x20/0x20 [ 605.444894][T16711] ? __local_bh_enable_ip+0x136/0x1c0 [ 605.450283][T16711] ? _local_bh_enable+0xa0/0xa0 [ 605.455151][T16711] ? inet_sendmsg+0x147/0x2f0 [ 605.459861][T16711] ? inet_sendmsg+0x147/0x2f0 [ 605.464565][T16711] ? inet_send_prepare+0x260/0x260 [ 605.469700][T16711] ____sys_sendmsg+0x5be/0x970 [ 605.474507][T16711] ? __sys_sendmsg_sock+0x30/0x30 [ 605.479552][T16711] ? __import_iovec+0x315/0x500 [ 605.484429][T16711] ? import_iovec+0x6f/0xa0 [ 605.488955][T16711] ___sys_sendmsg+0x2a2/0x360 [ 605.493665][T16711] ? __sys_sendmsg+0x290/0x290 [ 605.498472][T16711] ? __lock_acquire+0x7d10/0x7d10 [ 605.503547][T16711] __se_sys_sendmsg+0x1bb/0x2a0 [ 605.508434][T16711] ? __x64_sys_sendmsg+0x80/0x80 [ 605.513414][T16711] ? lockdep_hardirqs_on+0x94/0x140 [ 605.518638][T16711] do_syscall_64+0x4c/0xa0 [ 605.523078][T16711] ? clear_bhb_loop+0x60/0xb0 [ 605.527770][T16711] ? clear_bhb_loop+0x60/0xb0 [ 605.532446][T16711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.538336][T16711] RIP: 0033:0x7f58aa39c799 [ 605.542743][T16711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.562340][T16711] RSP: 002b:00007f58a85f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.570749][T16711] RAX: ffffffffffffffda RBX: 00007f58aa615fa0 RCX: 00007f58aa39c799 [ 605.578709][T16711] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 605.586672][T16711] RBP: 00007f58a85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 605.594633][T16711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.602593][T16711] R13: 00007f58aa616038 R14: 00007f58aa615fa0 R15: 00007fff65e82948 [ 605.610570][T16711] [ 605.620624][T16713] netlink: 'syz.4.3943': attribute type 10 has an invalid length. [ 605.640616][T16713] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3943'. [ 605.652020][T16716] netlink: 'syz.0.3944': attribute type 10 has an invalid length. [ 605.670579][T16716] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3944'. [ 609.483647][T16758] netlink: 'syz.3.3956': attribute type 21 has an invalid length. [ 609.515363][T16756] netlink: 'syz.2.3957': attribute type 10 has an invalid length. [ 609.534853][T16756] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3957'. [ 610.493506][T16786] netlink: 'syz.3.3967': attribute type 10 has an invalid length. [ 610.511735][T16786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3967'. [ 610.536717][T16786] device veth0_vlan left promiscuous mode [ 610.575721][T16786] device veth0_vlan entered promiscuous mode [ 610.618770][T16786] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 610.708751][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.733443][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.766807][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.803453][T16788] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3968'. [ 613.363502][T16788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.405775][T16788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.437913][T16788] bond0 (unregistering): (slave team0): Releasing backup interface [ 613.455181][T16788] bond0 (unregistering): Released all slaves [ 613.484673][T16795] netlink: 'syz.3.3970': attribute type 10 has an invalid length. [ 613.507449][T16795] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3970'. [ 614.798999][T16817] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3979'. [ 616.754234][T16837] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3984'. [ 616.774300][T16837] openvswitch: netlink: Flow actions attr not present in new flow. [ 618.679538][T16833] netlink: 'syz.3.3983': attribute type 10 has an invalid length. [ 618.698214][T16833] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3983'. [ 618.728866][T16837] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3984'. [ 619.427526][T16858] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3992'. [ 619.471851][T16858] netlink: zone id is out of range [ 619.491975][T16858] netlink: get zone limit has 8 unknown bytes [ 619.643583][T16861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3994'. [ 619.690424][T16867] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3995'. [ 619.730526][T16867] device hsr_slave_0 left promiscuous mode [ 619.790428][T16867] device hsr_slave_1 left promiscuous mode [ 619.957866][T16867] bridge0: port 3(hsr0) entered disabled state [ 620.016707][T16873] netlink: 'syz.3.3997': attribute type 10 has an invalid length. [ 620.035699][T16873] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3997'. [ 620.414905][T16864] netlink: 'syz.4.3994': attribute type 10 has an invalid length. [ 620.553551][T16864] team0: Port device veth1_macvtap added [ 620.760508][ T4280] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 622.233429][T16915] netlink: 'syz.2.4009': attribute