last executing test programs: 11.841494437s ago: executing program 4 (id=12461): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 11.43731015s ago: executing program 4 (id=12457): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3f, 0x29, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee", 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 11.227018907s ago: executing program 4 (id=12462): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e1050000008847000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa63147", 0x52}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x19c}], 0x3}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r4, @ANYBLOB="13ab950863596d0f6c6353be656c9d37739b6103d529626dfda7ccb2c2b83176e821cba78bdcfa41b32de3e14c1badc66d7a897da03a58747b45fdebb60567016ac06b6e7d576cc90adfa962c06b60ec574309725db959b4f6521ae27c29735cc1058189ae07aa99af4e088cae23ba0802b2ed2a1bdb8f30e3603784ada27725a76f50bca7713902689d5adf5a448ebb6587135a831e214a1bb9f2e9af1ddd06e75b820439a1f1bf2f487bd6350d6c380a7c40e2bca8f33a924e67b81e418b69", @ANYBLOB="9ce83f9591112a463ff16e77f5e3709cfb174052b0169af29e823fd5a7dae170ab938a9247ec7c73f4e0232c3834a4f7e231e25a5ecdef789e140a1fcdeddbb5d959fdf0757717244d9556d7b489d576634195020f54eb332a9298b9e3c90f9f95604c38507294ecfd822b9233b81671c5e389daae157b5e0223a6b4bff3058cd01b0f4864c0f235538b084a0750dfdcd655086856db122d1873baac2f37721dcdd70849af0683f9065517cecad198b147f6ee2a03b2d06962a5cfe4a5fab44b9368de51b34d6c2a1b1327d8d645aab4f93805b8ce6fe904ef7f4d52e9a899", @ANYRESHEX=r3, @ANYRES32], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x2e, 0x5f, 0x61, 0x30]}}, &(0x7f0000000400)=""/188, 0x2b, 0xbc, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x0) 10.654590526s ago: executing program 4 (id=12466): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c010000fc00000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 10.330941987s ago: executing program 4 (id=12468): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x300}, 0x28) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0xa, 0xfe00, 0x41}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.886534562s ago: executing program 4 (id=12472): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.772296732s ago: executing program 0 (id=12517): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4329}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x40, 0x0, 0x2, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="001500000000000036e0047900"/24, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000008f00000000000000d1f2d493484ba4517d", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000020009500000000000000bd0a0400000000002500f4fffcffffffbf91000000000000b7020000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000ff010000c10600000400000001620000", @ANYRES32=r4, @ANYBLOB="ff7f000200", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0300000001000000040000000600"/24], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x12}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xb, 0x2, 0x0, 0x256, 0x1}, @jmp={0x5, 0x1, 0x2, 0x2, 0x5, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000280)='syzkaller\x00', 0xfff, 0x6a, &(0x7f00000002c0)=""/106, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x6, 0xc1d, 0x8001}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x1], &(0x7f0000000400)=[{0x4, 0x5, 0xe, 0x9}, {0x1, 0x5, 0xb, 0x1}, {0x5, 0x3, 0x3, 0x2}, {0x4, 0x3, 0xb, 0xbf5525cca7119a88}], 0x10, 0x6}, 0x94) 4.277133658s ago: executing program 0 (id=12523): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'perf_event'}, {0x2d, 'io'}]}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x800}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) 3.700501067s ago: executing program 2 (id=12525): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000000010000081100000900", @ANYRES32, @ANYBLOB="060000000000000000956b0000000000000000009f7ccb07f662c14251be605415f6b067ebcd25cd409ad663fad4a1f0c3e75954c26f32be6aaf0cbed9f9ccd44926dcdd3e91b1730e569a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) mkdir(&(0x7f0000000200)='./file0\x00', 0x72) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f0000000600), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000001c0)) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x300080c5) 3.363663159s ago: executing program 0 (id=12528): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_clone(0x12012000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/48, 0x30}], 0x1, &(0x7f0000000340)=""/111, 0x6f}, 0x12020) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x9, 0x8, 0x6, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) syz_open_procfs$namespace(r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 2.924051204s ago: executing program 2 (id=12530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x0, 0x4, 0x5, 0x3, 0xc, 0xfffffffffffffff0}], &(0x7f0000000240)='syzkaller\x00', 0x3000000, 0xbb, &(0x7f0000000280)=""/187, 0x40f00, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2, 0xc, 0x8}, 0x10, 0x4b6c, 0xffffffffffffffff, 0x7, &(0x7f0000000380)=[r0, r0], &(0x7f0000000440)=[{0x0, 0x4}, {0x3, 0x3, 0x6, 0x8}, {0x3, 0x2, 0x4, 0x2}, {0x5, 0x4, 0x9, 0x9}, {0x1, 0x2, 0x10, 0xb}, {0x2, 0x4, 0xd}, {0x0, 0x4, 0xe}], 0x10, 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0120053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB="600200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000007f000000000000efff000000000000000000"], 0x50) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) 2.105518911s ago: executing program 1 (id=12534): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3f, 0x47, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4", 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2.10490808s ago: executing program 2 (id=12535): socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d00000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000ed745e25bb4b30f11393b0000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x2, 0x4, 0x5}, 0x50) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7c, &(0x7f0000000000), 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x1, 0x7fff, 0x9, 0x202, 0xffffffffffffffff, 0x400, '\x00', r6, r7, 0x5, 0x2, 0x2, 0xf}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x16, &(0x7f0000000740)=@raw=[@map_idx={0x18, 0x7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x82e}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000800)='syzkaller\x00', 0x10001, 0xbf, &(0x7f0000000880)=""/191, 0x41000, 0x40, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2401f, r1, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) sendmsg(r7, &(0x7f0000001880)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0xc3}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)="8a981fcbab97d7259e4b921fbe72a2", 0xf}, {&(0x7f00000005c0)="6c3fd10495022795fe20e2ce358dcac276c7683e99db25ea2b63dc0dc6bf9c3e49df4234bcf72e66576fe2ce74970e55542061d752f4563833a5147325496171103e17af0788eeacfdd6fc5012fa38", 0x4f}, {&(0x7f0000000640)="19ac00d202a00f543ecb4ffe6f4479efc3074480e9a78c3964fcb1efaff59af02f567b6105ca7f6c0569d464ba8268dcfa0463745b152b33b9674be0ca0922a40bb6cc0acd80d40ec33b4c320b03d7f36dc86913937b334f0fc18f3c6d", 0x5d}], 0x3, &(0x7f0000000700)=[{0x98, 0x113, 0xa53, "1e88b40c1f17a646b9efb549ad694e7fd432ee3f254d168a1f1c908ee843116b9fd83cfc3a9e379c93395cdaebf828185f7a996ff27119339e5747f43c30b52246a50ed564c6b9073e464a04af5b9c26c48187a25662b4b121f2c67951005d08e1ab4081207f2e2897d15ba5bc610e4fcaaadf8c1f8eec3f792738ca84395081dcd6649a058f9d"}, {0x58, 0x102, 0x6, "8ad0ecb3eda6be5e90dd285c79cad597a974a110179d3e8cc162878052aff0011451cc9365365185761e84bb4f854e033f406be0d1dd9d25a33650bea5a7d64b5ba5babb046d146b"}, {0x1010, 0x29, 0x2, "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"}, {0x80, 0x109, 0xc, "e0a09aea5f4e20a611e62c121fdb78b3bfb5105a341f2b04e2834bc4dbae844df33b57e73ace764619d888db0e04d90e9883f2e7c398f4285dea34eab5eb86598f02f943ea7f7dc9158316eb69e9c2ba0e077d5f0c2aed1f0feee42552caae7fb3a5480549c926191caa"}], 0x1180}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1.642704816s ago: executing program 3 (id=12539): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000000010000081100000900", @ANYRES32, @ANYBLOB="060000000000000000956b0000000000000000009f7ccb07f662c14251be605415f6b067ebcd25cd409ad663fad4a1f0c3e75954c26f32be6aaf0cbed9f9ccd44926dcdd3e91b1730e569a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) mkdir(&(0x7f0000000200)='./file0\x00', 0x72) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f0000000600), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000001c0)) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x300080c5) 1.23294464s ago: executing program 3 (id=12540): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) openat$tun(0xffffffffffffff9c, 0x0, 0x189703, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000048880000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x4) 1.106888954s ago: executing program 0 (id=12541): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x8004}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.089366874s ago: executing program 1 (id=12542): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x28) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1.037295026s ago: executing program 2 (id=12543): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9a, 0x2, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x4000, 0x0, 0x7, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x2, 0x20020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x100000de, 0x4}, 0xc000, 0x0, 0x2, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb57e, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000004c452b0006"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 914.1831ms ago: executing program 1 (id=12544): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00a\x00'], 0x5) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 863.037181ms ago: executing program 3 (id=12545): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e1050000008847000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa63147", 0x52}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x19c}], 0x3}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r4, @ANYBLOB="13ab950863596d0f6c6353be656c9d37739b6103d529626dfda7ccb2c2b83176e821cba78bdcfa41b32de3e14c1badc66d7a897da03a58747b45fdebb60567016ac06b6e7d576cc90adfa962c06b60ec574309725db959b4f6521ae27c29735cc1058189ae07aa99af4e088cae23ba0802b2ed2a1bdb8f30e3603784ada27725a76f50bca7713902689d5adf5a448ebb6587135a831e214a1bb9f2e9af1ddd06e75b820439a1f1bf2f487bd6350d6c380a7c40e2bca8f33a924e67b81e418b69", @ANYBLOB="9ce83f9591112a463ff16e77f5e3709cfb174052b0169af29e823fd5a7dae170ab938a9247ec7c73f4e0232c3834a4f7e231e25a5ecdef789e140a1fcdeddbb5d959fdf0757717244d9556d7b489d576634195020f54eb332a9298b9e3c90f9f95604c38507294ecfd822b9233b81671c5e389daae157b5e0223a6b4bff3058cd01b0f4864c0f235538b084a0750dfdcd655086856db122d1873baac2f37721dcdd70849af0683f9065517cecad198b147f6ee2a03b2d06962a5cfe4a5fab44b9368de51b34d6c2a1b1327d8d645aab4f93805b8ce6fe904ef7f4d52e9a899", @ANYRESHEX=r3, @ANYRES32], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x2e, 0x5f, 0x61, 0x30]}}, &(0x7f0000000400)=""/188, 0x2b, 0xbc, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x0) 701.878007ms ago: executing program 0 (id=12546): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_clone(0x12012000, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/48, 0x30}], 0x1, &(0x7f0000000340)=""/111, 0x6f}, 0x12020) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x9, 0x8, 0x6, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) syz_open_procfs$namespace(r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 520.040243ms ago: executing program 1 (id=12547): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3f, 0x47, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4", 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 494.583124ms ago: executing program 2 (id=12548): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 318.56787ms ago: executing program 3 (id=12549): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000000010000081100000900", @ANYRES32, @ANYBLOB="060000000000000000956b0000000000000000009f7ccb07f662c14251be605415f6b067ebcd25cd409ad663fad4a1f0c3e75954c26f32be6aaf0cbed9f9ccd44926dcdd3e91b1730e569a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) mkdir(&(0x7f0000000200)='./file0\x00', 0x72) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f0000000600), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000001c0)) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x300080c5) 89.643807ms ago: executing program 2 (id=12550): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0xffff, 0xd0ffffff, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_int(r3, 0x0, 0x2, 0x0) write$cgroup_pressure(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xb67d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x0, 0x2, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40800) socket$kcm(0x10, 0x2, 0x4) 17.0439ms ago: executing program 3 (id=12551): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2d, 'perf_event'}, {0x2d, 'io'}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x800}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) 0s ago: executing program 1 (id=12552): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001500)={0x0, 0x40, 0x0}, 0x40012020) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=r4], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f00000000c0)='ns/cgroup\x00') r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r9 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0xb682) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r12 = perf_event_open(0x0, 0x0, 0x2000000002, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x1, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r12, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x37}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="0000000000000000000000fa88a8", 0x36}], 0x1}, 0x4000080) kernel console output (not intermixed with test programs): _inject_write+0x310/0x310 [ 2233.555822][ T6392] ? fsnotify_perm+0x248/0x550 [ 2233.555848][ T6392] ? proc_fault_inject_write+0x310/0x310 [ 2233.555871][ T6392] vfs_read+0x2de/0xa00 [ 2233.555904][ T6392] ? kernel_read+0x1e0/0x1e0 [ 2233.643312][ T6392] ? __fget_files+0x28/0x4b0 [ 2233.647972][ T6392] ? __fget_files+0x28/0x4b0 [ 2233.652598][ T6392] ? __fget_files+0x43d/0x4b0 [ 2233.657337][ T6392] ? __fdget_pos+0x2ae/0x360 [ 2233.661948][ T6392] ? ksys_read+0x71/0x250 [ 2233.666317][ T6392] ksys_read+0x14c/0x250 [ 2233.670588][ T6392] ? vfs_write+0xa30/0xa30 [ 2233.675024][ T6392] ? lockdep_hardirqs_on+0x94/0x140 [ 2233.680248][ T6392] do_syscall_64+0x4c/0xa0 [ 2233.684685][ T6392] ? clear_bhb_loop+0x60/0xb0 [ 2233.689394][ T6392] ? clear_bhb_loop+0x60/0xb0 [ 2233.694101][ T6392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2233.700017][ T6392] RIP: 0033:0x7ff359f5d68e [ 2233.704447][ T6392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2233.724071][ T6392] RSP: 002b:00007ff35ae7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2233.732498][ T6392] RAX: ffffffffffffffda RBX: 00007ff35ae7f6c0 RCX: 00007ff359f5d68e [ 2233.740478][ T6392] RDX: 000000000000000f RSI: 00007ff35ae7f0a0 RDI: 0000000000000008 [ 2233.748460][ T6392] RBP: 00007ff35ae7f090 R08: 0000000000000000 R09: 0000000000000000 [ 2233.756436][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2233.764420][ T6392] R13: 00007ff35a216038 R14: 00007ff35a215fa0 R15: 00007ffe6dd52448 [ 2233.772424][ T6392] [ 2233.952539][ T6395] CPU: 0 PID: 6395 Comm: syz.1.10754 Not tainted syzkaller #0 [ 2233.960070][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2233.970156][ T6395] Call Trace: [ 2233.973478][ T6395] [ 2233.976441][ T6395] dump_stack_lvl+0x188/0x24e [ 2233.981148][ T6395] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2233.987342][ T6395] ? show_regs_print_info+0x12/0x12 [ 2233.992564][ T6395] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2233.998786][ T6395] should_fail_ex+0x399/0x4d0 [ 2234.003500][ T6395] strncpy_from_user+0x32/0x350 [ 2234.008403][ T6395] bpf_prog_load+0x1f3/0x1560 [ 2234.013133][ T6395] ? map_freeze+0x390/0x390 [ 2234.017683][ T6395] ? __might_fault+0xa6/0x120 [ 2234.022406][ T6395] ? __might_fault+0xa6/0x120 [ 2234.027107][ T6395] ? __might_fault+0xc2/0x120 [ 2234.031808][ T6395] ? __might_fault+0xa6/0x120 [ 2234.036512][ T6395] ? bpf_lsm_bpf+0x5/0x10 [ 2234.040871][ T6395] ? security_bpf+0x7a/0xa0 [ 2234.045411][ T6395] __sys_bpf+0x5b8/0x780 [ 2234.049710][ T6395] ? bpf_link_show_fdinfo+0x380/0x380 [ 2234.055110][ T6395] ? lock_chain_count+0x20/0x20 [ 2234.059992][ T6395] __x64_sys_bpf+0x78/0x90 [ 2234.064433][ T6395] do_syscall_64+0x4c/0xa0 [ 2234.068862][ T6395] ? clear_bhb_loop+0x60/0xb0 [ 2234.073568][ T6395] ? clear_bhb_loop+0x60/0xb0 [ 2234.078270][ T6395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2234.084185][ T6395] RIP: 0033:0x7f002619ce59 [ 2234.088642][ T6395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2234.108258][ T6395] RSP: 002b:00007f00270b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2234.116688][ T6395] RAX: ffffffffffffffda RBX: 00007f0026415fa0 RCX: 00007f002619ce59 [ 2234.124682][ T6395] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 2234.132672][ T6395] RBP: 00007f00270b9090 R08: 0000000000000000 R09: 0000000000000000 [ 2234.140651][ T6395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2234.148633][ T6395] R13: 00007f0026416038 R14: 00007f0026415fa0 R15: 00007fff0a8e2878 [ 2234.156626][ T6395] [ 2234.444107][ T6412] netlink: 'syz.2.10760': attribute type 28 has an invalid length. [ 2234.483023][ T6412] netlink: 'syz.2.10760': attribute type 29 has an invalid length. [ 2234.491522][ T6412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10760'. [ 2235.307587][ T6431] FAULT_INJECTION: forcing a failure. [ 2235.307587][ T6431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2235.391984][ T6431] CPU: 1 PID: 6431 Comm: syz.1.10766 Not tainted syzkaller #0 [ 2235.399510][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2235.409606][ T6431] Call Trace: [ 2235.412925][ T6431] [ 2235.415885][ T6431] dump_stack_lvl+0x188/0x24e [ 2235.420608][ T6431] ? show_regs_print_info+0x12/0x12 [ 2235.425833][ T6431] ? load_image+0x400/0x400 [ 2235.430386][ T6431] ? __lock_acquire+0x7d10/0x7d10 [ 2235.435454][ T6431] ? ct_irq_exit_irqson+0x113/0x170 [ 2235.440781][ T6431] should_fail_ex+0x399/0x4d0 [ 2235.445498][ T6431] prepare_alloc_pages+0x1e2/0x5f0 [ 2235.450655][ T6431] __alloc_pages+0x130/0x4f0 [ 2235.455297][ T6431] ? asm_exc_page_fault+0x22/0x30 [ 2235.460364][ T6431] ? zone_statistics+0x170/0x170 [ 2235.465343][ T6431] ? _copy_from_user+0xc1/0x170 [ 2235.470236][ T6431] bpf_prog_test_run_xdp+0xaf7/0xf10 [ 2235.475585][ T6431] ? dev_put+0x80/0x80 [ 2235.479701][ T6431] ? dev_put+0x80/0x80 [ 2235.483814][ T6431] bpf_prog_test_run+0x31e/0x390 [ 2235.488795][ T6431] __sys_bpf+0x62b/0x780 [ 2235.493078][ T6431] ? bpf_link_show_fdinfo+0x380/0x380 [ 2235.498499][ T6431] ? lock_chain_count+0x20/0x20 [ 2235.503414][ T6431] __x64_sys_bpf+0x78/0x90 [ 2235.507857][ T6431] do_syscall_64+0x4c/0xa0 [ 2235.512307][ T6431] ? clear_bhb_loop+0x60/0xb0 [ 2235.517017][ T6431] ? clear_bhb_loop+0x60/0xb0 [ 2235.521758][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2235.527682][ T6431] RIP: 0033:0x7f002619ce59 [ 2235.532127][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2235.551757][ T6431] RSP: 002b:00007f00270b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2235.560211][ T6431] RAX: ffffffffffffffda RBX: 00007f0026415fa0 RCX: 00007f002619ce59 [ 2235.568204][ T6431] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2235.576217][ T6431] RBP: 00007f00270b9090 R08: 0000000000000000 R09: 0000000000000000 [ 2235.584216][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.592233][ T6431] R13: 00007f0026416038 R14: 00007f0026415fa0 R15: 00007fff0a8e2878 [ 2235.600260][ T6431] [ 2238.113470][ T6475] netlink: 'syz.4.10784': attribute type 10 has an invalid length. [ 2238.670099][ T6497] device syzkaller0 entered promiscuous mode [ 2239.580864][ T6511] netlink: 'syz.1.10799': attribute type 3 has an invalid length. [ 2239.590348][ T6511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10799'. [ 2241.361067][ T6526] netlink: 'syz.3.10802': attribute type 1 has an invalid length. [ 2241.382283][ T6526] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.10802'. [ 2241.444932][ T6531] netlink: 'syz.4.10803': attribute type 1 has an invalid length. [ 2241.492483][ T6531] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.10803'. [ 2242.047851][ T6547] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10810'. [ 2242.358303][ T6549] netlink: 'syz.0.10811': attribute type 6 has an invalid length. [ 2243.086908][ T6574] netlink: 'syz.0.10820': attribute type 1 has an invalid length. [ 2243.125228][ T6574] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.10820'. [ 2243.767459][ T6584] netlink: 'syz.3.10823': attribute type 1 has an invalid length. [ 2243.782273][ T6584] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.10823'. [ 2246.012416][ T6631] netlink: 'syz.4.10841': attribute type 2 has an invalid length. [ 2246.020305][ T6631] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10841'. [ 2246.141639][ T6639] netlink: 'syz.2.10839': attribute type 1 has an invalid length. [ 2246.181255][ T6639] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.10839'. [ 2247.210676][ T6667] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10849'. [ 2249.796998][ T6704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10864'. [ 2249.831482][ T6704] netlink: 'syz.2.10864': attribute type 10 has an invalid length. [ 2250.024820][ T6704] team0: Device wg1 is of different type [ 2250.281498][ T6720] netlink: 'syz.3.10870': attribute type 29 has an invalid length. [ 2250.391849][ T6720] netlink: 'syz.3.10870': attribute type 29 has an invalid length. [ 2250.468128][ T6723] netlink: 'syz.3.10870': attribute type 29 has an invalid length. [ 2250.522802][ T6720] netlink: 'syz.3.10870': attribute type 29 has an invalid length. [ 2251.015558][ T6737] netlink: 'syz.4.10874': attribute type 7 has an invalid length. [ 2251.040027][ T6737] netlink: 208404 bytes leftover after parsing attributes in process `syz.4.10874'. [ 2251.258391][ T6727] netlink: 180 bytes leftover after parsing attributes in process `syz.3.10870'. [ 2253.134006][ T6781] device syzkaller0 entered promiscuous mode [ 2253.940607][ T6799] FAULT_INJECTION: forcing a failure. [ 2253.940607][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.964763][ T6799] CPU: 0 PID: 6799 Comm: syz.4.10898 Not tainted syzkaller #0 [ 2253.972267][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2253.982348][ T6799] Call Trace: [ 2253.985668][ T6799] [ 2253.988632][ T6799] dump_stack_lvl+0x188/0x24e [ 2253.993346][ T6799] ? show_regs_print_info+0x12/0x12 [ 2253.998616][ T6799] ? load_image+0x400/0x400 [ 2254.003160][ T6799] ? __might_sleep+0xd0/0xd0 [ 2254.007788][ T6799] ? __lock_acquire+0x7d10/0x7d10 [ 2254.012879][ T6799] ? mark_lock+0x94/0x320 [ 2254.017245][ T6799] should_fail_ex+0x399/0x4d0 [ 2254.021955][ T6799] should_failslab+0x5/0x20 [ 2254.026478][ T6799] slab_pre_alloc_hook+0x59/0x310 [ 2254.031552][ T6799] ? __get_vm_area_node+0x122/0x330 [ 2254.036785][ T6799] __kmem_cache_alloc_node+0x4f/0x260 [ 2254.042196][ T6799] ? __get_vm_area_node+0x122/0x330 [ 2254.047451][ T6799] kmalloc_node_trace+0x22/0xe0 [ 2254.052359][ T6799] __get_vm_area_node+0x122/0x330 [ 2254.057431][ T6799] __vmalloc_node_range+0x357/0x13b0 [ 2254.062804][ T6799] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2254.068432][ T6799] ? free_vm_area+0x50/0x50 [ 2254.072984][ T6799] ? end_current_label_crit_section+0x170/0x170 [ 2254.079256][ T6799] ? __lock_acquire+0x7d10/0x7d10 [ 2254.084300][ T6799] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2254.089874][ T6799] __vmalloc+0x76/0x80 [ 2254.093976][ T6799] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2254.099545][ T6799] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2254.104933][ T6799] ? bpf_lsm_capable+0x5/0x10 [ 2254.109625][ T6799] ? security_capable+0x85/0xb0 [ 2254.114491][ T6799] bpf_prog_alloc+0x1c/0x1b0 [ 2254.119124][ T6799] bpf_prog_load+0x7c9/0x1560 [ 2254.123839][ T6799] ? map_freeze+0x390/0x390 [ 2254.128371][ T6799] ? __might_fault+0xa6/0x120 [ 2254.133082][ T6799] ? __might_fault+0xa6/0x120 [ 2254.137771][ T6799] ? __might_fault+0xc2/0x120 [ 2254.142464][ T6799] ? __might_fault+0xa6/0x120 [ 2254.147149][ T6799] ? bpf_lsm_bpf+0x5/0x10 [ 2254.151485][ T6799] ? security_bpf+0x7a/0xa0 [ 2254.155999][ T6799] __sys_bpf+0x5b8/0x780 [ 2254.160257][ T6799] ? bpf_link_show_fdinfo+0x380/0x380 [ 2254.165653][ T6799] ? lock_chain_count+0x20/0x20 [ 2254.170526][ T6799] __x64_sys_bpf+0x78/0x90 [ 2254.174958][ T6799] do_syscall_64+0x4c/0xa0 [ 2254.179387][ T6799] ? clear_bhb_loop+0x60/0xb0 [ 2254.184106][ T6799] ? clear_bhb_loop+0x60/0xb0 [ 2254.188797][ T6799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2254.194710][ T6799] RIP: 0033:0x7f4b6819ce59 [ 2254.199149][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2254.218763][ T6799] RSP: 002b:00007f4b6901d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2254.227193][ T6799] RAX: ffffffffffffffda RBX: 00007f4b68415fa0 RCX: 00007f4b6819ce59 [ 2254.235175][ T6799] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 2254.243155][ T6799] RBP: 00007f4b6901d090 R08: 0000000000000000 R09: 0000000000000000 [ 2254.251150][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2254.259227][ T6799] R13: 00007f4b68416038 R14: 00007f4b68415fa0 R15: 00007ffcff035f28 [ 2254.267231][ T6799] [ 2254.304077][ T6799] syz.4.10898: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2254.328751][ T6799] CPU: 0 PID: 6799 Comm: syz.4.10898 Not tainted syzkaller #0 [ 2254.336262][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2254.346343][ T6799] Call Trace: [ 2254.349620][ T6799] [ 2254.352548][ T6799] dump_stack_lvl+0x188/0x24e [ 2254.357226][ T6799] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2254.363706][ T6799] ? show_regs_print_info+0x12/0x12 [ 2254.368909][ T6799] ? load_image+0x400/0x400 [ 2254.373421][ T6799] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2254.379851][ T6799] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2254.386400][ T6799] warn_alloc+0x242/0x330 [ 2254.390766][ T6799] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2254.396944][ T6799] ? zone_watermark_ok_safe+0x270/0x270 [ 2254.402517][ T6799] ? __get_vm_area_node+0x318/0x330 [ 2254.407745][ T6799] __vmalloc_node_range+0x37c/0x13b0 [ 2254.413060][ T6799] ? free_vm_area+0x50/0x50 [ 2254.417580][ T6799] ? end_current_label_crit_section+0x170/0x170 [ 2254.423832][ T6799] ? __lock_acquire+0x7d10/0x7d10 [ 2254.428880][ T6799] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2254.434450][ T6799] __vmalloc+0x76/0x80 [ 2254.438538][ T6799] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2254.444104][ T6799] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2254.449497][ T6799] ? bpf_lsm_capable+0x5/0x10 [ 2254.454190][ T6799] ? security_capable+0x85/0xb0 [ 2254.459058][ T6799] bpf_prog_alloc+0x1c/0x1b0 [ 2254.463683][ T6799] bpf_prog_load+0x7c9/0x1560 [ 2254.468385][ T6799] ? map_freeze+0x390/0x390 [ 2254.472916][ T6799] ? __might_fault+0xa6/0x120 [ 2254.477611][ T6799] ? __might_fault+0xa6/0x120 [ 2254.482303][ T6799] ? __might_fault+0xc2/0x120 [ 2254.487002][ T6799] ? __might_fault+0xa6/0x120 [ 2254.491691][ T6799] ? bpf_lsm_bpf+0x5/0x10 [ 2254.496041][ T6799] ? security_bpf+0x7a/0xa0 [ 2254.500567][ T6799] __sys_bpf+0x5b8/0x780 [ 2254.504831][ T6799] ? bpf_link_show_fdinfo+0x380/0x380 [ 2254.510241][ T6799] ? lock_chain_count+0x20/0x20 [ 2254.515124][ T6799] __x64_sys_bpf+0x78/0x90 [ 2254.519567][ T6799] do_syscall_64+0x4c/0xa0 [ 2254.523999][ T6799] ? clear_bhb_loop+0x60/0xb0 [ 2254.528716][ T6799] ? clear_bhb_loop+0x60/0xb0 [ 2254.533419][ T6799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2254.539343][ T6799] RIP: 0033:0x7f4b6819ce59 [ 2254.543772][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2254.563403][ T6799] RSP: 002b:00007f4b6901d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2254.571838][ T6799] RAX: ffffffffffffffda RBX: 00007f4b68415fa0 RCX: 00007f4b6819ce59 [ 2254.579818][ T6799] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 2254.587798][ T6799] RBP: 00007f4b6901d090 R08: 0000000000000000 R09: 0000000000000000 [ 2254.595781][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2254.603762][ T6799] R13: 00007f4b68416038 R14: 00007f4b68415fa0 R15: 00007ffcff035f28 [ 2254.611756][ T6799] [ 2254.631248][ T6799] Mem-Info: [ 2254.634899][ T6799] active_anon:7023 inactive_anon:0 isolated_anon:0 [ 2254.634899][ T6799] active_file:25668 inactive_file:40799 isolated_file:0 [ 2254.634899][ T6799] unevictable:768 dirty:144 writeback:0 [ 2254.634899][ T6799] slab_reclaimable:21723 slab_unreclaimable:103440 [ 2254.634899][ T6799] mapped:30185 shmem:1361 pagetables:646 [ 2254.634899][ T6799] sec_pagetables:0 bounce:0 [ 2254.634899][ T6799] kernel_misc_reclaimable:0 [ 2254.634899][ T6799] free:1302179 free_pcp:7582 free_cma:0 [ 2254.690339][ T6799] Node 0 active_anon:28092kB inactive_anon:0kB active_file:102672kB inactive_file:162996kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120740kB dirty:576kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10328kB pagetables:2584kB sec_pagetables:0kB all_unreclaimable? no [ 2254.734826][ T6799] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2254.765808][ T6799] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2254.802840][ T6799] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 2254.809494][ T6799] Node 0 DMA32 free:1282524kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:28088kB inactive_anon:0kB active_file:102672kB inactive_file:162996kB unevictable:1536kB writepending:580kB present:3129332kB managed:2592944kB mlocked:0kB bounce:0kB free_pcp:21484kB local_pcp:16740kB free_cma:0kB [ 2254.852388][ T6799] lowmem_reserve[]: 0 0 1 1 1 [ 2254.867220][ T6799] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 2254.894844][ T6799] lowmem_reserve[]: 0 0 0 0 0 [ 2254.899987][ T6799] Node 1 Normal free:3910812kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:9440kB local_pcp:9440kB free_cma:0kB [ 2254.932472][ T6799] lowmem_reserve[]: 0 0 0 0 0 [ 2254.937599][ T6799] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2254.951386][ T6799] Node 0 DMA32: 2145*4kB (UME) 2551*8kB (UME) 2148*16kB (UME) 1413*32kB (UME) 1151*64kB (UME) 668*128kB (UME) 318*256kB (UME) 131*512kB (UM) 44*1024kB (UME) 19*2048kB (UM) 191*4096kB (M) = 1282524kB [ 2254.975952][ T6799] Node 0 Normal: 5*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2254.989175][ T6799] Node 1 Normal: 233*4kB (UME) 67*8kB (UME) 36*16kB (UME) 197*32kB (UME) 72*64kB (UME) 26*128kB (UME) 7*256kB (UE) 3*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3910812kB [ 2255.010893][ T6799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2255.020969][ T6799] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2255.031131][ T6799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2255.041161][ T6799] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2255.050978][ T6799] 67828 total pagecache pages [ 2255.068561][ T6799] 0 pages in swap cache [ 2255.074141][ T6799] Free swap = 124996kB [ 2255.079565][ T6799] Total swap = 124996kB [ 2255.089276][ T6799] 2097051 pages RAM [ 2255.094474][ T6799] 0 pages HighMem/MovableOnly [ 2255.099887][ T6799] 415214 pages reserved [ 2255.109829][ T6799] 0 pages cma reserved [ 2257.728263][ T6838] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10910'. [ 2258.700870][ T6866] netlink: 'syz.4.10919': attribute type 1 has an invalid length. [ 2258.770980][ T6866] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.10919'. [ 2260.217256][ T6905] netlink: 'syz.2.10935': attribute type 6 has an invalid length. [ 2260.227536][ T6905] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10935'. [ 2260.890531][ T6919] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.10942'. [ 2260.957999][ T6922] netlink: 'syz.0.10941': attribute type 1 has an invalid length. [ 2260.982222][ T6922] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.10941'. [ 2261.416980][ T6934] netlink: 'syz.1.10946': attribute type 10 has an invalid length. [ 2261.462339][ T6934] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 2261.545243][ T6933] delete_channel: no stack [ 2262.856329][ T6974] netlink: 'syz.2.10960': attribute type 1 has an invalid length. [ 2262.887675][ T6974] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.10960'. [ 2262.939814][ T6977] netlink: 'syz.1.10963': attribute type 4 has an invalid length. [ 2263.586506][ T6991] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2263.657189][ T6991] syzkaller0: linktype set to 776 [ 2264.046422][ T6998] netlink: 'syz.0.10970': attribute type 6 has an invalid length. [ 2264.299249][T23135] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 2264.631535][ T7018] netlink: 'syz.1.10980': attribute type 1 has an invalid length. [ 2264.663009][ T7018] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.10980'. [ 2266.744577][ T7068] netlink: 'syz.4.10996': attribute type 1 has an invalid length. [ 2266.775498][ T7068] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.10996'. [ 2267.096170][ T7075] netlink: 'syz.1.11001': attribute type 2 has an invalid length. [ 2267.116811][ T7075] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11001'. [ 2267.874973][ T7104] netlink: 'syz.0.11013': attribute type 6 has an invalid length. [ 2268.098555][ T7113] netlink: 'syz.4.11015': attribute type 1 has an invalid length. [ 2268.129434][ T7113] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11015'. [ 2268.625022][T23135] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 2268.671318][ T7132] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11022'. [ 2268.683426][ T7132] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2268.781356][ T7136] netlink: 'syz.4.11027': attribute type 27 has an invalid length. [ 2268.811471][ T7132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2268.812761][ T7136] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11027'. [ 2269.379874][ T7153] netlink: 'syz.0.11034': attribute type 1 has an invalid length. [ 2269.412654][ T7153] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11034'. [ 2269.880137][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2269.892904][T12251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2269.912027][T12251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2269.921006][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2269.951189][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2269.959313][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2270.126811][ T7160] chnl_net:caif_netlink_parms(): no params data found [ 2270.185741][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 2270.193209][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 2270.201430][ T7160] device bridge_slave_0 entered promiscuous mode [ 2270.210360][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 2270.217598][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 2270.225915][ T7160] device bridge_slave_1 entered promiscuous mode [ 2270.250850][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2270.263114][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2270.292683][ T7160] team0: Port device team_slave_0 added [ 2270.300598][ T7160] team0: Port device team_slave_1 added [ 2270.322575][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2270.329550][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2270.368669][ T7172] netlink: 'syz.1.11038': attribute type 7 has an invalid length. [ 2270.376784][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2270.387421][ T7172] netlink: 208404 bytes leftover after parsing attributes in process `syz.1.11038'. [ 2270.408049][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2270.418950][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2270.463909][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2270.638308][ T7160] device hsr_slave_0 entered promiscuous mode [ 2270.738382][ T7160] device hsr_slave_1 entered promiscuous mode [ 2270.793771][ T7160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2270.801405][ T7160] Cannot create hsr debugfs directory [ 2271.080637][T23135] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 2271.506733][ T7160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.765500][ T7160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.893604][ T7160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.998171][ T7160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.012564][T23135] Bluetooth: hci5: command 0x0409 tx timeout [ 2272.625445][T23135] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 2272.750678][ T7160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2272.889478][ T7160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2272.944794][ T7234] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11058'. [ 2272.966381][ T7234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2272.992850][ T7160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2273.076342][ T7160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2273.099550][ T7241] netlink: 'syz.4.11061': attribute type 10 has an invalid length. [ 2273.540484][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2273.625379][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2273.639965][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2273.688674][ T7160] 8021q: adding VLAN 0 to HW filter on device team0 [ 2273.922219][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2273.936232][T23135] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 2273.951397][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2273.965850][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 2273.973029][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2274.071926][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2274.092234][T23135] Bluetooth: hci5: command 0x041b tx timeout [ 2274.102979][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2274.136697][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 2274.143919][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2274.215990][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2274.277630][ T7267] device syzkaller0 entered promiscuous mode [ 2274.300909][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2276.004635][T23135] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 2276.172177][T23135] Bluetooth: hci5: command 0x040f tx timeout [ 2277.324462][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2277.333881][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2277.343483][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2277.351908][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2277.361674][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2277.409332][ T7160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2277.424699][ T7160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2277.438780][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2277.447947][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2277.473047][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2277.491871][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2277.512765][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2277.716675][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2277.730963][ T7314] netlink: 'syz.1.11084': attribute type 10 has an invalid length. [ 2278.027898][ T7314] team0 (unregistering): Port device team_slave_0 removed [ 2278.089298][ T7314] team0 (unregistering): Port device team_slave_1 removed [ 2278.252270][T23135] Bluetooth: hci5: command 0x0419 tx timeout [ 2278.498529][ T7182] device hsr_slave_0 left promiscuous mode [ 2278.530732][ T7182] device hsr_slave_1 left promiscuous mode [ 2278.542665][ T7182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2278.550106][ T7182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2278.573949][ T7182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2278.581406][ T7182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2278.589660][ T7182] device bridge_slave_1 left promiscuous mode [ 2278.596863][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.606264][ T7182] device bridge_slave_0 left promiscuous mode [ 2278.630099][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.681390][ T7182] device veth1_vlan left promiscuous mode [ 2278.690724][ T7182] device veth0_vlan left promiscuous mode [ 2279.117821][ T7182] team0 (unregistering): Port device team_slave_1 removed [ 2279.156351][ T7182] team0 (unregistering): Port device team_slave_0 removed [ 2279.198584][ T7182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2279.510917][ T7182] bond0 (unregistering): Released all slaves [ 2279.608056][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2279.626030][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2279.641130][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2279.688183][ T7160] device veth0_vlan entered promiscuous mode [ 2279.701055][ T7160] device veth1_vlan entered promiscuous mode [ 2279.708613][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2279.719330][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2279.752862][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2279.771381][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2279.801798][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2279.880948][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2279.891364][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2279.921633][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2279.972990][ T7160] device veth0_macvtap entered promiscuous mode [ 2280.004905][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2280.023221][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2280.032913][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2280.066696][ T7160] device veth1_macvtap entered promiscuous mode [ 2280.143508][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2280.179350][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.212120][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2280.278863][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.298479][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2280.323870][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.339468][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2280.351392][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.369107][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2280.381421][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2280.397361][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2280.408640][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2280.435270][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.458435][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.487069][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.507559][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.536404][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.565163][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.584444][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.597712][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.627662][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2280.646885][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2280.667175][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2280.702886][ T7160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.732025][ T7160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.752316][ T7160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.761054][ T7160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.781637][ T7382] netlink: 'syz.2.11110': attribute type 10 has an invalid length. [ 2280.794188][ T7382] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 2280.817005][ T7377] delete_channel: no stack [ 2280.974095][ T6114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2280.991284][ T6114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2281.027580][ T7176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2281.029548][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2281.067452][ T7176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2281.096366][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2282.399098][ T7450] netlink: 'syz.4.11133': attribute type 4 has an invalid length. [ 2282.626121][T23135] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 2283.135497][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.141887][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.383038][ T7484] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11145'. [ 2283.435933][ T7484] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2283.570426][T23135] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 2284.485087][T23135] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 2284.861958][ T7541] IPv6: Can't replace route, no match found [ 2287.143697][ T7616] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11198'. [ 2288.668763][ T7657] netlink: 'syz.0.11216': attribute type 7 has an invalid length. [ 2288.678574][ T7657] netlink: 208404 bytes leftover after parsing attributes in process `syz.0.11216'. [ 2289.328932][ T7681] netlink: 'syz.2.11225': attribute type 10 has an invalid length. [ 2289.361637][ T7681] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11225'. [ 2289.599618][ T7687] netlink: 'syz.0.11226': attribute type 29 has an invalid length. [ 2289.622974][ T7687] netlink: 'syz.0.11226': attribute type 29 has an invalid length. [ 2289.642692][ T7684] netlink: 'syz.0.11226': attribute type 29 has an invalid length. [ 2291.048967][ T7722] netlink: 'syz.1.11240': attribute type 10 has an invalid length. [ 2291.208159][ T7723] netlink: 'syz.0.11239': attribute type 29 has an invalid length. [ 2291.264165][ T7723] netlink: 'syz.0.11239': attribute type 29 has an invalid length. [ 2291.331592][ T7724] netlink: 'syz.0.11239': attribute type 29 has an invalid length. [ 2292.363512][ T7743] netlink: 'syz.4.11247': attribute type 28 has an invalid length. [ 2292.611388][ T7739] team0: Device veth1_vlan failed to register rx_handler [ 2292.803097][ T7758] FAULT_INJECTION: forcing a failure. [ 2292.803097][ T7758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2292.867360][ T7758] CPU: 0 PID: 7758 Comm: syz.2.11253 Not tainted syzkaller #0 [ 2292.874881][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2292.884971][ T7758] Call Trace: [ 2292.888287][ T7758] [ 2292.891253][ T7758] dump_stack_lvl+0x188/0x24e [ 2292.895988][ T7758] ? show_regs_print_info+0x12/0x12 [ 2292.901243][ T7758] ? load_image+0x400/0x400 [ 2292.905801][ T7758] ? __lock_acquire+0x7d10/0x7d10 [ 2292.910899][ T7758] should_fail_ex+0x399/0x4d0 [ 2292.915620][ T7758] _copy_to_user+0x2c/0x130 [ 2292.920172][ T7758] bpf_test_finish+0x266/0x600 [ 2292.924982][ T7758] ? dst_hold+0xb0/0xb0 [ 2292.929176][ T7758] ? convert_skb_to___skb+0x420/0x420 [ 2292.934574][ T7758] ? _copy_from_user+0xc1/0x170 [ 2292.939446][ T7758] ? copy_user_enhanced_fast_string+0xa/0x40 [ 2292.945439][ T7758] bpf_prog_test_run_xdp+0x80a/0xf10 [ 2292.950751][ T7758] ? dev_put+0x80/0x80 [ 2292.954845][ T7758] ? dev_put+0x80/0x80 [ 2292.958938][ T7758] bpf_prog_test_run+0x31e/0x390 [ 2292.963913][ T7758] __sys_bpf+0x62b/0x780 [ 2292.968260][ T7758] ? bpf_link_show_fdinfo+0x380/0x380 [ 2292.973683][ T7758] ? lock_chain_count+0x20/0x20 [ 2292.978570][ T7758] __x64_sys_bpf+0x78/0x90 [ 2292.983026][ T7758] do_syscall_64+0x4c/0xa0 [ 2292.987473][ T7758] ? clear_bhb_loop+0x60/0xb0 [ 2292.992171][ T7758] ? clear_bhb_loop+0x60/0xb0 [ 2292.996877][ T7758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2293.002799][ T7758] RIP: 0033:0x7ff359f9ce59 [ 2293.007222][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2293.026920][ T7758] RSP: 002b:00007ff35ae7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2293.035362][ T7758] RAX: ffffffffffffffda RBX: 00007ff35a215fa0 RCX: 00007ff359f9ce59 [ 2293.043349][ T7758] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2293.051331][ T7758] RBP: 00007ff35ae7f090 R08: 0000000000000000 R09: 0000000000000000 [ 2293.059317][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2293.067300][ T7758] R13: 00007ff35a216038 R14: 00007ff35a215fa0 R15: 00007ffe6dd52448 [ 2293.075311][ T7758] [ 2293.418154][ T7771] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11258'. [ 2293.970106][ T7782] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.11262'. [ 2294.007887][ T7782] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.11262'. [ 2294.134410][ T7782] validate_nla: 5 callbacks suppressed [ 2294.134499][ T7782] netlink: 'syz.2.11262': attribute type 10 has an invalid length. [ 2294.227642][ T7782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11262'. [ 2294.289256][ T7782] device team0 entered promiscuous mode [ 2294.319517][ T7782] device team_slave_0 entered promiscuous mode [ 2294.360780][ T7782] device team_slave_1 entered promiscuous mode [ 2294.415156][ T7782] bridge0: port 2(team0) entered blocking state [ 2294.443220][ T7782] bridge0: port 2(team0) entered disabled state [ 2294.597092][ T7796] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2294.619518][ T7796] syzkaller0: linktype set to 776 [ 2294.921391][ T7804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11272'. [ 2295.792331][ T7821] netlink: 'syz.2.11277': attribute type 1 has an invalid length. [ 2295.800679][ T7821] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11277'. [ 2296.906004][ T7849] netlink: 'syz.2.11286': attribute type 10 has an invalid length. [ 2296.987597][ T7849] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 2297.051605][ T7847] delete_channel: no stack [ 2297.159447][ T7858] netlink: 'syz.0.11290': attribute type 1 has an invalid length. [ 2297.192308][ T7858] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11290'. [ 2297.460753][ T7869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11292'. [ 2297.490155][ T7869] device bridge_slave_1 left promiscuous mode [ 2297.521768][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2297.841400][ T7869] device bridge_slave_0 left promiscuous mode [ 2297.852375][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.656839][ T7899] netlink: 'syz.4.11304': attribute type 1 has an invalid length. [ 2298.675708][ T7899] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11304'. [ 2298.689284][ T7897] netlink: 'syz.0.11303': attribute type 28 has an invalid length. [ 2298.799892][ T7897] netlink: 'syz.0.11303': attribute type 10 has an invalid length. [ 2299.566479][ T7897] team0: Device veth1_vlan failed to register rx_handler [ 2299.666054][ T7910] netlink: 'syz.4.11307': attribute type 4 has an invalid length. [ 2299.982487][ T7920] netlink: 'syz.3.11309': attribute type 10 has an invalid length. [ 2300.085928][ T7920] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2300.589740][ T7942] netlink: 'syz.0.11317': attribute type 3 has an invalid length. [ 2300.607437][ T7942] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11317'. [ 2302.088482][ T7951] netlink: 'syz.1.11322': attribute type 28 has an invalid length. [ 2302.115867][ T7956] netlink: 