type 10 has an invalid length. [ 622.245993][T16915] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4009'. [ 623.399357][T16945] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4021'. [ 623.692411][T16949] netlink: 'syz.4.4023': attribute type 10 has an invalid length. [ 623.720900][T16949] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4023'. [ 624.028257][T16961] netlink: 'syz.3.4021': attribute type 10 has an invalid length. [ 624.144286][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.151107][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.169585][T16961] team0: Device veth1_macvtap failed to register rx_handler [ 624.726323][T16972] netlink: 'syz.1.4029': attribute type 2 has an invalid length. [ 624.787428][T16974] netlink: 'syz.0.4027': attribute type 2 has an invalid length. [ 624.873346][T16974] FAULT_INJECTION: forcing a failure. [ 624.873346][T16974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.000450][T16974] CPU: 0 PID: 16974 Comm: syz.0.4027 Not tainted syzkaller #0 [ 625.007985][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.018085][T16974] Call Trace: [ 625.021404][T16974] [ 625.024369][T16974] dump_stack_lvl+0x188/0x24e [ 625.029110][T16974] ? show_regs_print_info+0x12/0x12 [ 625.034358][T16974] ? load_image+0x400/0x400 [ 625.038923][T16974] ? __lock_acquire+0x7d10/0x7d10 [ 625.044019][T16974] should_fail_ex+0x399/0x4d0 [ 625.048760][T16974] strncpy_from_user+0x32/0x350 [ 625.053671][T16974] getname_flags+0xf2/0x500 [ 625.058224][T16974] __x64_sys_mkdirat+0x78/0x90 [ 625.063034][T16974] do_syscall_64+0x4c/0xa0 [ 625.067496][T16974] ? clear_bhb_loop+0x60/0xb0 [ 625.072209][T16974] ? clear_bhb_loop+0x60/0xb0 [ 625.076934][T16974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.082869][T16974] RIP: 0033:0x7f6a41d9c799 [ 625.087317][T16974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.106960][T16974] RSP: 002b:00007f6a42cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 625.115427][T16974] RAX: ffffffffffffffda RBX: 00007f6a42015fa0 RCX: 00007f6a41d9c799 [ 625.123440][T16974] RDX: 00000000000001ff RSI: 0000200000000280 RDI: ffffffffffffff9c [ 625.131456][T16974] RBP: 00007f6a42cd8090 R08: 0000000000000000 R09: 0000000000000000 [ 625.139457][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.147465][T16974] R13: 00007f6a42016038 R14: 00007f6a42015fa0 R15: 00007ffe5ac0af28 [ 625.155529][T16974] [ 625.347360][T16982] netlink: 'syz.4.4030': attribute type 2 has an invalid length. [ 625.522737][T16988] FAULT_INJECTION: forcing a failure. [ 625.522737][T16988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.604467][T16988] CPU: 1 PID: 16988 Comm: syz.1.4032 Not tainted syzkaller #0 [ 625.611975][T16988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.622032][T16988] Call Trace: [ 625.625302][T16988] [ 625.628223][T16988] dump_stack_lvl+0x188/0x24e [ 625.632905][T16988] ? show_regs_print_info+0x12/0x12 [ 625.638099][T16988] ? load_image+0x400/0x400 [ 625.642600][T16988] ? __lock_acquire+0x7d10/0x7d10 [ 625.647628][T16988] should_fail_ex+0x399/0x4d0 [ 625.652304][T16988] _copy_from_user+0x2c/0x170 [ 625.656983][T16988] iovec_from_user+0x143/0x360 [ 625.661748][T16988] __import_iovec+0x6d/0x500 [ 625.666338][T16988] import_iovec+0x6f/0xa0 [ 625.670660][T16988] ___sys_sendmsg+0x252/0x360 [ 625.675340][T16988] ? __sys_sendmsg+0x290/0x290 [ 625.680113][T16988] ? __lock_acquire+0x7d10/0x7d10 [ 625.685151][T16988] __se_sys_sendmsg+0x1bb/0x2a0 [ 625.690007][T16988] ? __x64_sys_sendmsg+0x80/0x80 [ 625.694955][T16988] ? lockdep_hardirqs_on+0x94/0x140 [ 625.700151][T16988] do_syscall_64+0x4c/0xa0 [ 625.704563][T16988] ? clear_bhb_loop+0x60/0xb0 [ 625.709237][T16988] ? clear_bhb_loop+0x60/0xb0 [ 625.713908][T16988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.719797][T16988] RIP: 0033:0x7f8d1cd9c799 [ 625.724209][T16988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.743821][T16988] RSP: 002b:00007f8d1afb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.752234][T16988] RAX: ffffffffffffffda RBX: 00007f8d1d016180 RCX: 00007f8d1cd9c799 [ 625.760202][T16988] RDX: 0000000020000810 RSI: 0000200000000900 RDI: 0000000000000005 [ 625.768178][T16988] RBP: 00007f8d1afb4090 R08: 0000000000000000 R09: 0000000000000000 [ 625.776139][T16988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.784102][T16988] R13: 00007f8d1d016218 R14: 00007f8d1d016180 R15: 00007ffd8b7f6c28 [ 625.792080][T16988] [ 626.078113][T16994] netlink: 'syz.4.4035': attribute type 10 has an invalid length. [ 626.120457][T16994] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4035'. [ 626.465655][T17002] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4038'. [ 626.580581][T17002] device bond_slave_0 entered promiscuous mode [ 626.587175][T17002] device bond_slave_1 