'syz.3.11323': attribute type 6 has an invalid length. [ 2302.197418][ T7953] netlink: 'syz.1.11322': attribute type 10 has an invalid length. [ 2304.055481][ T8007] netlink: 'syz.1.11342': attribute type 27 has an invalid length. [ 2304.111402][ T8013] netlink: 'syz.2.11344': attribute type 7 has an invalid length. [ 2304.135459][ T8013] netlink: 208404 bytes leftover after parsing attributes in process `syz.2.11344'. [ 2304.416575][ T8022] netlink: 'syz.3.11345': attribute type 1 has an invalid length. [ 2304.442206][ T8022] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.11345'. [ 2305.187278][ T8034] device syzkaller0 entered promiscuous mode [ 2305.357149][ T8043] netlink: 'syz.3.11352': attribute type 7 has an invalid length. [ 2305.385054][ T8043] netlink: 208404 bytes leftover after parsing attributes in process `syz.3.11352'. [ 2307.227554][ T8049] netlink: 'syz.3.11353': attribute type 6 has an invalid length. [ 2307.532152][ T8065] netlink: 'syz.2.11358': attribute type 21 has an invalid length. [ 2307.552533][ T8065] netlink: 'syz.2.11358': attribute type 3 has an invalid length. [ 2307.560390][ T8065] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11358'. [ 2310.032448][ T8110] FAULT_INJECTION: forcing a failure. [ 2310.032448][ T8110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2310.082361][ T8110] CPU: 0 PID: 8110 Comm: syz.4.11373 Not tainted syzkaller #0 [ 2310.089899][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2310.099981][ T8110] Call Trace: [ 2310.103377][ T8110] [ 2310.106347][ T8110] dump_stack_lvl+0x188/0x24e [ 2310.111067][ T8110] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2310.117311][ T8110] ? show_regs_print_info+0x12/0x12 [ 2310.122556][ T8110] ? load_image+0x400/0x400 [ 2310.127125][ T8110] should_fail_ex+0x399/0x4d0 [ 2310.131877][ T8110] _copy_from_user+0x2c/0x170 [ 2310.136603][ T8110] __sys_bpf+0x2ea/0x780 [ 2310.140892][ T8110] ? bpf_link_show_fdinfo+0x380/0x380 [ 2310.146318][ T8110] ? lock_chain_count+0x20/0x20 [ 2310.151212][ T8110] __x64_sys_bpf+0x78/0x90 [ 2310.155679][ T8110] do_syscall_64+0x4c/0xa0 [ 2310.160116][ T8110] ? clear_bhb_loop+0x60/0xb0 [ 2310.164818][ T8110] ? clear_bhb_loop+0x60/0xb0 [ 2310.169518][ T8110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2310.175437][ T8110] RIP: 0033:0x7f4b6819ce59 [ 2310.179863][ T8110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2310.199479][ T8110] RSP: 002b:00007f4b6901d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2310.207914][ T8110] RAX: ffffffffffffffda RBX: 00007f4b68415fa0 RCX: 00007f4b6819ce59 [ 2310.215899][ T8110] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2310.223889][ T8110] RBP: 00007f4b6901d090 R08: 0000000000000000 R09: 0000000000000000 [ 2310.231905][ T8110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2310.239892][ T8110] R13: 00007f4b68416038 R14: 00007f4b68415fa0 R15: 00007ffcff035f28 [ 2310.247894][ T8110] [ 2313.280473][ T8202] IPv6: Can't replace route, no match found [ 2313.880109][ T8222] netlink: 'syz.1.11417': attribute type 10 has an invalid length. [ 2313.961290][ T8217] delete_channel: no stack [ 2317.848469][ T8258] netlink: 'syz.0.11427': attribute type 1 has an invalid length. [ 2317.891578][ T8258] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11427'. [ 2318.447746][ T8270] netlink: 'syz.2.11445': attribute type 10 has an invalid length. [ 2318.488959][ T8270] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2319.247334][ T8293] netlink: 'syz.0.11440': attribute type 4 has an invalid length. [ 2320.148029][ T8315] netlink: 'syz.4.11449': attribute type 1 has an invalid length. [ 2320.172517][ T8315] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11449'. [ 2321.537164][ T8343] netlink: 'syz.0.11459': attribute type 6 has an invalid length. [ 2322.156052][ T8365] netlink: 'syz.3.11467': attribute type 28 has an invalid length. [ 2322.395405][ T8372] netlink: 'syz.2.11468': attribute type 1 has an invalid length. [ 2322.446741][ T8372] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11468'. [ 2324.117580][ T8395] IPv6: Can't replace route, no match found [ 2324.859166][ T8413] netlink: 'syz.1.11482': attribute type 28 has an invalid length. [ 2325.437211][ T8422] netlink: 'syz.4.11485': attribute type 1 has an invalid length. [ 2325.463330][ T8422] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11485'. [ 2326.563157][ T8438] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.11490'. [ 2326.666827][ T8442] netlink: 'syz.1.11492': attribute type 7 has an invalid length. [ 2326.700248][ T8442] netlink: 208404 bytes leftover after parsing attributes in process `syz.1.11492'. [ 2326.918358][ T8451] netlink: 'syz.3.11496': attribute type 28 has an invalid length. [ 2326.954820][ T8453] netlink: 'syz.2.11495': attribute type 28 has an invalid length. [ 2327.027502][ T8455] netlink: 'syz.0.11497': attribute type 28 has an invalid length. [ 2327.437657][ T8473] netlink: 'syz.3.11501': attribute type 1 has an invalid length. [ 2327.504297][ T8473] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.11501'. [ 2328.646040][ T8498] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11510'. [ 2328.702661][ T8498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2328.733978][ T8500] netlink: 'syz.0.11511': attribute type 28 has an invalid length. [ 2329.073635][ T8512] netlink: 'syz.0.11513': attribute type 28 has an invalid length. [ 2330.060374][ T8523] netlink: 'syz.4.11519': attribute type 21 has an invalid length. [ 2330.128958][ T8523] netlink: 'syz.4.11519': attribute type 1 has an invalid length. [ 2330.200343][ T8527] netlink: 'syz.2.11516': attribute type 1 has an invalid length. [ 2330.271752][ T8527] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11516'. [ 2331.159289][ T8536] device syzkaller0 entered promiscuous mode [ 2332.819723][ T8569] netlink: 'syz.0.11535': attribute type 29 has an invalid length. [ 2332.931559][ T8575] netlink: 'syz.2.11536': attribute type 1 has an invalid length. [ 2332.952586][ T8575] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11536'. [ 2334.459783][ T8569] netlink: 'syz.0.11535': attribute type 29 has an invalid length. [ 2334.474986][ T8578] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.11535'. [ 2336.350920][ T8618] netlink: 'syz.2.11548': attribute type 1 has an invalid length. [ 2336.394283][ T8618] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11548'. [ 2338.446482][ T8660] netlink: 'syz.4.11564': attribute type 1 has an invalid length. [ 2338.477421][ T8660] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11564'. [ 2338.968643][ T8680] netlink: 'syz.3.11570': attribute type 1 has an invalid length. [ 2339.012289][ T8680] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.11570'. [ 2339.528833][ T8700] netlink: 'syz.4.11582': attribute type 10 has an invalid length. [ 2339.735292][ T8700] device syz_tun entered promiscuous mode [ 2339.747577][ T8700] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2340.566223][ T8717] netlink: 'syz.0.11585': attribute type 1 has an invalid length. [ 2340.574811][ T8717] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11585'. [ 2340.623309][ T8718] netlink: 'syz.2.11588': attribute type 10 has an invalid length. [ 2340.717842][ T8718] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 2340.754190][ T8714] delete_channel: no stack [ 2341.030549][ T8726] netlink: 'syz.4.11591': attribute type 29 has an invalid length. [ 2341.060694][ T8726] netlink: 'syz.4.11591': attribute type 29 has an invalid length. [ 2341.083762][ T8731] netlink: 'syz.4.11591': attribute type 29 has an invalid length. [ 2341.621643][ T8747] device syzkaller0 entered promiscuous mode [ 2341.808348][ T8757] netlink: 'syz.0.11604': attribute type 1 has an invalid length. [ 2341.843194][ T8757] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11604'. [ 2343.885542][ T8771] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.11609'. [ 2343.944214][ T8773] netlink: 'syz.2.11609': attribute type 10 has an invalid length. [ 2343.990830][ T8773] device macvlan0 entered promiscuous mode [ 2344.042369][ T8773] team0: Port device macvlan0 added [ 2344.413709][ T8791] netlink: 'syz.1.11614': attribute type 10 has an invalid length. [ 2344.517983][ T8795] netlink: 'syz.4.11619': attribute type 4 has an invalid length. [ 2344.582990][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.589434][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.920860][ T8808] netlink: 'syz.4.11621': attribute type 1 has an invalid length. [ 2344.960422][ T8808] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11621'. [ 2345.174574][ T8817] netlink: 'syz.0.11626': attribute type 6 has an invalid length. [ 2345.200252][ T8817] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11626'. [ 2347.007970][ T8867] netlink: 'syz.2.11644': attribute type 28 has an invalid length. [ 2347.509387][ T8890] netlink: 'syz.4.11653': attribute type 6 has an invalid length. [ 2348.792015][ T8926] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.11666'. [ 2348.845419][ T8926] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2348.939602][ T8926] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2348.989009][ T8926] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2349.990320][ T8934] netlink: 'syz.1.11670': attribute type 2 has an invalid length. [ 2350.020119][ T8934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11670'. [ 2351.130147][ T8956] device syzkaller0 entered promiscuous mode [ 2351.143240][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2351.588445][ T8977] netlink: 'syz.1.11687': attribute type 7 has an invalid length. [ 2351.597425][ T8977] netlink: 208404 bytes leftover after parsing attributes in process `syz.1.11687'. [ 2352.090170][ T8991] netlink: 'syz.4.11694': attribute type 1 has an invalid length. [ 2352.132624][ T8991] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11694'. [ 2352.553901][ T9006] netlink: 'syz.3.11700': attribute type 7 has an invalid length. [ 2352.582033][ T9006] netlink: 208404 bytes leftover after parsing attributes in process `syz.3.11700'. [ 2352.791051][ T9012] netlink: 'syz.2.11698': attribute type 1 has an invalid length. [ 2352.876885][ T9012] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11698'. [ 2353.054743][ T9018] netlink: 'syz.3.11704': attribute type 28 has an invalid length. [ 2353.425032][ T9026] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11707'. [ 2353.474822][ T9026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2353.938824][ T9037] netlink: 'syz.0.11710': attribute type 1 has an invalid length. [ 2354.003297][ T9037] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11710'. [ 2354.302126][ T9053] netlink: 'syz.2.11717': attribute type 28 has an invalid length. [ 2354.383776][ T9052] netlink: 'syz.4.11716': attribute type 1 has an invalid length. [ 2354.391753][ T9052] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11716'. [ 2355.540327][ T9068] device syzkaller0 entered promiscuous mode [ 2355.685223][ T9085] device syzkaller0 entered promiscuous mode [ 2355.817200][ T9090] netlink: 'syz.4.11729': attribute type 1 has an invalid length. [ 2355.859836][ T9090] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11729'. [ 2360.752095][ T9092] netlink: 'syz.1.11730': attribute type 28 has an invalid length. [ 2360.760168][ T9102] netlink: 'syz.2.11733': attribute type 10 has an invalid length. [ 2361.517003][ T9132] netlink: 'syz.1.11745': attribute type 1 has an invalid length. [ 2361.525976][ T9132] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11745'. [ 2361.560753][ T9138] netlink: 'syz.0.11746': attribute type 28 has an invalid length. [ 2362.598164][ T9172] netlink: 'syz.2.11762': attribute type 1 has an invalid length. [ 2362.628003][ T9172] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11762'. [ 2362.722752][ T9178] netlink: 'syz.3.11764': attribute type 28 has an invalid length. [ 2363.236822][ T9203] netlink: 'syz.2.11775': attribute type 10 has an invalid length. [ 2363.329795][ T9202] delete_channel: no stack [ 2363.518760][ T9214] netlink: 'syz.1.11776': attribute type 10 has an invalid length. [ 2364.090770][ T9224] netlink: 'syz.4.11781': attribute type 1 has an invalid length. [ 2364.132140][ T9224] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11781'. [ 2364.215735][ T9231] netlink: 'syz.1.11784': attribute type 28 has an invalid length. [ 2364.395287][ T9242] IPv6: Can't replace route, no match found [ 2366.148131][ T9281] netlink: 'syz.1.11803': attribute type 28 has an invalid length. [ 2366.200616][ T9283] netlink: 'syz.4.11804': attribute type 19 has an invalid length. [ 2366.209863][ T9283] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11804'. [ 2366.242216][ T9285] netlink: 'syz.0.11805': attribute type 4 has an invalid length. [ 2366.505402][ T9293] netlink: 'syz.3.11806': attribute type 10 has an invalid length. [ 2367.345537][ T9329] device wlan1 entered promiscuous mode [ 2367.396190][ T9335] netlink: 'syz.0.11822': attribute type 28 has an invalid length. [ 2367.412659][ T9329] netlink: 'syz.3.11824': attribute type 3 has an invalid length. [ 2367.420677][ T9329] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.11824'. [ 2367.763458][ T9343] tap0: tun_chr_ioctl cmd 1074025677 [ 2367.772851][ T9343] tap0: linktype set to 774 [ 2367.957159][ T9356] netlink: 'syz.4.11833': attribute type 6 has an invalid length. [ 2369.429079][ T9388] netlink: 'syz.2.11844': attribute type 3 has an invalid length. [ 2369.513874][ T9395] netlink: 'syz.2.11844': attribute type 17 has an invalid length. [ 2369.521874][ T9395] netlink: 'syz.2.11844': attribute type 16 has an invalid length. [ 2369.552367][ T9388] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11844'. [ 2369.604885][ T9395] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11844'. [ 2369.831614][ T9410] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.11852'. [ 2370.985079][ T9428] netlink: 208404 bytes leftover after parsing attributes in process `syz.3.11860'. [ 2371.368976][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2371.379441][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2371.389106][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2371.397561][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2371.405679][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2371.413624][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2371.731741][ T9455] validate_nla: 4 callbacks suppressed [ 2371.731760][ T9455] netlink: 'syz.4.11868': attribute type 7 has an invalid length. [ 2371.804818][ T9455] netlink: 208404 bytes leftover after parsing attributes in process `syz.4.11868'. [ 2371.857113][ T9458] netlink: 'syz.0.11867': attribute type 1 has an invalid length. [ 2371.931473][ T9458] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11867'. [ 2372.011400][ T6114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.272414][ T6114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.447247][ T6114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.603077][ T6114] bond0: (slave netdevsim0): Releasing backup interface [ 2372.629653][ T6114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.685511][ T9469] netlink: 'syz.4.11872': attribute type 10 has an invalid length. [ 2372.739398][ T9469] team0: Device wg1 is of different type [ 2372.805147][ T9440] chnl_net:caif_netlink_parms(): no params data found [ 2372.822816][ T9477] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11873'. [ 2372.845152][ T9477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2373.123261][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state [ 2373.130460][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 2373.138932][ T9440] device bridge_slave_0 entered promiscuous mode [ 2373.147811][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 2373.155092][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 2373.163154][ T9440] device bridge_slave_1 entered promiscuous mode [ 2373.240279][ T9440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2373.276218][ T9440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2373.368986][ T9440] team0: Port device team_slave_0 added [ 2373.411839][ T9440] team0: Port device team_slave_1 added [ 2373.452386][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 2373.720813][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2373.735533][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2373.838091][ T9440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2373.869154][ T9494] netlink: 'syz.4.11880': attribute type 28 has an invalid length. [ 2373.911231][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2373.977113][ T9495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2374.136874][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2374.150160][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2374.198424][ T9509] netlink: 'syz.4.11883': attribute type 1 has an invalid length. [ 2374.232503][ T9509] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11883'. [ 2374.268499][ T9440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2374.361031][ T9504] netlink: 'syz.3.11882': attribute type 28 has an invalid length. [ 2374.769590][ T9440] device hsr_slave_0 entered promiscuous mode [ 2374.790963][ T9440] device hsr_slave_1 entered promiscuous mode [ 2375.532275][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 2375.573569][ T9546] netlink: 'syz.3.11892': attribute type 28 has an invalid length. [ 2376.118199][ T9560] netlink: 'syz.4.11896': attribute type 28 has an invalid length. [ 2376.495247][ T9440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2376.561291][ T9440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2376.591560][ T9440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2376.708453][ T9577] netlink: 'syz.4.11898': attribute type 1 has an invalid length. [ 2376.732085][ T9440] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2376.772352][ T9577] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11898'. [ 2377.612298][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 2377.764799][ T6114] device hsr_slave_0 left promiscuous mode [ 2377.812402][ T6114] device hsr_slave_1 left promiscuous mode [ 2377.832813][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2377.840261][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2377.892894][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2377.900353][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2377.947819][ T6114] bridge0: port 2(team0) entered disabled state [ 2377.973460][ T6114] device bridge_slave_0 left promiscuous mode [ 2377.989965][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 2378.128399][ T6114] device veth1_macvtap left promiscuous mode [ 2378.143731][ T6114] device veth0_macvtap left promiscuous mode [ 2378.162787][ T6114] device veth1_vlan left promiscuous mode [ 2378.182417][ T6114] device veth0_vlan left promiscuous mode [ 2378.854650][ T9619] netlink: 'syz.1.11909': attribute type 2 has an invalid length. [ 2379.021451][ T6114] device macvlan0 left promiscuous mode [ 2379.030977][ T6114] team0 (unregistering): Port device macvlan0 removed [ 2379.370812][ T6114] device team_slave_1 left promiscuous mode [ 2379.387188][ T6114] team0 (unregistering): Port device team_slave_1 removed [ 2379.436754][ T6114] device team_slave_0 left promiscuous mode [ 2379.448632][ T6114] team0 (unregistering): Port device team_slave_0 removed [ 2379.517765][ T6114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2379.565379][ T6114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2379.692230][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 2379.881136][ T6114] bond0 (unregistering): Released all slaves [ 2379.984043][ T9606] netlink: 'syz.4.11906': attribute type 28 has an invalid length. [ 2380.103199][ T9440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2380.147705][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2380.164732][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2380.206755][ T9440] 8021q: adding VLAN 0 to HW filter on device team0 [ 2380.242452][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2380.275130][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2380.300933][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 2380.308139][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2380.350734][ T9634] netlink: 'syz.1.11913': attribute type 1 has an invalid length. [ 2380.391132][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2380.413711][ T9634] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11913'. [ 2380.430791][ T9625] netlink: 'syz.0.11910': attribute type 21 has an invalid length. [ 2380.506097][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2380.537175][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2380.562186][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 2380.569373][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2380.588899][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2380.627767][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2380.696912][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2380.730196][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2380.749042][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2380.767363][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2380.820366][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2380.831535][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2380.848544][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2380.888980][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2380.911745][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2380.937485][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2381.190274][ T9650] netlink: 'syz.4.11917': attribute type 10 has an invalid length. [ 2381.223539][ T9650] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 2381.402533][ T9649] delete_channel: no stack [ 2381.854240][ T6114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2381.887156][ T6114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2381.928728][ T9440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2381.987159][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2382.006896][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2382.021152][ T9665] netlink: 'syz.0.11921': attribute type 28 has an invalid length. [ 2382.071591][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2382.089321][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2382.160326][ T9440] device veth0_vlan entered promiscuous mode [ 2382.181511][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2382.190578][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2382.211552][ T9440] device veth1_vlan entered promiscuous mode [ 2382.244894][ T9440] device veth0_macvtap entered promiscuous mode [ 2382.266579][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2382.312618][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2382.372809][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2382.436004][ T9440] device veth1_macvtap entered promiscuous mode [ 2382.531001][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2382.599416][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.666517][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2382.737932][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.792886][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2382.874230][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.895619][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2382.919027][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2382.950575][ T9440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2382.994073][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2383.005691][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2383.096457][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2383.122126][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2383.159739][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2383.186659][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2383.224719][ T9693] netlink: 'syz.1.11928': attribute type 1 has an invalid length. [ 2383.246666][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2383.252547][ T9693] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11928'. [ 2383.282242][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2383.311643][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2383.343531][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2383.377735][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2383.438301][ T9440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2383.485019][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2383.520853][T28498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2383.541008][ T9688] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11929'. [ 2383.591786][ T9440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2383.624621][ T9440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2383.658532][ T9440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2383.696839][ T9440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2383.906960][T28498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2383.938953][T28498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2383.992154][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2384.028969][ T7177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2384.061500][ T7177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2384.069863][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2384.226820][ T9708] netlink: 'syz.4.11934': attribute type 28 has an invalid length. [ 2384.498995][ T9724] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.11940'. [ 2384.768026][ T9732] netlink: 'syz.0.11944': attribute type 6 has an invalid length. [ 2384.793548][ T9732] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11944'. [ 2385.425263][ T9751] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11953'. [ 2385.520164][ T9751] device hsr_slave_0 left promiscuous mode [ 2385.540144][ T9751] device hsr_slave_1 left promiscuous mode [ 2385.578962][ T9743] FAULT_INJECTION: forcing a failure. [ 2385.578962][ T9743] name failslab, interval 1, probability 0, space 0, times 0 [ 2385.597229][ T9743] CPU: 1 PID: 9743 Comm: syz.3.11950 Not tainted syzkaller #0 [ 2385.604728][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2385.614814][ T9743] Call Trace: [ 2385.618109][ T9743] [ 2385.621054][ T9743] dump_stack_lvl+0x188/0x24e [ 2385.625755][ T9743] ? show_regs_print_info+0x12/0x12 [ 2385.630981][ T9743] ? load_image+0x400/0x400 [ 2385.635509][ T9743] ? __might_sleep+0xd0/0xd0 [ 2385.640114][ T9743] ? __lock_acquire+0x7d10/0x7d10 [ 2385.645155][ T9743] ? aa_file_perm+0x3ea/0xf00 [ 2385.649858][ T9743] should_fail_ex+0x399/0x4d0 [ 2385.654551][ T9743] should_failslab+0x5/0x20 [ 2385.659066][ T9743] slab_pre_alloc_hook+0x59/0x310 [ 2385.664110][ T9743] ? kernfs_fop_write_iter+0x155/0x520 [ 2385.669591][ T9743] __kmem_cache_alloc_node+0x4f/0x260 [ 2385.675000][ T9743] ? kernfs_fop_write_iter+0x155/0x520 [ 2385.680482][ T9743] __kmalloc+0xa0/0x240 [ 2385.684662][ T9743] kernfs_fop_write_iter+0x155/0x520 [ 2385.689968][ T9743] vfs_write+0x4b1/0xa30 [ 2385.694244][ T9743] ? file_end_write+0x250/0x250 [ 2385.699130][ T9743] ? __fget_files+0x43d/0x4b0 [ 2385.703834][ T9743] ? __fdget_pos+0x2ae/0x360 [ 2385.708449][ T9743] ? ksys_write+0x71/0x250 [ 2385.712899][ T9743] ksys_write+0x14c/0x250 [ 2385.717251][ T9743] ? __ia32_sys_read+0x80/0x80 [ 2385.722045][ T9743] ? lockdep_hardirqs_on+0x94/0x140 [ 2385.727270][ T9743] do_syscall_64+0x4c/0xa0 [ 2385.731705][ T9743] ? clear_bhb_loop+0x60/0xb0 [ 2385.736407][ T9743] ? clear_bhb_loop+0x60/0xb0 [ 2385.741105][ T9743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2385.747016][ T9743] RIP: 0033:0x7fb50979ce59 [ 2385.751439][ T9743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2385.771058][ T9743] RSP: 002b:00007fb50a5d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2385.779489][ T9743] RAX: ffffffffffffffda RBX: 00007fb509a15fa0 RCX: 00007fb50979ce59 [ 2385.787479][ T9743] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 000000000000000c [ 2385.795463][ T9743] RBP: 00007fb50a5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2385.803446][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2385.811431][ T9743] R13: 00007fb509a16038 R14: 00007fb509a15fa0 R15: 00007ffc69af2dc8 [ 2385.819433][ T9743] [ 2386.456613][ T9778] netlink: 'syz.4.11961': attribute type 28 has an invalid length. [ 2386.749115][ T9795] netlink: 'syz.0.11968': attribute type 2 has an invalid length. [ 2386.757573][ T9795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11968'. [ 2387.398734][ T9809] netlink: 'syz.0.11974': attribute type 7 has an invalid length. [ 2387.452800][ T9809] netlink: 208404 bytes leftover after parsing attributes in process `syz.0.11974'. [ 2388.197834][ T9825] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11981'. [ 2388.496085][ T9848] netlink: 'syz.0.11988': attribute type 28 has an invalid length. [ 2388.727011][ T9859] netlink: 'syz.1.11993': attribute type 7 has an invalid length. [ 2388.735340][ T9859] netlink: 208404 bytes leftover after parsing attributes in process `syz.1.11993'. [ 2391.747924][ T9913] netlink: 'syz.4.12013': attribute type 28 has an invalid length. [ 2392.701842][ T9945] netlink: 'syz.2.12025': attribute type 10 has an invalid length. [ 2392.727967][ T9945] device bridge_slave_1 left promiscuous mode [ 2392.735823][T23135] Bluetooth: hci5: command 0x0406 tx timeout [ 2392.765931][ T9945] bridge0: port 2(bridge_slave_1) entered disabled state [ 2394.303475][ T9975] delete_channel: no stack [ 2394.734012][ T9983] device syzkaller0 entered promiscuous mode [ 2394.750464][ T9986] netlink: 'syz.2.12041': attribute type 39 has an invalid length. [ 2397.250953][ T9997] delete_channel: no stack [ 2397.920758][T10023] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12055'. [ 2398.901487][T10051] IPv6: Can't replace route, no match found [ 2399.205176][T10065] netlink: 'syz.0.12072': attribute type 10 has an invalid length. [ 2399.219371][T10065] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 2399.290951][T10064] delete_channel: no stack [ 2399.697335][T10079] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12075'. [ 2400.249538][T10095] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2400.451801][T10099] netlink: 'syz.4.12085': attribute type 3 has an invalid length. [ 2400.501674][T10099] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12085'. [ 2401.122671][T10111] delete_channel: no stack [ 2401.472853][T10129] netlink: 'syz.3.12096': attribute type 3 has an invalid length. [ 2401.496205][T10129] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.12096'. [ 2402.250725][T10154] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12105'. [ 2402.945360][T10155] delete_channel: no stack [ 2404.784271][T10201] netlink: 'syz.4.12123': attribute type 6 has an invalid length. [ 2404.848808][T10201] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12123'. [ 2404.918671][T10204] netlink: 'syz.3.12124': attribute type 6 has an invalid length. [ 2405.170282][T10215] netlink: 'syz.0.12128': attribute type 4 has an invalid length. [ 2405.193359][T10220] netlink: 'syz.0.12128': attribute type 4 has an invalid length. [ 2405.214084][T10220] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12128'. [ 2405.328105][T10215] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12128'. [ 2405.703727][T10219] FAULT_INJECTION: forcing a failure. [ 2405.703727][T10219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2405.765355][T10219] CPU: 1 PID: 10219 Comm: syz.3.12130 Not tainted syzkaller #0 [ 2405.772959][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2405.783053][T10219] Call Trace: [ 2405.786348][T10219] [ 2405.789297][T10219] dump_stack_lvl+0x188/0x24e [ 2405.794025][T10219] ? show_regs_print_info+0x12/0x12 [ 2405.799233][T10219] ? load_image+0x400/0x400 [ 2405.803771][T10219] ? __lock_acquire+0x7d10/0x7d10 [ 2405.808829][T10219] should_fail_ex+0x399/0x4d0 [ 2405.813529][T10219] _copy_from_iter+0x1c0/0x1130 [ 2405.818398][T10219] ? __lock_acquire+0x7d10/0x7d10 [ 2405.823444][T10219] ? copyout_mc+0x110/0x110 [ 2405.827954][T10219] ? __virt_addr_valid+0x188/0x540 [ 2405.833081][T10219] ? __virt_addr_valid+0x188/0x540 [ 2405.838206][T10219] ? __virt_addr_valid+0x465/0x540 [ 2405.843334][T10219] ? __check_object_size+0x500/0xa40 [ 2405.848640][T10219] kernfs_fop_write_iter+0x1a0/0x520 [ 2405.853959][T10219] vfs_write+0x4b1/0xa30 [ 2405.858248][T10219] ? file_end_write+0x250/0x250 [ 2405.863117][T10219] ? __fget_files+0x43d/0x4b0 [ 2405.867820][T10219] ? __fdget_pos+0x2ae/0x360 [ 2405.872428][T10219] ? ksys_write+0x71/0x250 [ 2405.876859][T10219] ksys_write+0x14c/0x250 [ 2405.881208][T10219] ? __ia32_sys_read+0x80/0x80 [ 2405.885994][T10219] ? lockdep_hardirqs_on+0x94/0x140 [ 2405.891210][T10219] do_syscall_64+0x4c/0xa0 [ 2405.895637][T10219] ? clear_bhb_loop+0x60/0xb0 [ 2405.900329][T10219] ? clear_bhb_loop+0x60/0xb0 [ 2405.905021][T10219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2405.910976][T10219] RIP: 0033:0x7fb50979ce59 [ 2405.915411][T10219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2405.935026][T10219] RSP: 002b:00007fb50a5d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2405.943444][T10219] RAX: ffffffffffffffda RBX: 00007fb509a15fa0 RCX: 00007fb50979ce59 [ 2405.951420][T10219] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 000000000000000c [ 2405.959397][T10219] RBP: 00007fb50a5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2405.967394][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2405.975377][T10219] R13: 00007fb509a16038 R14: 00007fb509a15fa0 R15: 00007ffc69af2dc8 [ 2405.983389][T10219] [ 2406.026486][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.032866][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.515337][T10227] delete_channel: no stack [ 2407.057941][T10252] netlink: 'syz.0.12141': attribute type 2 has an invalid length. [ 2407.157402][T10252] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12141'. [ 2407.549495][T10250] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12140'. [ 2407.578758][T10250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2407.679783][T10263] netlink: 