entered promiscuous mode [ 626.724294][T17007] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4040'. [ 627.869305][T17029] netlink: 'syz.3.4048': attribute type 10 has an invalid length. [ 628.485428][T17029] team0: Device wg1 is of different type [ 628.543840][T17031] netlink: 'syz.1.4049': attribute type 10 has an invalid length. [ 628.590578][T17031] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4049'. [ 629.311875][T17058] netlink: 'syz.2.4057': attribute type 27 has an invalid length. [ 629.319887][T17058] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4057'. [ 629.877669][T17075] netlink: 'syz.1.4064': attribute type 10 has an invalid length. [ 629.916285][T17075] team0: Device wg1 is of different type [ 630.254971][T17082] delete_channel: no stack [ 630.493837][T17093] device syzkaller0 entered promiscuous mode [ 632.901135][T17125] netlink: 'syz.2.4081': attribute type 10 has an invalid length. [ 632.976341][T17125] team0: Device wg1 is of different type [ 633.664442][T17144] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4087'. [ 634.239258][T17157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4092'. [ 634.484748][T17167] netlink: 'syz.4.4095': attribute type 17 has an invalid length. [ 634.507286][T17167] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4095'. [ 634.522855][T17167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.692265][T17177] FAULT_INJECTION: forcing a failure. [ 634.692265][T17177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.724055][T17177] CPU: 1 PID: 17177 Comm: syz.1.4099 Not tainted syzkaller #0 [ 634.731579][T17177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.741736][T17177] Call Trace: [ 634.745027][T17177] [ 634.747965][T17177] dump_stack_lvl+0x188/0x24e [ 634.752663][T17177] ? show_regs_print_info+0x12/0x12 [ 634.757878][T17177] ? load_image+0x400/0x400 [ 634.762395][T17177] ? __lock_acquire+0x7d10/0x7d10 [ 634.767436][T17177] ? __virt_addr_valid+0x188/0x540 [ 634.772573][T17177] should_fail_ex+0x399/0x4d0 [ 634.777269][T17177] _copy_from_user+0x2c/0x170 [ 634.781974][T17177] btf_new_fd+0x324/0x780 [ 634.786330][T17177] __sys_bpf+0x612/0x780 [ 634.790597][T17177] ? bpf_link_show_fdinfo+0x380/0x380 [ 634.796002][T17177] ? lock_chain_count+0x20/0x20 [ 634.800869][T17177] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.806875][T17177] __x64_sys_bpf+0x78/0x90 [ 634.811311][T17177] do_syscall_64+0x4c/0xa0 [ 634.815747][T17177] ? clear_bhb_loop+0x60/0xb0 [ 634.820435][T17177] ? clear_bhb_loop+0x60/0xb0 [ 634.825113][T17177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.831000][T17177] RIP: 0033:0x7f8d1cd9c799 [ 634.835406][T17177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.855008][T17177] RSP: 002b:00007f8d1aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 634.863426][T17177] RAX: ffffffffffffffda RBX: 00007f8d1d015fa0 RCX: 00007f8d1cd9c799 [ 634.871405][T17177] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 634.879382][T17177] RBP: 00007f8d1aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 634.887351][T17177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.895324][T17177] R13: 00007f8d1d016038 R14: 00007f8d1d015fa0 R15: 00007ffd8b7f6c28 [ 634.903305][T17177] [ 636.001113][T17214] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4111'. [ 636.792243][T17232] netlink: 'syz.0.4115': attribute type 10 has an invalid length. [ 636.845470][T17232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4115'. [ 636.883813][T17232] device ipvlan1 entered promiscuous mode [ 636.995156][T17232] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 637.880867][T17261] netlink: 'syz.2.4127': attribute type 29 has an invalid length. [ 637.938423][T17261] netlink: 'syz.2.4127': attribute type 29 has an invalid length. [ 637.963278][T17265] netlink: 'syz.2.4127': attribute type 29 has an invalid length. [ 638.778396][T17282] FAULT_INJECTION: forcing a failure. [ 638.778396][T17282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.840418][T17282] CPU: 0 PID: 17282 Comm: syz.3.4135 Not tainted syzkaller #0 [ 638.847937][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.858007][T17282] Call Trace: [ 638.861311][T17282] [ 638.864259][T17282] dump_stack_lvl+0x188/0x24e [ 638.868971][T17282] ? show_regs_print_info+0x12/0x12 [ 638.874197][T17282] ? load_image+0x400/0x400 [ 638.878727][T17282] ? __lock_acquire+0x7d10/0x7d10 [ 638.883775][T17282] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 638.889439][T17282] should_fail_ex+0x399/0x4d0 [ 638.894150][T17282] strncpy_from_user+0x32/0x350 [ 638.899042][T17282] bpf_prog_load+0x1f3/0x1560 [ 638.903773][T17282] ? map_freeze+0x390/0x390 [ 638.908305][T17282] ? __might_fault+0xa6/0x120 [ 638.913026][T17282] ? __might_fault+0xa6/0x120 [ 