'syz.3.12146': attribute type 7 has an invalid length. [ 2407.724612][T10263] netlink: 208404 bytes leftover after parsing attributes in process `syz.3.12146'. [ 2407.756746][T10261] device syzkaller0 entered promiscuous mode [ 2409.976315][T10265] IPv6: Can't replace route, no match found [ 2411.904451][T10311] netlink: 'syz.0.12162': attribute type 28 has an invalid length. [ 2412.316782][T10331] netlink: 'syz.1.12170': attribute type 28 has an invalid length. [ 2412.342799][T10333] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12171'. [ 2412.976688][T10355] netlink: 'syz.3.12179': attribute type 28 has an invalid length. [ 2413.771697][T10375] netlink: 'syz.2.12186': attribute type 28 has an invalid length. [ 2413.926912][T10383] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12188'. [ 2413.991662][T10383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2414.575832][T10413] netlink: 'syz.2.12200': attribute type 10 has an invalid length. [ 2414.732730][T10417] netlink: 'syz.0.12201': attribute type 13 has an invalid length. [ 2414.751296][T10417] netlink: 'syz.0.12201': attribute type 58 has an invalid length. [ 2414.771497][T10417] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12201'. [ 2414.945310][T10424] netlink: 'syz.0.12205': attribute type 2 has an invalid length. [ 2414.965484][T10424] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.12205'. [ 2417.021268][T10495] netlink: 'syz.2.12236': attribute type 1 has an invalid length. [ 2417.049131][T10495] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.12236'. [ 2419.477441][T10540] netlink: 'syz.0.12253': attribute type 1 has an invalid length. [ 2419.516271][T10540] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.12253'. [ 2419.567766][T10542] IPv6: Can't replace route, no match found [ 2420.977220][T10578] netlink: 'syz.0.12267': attribute type 1 has an invalid length. [ 2421.110062][T10578] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.12267'. [ 2421.216424][T10588] netlink: 'syz.1.12272': attribute type 1 has an invalid length. [ 2421.247708][T10588] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.12272'. [ 2424.230987][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2424.243141][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2424.251399][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2424.261529][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2424.269246][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2424.278630][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2424.916940][T10654] netlink: 'syz.4.12296': attribute type 6 has an invalid length. [ 2424.935205][T10654] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12296'. [ 2425.285188][T10667] netlink: 'syz.2.12299': attribute type 6 has an invalid length. [ 2425.388397][T10643] chnl_net:caif_netlink_parms(): no params data found [ 2425.735200][T10643] bridge0: port 1(bridge_slave_0) entered blocking state [ 2425.750513][T10643] bridge0: port 1(bridge_slave_0) entered disabled state [ 2425.785262][T10643] device bridge_slave_0 entered promiscuous mode [ 2425.910991][ T7179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.258598][T10643] bridge0: port 2(bridge_slave_1) entered blocking state [ 2426.279963][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 2426.307847][T10643] device bridge_slave_1 entered promiscuous mode [ 2426.332198][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 2426.390789][ T7179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.533608][T10643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2426.656650][ T7179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.724533][T10643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2426.823389][ T7179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.850666][T10704] netlink: 'syz.3.12312': attribute type 8 has an invalid length. [ 2426.875742][T10704] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.12312'. [ 2426.906179][T10699] netlink: 'syz.1.12314': attribute type 2 has an invalid length. [ 2426.923195][T10699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12314'. [ 2426.959281][T10705] netlink: 'syz.3.12312': attribute type 3 has an invalid length. [ 2427.004814][T10643] team0: Port device team_slave_0 added [ 2427.058643][T10705] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12312'. [ 2427.080012][T10643] team0: Port device team_slave_1 added [ 2427.096563][T10702] netlink: 'syz.4.12315': attribute type 10 has an invalid length. [ 2427.216034][T10643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2427.232629][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2427.280484][T10643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2427.299732][T10643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2427.311717][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2427.366593][T10643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2427.566790][T10719] netlink: 'syz.4.12320': attribute type 7 has an invalid length. [ 2427.575571][T10643] device hsr_slave_0 entered promiscuous mode [ 2427.600297][T10719] netlink: 208404 bytes leftover after parsing attributes in process `syz.4.12320'. [ 2427.600951][T10643] device hsr_slave_1 entered promiscuous mode [ 2427.669830][T10643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2427.699153][T10643] Cannot create hsr debugfs directory [ 2427.720315][T10717] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12319'. [ 2427.770561][T10717] bridge_slave_1: default FDB implementation only supports local addresses [ 2427.890787][T10730] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.12324'. [ 2428.412160][T23135] Bluetooth: hci3: command 0x041b tx timeout [ 2429.210002][T10762] netlink: 'syz.4.12331': attribute type 2 has an invalid length. [ 2429.241882][T10762] netlink: 'syz.4.12331': attribute type 1 has an invalid length. [ 2429.466106][T10764] netlink: 'syz.4.12331': attribute type 6 has an invalid length. [ 2429.484313][T10764] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12331'. [ 2429.648057][T10772] netlink: 208404 bytes leftover after parsing attributes in process `syz.1.12334'. [ 2429.768535][T10770] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.12332'. [ 2430.492939][T23135] Bluetooth: hci3: command 0x040f tx timeout [ 2430.997553][T10643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2431.069674][T10643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2431.104904][T10643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2431.136290][T10643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2431.788074][T10643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2431.884447][ T7179] device hsr_slave_0 left promiscuous mode [ 2431.912504][ T7179] device hsr_slave_1 left promiscuous mode [ 2431.919157][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2431.961818][ T7179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2431.991684][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2432.004266][ T7179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2432.015724][ T7179] device bridge_slave_1 left promiscuous mode [ 2432.030266][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 2432.070924][T10837] validate_nla: 2 callbacks suppressed [ 2432.070967][T10837] netlink: 'syz.4.12349': attribute type 1 has an invalid length. [ 2432.096617][ T7179] device bridge_slave_0 left promiscuous mode [ 2432.116527][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 2432.134438][T10837] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.12349'. [ 2432.220433][ T7179] device veth1_macvtap left promiscuous mode [ 2432.234758][ T7179] device veth0_macvtap left promiscuous mode [ 2432.254041][ T7179] device veth0_vlan left promiscuous mode [ 2432.572314][T23135] Bluetooth: hci3: command 0x0419 tx timeout [ 2433.015210][ T7179] team0 (unregistering): Port device team_slave_1 removed [ 2433.056721][ T7179] team0 (unregistering): Port device team_slave_0 removed [ 2433.097410][ T7179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2433.140370][ T7179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2433.423846][ T7179] bond0 (unregistering): Released all slaves [ 2433.523749][T10812] netlink: 'syz.3.12344': attribute type 10 has an invalid length. [ 2433.566954][T10812] bond0: (slave netdevsim0): Releasing backup interface [ 2433.580680][T10643] 8021q: adding VLAN 0 to HW filter on device team0 [ 2433.609446][T10842] netlink: 'syz.1.12348': attribute type 10 has an invalid length. [ 2433.627072][T10842] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12348'. [ 2433.662070][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2433.682527][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2433.782373][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2433.793841][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2433.812895][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.820008][ T7169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2433.849182][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2433.860003][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2433.869602][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.876759][ T7169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2433.885959][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2433.914331][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2433.943057][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2433.990997][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2434.022095][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2434.067767][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2434.096523][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2434.143403][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2434.196917][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2434.215641][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2434.249530][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2434.278551][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2434.298402][T10643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2434.644738][T10875] FAULT_INJECTION: forcing a failure. [ 2434.644738][T10875] name failslab, interval 1, probability 0, space 0, times 0 [ 2434.697237][T10875] CPU: 0 PID: 10875 Comm: syz.4.12358 Not tainted syzkaller #0 [ 2434.704861][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2434.714951][T10875] Call Trace: [ 2434.718260][T10875] [ 2434.721220][T10875] dump_stack_lvl+0x188/0x24e [ 2434.725942][T10875] ? show_regs_print_info+0x12/0x12 [ 2434.731211][T10875] ? load_image+0x400/0x400 [ 2434.735756][T10875] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2434.741783][T10875] should_fail_ex+0x399/0x4d0 [ 2434.746499][T10875] should_failslab+0x5/0x20 [ 2434.751036][T10875] slab_pre_alloc_hook+0x59/0x310 [ 2434.756090][T10875] ? free_zapped_rcu+0x1f0/0x1f0 [ 2434.761069][T10875] kmem_cache_alloc+0x56/0x2f0 [ 2434.765857][T10875] ? __build_skb+0x2a/0x3c0 [ 2434.770406][T10875] __build_skb+0x2a/0x3c0 [ 2434.774760][T10875] build_skb+0x1e/0x230 [ 2434.778940][T10875] bpf_prog_test_run_skb+0x391/0x1890 [ 2434.784339][T10875] ? __fget_files+0x28/0x4b0 [ 2434.788960][T10875] ? cpu_online+0xa0/0xa0 [ 2434.793323][T10875] bpf_prog_test_run+0x31e/0x390 [ 2434.798288][T10875] __sys_bpf+0x62b/0x780 [ 2434.802548][T10875] ? bpf_link_show_fdinfo+0x380/0x380 [ 2434.807977][T10875] ? lock_chain_count+0x20/0x20 [ 2434.812858][T10875] __x64_sys_bpf+0x78/0x90 [ 2434.817296][T10875] do_syscall_64+0x4c/0xa0 [ 2434.821725][T10875] ? clear_bhb_loop+0x60/0xb0 [ 2434.826421][T10875] ? clear_bhb_loop+0x60/0xb0 [ 2434.831123][T10875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2434.837034][T10875] RIP: 0033:0x7f4b6819ce59 [ 2434.841472][T10875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2434.861097][T10875] RSP: 002b:00007f4b6901d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2434.869537][T10875] RAX: ffffffffffffffda RBX: 00007f4b68415fa0 RCX: 00007f4b6819ce59 [ 2434.877554][T10875] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 2434.885539][T10875] RBP: 00007f4b6901d090 R08: 0000000000000000 R09: 0000000000000000 [ 2434.893525][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2434.901503][T10875] R13: 00007f4b68416038 R14: 00007f4b68415fa0 R15: 00007ffcff035f28 [ 2434.909498][T10875] [ 2435.176686][T10884] netlink: 'syz.1.12359': attribute type 1 has an invalid length. [ 2435.214991][T10884] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.12359'. [ 2435.506650][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2435.519216][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2435.580386][T10643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2435.679961][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2435.700690][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2435.792491][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2435.801418][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2435.822616][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2435.844243][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2435.867421][T10643] device veth0_vlan entered promiscuous mode [ 2435.902926][T10643] device veth1_vlan entered promiscuous mode [ 2435.976093][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2435.986470][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2436.015779][T10643] device veth0_macvtap entered promiscuous mode [ 2436.054698][T10643] device veth1_macvtap entered promiscuous mode [ 2436.152852][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2436.202010][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.232162][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2436.269278][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.291098][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2436.319556][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.339847][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2436.373017][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.404888][T10643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2436.431739][T10905] netlink: 'syz.3.12364': attribute type 10 has an invalid length. [ 2436.460379][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2436.477750][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2436.506897][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2436.546276][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2436.579661][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2436.605436][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.652305][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2436.673090][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.685855][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2436.751951][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.770102][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2436.794293][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.826664][T10643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2436.863360][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2436.892309][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2436.918373][T10643] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.941236][T10643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.970794][T10643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2437.000164][T10643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2437.225909][ T7169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2437.254366][ T7169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2437.277471][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2437.334866][ T7905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2437.355171][ T7905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2437.375639][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2438.653305][ T4292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2438.664420][ T4292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2438.672712][T12251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2438.681635][T12251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2438.690345][T12251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2438.697718][T12251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2439.415983][T10968] chnl_net:caif_netlink_parms(): no params data found [ 2439.666935][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 2439.677664][T10968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2439.686448][T10968] device bridge_slave_0 entered promiscuous mode [ 2439.695763][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 2439.703173][T10968] bridge0: port 2(bridge_slave_1) entered disabled state [ 2439.711342][T10968] device bridge_slave_1 entered promiscuous mode [ 2439.744710][T10968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2439.757730][T10968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2439.806463][T10968] team0: Port device team_slave_0 added [ 2439.853560][T10968] team0: Port device team_slave_1 added [ 2439.954661][T10968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2439.989720][T10968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2440.126082][T10968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2440.227301][T10968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2440.260114][T10968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2440.341819][T10968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2440.732128][T23135] Bluetooth: hci2: command 0x0409 tx timeout [ 2440.774653][T11018] device lo entered promiscuous mode [ 2440.843241][T11013] delete_channel: no stack [ 2440.904180][T10968] device hsr_slave_0 entered promiscuous mode [ 2440.932205][T10968] device hsr_slave_1 entered promiscuous mode [ 2440.954920][T10968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2440.987901][T10968] Cannot create hsr debugfs directory [ 2441.190651][T11034] IPv6: Can't replace route, no match found [ 2441.539958][T10968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2441.651126][T11046] netlink: 'syz.4.12408': attribute type 28 has an invalid length. [ 2441.782856][T10968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2442.053388][T10968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2442.191644][T10968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2442.447917][T11069] device syzkaller0 entered promiscuous mode [ 2442.812330][T23135] Bluetooth: hci2: command 0x041b tx timeout [ 2443.671598][T11083] delete_channel: no stack [ 2444.892089][T23135] Bluetooth: hci2: command 0x040f tx timeout [ 2445.279503][T11084] netlink: 'syz.3.12422': attribute type 10 has an invalid length. [ 2445.302010][T11084] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 2445.394529][T10968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2445.416627][T10968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2445.456071][T10968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2445.478602][T10968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2445.611126][T11092] tun0: tun_chr_ioctl cmd 21731 [ 2445.766939][T11092] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12425'. [ 2445.794033][T11092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2446.126912][T11092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2446.344314][T11112] netlink: 'syz.4.12434': attribute type 28 has an invalid length. [ 2446.401404][T10968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2446.457137][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2446.499886][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2446.530944][T10968] 8021q: adding VLAN 0 to HW filter on device team0 [ 2446.625313][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2446.638761][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2446.648090][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.655267][ T7169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2446.665949][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2446.684501][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2446.712945][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2446.733632][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.740768][ T7169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2446.780170][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2446.790842][T11123] netlink: 'syz.4.12438': attribute type 28 has an invalid length. [ 2446.827975][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2446.854748][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2446.898765][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2446.923448][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2446.972847][T23135] Bluetooth: hci2: command 0x0419 tx timeout [ 2446.983229][T11128] netlink: 'syz.3.12440': attribute type 6 has an invalid length. [ 2447.000522][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2447.034867][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2447.077364][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2447.148521][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2447.169190][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2447.184615][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2447.208312][T10968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2447.490085][T11143] netlink: 'syz.4.12447': attribute type 28 has an invalid length. [ 2448.048202][T11167] netlink: 'syz.2.12453': attribute type 28 has an invalid length. [ 2448.113632][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2448.121181][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2448.152818][T10968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2448.245178][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2448.272894][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2448.358867][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2448.377424][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2448.403902][T10968] device veth0_vlan entered promiscuous mode [ 2448.422333][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2448.445280][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2448.474564][T10968] device veth1_vlan entered promiscuous mode [ 2448.543868][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2448.554885][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2448.592857][T10968] device veth0_macvtap entered promiscuous mode [ 2448.603598][T10968] device veth1_macvtap entered promiscuous mode [ 2448.656986][T10968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.684697][T10968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.707579][T10968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.743579][T10968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.760120][T10968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.773399][T10968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.784877][T10968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.798134][T10968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.808677][T10968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2448.820654][T10968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2448.833504][T10968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2448.956047][T11185] netlink: 'syz.4.12462': attribute type 28 has an invalid length. [ 2448.972578][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2449.001869][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2449.010843][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2449.027428][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2449.043545][T10968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2449.070775][T10968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2449.091954][T10968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2449.122598][T10968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2449.151986][T10968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2449.170937][T10968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2449.181583][T10968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2449.192345][T10968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2449.204064][T10968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2449.216348][T11193] netlink: 'syz.2.12464': attribute type 10 has an invalid length. [ 2449.226774][T11193] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.12464'. [ 2449.238593][T11195] netlink: 'syz.4.12466': attribute type 2 has an invalid length. [ 2449.263650][T11195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12466'. [ 2449.286688][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2449.297484][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2449.326010][T10968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.336088][T10968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.345700][T10968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.375420][T10968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.401614][T11198] netlink: 'syz.0.12465': attribute type 28 has an invalid length. [ 2449.636427][ T2196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2449.664483][ T2196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2449.701333][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2449.714945][T11210] netlink: 'syz.0.12470': attribute type 7 has an invalid length. [ 2449.729744][ T2196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2449.768173][T11210] netlink: 208404 bytes leftover after parsing attributes in process `syz.0.12470'. [ 2449.769442][ T2196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2449.819078][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2450.103083][T11222] netlink: 'syz.2.12474': attribute type 28 has an invalid length. [ 2450.117258][T11224] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.12375'. [ 2450.456024][T11231] device veth1_macvtap left promiscuous mode [ 2451.165381][T11247] netlink: 208404 bytes leftover after parsing attributes in process `syz.2.12484'. [ 2451.176432][ T4198] bond0: (slave syz_tun): Releasing backup interface [ 2451.358993][T23135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2451.368542][T23135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2451.378502][T23135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2451.386213][T23135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2451.406015][T23135] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2451.414299][T23135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2451.574582][T11250] chnl_net:caif_netlink_parms(): no params data found [ 2451.710105][T11262] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12489'. [ 2451.752782][T11271] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.12492'. [ 2451.827100][T11273] IPv6: Can't replace route, no match found [ 2451.905621][T11250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2451.921268][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 2451.978266][T11250] device bridge_slave_0 entered promiscuous mode [ 2452.001731][T11250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2452.030446][T11250] bridge0: port 2(bridge_slave_1) entered disabled state [ 2452.055696][T11250] device bridge_slave_1 entered promiscuous mode [ 2452.170581][T11250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2452.221709][T11250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2452.356332][T11250] team0: Port device team_slave_0 added [ 2452.398122][T11250] team0: Port device team_slave_1 added [ 2452.469582][T11250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2452.485301][T11270] validate_nla: 5 callbacks suppressed [ 2452.485350][T11270] netlink: 'syz.2.12491': attribute type 3 has an invalid length. [ 2452.496165][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2452.522417][T11270] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12491'. [ 2452.612136][T11250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2452.641097][T11250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2452.671926][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2452.722950][T11250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2452.750182][T11287] device syzkaller0 entered promiscuous mode [ 2452.848575][T11250] device hsr_slave_0 entered promiscuous mode [ 2452.881318][T11250] device hsr_slave_1 entered promiscuous mode [ 2452.893555][T11250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2452.931986][T11250] Cannot create hsr debugfs directory [ 2453.018388][T11298] netlink: 'syz.3.12501': attribute type 28 has an invalid length. [ 2453.203179][T11302] netlink: 'syz.0.12502': attribute type 12 has an invalid length. [ 2453.453331][T12251] Bluetooth: hci0: command 0x0409 tx timeout [ 2453.749147][T11250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2453.870113][T11310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2453.892998][T11310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2453.920998][T11310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2453.954804][T11310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2454.438054][T11250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2454.595562][T11250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2454.791832][T11250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2455.079461][T11337] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.12512'. [ 2455.186570][T11250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2455.316709][T11250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2455.353886][T11250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2455.385145][T11250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2455.530002][T11350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12520'. [ 2455.541996][T23135] Bluetooth: hci0: command 0x041b tx timeout [ 2455.684261][T11353] IPv6: Can't replace route, no match found [ 2455.773186][T11250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2455.822900][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2455.836749][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2455.886734][T11250] 8021q: adding VLAN 0 to HW filter on device team0 [ 2455.944043][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2455.962833][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2455.992587][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 2455.999714][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2456.058011][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2456.082847][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2456.112651][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 2456.119827][ T7905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2456.161340][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2456.176954][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2456.210430][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2456.257506][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2456.275180][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2456.308007][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2456.329518][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2456.373375][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2456.414641][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2456.438274][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2456.458331][T11368] FAULT_INJECTION: forcing a failure. [ 2456.458331][T11368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2456.483965][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2456.502070][T11368] CPU: 1 PID: 11368 Comm: syz.3.12527 Not tainted syzkaller #0 [ 2456.509694][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2456.519784][T11368] Call Trace: [ 2456.523089][T11368] [ 2456.523347][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2456.526046][T11368] dump_stack_lvl+0x188/0x24e [ 2456.538488][T11368] ? show_regs_print_info+0x12/0x12 [ 2456.543718][T11368] ? load_image+0x400/0x400 [ 2456.548260][T11368] ? __lock_acquire+0x7d10/0x7d10 [ 2456.553327][T11368] should_fail_ex+0x399/0x4d0 [ 2456.558036][T11368] _copy_to_user+0x2c/0x130 [ 2456.562580][T11368] bpf_test_finish+0x198/0x600 [ 2456.567393][T11368] ? dst_hold+0xb0/0xb0 [ 2456.571582][T11368] ? convert_skb_to___skb+0x420/0x420 [ 2456.577017][T11368] bpf_prog_test_run_skb+0x10e2/0x1890 [ 2456.582518][T11368] ? cpu_online+0xa0/0xa0 [ 2456.586859][T11368] bpf_prog_test_run+0x31e/0x390 [ 2456.591817][T11368] __sys_bpf+0x62b/0x780 [ 2456.596075][T11368] ? bpf_link_show_fdinfo+0x380/0x380 [ 2456.601471][T11368] ? lock_chain_count+0x20/0x20 [ 2456.606340][T11368] __x64_sys_bpf+0x78/0x90 [ 2456.610768][T11368] do_syscall_64+0x4c/0xa0 [ 2456.615194][T11368] ? clear_bhb_loop+0x60/0xb0 [ 2456.619918][T11368] ? clear_bhb_loop+0x60/0xb0 [ 2456.624629][T11368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2456.630546][T11368] RIP: 0033:0x7fb50979ce59 [ 2456.634977][T11368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2456.654599][T11368] RSP: 002b:00007fb50a5d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2456.663031][T11368] RAX: ffffffffffffffda RBX: 00007fb509a15fa0 RCX: 00007fb50979ce59 [ 2456.671021][T11368] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 2456.679013][T11368] RBP: 00007fb50a5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2456.687005][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2456.695024][T11368] R13: 00007fb509a16038 R14: 00007fb509a15fa0 R15: 00007ffc69af2dc8 [ 2456.703039][T11368] [ 2456.723709][T11250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2456.785648][T11370] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12529'. [ 2456.814685][T11370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2457.069705][T11377] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.12530'. [ 2457.599366][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2457.612173][T23135] Bluetooth: hci0: command 0x040f tx timeout [ 2457.618455][T30544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2457.657909][T11250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2458.120754][T11404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12538'. [ 2458.466505][T11409] IPv6: Can't replace route, no match found [ 2458.823916][T11414] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12540'. [ 2459.081802][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2459.101539][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2459.131076][T11250] device veth0_vlan entered promiscuous mode [ 2459.150560][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2459.160610][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2459.181843][T11250] device veth1_vlan entered promiscuous mode [ 2459.200425][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2459.220480][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2459.230528][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2459.256219][T11434] netlink: 'syz.3.12545': attribute type 28 has an invalid length. [ 2459.322484][T11250] device veth0_macvtap entered promiscuous mode [ 2459.343984][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2459.362409][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2459.383468][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2459.394934][T11250] device veth1_macvtap entered promiscuous mode [ 2459.405555][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2459.415409][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2459.435466][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2459.449127][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.460350][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2459.511682][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.548099][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2459.561502][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.576821][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2459.588744][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.606037][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2459.627698][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.649953][T11250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2459.682395][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2459.691384][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2459.692165][T23135] Bluetooth: hci0: command 0x0419 tx timeout [ 2459.755838][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2459.827441][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.847712][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2459.891960][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.901830][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2459.941952][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.962000][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2459.986854][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.997583][T11445] ================================================================== [ 2460.005753][T11445] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 2460.013632][T11445] Write of size 80 at addr ffff888055533e10 by task syz.3.12551/11445 [ 2460.021869][T11445] [ 2460.024248][T11445] CPU: 1 PID: 11445 Comm: syz.3.12551 Not tainted syzkaller #0 [ 2460.031842][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2460.042001][T11445] Call Trace: [ 2460.045300][T11445] [ 2460.048250][T11445] dump_stack_lvl+0x188/0x24e [ 2460.052956][T11445] ? __lock_acquire+0x7d10/0x7d10 [ 2460.056106][T11250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2460.058000][T11445] ? show_regs_print_info+0x12/0x12 [ 2460.070414][T11445] ? load_image+0x400/0x400 [ 2460.074958][T11445] ? __virt_addr_valid+0x465/0x540 [ 2460.080111][T11445] ? __bpf_get_stackid+0x6c9/0x920 [ 2460.085252][T11445] print_report+0xa8/0x210 [ 2460.089710][T11445] kasan_report+0x10b/0x140 [ 2460.094265][T11445] ? __bpf_get_stackid+0x6c9/0x920 [ 2460.099409][T11445] kasan_check_range+0x235/0x290 [ 2460.104380][T11445] ? __bpf_get_stackid+0x6c9/0x920 [ 2460.105428][T11250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.109512][T11445] memcpy+0x3c/0x60 [ 2460.122016][T11445] __bpf_get_stackid+0x6c9/0x920 [ 2460.126992][T11445] bpf_get_stackid_pe+0x33f/0x400 [ 2460.132047][T11445] bpf_prog_a448e89f4c9ad9d1+0x28/0x42 [ 2460.137535][T11445] bpf_overflow_handler+0x522/0x7c0 [ 2460.142752][T11445] ? bpf_overflow_handler+0xd9/0x7c0 [ 2460.148060][T11445] ? perf_swevent_overflow+0x230/0x230 [ 2460.153559][T11445] ? __perf_event_account_interrupt+0x187/0x280 [ 2460.159833][T11445] __perf_event_overflow+0x448/0x610 [ 2460.165139][T11445] perf_swevent_event+0x315/0x570 [ 2460.170182][T11445] ? perf_tp_event+0xc30/0xc30 [ 2460.174964][T11445] ___perf_sw_event+0x49e/0x6e0 [ 2460.179837][T11445] ? ___perf_sw_event+0x180/0x6e0 [ 2460.184881][T11445] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 2460.191314][T11445] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2460.197322][T11445] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2460.203324][T11445] ? lock_chain_count+0x20/0x20 [ 2460.208187][T11445] __perf_sw_event+0x135/0x260 [ 2460.212963][T11445] do_user_addr_fault+0xaea/0xb10 [ 2460.218005][T11445] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2460.223232][T11445] ? trace_hardirqs_off_finish+0x86/0x180 [ 2460.228972][T11445] exc_page_fault+0x60/0x100 [ 2460.233589][T11445] asm_exc_page_fault+0x22/0x30 [ 2460.238466][T11445] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 2460.244225][T11445] Code: c8 5b c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 a7 5b c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 8a 5b [ 2460.263935][T11445] RSP: 0018:ffffc90003f47ab0 EFLAGS: 00050287 [ 2460.270021][T11445] RAX: ffffffff81be1ff9 RBX: 0000000000001000 RCX: 0000000000080000 [ 2460.278003][T11445] RDX: ffffc9000dca1000 RSI: 000000000003b830 RDI: 000000000003b831 [ 2460.285978][T11445] RBP: 0000000000000000 R08: ffff888081853c00 R09: 0000000000000002 [ 2460.293975][T11445] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000139000 [ 2460.301952][T11445] R13: 0000000000000000 R14: 0000200000138000 R15: 0000200000138000 [ 2460.309928][T11445] ? fault_in_readable+0x139/0x1f0 [ 2460.315057][T11445] fault_in_iov_iter_readable+0xbb/0x2e0 [ 2460.320777][T11445] generic_perform_write+0x1f1/0x5c0 [ 2460.326082][T11445] ? generic_file_direct_write+0x330/0x330 [ 2460.331935][T11445] ? __file_remove_privs+0x5f0/0x5f0 [ 2460.337228][T11445] ? rwsem_write_trylock+0x135/0x1c0 [ 2460.342528][T11445] ? clear_nonspinnable+0x60/0x60 [ 2460.347570][T11445] ? generic_write_checks_count+0x3d9/0x4c0 [ 2460.353474][T11445] __generic_file_write_iter+0x148/0x2a0 [ 2460.359131][T11445] generic_file_write_iter+0xab/0x2e0 [ 2460.364530][T11445] vfs_write+0x4b1/0xa30 [ 2460.368803][T11445] ? file_end_write+0x250/0x250 [ 2460.373673][T11445] ? __fget_files+0x43d/0x4b0 [ 2460.378378][T11445] ? __fdget_pos+0x2ae/0x360 [ 2460.382994][T11445] ? ksys_write+0x71/0x250 [ 2460.387439][T11445] ksys_write+0x14c/0x250 [ 2460.391783][T11445] ? __ia32_sys_read+0x80/0x80 [ 2460.396569][T11445] ? lockdep_hardirqs_on+0x94/0x140 [ 2460.401777][T11445] do_syscall_64+0x4c/0xa0 [ 2460.406201][T11445] ? clear_bhb_loop+0x60/0xb0 [ 2460.410904][T11445] ? clear_bhb_loop+0x60/0xb0 [ 2460.415606][T11445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2460.421523][T11445] RIP: 0033:0x7fb50979ce59 [ 2460.425958][T11445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2460.445597][T11445] RSP: 002b:00007fb50a5d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2460.454033][T11445] RAX: ffffffffffffffda RBX: 00007fb509a15fa0 RCX: 00007fb50979ce59 [ 2460.462033][T11445] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000009 [ 2460.470021][T11445] RBP: 00007fb509832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2460.478008][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2460.485995][T11445] R13: 00007fb509a16038 R14: 00007fb509a15fa0 R15: 00007ffc69af2dc8 [ 2460.493987][T11445] [ 2460.497012][T11445] [ 2460.499351][T11445] Allocated by task 11445: [ 2460.503834][T11445] kasan_set_track+0x4b/0x70 [ 2460.508445][T11445] __kasan_kmalloc+0x8e/0xa0 [ 2460.513052][T11445] __kmalloc_node+0xb0/0x240 [ 2460.517659][T11445] bpf_map_area_alloc+0x47/0xe0 [ 2460.522522][T11445] prealloc_elems_and_freelist+0x86/0x1c0 [ 2460.528279][T11445] stack_map_alloc+0x390/0x520 [ 2460.533053][T11445] map_create+0x534/0x1000 [ 2460.537487][T11445] __sys_bpf+0x38b/0x780 [ 2460.541745][T11445] __x64_sys_bpf+0x78/0x90 [ 2460.546177][T11445] do_syscall_64+0x4c/0xa0 [ 2460.550600][T11445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2460.556509][T11445] [ 2460.558840][T11445] Last potentially related work creation: [ 2460.564568][T11445] kasan_save_stack+0x3a/0x60 [ 2460.569263][T11445] __kasan_record_aux_stack+0xb2/0xc0 [ 2460.574648][T11445] call_rcu+0x14f/0x990 [ 2460.578824][T11445] nf_unregister_net_hooks+0xc7/0x130 [ 2460.584220][T11445] cleanup_net+0x591/0xba0 [ 2460.588677][T11445] process_one_work+0x8a2/0x1160 [ 2460.593694][T11445] worker_thread+0xaa2/0x1270 [ 2460.598399][T11445] kthread+0x29d/0x330 [ 2460.602472][T11445] ret_from_fork+0x1f/0x30 [ 2460.606946][T11445] [ 2460.609281][T11445] The buggy address belongs to the object at ffff888055533e00 [ 2460.609281][T11445] which belongs to the cache kmalloc-cg-64 of size 64 [ 2460.623513][T11445] The buggy address is located 16 bytes inside of [ 2460.623513][T11445] 64-byte region [ffff888055533e00, ffff888055533e40) [ 2460.636643][T11445] [ 2460.638972][T11445] The buggy address belongs to the physical page: [ 2460.645430][T11445] page:ffffea0001554cc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888055533580 pfn:0x55533 [ 2460.656914][T11445] memcg:ffff8880286a4401 [ 2460.661164][T11445] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 2460.668747][T11445] raw: 00fff00000000200 ffffea0001a23900 dead000000000005 ffff888017442780 [ 2460.677347][T11445] raw: ffff888055533580 000000008020001f 00000001ffffffff ffff8880286a4401 [ 2460.685930][T11445] page dumped because: kasan: bad access detected [ 2460.692348][T11445] page_owner tracks the page as allocated [ 2460.698062][T11445] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 13576, tgid 13576 (kworker/u4:12), ts 1713949653988, free_ts 1713887832947 [ 2460.716915][T11445] post_alloc_hook+0x173/0x1a0 [ 2460.721700][T11445] get_page_from_freelist+0x1a1e/0x1ab0 [ 2460.727279][T11445] __alloc_pages+0x1ec/0x4f0 [ 2460.731876][T11445] alloc_slab_page+0x5d/0x160 [ 2460.736569][T11445] new_slab+0x87/0x2c0 [ 2460.740646][T11445] ___slab_alloc+0xbc6/0x1240 [ 2460.745344][T11445] __kmem_cache_alloc_node+0x1a0/0x260 [ 2460.750806][T11445] __kmalloc_node+0xa0/0x240 [ 2460.755413][T11445] kvmalloc_node+0x6c/0x180 [ 2460.759931][T11445] __nf_hook_entries_try_shrink+0x310/0x6d0 [ 2460.765846][T11445] __nf_unregister_net_hook+0x4e1/0x6e0 [ 2460.771412][T11445] nf_unregister_net_hooks+0xc7/0x130 [ 2460.776815][T11445] nf_ct_netns_put+0x369/0x510 [ 2460.781665][T11445] nf_conncount_destroy+0x3d/0x150 [ 2460.786842][T11445] ovs_ct_exit+0x98/0x200 [ 2460.791207][T11445] ovs_exit_net+0xe9/0x7a0 [ 2460.795655][T11445] page last free stack trace: [ 2460.800352][T11445] free_unref_page_prepare+0x8b4/0x9a0 [ 2460.805833][T11445] free_unref_page_list+0xbb/0x8e0 [ 2460.810952][T11445] release_pages+0x1fa6/0x2220 [ 2460.815768][T11445] tlb_flush_mmu+0x105/0x220 [ 2460.820368][T11445] tlb_finish_mmu+0xf5/0x220 [ 2460.824967][T11445] exit_mmap+0x384/0x960 [ 2460.829227][T11445] __mmput+0x118/0x3c0 [ 2460.833301][T11445] exit_mm+0x25a/0x360 [ 2460.837377][T11445] do_exit+0x905/0x2480 [ 2460.841540][T11445] do_group_exit+0x217/0x2d0 [ 2460.846146][T11445] __x64_sys_exit_group+0x3b/0x40 [ 2460.851186][T11445] do_syscall_64+0x4c/0xa0 [ 2460.855623][T11445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2460.861532][T11445] [ 2460.863870][T11445] Memory state around the buggy address: [ 2460.869515][T11445] ffff888055533d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2460.877592][T11445] ffff888055533d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2460.885658][T11445] >ffff888055533e00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 2460.893720][T11445] ^ [ 2460.899108][T11445] ffff888055533e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2460.907169][T11445] ffff888055533f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2460.915250][T11445] ================================================================== [ 2460.923328][T11445] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2460.930521][T11445] CPU: 1 PID: 11445 Comm: syz.3.12551 Not tainted syzkaller #0 [ 2460.938065][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2460.948131][T11445] Call Trace: [ 2460.951422][T11445] [ 2460.954361][T11445] dump_stack_lvl+0x188/0x24e [ 2460.959064][T11445] ? memcpy+0x3c/0x60 [ 2460.963059][T11445] ? show_regs_print_info+0x12/0x12 [ 2460.968261][T11445] ? load_image+0x400/0x400 [ 2460.972806][T11445] panic+0x2e5/0x730 [ 2460.976714][T11445] ? bpf_jit_dump+0xd0/0xd0 [ 2460.981227][T11445] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2460.987139][T11445] ? _raw_spin_unlock+0x40/0x40 [ 2460.992005][T11445] ? print_memory_metadata+0x314/0x400 [ 2460.997521][T11445] check_panic_on_warn+0x80/0xa0 [ 2461.002500][T11445] ? __bpf_get_stackid+0x6c9/0x920 [ 2461.007622][T11445] end_report+0x66/0x110 [ 2461.011879][T11445] kasan_report+0x118/0x140 [ 2461.016403][T11445] ? __bpf_get_stackid+0x6c9/0x920 [ 2461.021538][T11445] kasan_check_range+0x235/0x290 [ 2461.026495][T11445] ? __bpf_get_stackid+0x6c9/0x920 [ 2461.031619][T11445] memcpy+0x3c/0x60 [ 2461.035439][T11445] __bpf_get_stackid+0x6c9/0x920 [ 2461.040391][T11445] bpf_get_stackid_pe+0x33f/0x400 [ 2461.045471][T11445] bpf_prog_a448e89f4c9ad9d1+0x28/0x42 [ 2461.050946][T11445] bpf_overflow_handler+0x522/0x7c0 [ 2461.056154][T11445] ? bpf_overflow_handler+0xd9/0x7c0 [ 2461.061442][T11445] ? perf_swevent_overflow+0x230/0x230 [ 2461.066911][T11445] ? __perf_event_account_interrupt+0x187/0x280 [ 2461.073173][T11445] __perf_event_overflow+0x448/0x610 [ 2461.078477][T11445] perf_swevent_event+0x315/0x570 [ 2461.083541][T11445] ? perf_tp_event+0xc30/0xc30 [ 2461.088329][T11445] ___perf_sw_event+0x49e/0x6e0 [ 2461.093193][T11445] ? ___perf_sw_event+0x180/0x6e0 [ 2461.098235][T11445] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 2461.104701][T11445] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2461.110699][T11445] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2461.116720][T11445] ? lock_chain_count+0x20/0x20 [ 2461.121585][T11445] __perf_sw_event+0x135/0x260 [ 2461.126367][T11445] do_user_addr_fault+0xaea/0xb10 [ 2461.131401][T11445] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2461.136611][T11445] ? trace_hardirqs_off_finish+0x86/0x180 [ 2461.142345][T11445] exc_page_fault+0x60/0x100 [ 2461.146954][T11445] asm_exc_page_fault+0x22/0x30 [ 2461.151831][T11445] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 2461.157566][T11445] Code: c8 5b c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 a7 5b c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 8a 5b [ 2461.177175][T11445] RSP: 0018:ffffc90003f47ab0 EFLAGS: 00050287 [ 2461.183264][T11445] RAX: ffffffff81be1ff9 RBX: 0000000000001000 RCX: 0000000000080000 [ 2461.191244][T11445] RDX: ffffc9000dca1000 RSI: 000000000003b830 RDI: 000000000003b831 [ 2461.199225][T11445] RBP: 0000000000000000 R08: ffff888081853c00 R09: 0000000000000002 [ 2461.207204][T11445] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000139000 [ 2461.215179][T11445] R13: 0000000000000000 R14: 0000200000138000 R15: 0000200000138000 [ 2461.223152][T11445] ? fault_in_readable+0x139/0x1f0 [ 2461.228294][T11445] fault_in_iov_iter_readable+0xbb/0x2e0 [ 2461.233941][T11445] generic_perform_write+0x1f1/0x5c0 [ 2461.239248][T11445] ? generic_file_direct_write+0x330/0x330 [ 2461.245093][T11445] ? __file_remove_privs+0x5f0/0x5f0 [ 2461.250385][T11445] ? rwsem_write_trylock+0x135/0x1c0 [ 2461.255683][T11445] ? clear_nonspinnable+0x60/0x60 [ 2461.260721][T11445] ? generic_write_checks_count+0x3d9/0x4c0 [ 2461.266653][T11445] __generic_file_write_iter+0x148/0x2a0 [ 2461.272310][T11445] generic_file_write_iter+0xab/0x2e0 [ 2461.277707][T11445] vfs_write+0x4b1/0xa30 [ 2461.281976][T11445] ? file_end_write+0x250/0x250 [ 2461.286849][T11445] ? __fget_files+0x43d/0x4b0 [ 2461.291553][T11445] ? __fdget_pos+0x2ae/0x360 [ 2461.296168][T11445] ? ksys_write+0x71/0x250 [ 2461.300607][T11445] ksys_write+0x14c/0x250 [ 2461.304960][T11445] ? __ia32_sys_read+0x80/0x80 [ 2461.309753][T11445] ? lockdep_hardirqs_on+0x94/0x140 [ 2461.314967][T11445] do_syscall_64+0x4c/0xa0 [ 2461.319391][T11445] ? clear_bhb_loop+0x60/0xb0 [ 2461.324089][T11445] ? clear_bhb_loop+0x60/0xb0 [ 2461.328788][T11445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2461.334702][T11445] RIP: 0033:0x7fb50979ce59 [ 2461.339130][T11445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2461.358754][T11445] RSP: 002b:00007fb50a5d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2461.367178][T11445] RAX: ffffffffffffffda RBX: 00007fb509a15fa0 RCX: 00007fb50979ce59 [ 2461.375161][T11445] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000009 [ 2461.383141][T11445] RBP: 00007fb509832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2461.391114][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2461.399093][T11445] R13: 00007fb509a16038 R14: 00007fb509a15fa0 R15: 00007ffc69af2dc8 [ 2461.407092][T11445] [ 2461.410705][T11445] Kernel Offset: disabled [ 2461.415037][T11445] Rebooting in 86400 seconds..