638.917729][T17282] ? __might_fault+0xc2/0x120 [ 638.922425][T17282] ? __might_fault+0xa6/0x120 [ 638.927124][T17282] ? bpf_lsm_bpf+0x5/0x10 [ 638.931473][T17282] ? security_bpf+0x7a/0xa0 [ 638.936000][T17282] __sys_bpf+0x5b8/0x780 [ 638.940283][T17282] ? bpf_link_show_fdinfo+0x380/0x380 [ 638.945710][T17282] ? lock_chain_count+0x20/0x20 [ 638.950618][T17282] __x64_sys_bpf+0x78/0x90 [ 638.955063][T17282] do_syscall_64+0x4c/0xa0 [ 638.959502][T17282] ? clear_bhb_loop+0x60/0xb0 [ 638.964197][T17282] ? clear_bhb_loop+0x60/0xb0 [ 638.968897][T17282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.974811][T17282] RIP: 0033:0x7f58aa39c799 [ 638.979242][T17282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.998867][T17282] RSP: 002b:00007f58a85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 639.007661][T17282] RAX: ffffffffffffffda RBX: 00007f58aa615fa0 RCX: 00007f58aa39c799 [ 639.015656][T17282] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 639.023648][T17282] RBP: 00007f58a85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 639.031640][T17282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.039637][T17282] R13: 00007f58aa616038 R14: 00007f58aa615fa0 R15: 00007fff65e82948 [ 639.047658][T17282] [ 640.500088][T17346] netlink: 'syz.1.4147': attribute type 29 has an invalid length. [ 640.515062][T17346] netlink: 'syz.1.4147': attribute type 29 has an invalid length. [ 640.634404][T17348] netlink: 'syz.1.4147': attribute type 29 has an invalid length. [ 641.401632][T17355] netlink: 'syz.3.4150': attribute type 3 has an invalid length. [ 641.456148][T17355] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.4150'. [ 643.027687][T17385] FAULT_INJECTION: forcing a failure. [ 643.027687][T17385] name failslab, interval 1, probability 0, space 0, times 0 [ 643.081977][T17385] CPU: 0 PID: 17385 Comm: syz.1.4161 Not tainted syzkaller #0 [ 643.089509][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.099589][T17385] Call Trace: [ 643.102885][T17385] [ 643.105837][T17385] dump_stack_lvl+0x188/0x24e [ 643.110543][T17385] ? sctp_sendmsg+0x15b0/0x2940 [ 643.115422][T17385] ? ___sys_sendmsg+0x2a2/0x360 [ 643.120300][T17385] ? show_regs_print_info+0x12/0x12 [ 643.125539][T17385] ? load_image+0x400/0x400 [ 643.130102][T17385] should_fail_ex+0x399/0x4d0 [ 643.134815][T17385] should_failslab+0x5/0x20 [ 643.139332][T17385] slab_pre_alloc_hook+0x59/0x310 [ 643.144380][T17385] ? sctp_add_bind_addr+0x89/0x350 [ 643.149516][T17385] __kmem_cache_alloc_node+0x4f/0x260 [ 643.154913][T17385] ? sctp_add_bind_addr+0x89/0x350 [ 643.160051][T17385] kmalloc_trace+0x26/0xe0 [ 643.164502][T17385] sctp_add_bind_addr+0x89/0x350 [ 643.169467][T17385] sctp_copy_local_addr_list+0x311/0x4e0 [ 643.175126][T17385] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 643.180869][T17385] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 643.186962][T17385] ? sctp_v4_is_any+0x31/0x50 [ 643.191663][T17385] ? sctp_copy_one_addr+0x93/0x660 [ 643.196800][T17385] sctp_bind_addr_copy+0xaf/0x3c0 [ 643.201842][T17385] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 643.208184][T17385] sctp_connect_new_asoc+0x2f5/0x6a0 [ 643.213494][T17385] ? __sctp_connect+0xd80/0xd80 [ 643.218358][T17385] ? __local_bh_enable_ip+0x136/0x1c0 [ 643.223754][T17385] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 643.229307][T17385] ? security_sctp_bind_connect+0x85/0xb0 [ 643.235047][T17385] sctp_sendmsg+0x15b0/0x2940 [ 643.239747][T17385] ? trace_event_raw_event_lock+0x250/0x250 [ 643.245675][T17385] ? aa_sk_perm+0x741/0x950 [ 643.250199][T17385] ? sctp_getsockopt+0x8a0/0x8a0 [ 643.255153][T17385] ? __might_fault+0xa6/0x120 [ 643.259839][T17385] ? aa_af_perm+0x340/0x340 [ 643.264354][T17385] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 643.270799][T17385] ? inet_sendmsg+0xe5/0x2f0 [ 643.275409][T17385] ? inet_send_prepare+0x260/0x260 [ 643.280536][T17385] ____sys_sendmsg+0x5be/0x970 [ 643.285327][T17385] ? __sys_sendmsg_sock+0x30/0x30 [ 643.290365][T17385] ? __import_iovec+0x315/0x500 [ 643.295246][T17385] ? import_iovec+0x6f/0xa0 [ 643.299765][T17385] ___sys_sendmsg+0x2a2/0x360 [ 643.304473][T17385] ? __sys_sendmsg+0x290/0x290 [ 643.309291][T17385] ? __lock_acquire+0x7d10/0x7d10 [ 643.314374][T17385] __se_sys_sendmsg+0x1bb/0x2a0 [ 643.319243][T17385] ? __x64_sys_sendmsg+0x80/0x80 [ 643.324234][T17385] ? lockdep_hardirqs_on+0x94/0x140 [ 643.329452][T17385] do_syscall_64+0x4c/0xa0 [ 643.333886][T17385] ? clear_bhb_loop+0x60/0xb0 [ 643.338576][T17385] ? clear_bhb_loop+0x60/0xb0 [ 643.343270][T17385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.349172][T17385] RIP: 0033:0x7f8d1cd9c799 [ 643.353596][T17385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.373212][T17385] RSP: 002b:00007f8d1aff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.381639][T17385] RAX: ffffffffffffffda RBX: 00007f8d1d015fa0 RCX: 00007f8d1cd9c799 [ 643.389618][T17385] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 643.397596][T17385] RBP: 00007f8d1aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 643.405574][T17385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 643.413551][T17385] R13: 00007f8d1d016038 R14: 00007f8d1d015fa0 R15: 00007ffd8b7f6c28 [ 643.421558][T17385] [ 644.015886][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 644.024399][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 644.032643][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 644.052404][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 644.059873][T17402] netlink: 'syz.4.4166': attribute type 39 has an invalid length. [ 644.060013][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 644.077068][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 644.655779][T17403] chnl_net:caif_netlink_parms(): no params data found [ 644.951488][T17403] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.958823][T17403] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.982014][T17403] device bridge_slave_0 entered promiscuous mode [ 644.991737][T17403] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.998898][T17403] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.008873][T17403] device bridge_slave_1 entered promiscuous mode [ 645.039416][T17403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.082882][T17440] netlink: 'syz.1.4173': attribute type 10 has an invalid length. [ 645.097881][T17440] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4173'. [ 645.111023][T17440] device batadv_slave_1 entered promiscuous mode [ 645.134173][T17403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.192583][T17442] netlink: 'syz.4.4174': attribute type 10 has an invalid length. [ 645.224290][T17442] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4174'. [ 646.060010][T17459] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4180'. [ 646.140404][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 646.335005][T17403] team0: Port device team_slave_0 added [ 646.381938][T17403] team0: Port device team_slave_1 added [ 646.439232][T17403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.481394][T17403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.574831][T17403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.622865][T17403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.642915][T17403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.720508][T17403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.760287][T17469] netlink: 'syz.3.4184': attribute type 10 has an invalid length. [ 646.857168][T17474] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4185'. [ 648.220538][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 649.655933][T17476] netlink: 'syz.4.4185': attribute type 10 has an invalid length. [ 649.680733][T17476] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4185'. [ 649.708656][T17476] device batadv_slave_1 entered promiscuous mode [ 650.097506][T17403] device hsr_slave_0 entered promiscuous mode [ 650.165749][T17403] device hsr_slave_1 entered promiscuous mode [ 650.184391][T17403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.204779][T17403] Cannot create hsr debugfs directory [ 650.300538][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 650.354468][T17492] netlink: 'syz.0.4191': attribute type 7 has an invalid length. [ 650.362364][T17492] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.4191'. [ 650.975410][T17403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.012415][T17506] netlink: 'syz.0.4197': attribute type 10 has an invalid length. [ 651.023517][T17506] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4197'. [ 651.105395][T17403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.362991][T17403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.504962][T17403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.549577][T17520] syz.1.4200[17520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.549789][T17520] syz.1.4200[17520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.801949][T17403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 652.054078][T17538] FAULT_INJECTION: forcing a failure. [ 652.054078][T17538] name failslab, interval 1, probability 0, space 0, times 0 [ 652.069925][T17538] CPU: 1 PID: 17538 Comm: syz.0.4206 Not tainted syzkaller #0 [ 652.077423][T17538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 652.087492][T17538] Call Trace: [ 652.090778][T17538] [ 652.093720][T17538] dump_stack_lvl+0x188/0x24e [ 652.098413][T17538] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 652.104592][T17538] ? show_regs_print_info+0x12/0x12 [ 652.109816][T17538] ? load_image+0x400/0x400 [ 652.114346][T17538] should_fail_ex+0x399/0x4d0 [ 652.119045][T17538] should_failslab+0x5/0x20 [ 652.123559][T17538] slab_pre_alloc_hook+0x59/0x310 [ 652.128600][T17538] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 652.134346][T17538] __kmem_cache_alloc_node+0x4f/0x260 [ 652.139737][T17538] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 652.145478][T17538] __kmalloc+0xa0/0x240 [ 652.149660][T17538] tomoyo_realpath_from_path+0xdf/0x5d0 [ 652.155238][T17538] ? tomoyo_path_number_perm+0x205/0x650 [ 652.160896][T17538] tomoyo_path_number_perm+0x22f/0x650 [ 652.166378][T17538] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 652.172982][T17538] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 652.178461][T17538] ? ct_irq_exit_irqson+0x113/0x170 [ 652.183707][T17538] ? __fget_files+0x28/0x4b0 [ 652.188311][T17538] ? __fget_files+0x28/0x4b0 [ 652.192931][T17538] security_file_ioctl+0x6c/0xa0 [ 652.197897][T17538] __se_sys_ioctl+0x48/0x170 [ 652.202505][T17538] do_syscall_64+0x4c/0xa0 [ 652.206932][T17538] ? clear_bhb_loop+0x60/0xb0 [ 652.211621][T17538] ? clear_bhb_loop+0x60/0xb0 [ 652.216315][T17538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 652.222220][T17538] RIP: 0033:0x7f6a41d9c799 [ 652.226639][T17538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.246237][T17538] RSP: 002b:00007f6a42cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.254643][T17538] RAX: ffffffffffffffda RBX: 00007f6a42015fa0 RCX: 00007f6a41d9c799 [ 652.262606][T17538] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 000000000000000a [ 652.270569][T17538] RBP: 00007f6a42cd8090 R08: 0000000000000000 R09: 0000000000000000 [ 652.278533][T17538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.286494][T17538] R13: 00007f6a42016038 R14: 00007f6a42015fa0 R15: 00007ffe5ac0af28 [ 652.294472][T17538] [ 652.315133][T17538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 652.380537][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 654.753771][T17537] netlink: 'syz.3.4204': attribute type 21 has an invalid length. [ 654.763003][T17537] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4204'. [ 654.774095][T17537] netlink: 'syz.3.4204': attribute type 4 has an invalid length. [ 654.834872][T17403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 654.849560][T17403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 654.871651][T17403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 655.074172][T17403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.107526][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.123093][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.158504][T17403] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.167774][T17554] netlink: 'syz.1.4210': attribute type 10 has an invalid length. [ 655.178816][T17554] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4210'. [ 655.204888][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.222105][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.239605][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.246792][ T6530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.282265][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.308870][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.326303][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.371998][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.379121][ T6530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.468340][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.481431][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.523963][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.542586][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.572308][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.599967][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.612290][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 655.644188][T17565] netlink: 'syz.4.4215': attribute type 21 has an invalid length. [ 655.659057][T17565] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4215'. [ 655.671028][T17565] netlink: 'syz.4.4215': attribute type 4 has an invalid length. [ 655.691875][T17566] netlink: 'syz.1.4217': attribute type 10 has an invalid length. [ 655.705182][T17566] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4217'. [ 655.716375][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.726324][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.735868][T17568] netlink: 'syz.0.4218': attribute type 10 has an invalid length. [ 655.747902][T17568] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4218'. [ 655.765991][T17403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 655.798025][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 655.825198][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.835852][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.869795][T17572] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4219'. [ 656.151656][T17585] netlink: 'syz.0.4223': attribute type 11 has an invalid length. [ 656.159533][T17585] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4223'. [ 656.204708][T17585] netlink: 'syz.0.4223': attribute type 10 has an invalid length. [ 656.238006][T17584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.322590][ C1] [ 656.322599][ C1] ================================ [ 656.322604][ C1] WARNING: inconsistent lock state [ 656.322626][ C1] syzkaller #0 Not tainted [ 656.322635][ C1] -------------------------------- [ 656.322640][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 656.322648][ C1] syz.3.4224/17588 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 656.322667][ C1] ffff888057464238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 656.322720][ C1] {INITIAL USE} state was registered at: [ 656.322731][ C1] lock_acquire+0x1bb/0x4a0 [ 656.322752][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 656.322769][ C1] trie_update_elem+0xc7/0xe80 [ 656.322787][ C1] bpf_map_update_value+0x59e/0x670 [ 656.322810][ C1] generic_map_update_batch+0x54b/0x810 [ 656.322827][ C1] bpf_map_do_batch+0x466/0x600 [ 656.322847][ C1] __sys_bpf+0x6f7/0x780 [ 656.322865][ C1] __x64_sys_bpf+0x78/0x90 [ 656.322882][ C1] do_syscall_64+0x4c/0xa0 [ 656.322902][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.322919][ C1] irq event stamp: 11858 [ 656.322925][ C1] hardirqs last enabled at (11857): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 656.322950][ C1] hardirqs last disabled at (11858): [] exc_debug+0x6e/0x130 [ 656.322973][ C1] softirqs last enabled at (11626): [] bpf_map_alloc_id+0x87/0xd0 [ 656.322996][ C1] softirqs last disabled at (11622): [] bpf_map_alloc_id+0x21/0xd0 [ 656.323037][ C1] [ 656.323037][ C1] other info that might help us debug this: [ 656.323042][ C1] Possible unsafe locking scenario: [ 656.323042][ C1] [ 656.323047][ C1] CPU0 [ 656.323049][ C1] ---- [ 656.323052][ C1] lock(&trie->lock); [ 656.323061][ C1] [ 656.323064][ C1] lock(&trie->lock); [ 656.323073][ C1] [ 656.323073][ C1] *** DEADLOCK *** [ 656.323073][ C1] [ 656.323076][ C1] no locks held by syz.3.4224/17588. [ 656.323083][ C1] [ 656.323083][ C1] stack backtrace: [ 656.323089][ C1] CPU: 1 PID: 17588 Comm: syz.3.4224 Not tainted syzkaller #0 [ 656.323108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.323117][ C1] Call Trace: [ 656.323123][ C1] <#DB> [ 656.323130][ C1] dump_stack_lvl+0x188/0x24e [ 656.323153][ C1] ? show_regs_print_info+0x12/0x12 [ 656.323177][ C1] ? print_usage_bug+0x42a/0x690 [ 656.323198][ C1] ? verify_lock_unused+0x18/0x140 [ 656.323220][ C1] lock_acquire+0x2df/0x4a0 [ 656.323240][ C1] ? trie_delete_elem+0x90/0x690 [ 656.323261][ C1] ? read_lock_is_recursive+0x10/0x10 [ 656.323281][ C1] ? perf_trace_lock+0xf8/0x390 [ 656.323297][ C1] ? perf_output_begin_forward+0xa7/0xa80 [ 656.323322][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 656.323338][ C1] ? trie_delete_elem+0x90/0x690 [ 656.323358][ C1] ? _raw_spin_lock+0x40/0x40 [ 656.323373][ C1] ? lock_acquire+0x2df/0x4a0 [ 656.323396][ C1] trie_delete_elem+0x90/0x690 [ 656.323415][ C1] ? __cant_sleep+0x220/0x220 [ 656.323431][ C1] ? perf_trace_lock+0x197/0x390 [ 656.323451][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 656.323469][ C1] bpf_overflow_handler+0x522/0x7c0 [ 656.323489][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 656.323506][ C1] ? perf_swevent_overflow+0x230/0x230 [ 656.323523][ C1] ? rcu_is_watching+0x11/0xa0 [ 656.323545][ C1] ? lock_release+0xcf/0x920 [ 656.323565][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 656.323589][ C1] __perf_event_overflow+0x448/0x610 [ 656.323613][ C1] perf_swevent_overflow+0x19b/0x230 [ 656.323633][ C1] perf_swevent_event+0x458/0x570 [ 656.323655][ C1] ? perf_tp_event+0xc30/0xc30 [ 656.323676][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 656.323702][ C1] perf_bp_event+0x312/0x3f0 [ 656.323722][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 656.323745][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 656.323766][ C1] ? perf_trace_lock+0xf8/0x390 [ 656.323799][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 656.323819][ C1] ? read_lock_is_recursive+0x10/0x10 [ 656.323843][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 656.323868][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 656.323886][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 656.323905][ C1] notify_die+0x141/0x1a0 [ 656.323925][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 656.323949][ C1] notify_debug+0x20/0x30 [ 656.323967][ C1] exc_debug+0xd9/0x130 [ 656.323990][ C1] asm_exc_debug+0x1a/0x40 [ 656.324008][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 656.324031][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 656.324045][ C1] RSP: 0018:ffffc90004c3fb40 EFLAGS: 00050206 [ 656.324058][ C1] RAX: ffffffff84114301 RBX: 00000000000000a0 RCX: 000000000000001c [ 656.324070][ C1] RDX: 00000000000000a0 RSI: 0000200000000304 RDI: ffffc90004cd50cc [ 656.324081][ C1] RBP: 0000000000000000 R08: ffffc90004cd50e7 R09: 1ffff9200099aa1c [ 656.324092][ C1] R10: dffffc0000000000 R11: fffff5200099aa1d R12: 00007fffffffef60 [ 656.324104][ C1] R13: 1ffff92000987f84 R14: ffffc90004cd5048 R15: 0000200000000280 [ 656.324119][ C1] ? _copy_from_user+0x61/0x170 [ 656.324140][ C1] [ 656.324144][ C1] [ 656.324148][ C1] _copy_from_user+0xf4/0x170 [ 656.324166][ C1] copy_from_bpfptr+0x67/0x80 [ 656.324187][ C1] bpf_prog_load+0xb47/0x1560 [ 656.324211][ C1] ? map_freeze+0x390/0x390 [ 656.324230][ C1] ? rcu_is_watching+0x11/0xa0 [ 656.324252][ C1] ? __sys_bpf+0x5a4/0x780 [ 656.324272][ C1] __sys_bpf+0x5b8/0x780 [ 656.324291][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 656.324313][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 656.324335][ C1] __x64_sys_bpf+0x78/0x90 [ 656.324352][ C1] do_syscall_64+0x4c/0xa0 [ 656.324371][ C1] ? clear_bhb_loop+0x60/0xb0 [ 656.324390][ C1] ? clear_bhb_loop+0x60/0xb0 [ 656.324409][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.324425][ C1] RIP: 0033:0x7f58aa39c799 [ 656.324438][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.324451][ C1] RSP: 002b:00007f58a85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.324466][ C1] RAX: ffffffffffffffda RBX: 00007f58aa615fa0 RCX: 00007f58aa39c799 [ 656.324478][ C1] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 656.324488][ C1] RBP: 00007f58aa432c99 R08: 0000000000000000 R09: 0000000000000000 [ 656.324499][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.324508][ C1] R13: 00007f58aa616038 R14: 00007f58aa615fa0 R15: 00007fff65e82948 [ 656.324545][ C1] [ 657.039433][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 657.047653][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 657.066402][T17403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.096763][T17594] base_sock_release(ffff8880740f9800) sk=ffff88807d384000 [ 657.105640][T17594] base_sock_release(ffff8880740faa00) sk=ffff88807d383000 [ 657.121415][T17595] base_sock_release(ffff888074104200) sk=ffff88802a025000 [ 657.138702][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 657.148072][T17595] base_sock_release(ffff888054534200) sk=ffff88802a022000 [ 657.157848][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 657.173957][T17403] device veth0_vlan entered promiscuous mode [ 657.184657][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.194847][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.206637][T17403] device veth1_vlan entered promiscuous mode [ 657.216864][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.225186][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.234091][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 657.245671][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 657.258213][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 657.267001][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 657.282057][T17403] device veth0_macvtap entered promiscuous mode [ 657.296778][T17403] device veth1_macvtap entered promiscuous mode [ 657.308996][T17403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.317263][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 657.328877][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 657.336981][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 657.345704][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 657.355385][T17403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.363846][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 657.372513][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 657.381997][T17403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.391499][T17403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.400500][T17403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.409212][T17403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.433958][T17403] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 657.449855][ T6530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.450976][T17403] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 657.457771][ T6530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.474051][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 657.489394][ T6530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.497320][ T6530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.505537][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready