last executing test programs: 27.643636666s ago: executing program 0 (id=2758): socket$kcm(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r0 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/48], 0xfdef) write$cgroup_subtree(r7, &(0x7f0000000780)=ANY=[@ANYRES32], 0xffffffea) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x5, 0x80, 0x9, 0x4, 0x40, 0x7, 0x0, 0xaf, 0xa000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x230, 0x4, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 26.318217231s ago: executing program 2 (id=2768): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4000000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100fea0020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdb, 0xdb, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0xa, 0x4}, {0xd, 0x1}]}, @enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x1, [{0xf, 0xe, 0x5}, {0x2, 0x6, 0x1000}]}, @datasec={0x9, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x2, 0xff3}, {0x1, 0x8, 0xa9}, {0x3, 0x2c00, 0x4b}, {0x1, 0x2, 0x4}, {0x1, 0x7, 0x2}, {0x4, 0x8d, 0x10}], "b00ef3"}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x3e, [{0x2, 0x4, 0x11}, {0x8, 0x3, 0x1}]}, @const={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0xfa, 0x1000, 0x1, 0x7}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) ioctl$TUNGETVNETLE(r5, 0x8953, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7}, 0x36) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000340)=""/233}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa000000000000711038000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) 26.300842942s ago: executing program 0 (id=2769): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000580)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0, 0x0, &(0x7f0000001180)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x8c, 0x0, 0x4, [0x10000]}, @timestamp_addr={0x44, 0x24, 0x2b, 0x1, 0x6, [{@multicast2, 0xf1}, {@multicast2, 0x7}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}]}}}], 0x40}, 0x80) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r10, &(0x7f0000000140), 0x2, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000300)=r11, 0x12) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)="463871d8d9440aa4e305fdf3e5f4a36355ab91aa4381b772150a87e8c683da7fac3e50d75fa01340355a8cb4eb0b4efc043708f09f03e896b589b71dbbe54ddd3b55e5ccd544f52983a44ff9d2dc3328f4f9a922f4b09e6e38ce600e0aee322a9bb91daa5f4c738f2a896343ee41f89d12d7c06ffff0c5e4da87b66d2e1afc3e89e5e0c3bc3b1c4b101faf6a4a9e2cac8827870cb986f121e72976fdeabf1857580d3ca53d3470acbe0dfaf0a4", 0xad}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r3, r5, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r2, r3, r6, 0xffffffffffffffff, r5, r3, r1, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r9, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x158, 0x80}, 0x40000) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x8946, &(0x7f0000000080)) 25.363150877s ago: executing program 3 (id=2776): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x322f7f2843671a4a}, 0xc1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYRES8=r5, @ANYRES8=r8], 0x12) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="8510000000000000580700000000e9cb170000ffc810a612af7bf3aefab8d21fc954bec38c9788856fa97e108299568223154019b60f0eabab8dfb52214c015862dfa5e3b81b657bcd7203ed46a9d70df4669771483caae9a1ec6fc05ba5cfcff6bccfaf00"/125], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', r3, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r0, r9], &(0x7f0000000640)=[{0x2, 0x1, 0x10, 0x4}, {0x0, 0x4, 0x7}, {0x0, 0x4, 0x6, 0x3}], 0x10, 0xffffffb8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0xffffffffffffffc5}, 0x48) 25.291486429s ago: executing program 2 (id=2777): socket$kcm(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r0 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/48], 0xfdef) write$cgroup_subtree(r7, &(0x7f0000000780)=ANY=[@ANYRES32], 0xffffffea) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x5, 0x80, 0x9, 0x4, 0x40, 0x7, 0x0, 0xaf, 0xa000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x230, 0x4, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 25.191925061s ago: executing program 0 (id=2778): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbc0cfb91c82f4a9164dda5e67a46d8e841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d72166cb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f00000002c0)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xff97, &(0x7f0000000dc0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20040080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 24.908928928s ago: executing program 3 (id=2779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xec, &(0x7f00000004c0)=""/236}, 0x80) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x400, 0x5, 0x2, 0x2201, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xc}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9a}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0xb, &(0x7f0000000180)=""/11, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r2, 0x1, r3, r4, r5], &(0x7f0000000640)=[{0x1, 0x4, 0x5, 0x8}], 0x10, 0x8}, 0x94) 24.824562641s ago: executing program 0 (id=2780): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x2d89dd4bd82bb7f6, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100)=r1, 0x129) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 24.659980395s ago: executing program 3 (id=2781): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 24.547773029s ago: executing program 3 (id=2782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300feffbf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.362634303s ago: executing program 3 (id=2783): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1a, 0x3, 0x800, &(0x7f0000000280)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000011006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) 24.346357343s ago: executing program 1 (id=2784): socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0xfffffffffffffe5f, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000140)="373e17aefc020107020010010000000a000000", 0x13}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x801c581f, 0x0) socket$kcm(0xa, 0x6, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0xf, 0x3, 0x2) (async) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r3, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) (async) socket$kcm(0xf, 0x3, 0x2) (async) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0xfffffffffffffe5f, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000140)="373e17aefc020107020010010000000a000000", 0x13}], 0x2}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x801c581f, 0x0) (async) 24.251914316s ago: executing program 2 (id=2785): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r1, 0x1c) 24.159777969s ago: executing program 3 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) (async, rerun: 64) socketpair(0x11, 0x1, 0x0, &(0x7f0000000000)) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x8, 0x8, &(0x7f00000006c0)="0005000000d9707b", &(0x7f0000000700)=""/8, 0x8, 0x0, 0x0, 0xf, 0x0, 0x0}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000018c0)={@cgroup=r4, r5, 0x2f, 0x201c, 0x4}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'dummy0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0x5}, 0x94) (async, rerun: 64) socket$kcm(0x2, 0x1000000000000005, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012042) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 24.159672859s ago: executing program 1 (id=2787): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069116400000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000eb83cf99630000050000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x1a, &(0x7f0000000200)=""/26, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 24.072294741s ago: executing program 2 (id=2788): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f00000002c0)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xff97, &(0x7f0000000dc0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20040080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 24.005099552s ago: executing program 1 (id=2789): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5d34, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335df, @perf_bp={0x0, 0x4}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce0, 0x0, 0x3ffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1004, 0x6dd700000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYRES16, @ANYRESOCT=r4, @ANYRESDEC=r0, @ANYBLOB="54d2a688eaf9f13dd0ce3032922ce950fcc37e43286a1e1dac66652455b9e6a04d5101d96367ae61be5f4dc95e89297ecbb7b66ddd530e7e1b57074e2228dfab6173ae1cbe3f96133581bee10fd853ad057debf84ab8b688eaa2f76cd1395b8343b0b60e6693853209f8121c9e0d9102e3310282e43397a19fa4b2944f406e458a1a14b199b61330cc4f0d2e7c24596af74ba029050f"], 0x4a8d) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r2, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x35, &(0x7f00000005c0), 0x4) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="ed6f8e6e67a1201b00000000000078455c630001", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000500"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1e2, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x19, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000e000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018490000080000000000000000000000cd0d300004000000180000000100ffff000000000200000018170000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x7, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x9, 0xa, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[r1, r0, r0], &(0x7f0000000c80)=[{0x7, 0x5, 0x2, 0xc}, {0x4, 0x3, 0x6}, {0x0, 0x1, 0x6, 0x5}, {0x3, 0x5, 0xa, 0x6}], 0x10, 0x8}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a0, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r9, 0x2b, 0x1, 0x8, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)}, 0x40) 23.483450066s ago: executing program 0 (id=2790): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23.483206746s ago: executing program 1 (id=2791): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@qipcrtr={0x2a, 0xfffffffd}, 0x80, 0x0}, 0x20040010) 23.482900736s ago: executing program 1 (id=2792): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x68002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001900000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.817041536s ago: executing program 0 (id=2793): socket$kcm(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r0 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/48], 0xfdef) write$cgroup_subtree(r7, &(0x7f0000000780)=ANY=[@ANYRES32], 0xffffffea) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x5, 0x80, 0x9, 0x4, 0x40, 0x7, 0x0, 0xaf, 0xa000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x230, 0x4, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 14.728415609s ago: executing program 2 (id=2794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000013bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.728183609s ago: executing program 1 (id=2795): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x13, 0x1, 0x0, 0xfd, 0x0, 0x9, 0x601b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x1, @perf_config_ext={0xff, 0xca29}, 0x108002, 0xcdd, 0x9, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1000005}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) (async) recvmsg$unix(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)="f7ed", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 14.728018538s ago: executing program 2 (id=2796): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r1, 0x1c) 8.175180813s ago: executing program 32 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) (async, rerun: 64) socketpair(0x11, 0x1, 0x0, &(0x7f0000000000)) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x8, 0x8, &(0x7f00000006c0)="0005000000d9707b", &(0x7f0000000700)=""/8, 0x8, 0x0, 0x0, 0xf, 0x0, 0x0}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000018c0)={@cgroup=r4, r5, 0x2f, 0x201c, 0x4}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'dummy0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0x5}, 0x94) (async, rerun: 64) socket$kcm(0x2, 0x1000000000000005, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012042) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.130718624s ago: executing program 33 (id=2793): socket$kcm(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r0 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/48], 0xfdef) write$cgroup_subtree(r7, &(0x7f0000000780)=ANY=[@ANYRES32], 0xffffffea) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x5, 0x80, 0x9, 0x4, 0x40, 0x7, 0x0, 0xaf, 0xa000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x230, 0x4, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 71.401398ms ago: executing program 34 (id=2795): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x13, 0x1, 0x0, 0xfd, 0x0, 0x9, 0x601b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x1, @perf_config_ext={0xff, 0xca29}, 0x108002, 0xcdd, 0x9, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1000005}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) (async) recvmsg$unix(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)="f7ed", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 0s ago: executing program 35 (id=2796): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r1, 0x1c) kernel console output (not intermixed with test programs): 938310][T11782] R13: 00007f0f53e16038 R14: 00007f0f53e15fa0 R15: 00007fff6d23dfa8 [ 464.946316][T11782] [ 465.360165][T11807] netlink: 'syz.2.1750': attribute type 17 has an invalid length. [ 465.378737][T11807] netlink: 'syz.2.1750': attribute type 16 has an invalid length. [ 465.399145][T11807] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1750'. [ 465.536268][T11812] FAULT_INJECTION: forcing a failure. [ 465.536268][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 465.558172][T11812] CPU: 1 PID: 11812 Comm: syz.1.1751 Not tainted syzkaller #0 [ 465.565730][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.575840][T11812] Call Trace: [ 465.579165][T11812] [ 465.582137][T11812] dump_stack_lvl+0x18c/0x250 [ 465.586881][T11812] ? show_regs_print_info+0x20/0x20 [ 465.592154][T11812] ? load_image+0x420/0x420 [ 465.596707][T11812] ? __might_sleep+0xe0/0xe0 [ 465.601340][T11812] ? __lock_acquire+0x7d40/0x7d40 [ 465.606414][T11812] should_fail_ex+0x39d/0x4d0 [ 465.611141][T11812] should_failslab+0x9/0x20 [ 465.615695][T11812] slab_pre_alloc_hook+0x59/0x310 [ 465.620778][T11812] ? __get_vm_area_node+0x125/0x370 [ 465.626023][T11812] __kmem_cache_alloc_node+0x53/0x250 [ 465.631446][T11812] ? __get_vm_area_node+0x125/0x370 [ 465.636681][T11812] kmalloc_node_trace+0x26/0xe0 [ 465.641572][T11812] __get_vm_area_node+0x125/0x370 [ 465.646648][T11812] __vmalloc_node_range+0x36e/0x1330 [ 465.651986][T11812] ? netlink_sendmsg+0x602/0xbf0 [ 465.657017][T11812] ? netlink_insert+0x109f/0x13a0 [ 465.662114][T11812] ? netlink_data_ready+0x10/0x10 [ 465.667190][T11812] ? free_vm_area+0x50/0x50 [ 465.671762][T11812] ? netlink_sendmsg+0x602/0xbf0 [ 465.676743][T11812] vmalloc+0x79/0x90 [ 465.680718][T11812] ? netlink_sendmsg+0x602/0xbf0 [ 465.685709][T11812] netlink_sendmsg+0x602/0xbf0 [ 465.690531][T11812] ? netlink_getsockopt+0x590/0x590 [ 465.695778][T11812] ? aa_sock_msg_perm+0x94/0x150 [ 465.700781][T11812] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 465.706113][T11812] ? security_socket_sendmsg+0x80/0xa0 [ 465.711627][T11812] ? netlink_getsockopt+0x590/0x590 [ 465.716867][T11812] ____sys_sendmsg+0x5ba/0x960 [ 465.721689][T11812] ? __asan_memset+0x22/0x40 [ 465.726320][T11812] ? __sys_sendmsg_sock+0x30/0x30 [ 465.731389][T11812] ? __import_iovec+0x5f2/0x850 [ 465.736299][T11812] ? import_iovec+0x73/0xa0 [ 465.740851][T11812] ___sys_sendmsg+0x2a6/0x360 [ 465.745583][T11812] ? get_pid_task+0x20/0x1e0 [ 465.750247][T11812] ? __sys_sendmsg+0x2a0/0x2a0 [ 465.755066][T11812] ? __lock_acquire+0x7d40/0x7d40 [ 465.760155][T11812] __se_sys_sendmsg+0x1c2/0x2b0 [ 465.765049][T11812] ? __x64_sys_sendmsg+0x80/0x80 [ 465.770041][T11812] ? lockdep_hardirqs_on+0x98/0x150 [ 465.775354][T11812] do_syscall_64+0x55/0xa0 [ 465.779806][T11812] ? clear_bhb_loop+0x40/0x90 [ 465.784536][T11812] ? clear_bhb_loop+0x40/0x90 [ 465.789289][T11812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.795224][T11812] RIP: 0033:0x7f0f53b9cdd9 [ 465.799673][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.819348][T11812] RSP: 002b:00007f0f54aa0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.827804][T11812] RAX: ffffffffffffffda RBX: 00007f0f53e15fa0 RCX: 00007f0f53b9cdd9 [ 465.835815][T11812] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000003 [ 465.843823][T11812] RBP: 00007f0f54aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 465.851829][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.859829][T11812] R13: 00007f0f53e16038 R14: 00007f0f53e15fa0 R15: 00007fff6d23dfa8 [ 465.867845][T11812] [ 465.920536][T11812] syz.1.1751: vmalloc error: size 60672, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 465.946868][T11812] CPU: 1 PID: 11812 Comm: syz.1.1751 Not tainted syzkaller #0 [ 465.954415][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.964509][T11812] Call Trace: [ 465.967842][T11812] [ 465.970812][T11812] dump_stack_lvl+0x18c/0x250 [ 465.975549][T11812] ? show_regs_print_info+0x20/0x20 [ 465.980803][T11812] ? load_image+0x420/0x420 [ 465.985367][T11812] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 465.991834][T11812] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 465.998376][T11812] warn_alloc+0x246/0x340 [ 466.002755][T11812] ? __get_vm_area_node+0x125/0x370 [ 466.008004][T11812] ? zone_watermark_ok_safe+0x230/0x230 [ 466.013599][T11812] ? rcu_is_watching+0x15/0xb0 [ 466.018418][T11812] ? __get_vm_area_node+0x356/0x370 [ 466.023673][T11812] __vmalloc_node_range+0x393/0x1330 [ 466.029003][T11812] ? netlink_insert+0x109f/0x13a0 [ 466.034097][T11812] ? netlink_data_ready+0x10/0x10 [ 466.039354][T11812] ? free_vm_area+0x50/0x50 [ 466.043915][T11812] ? netlink_sendmsg+0x602/0xbf0 [ 466.048905][T11812] vmalloc+0x79/0x90 [ 466.052858][T11812] ? netlink_sendmsg+0x602/0xbf0 [ 466.057841][T11812] netlink_sendmsg+0x602/0xbf0 [ 466.062702][T11812] ? netlink_getsockopt+0x590/0x590 [ 466.068058][T11812] ? aa_sock_msg_perm+0x94/0x150 [ 466.073040][T11812] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 466.078367][T11812] ? security_socket_sendmsg+0x80/0xa0 [ 466.083869][T11812] ? netlink_getsockopt+0x590/0x590 [ 466.089100][T11812] ____sys_sendmsg+0x5ba/0x960 [ 466.093895][T11812] ? __asan_memset+0x22/0x40 [ 466.098515][T11812] ? __sys_sendmsg_sock+0x30/0x30 [ 466.103569][T11812] ? __import_iovec+0x5f2/0x850 [ 466.108565][T11812] ? import_iovec+0x73/0xa0 [ 466.113098][T11812] ___sys_sendmsg+0x2a6/0x360 [ 466.117800][T11812] ? get_pid_task+0x20/0x1e0 [ 466.122414][T11812] ? __sys_sendmsg+0x2a0/0x2a0 [ 466.127229][T11812] ? __lock_acquire+0x7d40/0x7d40 [ 466.132301][T11812] __se_sys_sendmsg+0x1c2/0x2b0 [ 466.137193][T11812] ? __x64_sys_sendmsg+0x80/0x80 [ 466.142174][T11812] ? lockdep_hardirqs_on+0x98/0x150 [ 466.147406][T11812] do_syscall_64+0x55/0xa0 [ 466.151844][T11812] ? clear_bhb_loop+0x40/0x90 [ 466.156560][T11812] ? clear_bhb_loop+0x40/0x90 [ 466.161261][T11812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.167194][T11812] RIP: 0033:0x7f0f53b9cdd9 [ 466.171636][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.191272][T11812] RSP: 002b:00007f0f54aa0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.199706][T11812] RAX: ffffffffffffffda RBX: 00007f0f53e15fa0 RCX: 00007f0f53b9cdd9 [ 466.207706][T11812] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000003 [ 466.215694][T11812] RBP: 00007f0f54aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 466.223687][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.231682][T11812] R13: 00007f0f53e16038 R14: 00007f0f53e15fa0 R15: 00007fff6d23dfa8 [ 466.239971][T11812] [ 466.279884][T11812] Mem-Info: [ 466.283070][T11812] active_anon:13201 inactive_anon:0 isolated_anon:0 [ 466.283070][T11812] active_file:18802 inactive_file:40082 isolated_file:0 [ 466.283070][T11812] unevictable:768 dirty:219 writeback:0 [ 466.283070][T11812] slab_reclaimable:10575 slab_unreclaimable:95165 [ 466.283070][T11812] mapped:30271 shmem:7568 pagetables:587 [ 466.283070][T11812] sec_pagetables:0 bounce:0 [ 466.283070][T11812] kernel_misc_reclaimable:0 [ 466.283070][T11812] free:1328538 free_pcp:12441 free_cma:0 [ 466.360188][T11812] Node 0 active_anon:54804kB inactive_anon:0kB active_file:75208kB inactive_file:160128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122984kB dirty:876kB writeback:0kB shmem:30636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10768kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no [ 466.399829][T11812] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 466.439956][T11812] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.479256][T11812] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 466.485333][T11812] Node 0 DMA32 free:1399116kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:56368kB inactive_anon:0kB active_file:75208kB inactive_file:159296kB unevictable:1536kB writepending:876kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:32404kB local_pcp:17752kB free_cma:0kB [ 466.529892][T11812] lowmem_reserve[]: 0 0 0 0 0 [ 466.534786][T11812] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.569834][T11812] lowmem_reserve[]: 0 0 0 0 0 [ 466.574659][T11812] Node 1 Normal free:3896144kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:5472kB free_cma:0kB [ 466.611020][T11812] lowmem_reserve[]: 0 0 0 0 0 [ 466.615981][T11812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 466.639826][T11812] Node 0 DMA32: 776*4kB (U) 1298*8kB (UE) 975*16kB (UE) 356*32kB (UM) 401*64kB (UME) 414*128kB (UM) 229*256kB (UM) 91*512kB (UME) 48*1024kB (UME) 19*2048kB (UM) 265*4096kB (UM) = 1397856kB [ 466.670107][T11812] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 466.708807][T11812] Node 1 Normal: 226*4kB (U) 51*8kB (UE) 41*16kB (UE) 141*32kB (UE) 42*64kB (UME) 9*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3896144kB [ 466.809809][T11812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.833981][T11812] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 466.869971][T11812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.883499][T11817] netlink: 'syz.2.1753': attribute type 29 has an invalid length. [ 466.902480][T11817] netlink: 'syz.2.1753': attribute type 29 has an invalid length. [ 466.910021][T11812] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 466.934058][T11820] netlink: 'syz.2.1753': attribute type 29 has an invalid length. [ 466.940070][T11812] 69002 total pagecache pages [ 466.946887][T11812] 0 pages in swap cache [ 466.956926][T11812] Free swap = 124996kB [ 466.963653][T11819] FAULT_INJECTION: forcing a failure. [ 466.963653][T11819] name failslab, interval 1, probability 0, space 0, times 0 [ 466.981167][T11812] Total swap = 124996kB [ 466.984120][T11817] netlink: 'syz.2.1753': attribute type 29 has an invalid length. [ 466.985373][T11812] 2097051 pages RAM [ 466.985384][T11812] 0 pages HighMem/MovableOnly [ 467.005740][T11819] CPU: 1 PID: 11819 Comm: syz.3.1754 Not tainted syzkaller #0 [ 467.013408][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.023539][T11819] Call Trace: [ 467.026869][T11819] [ 467.029841][T11819] dump_stack_lvl+0x18c/0x250 [ 467.034586][T11819] ? show_regs_print_info+0x20/0x20 [ 467.039875][T11819] ? load_image+0x420/0x420 [ 467.044453][T11819] ? __might_sleep+0xe0/0xe0 [ 467.049101][T11819] ? __lock_acquire+0x7d40/0x7d40 [ 467.054194][T11819] should_fail_ex+0x39d/0x4d0 [ 467.058937][T11819] should_failslab+0x9/0x20 [ 467.063506][T11819] slab_pre_alloc_hook+0x59/0x310 [ 467.068587][T11819] ? __lock_acquire+0x7d40/0x7d40 [ 467.068619][T11819] kmem_cache_alloc_node+0x60/0x320 [ 467.079044][T11819] ? __alloc_skb+0x103/0x2c0 [ 467.083694][T11819] __alloc_skb+0x103/0x2c0 [ 467.088183][T11819] netlink_sendmsg+0x66a/0xbf0 [ 467.093015][T11819] ? netlink_getsockopt+0x590/0x590 [ 467.098286][T11819] ? aa_sock_msg_perm+0x94/0x150 [ 467.103278][T11819] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 467.108613][T11819] ? security_socket_sendmsg+0x80/0xa0 [ 467.114123][T11819] ? netlink_getsockopt+0x590/0x590 [ 467.119361][T11819] ____sys_sendmsg+0x5ba/0x960 [ 467.124163][T11819] ? __asan_memset+0x22/0x40 [ 467.128792][T11819] ? __sys_sendmsg_sock+0x30/0x30 [ 467.133842][T11819] ? __import_iovec+0x5f2/0x850 [ 467.138738][T11819] ? import_iovec+0x73/0xa0 [ 467.143261][T11819] ___sys_sendmsg+0x2a6/0x360 [ 467.147965][T11819] ? get_pid_task+0x20/0x1e0 [ 467.152584][T11819] ? __sys_sendmsg+0x2a0/0x2a0 [ 467.157392][T11819] ? __lock_acquire+0x7d40/0x7d40 [ 467.162465][T11819] __se_sys_sendmsg+0x1c2/0x2b0 [ 467.167346][T11819] ? __x64_sys_sendmsg+0x80/0x80 [ 467.172322][T11819] ? lockdep_hardirqs_on+0x98/0x150 [ 467.177548][T11819] do_syscall_64+0x55/0xa0 [ 467.182002][T11819] ? clear_bhb_loop+0x40/0x90 [ 467.186713][T11819] ? clear_bhb_loop+0x40/0x90 [ 467.191423][T11819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.197357][T11819] RIP: 0033:0x7fde6a59cdd9 [ 467.201802][T11819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.221440][T11819] RSP: 002b:00007fde6b414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.229879][T11819] RAX: ffffffffffffffda RBX: 00007fde6a815fa0 RCX: 00007fde6a59cdd9 [ 467.237903][T11819] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 467.245898][T11819] RBP: 00007fde6b414090 R08: 0000000000000000 R09: 0000000000000000 [ 467.253889][T11819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.261897][T11819] R13: 00007fde6a816038 R14: 00007fde6a815fa0 R15: 00007ffc258637c8 [ 467.269907][T11819] [ 467.273563][T11812] 416927 pages reserved [ 467.277759][T11812] 0 pages cma reserved [ 467.746159][T11837] netlink: 'syz.1.1761': attribute type 10 has an invalid length. [ 467.763610][T11836] netlink: 'syz.1.1761': attribute type 10 has an invalid length. [ 468.218140][T11856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.225498][T11856] IPv6: NLM_F_CREATE should be set when creating new route [ 468.232855][T11856] IPv6: NLM_F_CREATE should be set when creating new route [ 468.240182][T11856] IPv6: NLM_F_CREATE should be set when creating new route [ 469.172679][T11894] FAULT_INJECTION: forcing a failure. [ 469.172679][T11894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.219465][T11894] CPU: 0 PID: 11894 Comm: syz.3.1779 Not tainted syzkaller #0 [ 469.227016][T11894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.237120][T11894] Call Trace: [ 469.240440][T11894] [ 469.243409][T11894] dump_stack_lvl+0x18c/0x250 [ 469.248163][T11894] ? show_regs_print_info+0x20/0x20 [ 469.253421][T11894] ? load_image+0x420/0x420 [ 469.258004][T11894] ? __might_fault+0xaa/0x120 [ 469.262728][T11894] ? __lock_acquire+0x7d40/0x7d40 [ 469.267819][T11894] should_fail_ex+0x39d/0x4d0 [ 469.272568][T11894] _copy_from_iter+0x1d9/0x12e0 [ 469.277481][T11894] ? slab_post_alloc_hook+0x8a/0x4b0 [ 469.282830][T11894] ? __virt_addr_valid+0x18c/0x540 [ 469.288027][T11894] ? __lock_acquire+0x7d40/0x7d40 [ 469.293133][T11894] ? rcu_is_watching+0x15/0xb0 [ 469.297960][T11894] ? copyout_mc+0x70/0x70 [ 469.302343][T11894] ? __virt_addr_valid+0x18c/0x540 [ 469.307507][T11894] ? __virt_addr_valid+0x18c/0x540 [ 469.312671][T11894] ? __virt_addr_valid+0x469/0x540 [ 469.317905][T11894] ? __check_object_size+0x506/0xa20 [ 469.323252][T11894] netlink_sendmsg+0x76b/0xbf0 [ 469.328098][T11894] ? netlink_getsockopt+0x590/0x590 [ 469.333363][T11894] ? aa_sock_msg_perm+0x94/0x150 [ 469.338364][T11894] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 469.343706][T11894] ? security_socket_sendmsg+0x80/0xa0 [ 469.349234][T11894] ? netlink_getsockopt+0x590/0x590 [ 469.354502][T11894] ____sys_sendmsg+0x5ba/0x960 [ 469.359337][T11894] ? __asan_memset+0x22/0x40 [ 469.363993][T11894] ? __sys_sendmsg_sock+0x30/0x30 [ 469.369070][T11894] ? __import_iovec+0x5f2/0x850 [ 469.373974][T11894] ? import_iovec+0x73/0xa0 [ 469.378529][T11894] ___sys_sendmsg+0x2a6/0x360 [ 469.383247][T11894] ? get_pid_task+0x20/0x1e0 [ 469.387892][T11894] ? __sys_sendmsg+0x2a0/0x2a0 [ 469.392728][T11894] ? __lock_acquire+0x7d40/0x7d40 [ 469.397816][T11894] __se_sys_sendmsg+0x1c2/0x2b0 [ 469.402715][T11894] ? __x64_sys_sendmsg+0x80/0x80 [ 469.407714][T11894] ? lockdep_hardirqs_on+0x98/0x150 [ 469.412970][T11894] do_syscall_64+0x55/0xa0 [ 469.417448][T11894] ? clear_bhb_loop+0x40/0x90 [ 469.422178][T11894] ? clear_bhb_loop+0x40/0x90 [ 469.426927][T11894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.432869][T11894] RIP: 0033:0x7fde6a59cdd9 [ 469.437322][T11894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.456983][T11894] RSP: 002b:00007fde6b414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.465459][T11894] RAX: ffffffffffffffda RBX: 00007fde6a815fa0 RCX: 00007fde6a59cdd9 [ 469.473508][T11894] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 469.481541][T11894] RBP: 00007fde6b414090 R08: 0000000000000000 R09: 0000000000000000 [ 469.489576][T11894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.497613][T11894] R13: 00007fde6a816038 R14: 00007fde6a815fa0 R15: 00007ffc258637c8 [ 469.505660][T11894] [ 469.573617][T11896] netlink: 'syz.2.1780': attribute type 10 has an invalid length. [ 469.602604][T11896] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1780'. [ 469.819302][T11904] netlink: 'syz.3.1782': attribute type 21 has an invalid length. [ 469.828601][T11904] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1782'. [ 469.842869][T11904] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 470.043275][T11912] tap0: tun_chr_ioctl cmd 35108 [ 470.639538][T11928] FAULT_INJECTION: forcing a failure. [ 470.639538][T11928] name failslab, interval 1, probability 0, space 0, times 0 [ 470.670368][T11928] CPU: 1 PID: 11928 Comm: syz.2.1790 Not tainted syzkaller #0 [ 470.677920][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.688034][T11928] Call Trace: [ 470.691360][T11928] [ 470.694337][T11928] dump_stack_lvl+0x18c/0x250 [ 470.699089][T11928] ? show_regs_print_info+0x20/0x20 [ 470.704357][T11928] ? load_image+0x420/0x420 [ 470.708925][T11928] ? __might_sleep+0xe0/0xe0 [ 470.713574][T11928] ? __lock_acquire+0x7d40/0x7d40 [ 470.718658][T11928] should_fail_ex+0x39d/0x4d0 [ 470.723403][T11928] should_failslab+0x9/0x20 [ 470.727988][T11928] slab_pre_alloc_hook+0x59/0x310 [ 470.733075][T11928] ? __inet_diag_dump_start+0x8b/0x9f0 [ 470.738614][T11928] __kmem_cache_alloc_node+0x53/0x250 [ 470.744051][T11928] ? __inet_diag_dump_start+0x8b/0x9f0 [ 470.749579][T11928] kmalloc_trace+0x2a/0xe0 [ 470.754062][T11928] __inet_diag_dump_start+0x8b/0x9f0 [ 470.759407][T11928] ? netlink_lookup+0x30/0x200 [ 470.764225][T11928] ? netlink_lookup+0x30/0x200 [ 470.769056][T11928] __netlink_dump_start+0x4a9/0x810 [ 470.774315][T11928] inet_diag_handler_cmd+0x1e1/0x2c0 [ 470.779669][T11928] ? inet_diag_unregister+0xb0/0xb0 [ 470.784929][T11928] ? inet_diag_handler_get_info+0x7a0/0x7a0 [ 470.790876][T11928] ? inet_diag_dump_start+0x20/0x20 [ 470.796126][T11928] ? inet_diag_dump+0x50/0x50 [ 470.800859][T11928] ? sock_diag_lock_handler+0x19/0x280 [ 470.806385][T11928] ? sock_diag_lock_handler+0x19/0x280 [ 470.811905][T11928] ? inet_diag_unregister+0xb0/0xb0 [ 470.817154][T11928] sock_diag_rcv_msg+0x3d8/0x600 [ 470.822139][T11928] netlink_rcv_skb+0x241/0x4d0 [ 470.826965][T11928] ? sock_diag_bind+0xb0/0xb0 [ 470.831691][T11928] ? netlink_ack+0x1180/0x1180 [ 470.836518][T11928] ? __lock_acquire+0x7d40/0x7d40 [ 470.841585][T11928] ? net_generic+0x1e/0x240 [ 470.846134][T11928] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.851383][T11928] sock_diag_rcv+0x2a/0x40 [ 470.855845][T11928] netlink_unicast+0x751/0x8d0 [ 470.860664][T11928] netlink_sendmsg+0x8d0/0xbf0 [ 470.865506][T11928] ? netlink_getsockopt+0x590/0x590 [ 470.870761][T11928] ? aa_sock_msg_perm+0x94/0x150 [ 470.875748][T11928] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 470.881079][T11928] ? security_socket_sendmsg+0x80/0xa0 [ 470.886592][T11928] ? netlink_getsockopt+0x590/0x590 [ 470.891855][T11928] ____sys_sendmsg+0x5ba/0x960 [ 470.896678][T11928] ? __asan_memset+0x22/0x40 [ 470.901331][T11928] ? __sys_sendmsg_sock+0x30/0x30 [ 470.906404][T11928] ? __import_iovec+0x5f2/0x850 [ 470.911351][T11928] ? import_iovec+0x73/0xa0 [ 470.915908][T11928] ___sys_sendmsg+0x2a6/0x360 [ 470.920635][T11928] ? get_pid_task+0x20/0x1e0 [ 470.925276][T11928] ? __sys_sendmsg+0x2a0/0x2a0 [ 470.930108][T11928] ? __lock_acquire+0x7d40/0x7d40 [ 470.935209][T11928] __se_sys_sendmsg+0x1c2/0x2b0 [ 470.940121][T11928] ? __x64_sys_sendmsg+0x80/0x80 [ 470.945110][T11928] ? lockdep_hardirqs_on+0x98/0x150 [ 470.950358][T11928] do_syscall_64+0x55/0xa0 [ 470.954812][T11928] ? clear_bhb_loop+0x40/0x90 [ 470.959541][T11928] ? clear_bhb_loop+0x40/0x90 [ 470.964279][T11928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.970226][T11928] RIP: 0033:0x7efde919cdd9 [ 470.974702][T11928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.994367][T11928] RSP: 002b:00007efdea12d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.002843][T11928] RAX: ffffffffffffffda RBX: 00007efde9415fa0 RCX: 00007efde919cdd9 [ 471.010860][T11928] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 471.018883][T11928] RBP: 00007efdea12d090 R08: 0000000000000000 R09: 0000000000000000 [ 471.026899][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.034913][T11928] R13: 00007efde9416038 R14: 00007efde9415fa0 R15: 00007fff10a4a438 [ 471.042949][T11928] [ 471.336498][T11946] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1796'. [ 472.205799][T11969] FAULT_INJECTION: forcing a failure. [ 472.205799][T11969] name failslab, interval 1, probability 0, space 0, times 0 [ 472.219238][T11969] CPU: 0 PID: 11969 Comm: syz.0.1803 Not tainted syzkaller #0 [ 472.226766][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.236861][T11969] Call Trace: [ 472.240188][T11969] [ 472.243157][T11969] dump_stack_lvl+0x18c/0x250 [ 472.247909][T11969] ? show_regs_print_info+0x20/0x20 [ 472.253169][T11969] ? load_image+0x420/0x420 [ 472.257732][T11969] ? __might_sleep+0xe0/0xe0 [ 472.262373][T11969] ? __lock_acquire+0x7d40/0x7d40 [ 472.267449][T11969] should_fail_ex+0x39d/0x4d0 [ 472.272187][T11969] should_failslab+0x9/0x20 [ 472.276733][T11969] slab_pre_alloc_hook+0x59/0x310 [ 472.281804][T11969] ? __inet_diag_dump_start+0x8b/0x9f0 [ 472.287295][T11969] __kmem_cache_alloc_node+0x53/0x250 [ 472.292699][T11969] ? __inet_diag_dump_start+0x8b/0x9f0 [ 472.298196][T11969] kmalloc_trace+0x2a/0xe0 [ 472.302701][T11969] __inet_diag_dump_start+0x8b/0x9f0 [ 472.308016][T11969] ? netlink_lookup+0x30/0x200 [ 472.312803][T11969] ? netlink_lookup+0x30/0x200 [ 472.317594][T11969] __netlink_dump_start+0x4a9/0x810 [ 472.322828][T11969] inet_diag_handler_cmd+0x1e1/0x2c0 [ 472.328153][T11969] ? inet_diag_unregister+0xb0/0xb0 [ 472.333387][T11969] ? inet_diag_handler_get_info+0x7a0/0x7a0 [ 472.339316][T11969] ? inet_diag_dump_start+0x20/0x20 [ 472.344545][T11969] ? inet_diag_dump+0x50/0x50 [ 472.349252][T11969] ? sock_diag_lock_handler+0x19/0x280 [ 472.354732][T11969] ? sock_diag_lock_handler+0x19/0x280 [ 472.360215][T11969] ? inet_diag_unregister+0xb0/0xb0 [ 472.365445][T11969] sock_diag_rcv_msg+0x3d8/0x600 [ 472.370408][T11969] netlink_rcv_skb+0x241/0x4d0 [ 472.375205][T11969] ? sock_diag_bind+0xb0/0xb0 [ 472.379910][T11969] ? netlink_ack+0x1180/0x1180 [ 472.384728][T11969] ? __lock_acquire+0x7d40/0x7d40 [ 472.389817][T11969] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.395045][T11969] sock_diag_rcv+0x2a/0x40 [ 472.399493][T11969] netlink_unicast+0x751/0x8d0 [ 472.404300][T11969] netlink_sendmsg+0x8d0/0xbf0 [ 472.409095][T11969] ? netlink_getsockopt+0x590/0x590 [ 472.414320][T11969] ? aa_sock_msg_perm+0x94/0x150 [ 472.419282][T11969] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 472.424602][T11969] ? security_socket_sendmsg+0x80/0xa0 [ 472.430089][T11969] ? netlink_getsockopt+0x590/0x590 [ 472.435325][T11969] ____sys_sendmsg+0x5ba/0x960 [ 472.440112][T11969] ? __asan_memset+0x22/0x40 [ 472.444733][T11969] ? __sys_sendmsg_sock+0x30/0x30 [ 472.449777][T11969] ? __import_iovec+0x5f2/0x850 [ 472.454656][T11969] ? import_iovec+0x73/0xa0 [ 472.459191][T11969] ___sys_sendmsg+0x2a6/0x360 [ 472.463895][T11969] ? __sys_sendmsg+0x2a0/0x2a0 [ 472.468711][T11969] ? trace_call_bpf+0xc3/0x6c0 [ 472.473578][T11969] __se_sys_sendmsg+0x1c2/0x2b0 [ 472.478460][T11969] ? __x64_sys_sendmsg+0x80/0x80 [ 472.483442][T11969] ? lockdep_hardirqs_on+0x98/0x150 [ 472.488683][T11969] do_syscall_64+0x55/0xa0 [ 472.493113][T11969] ? clear_bhb_loop+0x40/0x90 [ 472.497806][T11969] ? clear_bhb_loop+0x40/0x90 [ 472.502508][T11969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.508423][T11969] RIP: 0033:0x7f9d5c19cdd9 [ 472.512890][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.532519][T11969] RSP: 002b:00007f9d5d0f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.540956][T11969] RAX: ffffffffffffffda RBX: 00007f9d5c415fa0 RCX: 00007f9d5c19cdd9 [ 472.548945][T11969] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 472.556941][T11969] RBP: 00007f9d5d0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 472.564955][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.572969][T11969] R13: 00007f9d5c416038 R14: 00007f9d5c415fa0 R15: 00007ffdb857a998 [ 472.580972][T11969] [ 472.597732][T11954] wg2: entered promiscuous mode [ 472.604265][T11954] wg2: entered allmulticast mode [ 472.611588][T11964] netlink: 'syz.1.1802': attribute type 10 has an invalid length. [ 472.650494][T11964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1802'. [ 472.716228][T11964] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 472.846349][T11976] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.1805'. [ 472.897714][T11976] openvswitch: netlink: IP tunnel dst address not specified [ 473.234908][T11986] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 473.655901][T12004] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1813'. [ 473.956426][T12012] sctp: [Deprecated]: syz.1.1815 (pid 12012) Use of int in max_burst socket option deprecated. [ 473.956426][T12012] Use struct sctp_assoc_value instead [ 474.046834][T12012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1815'. [ 474.490195][T12028] netlink: 'syz.1.1822': attribute type 9 has an invalid length. [ 474.508698][T12028] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1822'. [ 474.585355][T12034] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1823'. [ 474.834435][T12043] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 474.859850][T12043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1827'. [ 474.872164][T12043] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 474.880501][T12043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1827'. [ 475.795489][T12071] netlink: 'syz.2.1837': attribute type 10 has an invalid length. [ 475.804957][T12071] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1837'. [ 476.171358][T12077] netlink: 'syz.1.1838': attribute type 11 has an invalid length. [ 476.265714][ T7474] tipc: Subscription rejected, illegal request [ 476.612523][T12090] netlink: 'syz.1.1842': attribute type 4 has an invalid length. [ 476.650013][T12089] netlink: 15902 bytes leftover after parsing attributes in process `syz.1.1842'. [ 476.665353][T12090] netlink: 15902 bytes leftover after parsing attributes in process `syz.1.1842'. [ 477.295302][T12114] FAULT_INJECTION: forcing a failure. [ 477.295302][T12114] name failslab, interval 1, probability 0, space 0, times 0 [ 477.353087][T12114] CPU: 1 PID: 12114 Comm: syz.3.1847 Not tainted syzkaller #0 [ 477.360655][T12114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 477.370791][T12114] Call Trace: [ 477.374122][T12114] [ 477.377111][T12114] dump_stack_lvl+0x18c/0x250 [ 477.381854][T12114] ? show_regs_print_info+0x20/0x20 [ 477.387109][T12114] ? load_image+0x420/0x420 [ 477.391676][T12114] ? __might_sleep+0xe0/0xe0 [ 477.396324][T12114] ? __lock_acquire+0x7d40/0x7d40 [ 477.401426][T12114] should_fail_ex+0x39d/0x4d0 [ 477.406177][T12114] should_failslab+0x9/0x20 [ 477.410742][T12114] slab_pre_alloc_hook+0x59/0x310 [ 477.415855][T12114] ? __request_module+0x2ed/0x600 [ 477.420927][T12114] ? __request_module+0x2ed/0x600 [ 477.425995][T12114] __kmem_cache_alloc_node+0x53/0x250 [ 477.431455][T12114] ? __request_module+0x2ed/0x600 [ 477.436531][T12114] __kmalloc_node_track_caller+0xa2/0x230 [ 477.442312][T12114] kstrdup+0x3b/0x80 [ 477.446279][T12114] __request_module+0x2ed/0x600 [ 477.451207][T12114] ? module_enforce_rwx_sections+0x150/0x150 [ 477.457252][T12114] ? rcu_is_watching+0x15/0xb0 [ 477.462076][T12114] __inet_diag_dump+0x173/0x380 [ 477.467000][T12114] netlink_dump+0x747/0xe50 [ 477.471561][T12114] ? netlink_lookup+0x200/0x200 [ 477.476478][T12114] ? __kasan_kmalloc+0x8f/0xa0 [ 477.481299][T12114] ? __inet_diag_dump_start+0x886/0x9f0 [ 477.486913][T12114] ? netlink_lookup+0x30/0x200 [ 477.491739][T12114] __netlink_dump_start+0x5f1/0x810 [ 477.497006][T12114] inet_diag_handler_cmd+0x1e1/0x2c0 [ 477.502362][T12114] ? inet_diag_unregister+0xb0/0xb0 [ 477.507643][T12114] ? inet_diag_handler_get_info+0x7a0/0x7a0 [ 477.513608][T12114] ? inet_diag_dump_start+0x20/0x20 [ 477.518956][T12114] ? inet_diag_dump+0x50/0x50 [ 477.523701][T12114] ? sock_diag_lock_handler+0x19/0x280 [ 477.529228][T12114] ? sock_diag_lock_handler+0x19/0x280 [ 477.534745][T12114] ? inet_diag_unregister+0xb0/0xb0 [ 477.540006][T12114] sock_diag_rcv_msg+0x3d8/0x600 [ 477.544996][T12114] netlink_rcv_skb+0x241/0x4d0 [ 477.549928][T12114] ? sock_diag_bind+0xb0/0xb0 [ 477.554686][T12114] ? netlink_ack+0x1180/0x1180 [ 477.559530][T12114] ? __lock_acquire+0x7d40/0x7d40 [ 477.564619][T12114] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.569877][T12114] sock_diag_rcv+0x2a/0x40 [ 477.574343][T12114] netlink_unicast+0x751/0x8d0 [ 477.579228][T12114] netlink_sendmsg+0x8d0/0xbf0 [ 477.584249][T12114] ? netlink_getsockopt+0x590/0x590 [ 477.589536][T12114] ? aa_sock_msg_perm+0x94/0x150 [ 477.594537][T12114] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 477.599875][T12114] ? security_socket_sendmsg+0x80/0xa0 [ 477.605409][T12114] ? netlink_getsockopt+0x590/0x590 [ 477.610686][T12114] ____sys_sendmsg+0x5ba/0x960 [ 477.615519][T12114] ? __asan_memset+0x22/0x40 [ 477.620167][T12114] ? __sys_sendmsg_sock+0x30/0x30 [ 477.625236][T12114] ? __import_iovec+0x5f2/0x850 [ 477.630141][T12114] ? import_iovec+0x73/0xa0 [ 477.634695][T12114] ___sys_sendmsg+0x2a6/0x360 [ 477.639430][T12114] ? __sys_sendmsg+0x2a0/0x2a0 [ 477.644261][T12114] ? trace_call_bpf+0xc3/0x6c0 [ 477.649112][T12114] __se_sys_sendmsg+0x1c2/0x2b0 [ 477.654027][T12114] ? __x64_sys_sendmsg+0x80/0x80 [ 477.659033][T12114] ? lockdep_hardirqs_on+0x98/0x150 [ 477.664289][T12114] do_syscall_64+0x55/0xa0 [ 477.668756][T12114] ? clear_bhb_loop+0x40/0x90 [ 477.673523][T12114] ? clear_bhb_loop+0x40/0x90 [ 477.678257][T12114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.684197][T12114] RIP: 0033:0x7fde6a59cdd9 [ 477.688657][T12114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.708316][T12114] RSP: 002b:00007fde6b414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.716888][T12114] RAX: ffffffffffffffda RBX: 00007fde6a815fa0 RCX: 00007fde6a59cdd9 [ 477.724928][T12114] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 477.732949][T12114] RBP: 00007fde6b414090 R08: 0000000000000000 R09: 0000000000000000 [ 477.740973][T12114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.748996][T12114] R13: 00007fde6a816038 R14: 00007fde6a815fa0 R15: 00007ffc258637c8 [ 477.757047][T12114] [ 477.800105][T12119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1849'. [ 478.123264][T12126] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1851'. [ 478.431533][T12136] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 479.050319][T12153] FAULT_INJECTION: forcing a failure. [ 479.050319][T12153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.068680][T12153] CPU: 0 PID: 12153 Comm: syz.2.1860 Not tainted syzkaller #0 [ 479.076241][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.086350][T12153] Call Trace: [ 479.089678][T12153] [ 479.092655][T12153] dump_stack_lvl+0x18c/0x250 [ 479.097401][T12153] ? show_regs_print_info+0x20/0x20 [ 479.102658][T12153] ? load_image+0x420/0x420 [ 479.107219][T12153] ? __lock_acquire+0x7d40/0x7d40 [ 479.112308][T12153] ? snprintf+0xe9/0x140 [ 479.116603][T12153] should_fail_ex+0x39d/0x4d0 [ 479.121338][T12153] _copy_to_user+0x2f/0xa0 [ 479.125834][T12153] simple_read_from_buffer+0xe7/0x150 [ 479.131274][T12153] proc_fail_nth_read+0x1e8/0x260 [ 479.136368][T12153] ? proc_fault_inject_write+0x360/0x360 [ 479.142088][T12153] ? fsnotify_perm+0x271/0x5e0 [ 479.146923][T12153] ? proc_fault_inject_write+0x360/0x360 [ 479.152624][T12153] vfs_read+0x28b/0x970 [ 479.156864][T12153] ? kernel_read+0x1e0/0x1e0 [ 479.161521][T12153] ? __fget_files+0x28/0x4b0 [ 479.166174][T12153] ? __fget_files+0x28/0x4b0 [ 479.170832][T12153] ? __fget_files+0x43d/0x4b0 [ 479.175574][T12153] ? __fdget_pos+0x2a3/0x330 [ 479.180243][T12153] ? ksys_read+0x75/0x260 [ 479.184648][T12153] ksys_read+0x150/0x260 [ 479.188963][T12153] ? vfs_write+0x990/0x990 [ 479.193441][T12153] ? lockdep_hardirqs_on+0x98/0x150 [ 479.198714][T12153] do_syscall_64+0x55/0xa0 [ 479.203192][T12153] ? clear_bhb_loop+0x40/0x90 [ 479.207942][T12153] ? clear_bhb_loop+0x40/0x90 [ 479.212702][T12153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.218653][T12153] RIP: 0033:0x7efde915d60e [ 479.223125][T12153] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.242780][T12153] RSP: 002b:00007efdea12cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.251261][T12153] RAX: ffffffffffffffda RBX: 00007efdea12d6c0 RCX: 00007efde915d60e [ 479.259295][T12153] RDX: 000000000000000f RSI: 00007efdea12d0a0 RDI: 0000000000000006 [ 479.267332][T12153] RBP: 00007efdea12d090 R08: 0000000000000000 R09: 0000000000000000 [ 479.275356][T12153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.283390][T12153] R13: 00007efde9416038 R14: 00007efde9415fa0 R15: 00007fff10a4a438 [ 479.291429][T12153] [ 479.532962][T12168] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1864'. [ 479.736391][T12170] netlink: 'syz.0.1866': attribute type 10 has an invalid length. [ 479.756692][T12170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1866'. [ 479.784694][T12170] ipvlan1: entered promiscuous mode [ 479.792289][T12170] ipvlan1: entered allmulticast mode [ 479.798191][T12170] veth0_vlan: entered allmulticast mode [ 479.849176][T12170] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 479.908979][T12175] delete_channel: no stack [ 481.207378][T12211] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1876'. [ 481.249325][T12208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.271226][T12208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.297967][T12208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.309448][T12208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.512317][T12221] netlink: 'syz.0.1880': attribute type 39 has an invalid length. [ 483.093100][T12246] netlink: 'syz.0.1889': attribute type 153 has an invalid length. [ 483.104025][T12246] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1889'. [ 483.158836][T12248] tap0: tun_chr_ioctl cmd 1074025680 [ 483.675351][T12270] netlink: 'syz.2.1896': attribute type 2 has an invalid length. [ 483.714044][T12270] netlink: 156788 bytes leftover after parsing attributes in process `syz.2.1896'. [ 483.740140][T12277] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1898'. [ 483.909414][T12286] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 483.955535][T12286] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1906'. [ 484.001215][T12288] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1901'. [ 484.111830][T12288] netlink: 'syz.3.1901': attribute type 29 has an invalid length. [ 484.286478][T12288] netlink: 'syz.3.1901': attribute type 29 has an invalid length. [ 485.277095][T12326] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1913'. [ 486.773352][T12351] netlink: 'syz.3.1920': attribute type 9 has an invalid length. [ 486.814932][T12351] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1920'. [ 486.854748][T12350] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1919'. [ 487.015015][T12350] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1919'. [ 487.052451][T12350] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1919'. [ 487.090407][T12356] netlink: 'syz.3.1920': attribute type 9 has an invalid length. [ 487.104997][T12350] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1919'. [ 487.115803][T12356] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1920'. [ 487.335239][T12357] netlink: 'syz.2.1921': attribute type 3 has an invalid length. [ 487.354071][T12357] netlink: 'syz.2.1921': attribute type 6 has an invalid length. [ 487.369874][T12357] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1921'. [ 487.404584][T12365] netlink: 'syz.0.1923': attribute type 9 has an invalid length. [ 487.419965][T12365] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1923'. [ 487.524290][T12370] sit0: entered allmulticast mode [ 487.666002][T12370] sit0: entered promiscuous mode [ 488.618773][T12395] netlink: 'syz.3.1932': attribute type 2 has an invalid length. [ 488.631673][T12395] netlink: 'syz.3.1932': attribute type 8 has an invalid length. [ 488.639648][T12395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1932'. [ 489.081364][T12411] netlink: 'syz.3.1936': attribute type 21 has an invalid length. [ 489.357361][T12415] netlink: 'syz.0.1938': attribute type 2 has an invalid length. [ 489.384722][T12415] netlink: 'syz.0.1938': attribute type 1 has an invalid length. [ 489.403403][T12415] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.1938'. [ 489.603513][T12422] sit0: entered allmulticast mode [ 489.644300][T12422] sit0: entered promiscuous mode [ 490.872115][T12436] syzkaller0: entered promiscuous mode [ 490.877732][T12436] syzkaller0: entered allmulticast mode [ 493.246150][T12447] validate_nla: 2 callbacks suppressed [ 493.246207][T12447] netlink: 'syz.0.1947': attribute type 10 has an invalid length. [ 493.344790][T12463] sit0: entered allmulticast mode [ 493.468039][T12463] sit0: entered promiscuous mode [ 493.608653][T12473] __nla_validate_parse: 1 callbacks suppressed [ 493.608693][T12473] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1955'. [ 495.288512][T12500] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1961'. [ 495.377918][T12500] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1961'. [ 495.420474][T12500] netlink: 62903 bytes leftover after parsing attributes in process `syz.2.1961'. [ 495.487614][T12500] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1961'. [ 495.694868][T12511] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1968'. [ 496.622146][T12533] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 496.667878][T12533] geneve0: entered promiscuous mode [ 497.000874][T12549] netlink: 'syz.2.1980': attribute type 10 has an invalid length. [ 497.027052][T12550] netlink: 'syz.2.1980': attribute type 9 has an invalid length. [ 497.068348][T12550] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1980'. [ 497.099940][T12551] netlink: 'syz.2.1980': attribute type 9 has an invalid length. [ 497.121512][T12551] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1980'. [ 497.306480][T12562] delete_channel: no stack [ 497.309218][T12560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1982'. [ 497.320998][T12562] delete_channel: no stack [ 497.382013][T12564] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1981'. [ 497.766001][T12578] netlink: 'syz.2.1986': attribute type 10 has an invalid length. [ 498.070079][T12588] netlink: 'syz.3.1991': attribute type 46 has an invalid length. [ 498.701901][T12610] __nla_validate_parse: 4 callbacks suppressed [ 498.701921][T12610] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1999'. [ 498.839458][T12615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.380976][T12633] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2009'. [ 499.490124][T12633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.547548][T12639] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2008'. [ 499.580328][T12639] bridge_slave_1: entered promiscuous mode [ 499.651777][T12636] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2008'. [ 499.682895][T12636] netlink: 62903 bytes leftover after parsing attributes in process `syz.1.2008'. [ 499.734693][T12636] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2008'. [ 500.210085][T12657] netlink: 'syz.1.2015': attribute type 10 has an invalid length. [ 500.272668][T12657] team0: Device hsr_slave_0 failed to register rx_handler [ 500.685529][T12666] netlink: 'syz.0.2017': attribute type 10 has an invalid length. [ 500.714633][T12666] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2017'. [ 501.364116][T12676] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2020'. [ 501.703244][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.709774][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.196796][T12704] netlink: 'syz.1.2027': attribute type 28 has an invalid length. [ 502.232534][T12704] netlink: 'syz.1.2027': attribute type 29 has an invalid length. [ 502.260970][T12704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2027'. [ 502.455675][T12708] netlink: 'syz.3.2028': attribute type 6 has an invalid length. [ 502.486025][T12708] netlink: 'syz.3.2028': attribute type 1 has an invalid length. [ 502.511016][T12708] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2028'. [ 503.217368][T12721] netlink: 'syz.2.2031': attribute type 3 has an invalid length. [ 504.617232][T12741] netlink: 'syz.2.2036': attribute type 1 has an invalid length. [ 504.761236][T12747] netlink: 'syz.0.2037': attribute type 11 has an invalid length. [ 504.789667][T12747] __nla_validate_parse: 1 callbacks suppressed [ 504.789684][T12747] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2037'. [ 505.995421][T12773] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2047'. [ 506.581990][T12785] netlink: 'syz.2.2048': attribute type 3 has an invalid length. [ 506.619865][T12785] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2048'. [ 507.133855][T12794] can: request_module (can-proto-0) failed. [ 507.846091][T12821] netlink: 'syz.3.2058': attribute type 10 has an invalid length. [ 508.005965][T12821] team0 (unregistering): Port device C removed [ 508.069895][T12821] team0 (unregistering): Port device team_slave_1 removed [ 508.164115][T12821] team0 (unregistering): Port device wlan1 removed [ 509.510067][T12850] netlink: 'syz.1.2067': attribute type 2 has an invalid length. [ 509.551036][T12850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2067'. [ 509.634965][T12856] netlink: 'syz.0.2068': attribute type 10 has an invalid length. [ 509.693675][T12856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2068'. [ 509.759212][T12856] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 509.894819][T12863] netlink: 'syz.1.2071': attribute type 64 has an invalid length. [ 509.980510][T12863] netlink: 'syz.1.2071': attribute type 64 has an invalid length. [ 510.711664][T12877] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2073'. [ 514.665077][T12940] syzkaller0: entered promiscuous mode [ 514.700134][T12940] syzkaller0: entered allmulticast mode [ 514.984794][T12949] netlink: 102500 bytes leftover after parsing attributes in process `syz.2.2097'. [ 515.830199][T12964] netlink: 'syz.0.2099': attribute type 39 has an invalid length. [ 515.838178][T12967] netlink: 'syz.1.2100': attribute type 39 has an invalid length. [ 519.912131][T13019] netlink: zone id is out of range [ 519.912164][T13018] netlink: zone id is out of range [ 519.917339][T13019] netlink: set zone limit has 8 unknown bytes [ 519.962422][T13018] netlink: set zone limit has 8 unknown bytes [ 520.120759][T13018] netlink: 'syz.2.2114': attribute type 10 has an invalid length. [ 520.139644][T13018] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2114'. [ 522.145334][T13053] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 522.183749][T13053] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2122'. [ 523.770273][T13083] netlink: 'syz.2.2132': attribute type 4 has an invalid length. [ 523.790388][T13083] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2132'. [ 523.873100][T13084] netlink: 'syz.2.2132': attribute type 4 has an invalid length. [ 523.890439][T13084] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2132'. [ 524.749307][T13097] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2135'. [ 524.963991][T13108] netlink: 164884 bytes leftover after parsing attributes in process `syz.2.2138'. [ 525.223320][T13112] netlink: 'syz.3.2140': attribute type 10 has an invalid length. [ 525.254432][T13112] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2140'. [ 525.969119][T13130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2146'. [ 526.034970][T13130] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.2146'. [ 526.081498][T13135] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2147'. [ 526.320899][T13147] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2149'. [ 526.566189][T13153] netlink: 'syz.2.2151': attribute type 2 has an invalid length. [ 526.588272][T13153] netlink: 'syz.2.2151': attribute type 8 has an invalid length. [ 526.623362][T13153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2151'. [ 527.827526][T13190] netlink: 'syz.0.2170': attribute type 2 has an invalid length. [ 527.845759][T13190] netlink: 'syz.0.2170': attribute type 8 has an invalid length. [ 527.858239][T13190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2170'. [ 528.927756][T13206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.132713][T13208] delete_channel: no stack [ 529.238350][T13213] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2169'. [ 529.509386][T13222] netlink: 134736 bytes leftover after parsing attributes in process `syz.3.2174'. [ 529.821864][T13231] netlink: 'syz.3.2177': attribute type 2 has an invalid length. [ 529.894576][T13231] netlink: 'syz.3.2177': attribute type 8 has an invalid length. [ 529.975335][T13231] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2177'. [ 531.132228][T13243] netlink: 'syz.3.2179': attribute type 2 has an invalid length. [ 531.169477][T13243] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2179'. [ 531.247570][T13243] netlink: 'syz.3.2179': attribute type 3 has an invalid length. [ 531.313003][T13243] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2179'. [ 532.081522][T13263] netlink: 'syz.0.2184': attribute type 6 has an invalid length. [ 532.329212][T13270] netlink: 'syz.1.2189': attribute type 2 has an invalid length. [ 532.337817][T13270] netlink: 'syz.1.2189': attribute type 8 has an invalid length. [ 532.347490][T13270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2189'. [ 532.390308][T13277] netlink: 'syz.2.2191': attribute type 39 has an invalid length. [ 532.473871][T13274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2197'. [ 532.913854][T13286] netlink: 'syz.2.2192': attribute type 21 has an invalid length. [ 532.982116][T13286] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2192'. [ 535.632997][T13287] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 536.147403][T13300] syzkaller0: entered promiscuous mode [ 536.159855][T13300] syzkaller0: entered allmulticast mode [ 536.167951][T13304] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2196'. [ 538.589895][T13316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2201'. [ 539.618816][T13355] netlink: 'syz.2.2210': attribute type 2 has an invalid length. [ 539.660429][T13355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2210'. [ 540.688453][T13389] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2222'. [ 540.706011][T13388] sctp: [Deprecated]: syz.3.2223 (pid 13388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.706011][T13388] Use struct sctp_sack_info instead [ 540.957783][T13404] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 540.966397][T13404] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2228'. [ 541.655456][T13413] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2231'. [ 541.678912][T13418] netlink: 'syz.3.2233': attribute type 10 has an invalid length. [ 541.835719][T13419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 542.515115][T13456] netlink: 'syz.1.2245': attribute type 21 has an invalid length. [ 542.581093][T13456] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2245'. [ 542.881640][T13466] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2247'. [ 543.296497][T13485] -1: renamed from syzkaller0 [ 543.863330][T13507] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2262'. [ 543.983879][T13513] netlink: 'syz.1.2265': attribute type 21 has an invalid length. [ 544.144715][T13515] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2266'. [ 544.543547][T13528] sock: sock_set_timeout: `syz.3.2270' (pid 13528) tries to set negative timeout [ 547.961912][T13551] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2277'. [ 548.065774][T13551] syzkaller0: left promiscuous mode [ 548.131145][T13551] syzkaller0: left allmulticast mode [ 548.297562][T13554] netlink: 'syz.1.2278': attribute type 3 has an invalid length. [ 548.370065][T13554] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2278'. [ 548.445381][T13560] netlink: 'syz.0.2280': attribute type 7 has an invalid length. [ 548.853827][T13571] netlink: 'syz.0.2283': attribute type 21 has an invalid length. [ 548.867508][T13571] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2283'. [ 552.178959][T13587] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 552.532091][T13596] netlink: 'syz.0.2290': attribute type 39 has an invalid length. [ 552.585467][T13596] netlink: 'syz.0.2290': attribute type 6 has an invalid length. [ 552.601314][T13596] netlink: 'syz.0.2290': attribute type 1 has an invalid length. [ 552.631132][T13596] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2290'. [ 553.090956][T13600] netlink: 'syz.0.2291': attribute type 21 has an invalid length. [ 553.131775][T13600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.139086][T13600] IPv6: NLM_F_CREATE should be set when creating new route [ 553.146473][T13600] IPv6: NLM_F_CREATE should be set when creating new route [ 553.153794][T13600] IPv6: NLM_F_CREATE should be set when creating new route [ 553.170230][T13601] netlink: 'syz.0.2291': attribute type 21 has an invalid length. [ 553.178289][T13601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.214092][T13600] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2291'. [ 553.506577][T13605] netlink: 206164 bytes leftover after parsing attributes in process `syz.3.2293'. [ 553.517724][T13608] netlink: 'syz.0.2295': attribute type 2 has an invalid length. [ 553.526569][T13608] netlink: 'syz.0.2295': attribute type 8 has an invalid length. [ 553.535377][T13608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2295'. [ 554.056001][T13618] can: request_module (can-proto-3) failed. [ 554.562233][T13636] netlink: 'syz.3.2302': attribute type 2 has an invalid length. [ 554.613818][T13636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2302'. [ 556.015084][T13650] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2308'. [ 556.268557][T13667] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2314'. [ 556.479100][T13675] netlink: 'syz.3.2315': attribute type 2 has an invalid length. [ 556.491239][T13675] netlink: 'syz.3.2315': attribute type 8 has an invalid length. [ 556.531533][T13680] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2323'. [ 556.535481][T13675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2315'. [ 556.631625][T13679] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2316'. [ 556.660196][T13679] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 556.684558][T13679] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 558.792198][T13698] netlink: 'syz.1.2320': attribute type 1 has an invalid length. [ 558.832738][T13700] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2322'. [ 559.681416][T13729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2329'. [ 559.800760][T13705] syzkaller0: entered promiscuous mode [ 559.807972][T13705] syzkaller0: entered allmulticast mode [ 561.798261][T13755] netlink: 'syz.1.2343': attribute type 9 has an invalid length. [ 561.807876][T13755] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2343'. [ 563.095896][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.103266][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.800464][T13764] netlink: 'syz.0.2337': attribute type 2 has an invalid length. [ 563.808660][T13764] netlink: 'syz.0.2337': attribute type 8 has an invalid length. [ 563.819808][T13764] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2337'. [ 564.435918][T13773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.890657][T13779] netlink: 'syz.1.2342': attribute type 21 has an invalid length. [ 565.085611][T13792] netlink: 'syz.3.2346': attribute type 9 has an invalid length. [ 565.102330][T13792] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2346'. [ 566.126179][T13814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 566.141579][T13814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 566.149416][T13814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 566.158363][T13814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 566.176722][T13814] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 566.185091][T13814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 566.375608][ T7468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.425310][T13817] netlink: 'syz.3.2353': attribute type 2 has an invalid length. [ 566.445455][T13817] netlink: 'syz.3.2353': attribute type 8 has an invalid length. [ 566.459958][T13817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2353'. [ 566.536584][ T7468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.646594][ T7468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.784307][ T7468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.097195][T13813] chnl_net:caif_netlink_parms(): no params data found [ 567.368948][ T7468] ip6gretap0 (unregistering): left allmulticast mode [ 567.376314][ T7468] ip6gretap0 (unregistering): left promiscuous mode [ 567.385052][ T7468] Ÿë: port 1(ip6gretap0) entered disabled state [ 567.693069][T13848] netlink: 'syz.0.2358': attribute type 9 has an invalid length. [ 567.727136][T13848] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2358'. [ 568.294452][ T5777] Bluetooth: hci4: command tx timeout [ 568.400965][T13813] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.450149][T13813] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.457466][T13813] bridge_slave_0: entered allmulticast mode [ 568.491255][T13813] bridge_slave_0: entered promiscuous mode [ 568.537590][T13878] netlink: 'syz.3.2367': attribute type 3 has an invalid length. [ 568.545883][T13878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2367'. [ 568.710869][T13813] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.718080][T13813] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.779513][T13883] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2368'. [ 568.789275][T13813] bridge_slave_1: entered allmulticast mode [ 568.797843][T13813] bridge_slave_1: entered promiscuous mode [ 568.879615][T13883] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 568.936565][T13813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.052195][T13813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.118910][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2372'. [ 569.250145][T13813] team0: Port device team_slave_0 added [ 569.258288][T13813] team0: Port device team_slave_1 added [ 569.751731][T13813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.758746][T13813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.794234][T13813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.837778][T13813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.845063][T13813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.871738][T13813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.040599][T13813] hsr_slave_0: entered promiscuous mode [ 570.048380][T13813] hsr_slave_1: entered promiscuous mode [ 570.056740][T13813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.065369][T13813] Cannot create hsr debugfs directory [ 570.370647][ T5777] Bluetooth: hci4: command tx timeout [ 570.821373][T13939] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 570.882261][T13939] netlink: 'syz.3.2381': attribute type 3 has an invalid length. [ 570.900351][T13939] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2381'. [ 571.113432][ T7468] hsr_slave_0: left promiscuous mode [ 571.123025][ T7468] hsr_slave_1: left promiscuous mode [ 571.180869][ T7468] veth1_vlan: left promiscuous mode [ 572.084092][ T7468] team0 (unregistering): Port device macvlan0 removed [ 572.454203][ T5777] Bluetooth: hci4: command tx timeout [ 572.602819][ T7468] team_slave_1 (unregistering): left promiscuous mode [ 572.614546][ T7468] team_slave_1 (unregistering): left allmulticast mode [ 572.622897][ T7468] team0 (unregistering): Port device team_slave_1 removed [ 572.674098][ T7468] team_slave_0 (unregistering): left promiscuous mode [ 572.684648][ T7468] team_slave_0 (unregistering): left allmulticast mode [ 572.695774][ T7468] team0 (unregistering): Port device team_slave_0 removed [ 573.218423][T13942] netlink: 'syz.3.2381': attribute type 12 has an invalid length. [ 573.227550][T13942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2381'. [ 573.237111][T13953] netlink: 'syz.0.2384': attribute type 2 has an invalid length. [ 573.260170][T13953] netlink: 'syz.0.2384': attribute type 8 has an invalid length. [ 573.271741][T13953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2384'. [ 573.631869][T13981] netlink: 'syz.1.2392': attribute type 9 has an invalid length. [ 573.653306][T13981] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2392'. [ 574.000789][T13813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 574.015893][T13813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 574.029239][T13813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 574.065810][T13813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 574.149083][T13996] netlink: 'syz.1.2397': attribute type 2 has an invalid length. [ 574.162277][T13996] netlink: 'syz.1.2397': attribute type 8 has an invalid length. [ 574.179224][T13996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2397'. [ 574.322191][T13813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.376158][T13813] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.412634][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.420389][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.468022][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.475462][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.530321][ T5777] Bluetooth: hci4: command tx timeout [ 575.076645][T13813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.259474][T13813] veth0_vlan: entered promiscuous mode [ 575.302682][T13813] veth1_vlan: entered promiscuous mode [ 575.388216][T13813] veth0_macvtap: entered promiscuous mode [ 575.432750][T13813] veth1_macvtap: entered promiscuous mode [ 575.526736][T13813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.585002][T13813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.648737][T13813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.719914][T13813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.728702][T13813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.767867][T13813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.923734][T14039] netlink: 'syz.0.2404': attribute type 9 has an invalid length. [ 576.010879][T14039] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2404'. [ 576.180911][T14049] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2405'. [ 576.257780][T14049] bridge_slave_1: entered promiscuous mode [ 576.387538][T14038] netlink: 'syz.0.2404': attribute type 9 has an invalid length. [ 576.434666][T14038] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2404'. [ 576.636316][T14053] syzkaller0: entered promiscuous mode [ 576.649854][T14053] syzkaller0: entered allmulticast mode [ 576.768984][T14056] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2406'. [ 576.790326][T14056] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 577.241152][T14072] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2409'. [ 580.032446][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.043309][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.077045][T14098] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2413'. [ 580.202356][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.222496][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.242877][T14104] netlink: 'syz.3.2415': attribute type 1 has an invalid length. [ 580.314231][T14104] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2415'. [ 581.403136][T14134] netlink: 'syz.0.2422': attribute type 39 has an invalid length. [ 581.808791][T13814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 581.840049][T13814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 581.848690][T13814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 581.857608][T13814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 581.865878][T13814] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 581.873637][T13814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.506663][T14139] chnl_net:caif_netlink_parms(): no params data found [ 582.555139][T14155] netlink: 'syz.2.2424': attribute type 2 has an invalid length. [ 582.579958][T14155] netlink: 'syz.2.2424': attribute type 8 has an invalid length. [ 582.610976][T14155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2424'. [ 582.757601][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.784834][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2425'. [ 582.935247][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.059211][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.184465][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.228827][T14139] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.244494][T14139] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.262550][T14139] bridge_slave_0: entered allmulticast mode [ 583.283659][T14139] bridge_slave_0: entered promiscuous mode [ 583.302375][T14139] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.312923][T14139] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.337177][T14139] bridge_slave_1: entered allmulticast mode [ 583.354264][T14139] bridge_slave_1: entered promiscuous mode [ 583.459302][T14139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.531863][T14139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.728535][T14139] team0: Port device team_slave_0 added [ 583.776579][T14139] team0: Port device team_slave_1 added [ 583.887818][T14182] netlink: 'syz.2.2431': attribute type 2 has an invalid length. [ 583.896815][T14182] netlink: 'syz.2.2431': attribute type 8 has an invalid length. [ 583.927288][T14182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2431'. [ 583.999591][T14139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.006750][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.162127][T14139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.192173][T14139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.199222][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.289987][ T5777] Bluetooth: hci2: command tx timeout [ 584.304576][T14139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.412674][T14191] netlink: 'syz.0.2434': attribute type 2 has an invalid length. [ 584.436961][T14191] netlink: 'syz.0.2434': attribute type 8 has an invalid length. [ 584.476618][T14191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2434'. [ 585.055754][T14139] hsr_slave_0: entered promiscuous mode [ 585.085407][T14139] hsr_slave_1: entered promiscuous mode [ 585.109257][ T12] tipc: Left network mode [ 586.426747][ T5777] Bluetooth: hci2: command tx timeout [ 587.533323][T14229] netlink: 'syz.1.2443': attribute type 2 has an invalid length. [ 587.573615][T14229] netlink: 'syz.1.2443': attribute type 8 has an invalid length. [ 587.588280][T14229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2443'. [ 588.450424][ T5777] Bluetooth: hci2: command tx timeout [ 588.939084][T14273] netlink: 'syz.0.2453': attribute type 2 has an invalid length. [ 588.973352][T14273] netlink: 'syz.0.2453': attribute type 8 has an invalid length. [ 588.998917][T14273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2453'. [ 589.144965][T14282] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2455'. [ 590.049507][T14296] wg2: entered promiscuous mode [ 590.060632][T14296] wg2: entered allmulticast mode [ 590.104127][T14139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 590.183281][T14139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 590.216479][T14139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 590.290431][T14139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 590.323844][T14307] netlink: 'syz.2.2462': attribute type 4 has an invalid length. [ 590.338266][T14307] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2462'. [ 590.362812][T14309] netlink: 'syz.2.2462': attribute type 4 has an invalid length. [ 590.375658][T14309] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2462'. [ 590.530013][ T5777] Bluetooth: hci2: command tx timeout [ 591.180537][ T12] veth1_macvtap: left allmulticast mode [ 591.196909][ T12] veth1_macvtap: left promiscuous mode [ 591.207150][ T12] veth0_macvtap: left promiscuous mode [ 592.716645][T14346] netlink: 'syz.2.2468': attribute type 2 has an invalid length. [ 592.724654][T14346] netlink: 'syz.2.2468': attribute type 8 has an invalid length. [ 592.733197][T14346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2468'. [ 594.014204][T14378] syz.0.2474[14378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.014356][T14378] syz.0.2474[14378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.300630][T14369] netlink: 'syz.2.2472': attribute type 2 has an invalid length. [ 596.333370][T14369] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2472'. [ 596.518433][T14139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.689486][T14139] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.738073][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.745442][ T7468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.826589][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.833862][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.037610][T14411] netlink: 'syz.2.2479': attribute type 2 has an invalid length. [ 597.048194][T14411] netlink: 'syz.2.2479': attribute type 8 has an invalid length. [ 597.063068][T14411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2479'. [ 597.635533][T14139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.722597][T14139] veth0_vlan: entered promiscuous mode [ 597.745580][T14139] veth1_vlan: entered promiscuous mode [ 597.852145][T14139] veth0_macvtap: entered promiscuous mode [ 597.872146][T14139] veth1_macvtap: entered promiscuous mode [ 597.950375][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.979218][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.005699][T14139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.018670][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.039592][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.067423][T14139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.107868][T14433] netlink: 'syz.0.2487': attribute type 2 has an invalid length. [ 598.126943][T14433] netlink: 'syz.0.2487': attribute type 8 has an invalid length. [ 598.165246][T14433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2487'. [ 598.222026][T14139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.269825][T14139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.288908][T14139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.314972][T14139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.312126][ T7468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.339870][ T7468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.421065][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.465289][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.654133][T14462] netlink: 'syz.1.2486': attribute type 29 has an invalid length. [ 599.724942][T14453] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 599.781926][T14462] netlink: 'syz.1.2486': attribute type 29 has an invalid length. [ 599.822766][T14467] netlink: 'syz.1.2486': attribute type 29 has an invalid length. [ 600.243123][T14472] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.2489'. [ 600.832193][T13814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 600.850515][T13814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 600.868958][T13814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 600.883419][T13814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 600.912423][T13814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 600.923063][T13814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 600.961683][T14494] netlink: 'syz.3.2495': attribute type 9 has an invalid length. [ 600.969919][T14494] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2495'. [ 601.006401][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.572600][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.726475][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.759510][T14505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2500'. [ 601.781464][T14505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2500'. [ 601.799633][T14505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2500'. [ 601.920371][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.956073][T14501] syzkaller0: entered allmulticast mode [ 602.564574][T14487] chnl_net:caif_netlink_parms(): no params data found [ 603.029982][ T5777] Bluetooth: hci3: command tx timeout [ 603.774319][ T11] ip6gretap0 (unregistering): left allmulticast mode [ 603.781584][ T11] ip6gretap0 (unregistering): left promiscuous mode [ 603.788345][ T11] Ÿë: port 1(ip6gretap0) entered disabled state [ 603.838819][T14530] netlink: 'syz.2.2507': attribute type 2 has an invalid length. [ 603.855485][T14530] netlink: 'syz.2.2507': attribute type 8 has an invalid length. [ 603.864430][T14530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2507'. [ 603.982320][T14546] netlink: 'syz.3.2508': attribute type 2 has an invalid length. [ 604.018133][T14546] netlink: 'syz.3.2508': attribute type 8 has an invalid length. [ 604.055959][T14546] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2508'. [ 604.198524][T14487] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.207467][T14487] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.246143][T14487] bridge_slave_0: entered allmulticast mode [ 604.262600][T14487] bridge_slave_0: entered promiscuous mode [ 604.508409][T14487] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.540188][T14487] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.569163][T14487] bridge_slave_1: entered allmulticast mode [ 604.587009][T14487] bridge_slave_1: entered promiscuous mode [ 604.967753][T14487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.090262][ T5777] Bluetooth: hci3: command tx timeout [ 605.142334][T14487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.274569][T14581] netlink: 'syz.3.2516': attribute type 2 has an invalid length. [ 605.292224][T14581] netlink: 'syz.3.2516': attribute type 8 has an invalid length. [ 605.309620][T14581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2516'. [ 606.064957][T14487] team0: Port device team_slave_0 added [ 606.091705][T14487] team0: Port device team_slave_1 added [ 606.289963][T14487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.297305][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.337501][T14597] netlink: 'syz.2.2517': attribute type 9 has an invalid length. [ 606.345675][T14487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.358734][T14487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.365963][T14597] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2517'. [ 606.375564][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.409421][T14487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.643380][T14487] hsr_slave_0: entered promiscuous mode [ 606.651763][T14487] hsr_slave_1: entered promiscuous mode [ 606.659040][T14487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.667113][T14487] Cannot create hsr debugfs directory [ 607.002614][T14610] netlink: 'syz.2.2522': attribute type 2 has an invalid length. [ 607.022352][T14610] netlink: 'syz.2.2522': attribute type 8 has an invalid length. [ 607.035148][T14610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2522'. [ 607.170744][ T5777] Bluetooth: hci3: command tx timeout [ 608.515484][T14637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2527'. [ 608.695082][T14637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2527'. [ 608.830083][T14639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2527'. [ 609.121411][T14646] netlink: 'syz.3.2529': attribute type 2 has an invalid length. [ 609.138784][T14646] netlink: 'syz.3.2529': attribute type 8 has an invalid length. [ 609.148360][T14646] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2529'. [ 609.259862][ T5777] Bluetooth: hci3: command tx timeout [ 609.468668][T14656] netlink: 'syz.1.2533': attribute type 2 has an invalid length. [ 609.498037][T14656] netlink: 'syz.1.2533': attribute type 8 has an invalid length. [ 609.540668][T14656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2533'. [ 609.598267][T14487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 610.665736][T14487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 610.754115][ T11] hsr_slave_0: left promiscuous mode [ 610.772164][ T11] hsr_slave_1: left promiscuous mode [ 610.802035][ T11] veth1_vlan: left promiscuous mode [ 610.807409][ T11] veth0_vlan: left promiscuous mode [ 611.039311][T14671] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2537'. [ 611.048931][T14671] netlink: zone id is out of range [ 611.062724][T14671] netlink: 149044 bytes leftover after parsing attributes in process `syz.3.2537'. [ 612.056598][T14487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 612.069209][T14487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 612.109565][T14671] netlink: 'syz.3.2537': attribute type 58 has an invalid length. [ 612.119821][T14671] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2537'. [ 612.440316][T14487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.524654][T14680] netlink: 'syz.1.2541': attribute type 2 has an invalid length. [ 612.554945][T14680] netlink: 'syz.1.2541': attribute type 8 has an invalid length. [ 612.569433][T14680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2541'. [ 612.641343][T14487] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.458468][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.465723][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.516229][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.523487][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.227139][T14487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.509881][T14720] netlink: 'syz.1.2550': attribute type 2 has an invalid length. [ 614.518034][T14720] netlink: 'syz.1.2550': attribute type 8 has an invalid length. [ 614.550024][T14720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2550'. [ 614.593344][T14487] veth0_vlan: entered promiscuous mode [ 614.666852][T14725] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2551'. [ 614.742961][T14487] veth1_vlan: entered promiscuous mode [ 614.852898][T14487] veth0_macvtap: entered promiscuous mode [ 614.912867][T14487] veth1_macvtap: entered promiscuous mode [ 615.005757][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.026659][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.043867][T14735] netlink: 'syz.1.2560': attribute type 1 has an invalid length. [ 615.052422][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.064145][T14735] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2560'. [ 615.073941][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.106625][T14487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.163573][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.200412][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.240466][T14487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.260107][T14487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.276423][T14487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.321166][T14487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.363601][T14487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.402000][T14487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.420287][T14487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.717489][T14741] syzkaller0: entered promiscuous mode [ 616.619552][T14772] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2555'. [ 620.798718][T14769] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2556'. [ 620.808402][T14768] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2556'. [ 621.030281][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.038681][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.173019][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.232543][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.573943][T14801] netlink: 'syz.1.2561': attribute type 2 has an invalid length. [ 621.584469][T14801] netlink: 'syz.1.2561': attribute type 8 has an invalid length. [ 621.595713][T14801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2561'. [ 621.972986][T14814] netlink: 'syz.0.2490': attribute type 10 has an invalid length. [ 622.162971][T14814] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 622.461297][T14802] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2559'. [ 622.480147][T14802] bridge_slave_1: default FDB implementation only supports local addresses [ 622.752063][T14802] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2559'. [ 622.972292][T14831] netlink: 'syz.2.2566': attribute type 8 has an invalid length. [ 623.040079][T14831] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2566'. [ 623.538509][T14828] syzkaller0: entered promiscuous mode [ 623.589874][T14828] syzkaller0: entered allmulticast mode [ 623.671940][T13814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 623.684741][T13814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 623.695059][T13814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 623.715334][T13814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 623.723547][T13814] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 623.736744][T13814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 623.858893][ T7460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.921743][T14841] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2568'. [ 623.945455][T14841] openvswitch: netlink: Key type 4112 is out of range max 32 [ 624.533638][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.540088][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.811814][T13814] Bluetooth: hci0: command tx timeout [ 626.685200][ T7460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.891574][ T7460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.935814][T14869] netlink: 'syz.2.2572': attribute type 2 has an invalid length. [ 626.950004][T14869] netlink: 'syz.2.2572': attribute type 8 has an invalid length. [ 626.958146][T14869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2572'. [ 626.972773][T14871] netlink: 'syz.3.2573': attribute type 22 has an invalid length. [ 626.992199][T14871] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2573'. [ 627.076363][ T7460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.163082][T14873] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2574'. [ 627.838465][T14839] chnl_net:caif_netlink_parms(): no params data found [ 627.890021][T13814] Bluetooth: hci0: command tx timeout [ 628.286273][T14895] netlink: 'syz.0.2580': attribute type 8 has an invalid length. [ 628.315451][T14895] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2580'. [ 628.418230][T14919] netlink: 'syz.2.2582': attribute type 1 has an invalid length. [ 628.441008][T14919] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.2582'. [ 628.759040][T14909] syzkaller0: entered promiscuous mode [ 628.773422][T14909] syzkaller0: entered allmulticast mode [ 628.999050][T14915] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 629.970143][T13814] Bluetooth: hci0: command tx timeout [ 632.057589][T13814] Bluetooth: hci0: command tx timeout [ 632.487876][T14839] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.497995][T14839] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.520767][T14839] bridge_slave_0: entered allmulticast mode [ 632.539969][T14839] bridge_slave_0: entered promiscuous mode [ 632.552378][T14839] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.579896][T14839] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.587197][T14839] bridge_slave_1: entered allmulticast mode [ 632.614097][T14839] bridge_slave_1: entered promiscuous mode [ 632.954596][T14839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.983454][T14961] netlink: 'syz.3.2588': attribute type 2 has an invalid length. [ 633.002430][T14961] netlink: 'syz.3.2588': attribute type 8 has an invalid length. [ 633.027983][T14961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2588'. [ 633.196911][T14839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.784420][T14839] team0: Port device team_slave_0 added [ 633.891639][T14839] team0: Port device team_slave_1 added [ 634.074024][T14839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.094493][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.211552][T14839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.369454][T14839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.384802][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.419516][T14839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.543637][T14839] hsr_slave_0: entered promiscuous mode [ 634.552458][T14839] hsr_slave_1: entered promiscuous mode [ 634.563948][T14839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.576031][T14839] Cannot create hsr debugfs directory [ 635.044943][ T7460] hsr_slave_0: left promiscuous mode [ 635.059147][ T7460] hsr_slave_1: left promiscuous mode [ 635.086554][ T7460] veth0_macvtap: left promiscuous mode [ 635.096924][ T7460] veth1_vlan: left promiscuous mode [ 635.102456][ T7460] veth0_vlan: left promiscuous mode [ 635.622633][ T7460] macvlan0 (unregistering): left promiscuous mode [ 635.629531][ T7460] macvlan0 (unregistering): left allmulticast mode [ 635.642158][ T7460] team0 (unregistering): Port device macvlan0 removed [ 635.985047][ T7460] team_slave_1 (unregistering): left promiscuous mode [ 635.994771][ T7460] team_slave_1 (unregistering): left allmulticast mode [ 636.004779][ T7460] team0 (unregistering): Port device team_slave_1 removed [ 636.056705][ T7460] C (unregistering): left promiscuous mode [ 636.065674][ T7460] C (unregistering): left allmulticast mode [ 636.074106][ T7460] team0 (unregistering): Port device C removed [ 637.002166][T14839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 637.025293][T14839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 637.065669][T14839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 637.118150][T14839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 637.413049][T15025] netlink: 'syz.3.2593': attribute type 8 has an invalid length. [ 637.474261][T15025] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2593'. [ 637.844175][T15017] syzkaller0: entered promiscuous mode [ 637.968205][T15017] syzkaller0: entered allmulticast mode [ 640.684138][T14839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.786206][T14839] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.812454][T15045] netlink: 'syz.0.2598': attribute type 2 has an invalid length. [ 640.848877][T15045] netlink: 'syz.0.2598': attribute type 8 has an invalid length. [ 640.868155][T15045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2598'. [ 640.934962][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.942274][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.976093][T15047] netlink: 'syz.2.2599': attribute type 21 has an invalid length. [ 640.994021][T15047] IPv6: NLM_F_CREATE should be specified when creating new route [ 641.020563][T15047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 641.028192][T15047] IPv6: NLM_F_CREATE should be set when creating new route [ 641.036350][T15047] IPv6: NLM_F_CREATE should be set when creating new route [ 641.044325][T15047] IPv6: NLM_F_CREATE should be set when creating new route [ 641.133079][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.140463][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.375879][T15056] FAULT_INJECTION: forcing a failure. [ 641.375879][T15056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.422450][T15056] CPU: 1 PID: 15056 Comm: syz.3.2602 Not tainted syzkaller #0 [ 641.430020][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.440128][T15056] Call Trace: [ 641.443450][T15056] [ 641.446432][T15056] dump_stack_lvl+0x18c/0x250 [ 641.451186][T15056] ? show_regs_print_info+0x20/0x20 [ 641.456441][T15056] ? load_image+0x420/0x420 [ 641.461007][T15056] ? __might_fault+0xaa/0x120 [ 641.465751][T15056] ? __lock_acquire+0x7d40/0x7d40 [ 641.470848][T15056] should_fail_ex+0x39d/0x4d0 [ 641.475591][T15056] _copy_from_user+0x2f/0xe0 [ 641.480241][T15056] __sys_bpf+0x23e/0x890 [ 641.484538][T15056] ? bpf_link_show_fdinfo+0x390/0x390 [ 641.489983][T15056] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.496288][T15056] __x64_sys_bpf+0x7c/0x90 [ 641.500760][T15056] do_syscall_64+0x55/0xa0 [ 641.505228][T15056] ? clear_bhb_loop+0x40/0x90 [ 641.509952][T15056] ? clear_bhb_loop+0x40/0x90 [ 641.514709][T15056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.520655][T15056] RIP: 0033:0x7fd5b7b9cdd9 [ 641.525113][T15056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.544772][T15056] RSP: 002b:00007fd5b89a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 641.553218][T15056] RAX: ffffffffffffffda RBX: 00007fd5b7e15fa0 RCX: 00007fd5b7b9cdd9 [ 641.561214][T15056] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 641.569203][T15056] RBP: 00007fd5b89a7090 R08: 0000000000000000 R09: 0000000000000000 [ 641.577199][T15056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.585194][T15056] R13: 00007fd5b7e16038 R14: 00007fd5b7e15fa0 R15: 00007ffd7348dfa8 [ 641.593201][T15056] [ 642.265977][T14839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.623249][T14839] veth0_vlan: entered promiscuous mode [ 642.735846][T14839] veth1_vlan: entered promiscuous mode [ 642.884331][T14839] veth0_macvtap: entered promiscuous mode [ 642.969144][T14839] veth1_macvtap: entered promiscuous mode [ 643.060541][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.104818][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.146904][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.188794][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.209159][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.236926][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.312209][T14839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.325262][T15096] netlink: 'syz.3.2610': attribute type 2 has an invalid length. [ 643.345951][T15096] netlink: 'syz.3.2610': attribute type 8 has an invalid length. [ 643.401641][T15096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2610'. [ 643.451301][T15107] FAULT_INJECTION: forcing a failure. [ 643.451301][T15107] name failslab, interval 1, probability 0, space 0, times 0 [ 643.504500][T15107] CPU: 1 PID: 15107 Comm: syz.2.2612 Not tainted syzkaller #0 [ 643.512071][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.522175][T15107] Call Trace: [ 643.525485][T15107] [ 643.528451][T15107] dump_stack_lvl+0x18c/0x250 [ 643.533183][T15107] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 643.539400][T15107] ? show_regs_print_info+0x20/0x20 [ 643.544664][T15107] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 643.550918][T15107] ? dump_stack+0x9/0x20 [ 643.555219][T15107] should_fail_ex+0x39d/0x4d0 [ 643.559964][T15107] should_failslab+0x9/0x20 [ 643.564527][T15107] slab_pre_alloc_hook+0x59/0x310 [ 643.569622][T15107] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 643.575212][T15107] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 643.580824][T15107] __kmem_cache_alloc_node+0x53/0x250 [ 643.586263][T15107] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 643.591859][T15107] __kmalloc+0xa4/0x230 [ 643.596084][T15107] bpf_prog_test_run_skb+0x238/0x12b0 [ 643.601514][T15107] ? __fget_files+0x28/0x4b0 [ 643.606211][T15107] ? __fget_files+0x28/0x4b0 [ 643.610867][T15107] ? __fget_files+0x43d/0x4b0 [ 643.615610][T15107] ? cpu_online+0x60/0x60 [ 643.620012][T15107] bpf_prog_test_run+0x321/0x390 [ 643.625009][T15107] __sys_bpf+0x49d/0x890 [ 643.629330][T15107] ? bpf_link_show_fdinfo+0x390/0x390 [ 643.634780][T15107] ? lock_chain_count+0x20/0x20 [ 643.639694][T15107] __x64_sys_bpf+0x7c/0x90 [ 643.644181][T15107] do_syscall_64+0x55/0xa0 [ 643.648646][T15107] ? clear_bhb_loop+0x40/0x90 [ 643.653430][T15107] ? clear_bhb_loop+0x40/0x90 [ 643.658165][T15107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.664122][T15107] RIP: 0033:0x7f9cc039cdd9 [ 643.668586][T15107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.688251][T15107] RSP: 002b:00007f9cc1249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 643.696723][T15107] RAX: ffffffffffffffda RBX: 00007f9cc0615fa0 RCX: 00007f9cc039cdd9 [ 643.704812][T15107] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 643.712840][T15107] RBP: 00007f9cc1249090 R08: 0000000000000000 R09: 0000000000000000 [ 643.720855][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.728864][T15107] R13: 00007f9cc0616038 R14: 00007f9cc0615fa0 R15: 00007fff1888c0b8 [ 643.736908][T15107] [ 643.776098][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.888149][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.994078][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.027215][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.059725][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.084467][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.131783][T14839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.438258][T14839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.482519][T14839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.503270][T14839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.513084][T14839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.129007][T13814] Bluetooth: hci4: unexpected subevent 0x0a length: 15 < 30 [ 645.273626][ T7474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.307747][ T7474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.400977][ T7468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.409504][ T7468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.470069][T15147] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2619'. [ 645.491858][T15145] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2619'. [ 645.545412][T15150] FAULT_INJECTION: forcing a failure. [ 645.545412][T15150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.585497][T15150] CPU: 0 PID: 15150 Comm: syz.3.2620 Not tainted syzkaller #0 [ 645.593064][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.603176][T15150] Call Trace: [ 645.606500][T15150] [ 645.609496][T15150] dump_stack_lvl+0x18c/0x250 [ 645.614242][T15150] ? show_regs_print_info+0x20/0x20 [ 645.619509][T15150] ? load_image+0x420/0x420 [ 645.624084][T15150] ? __might_fault+0xaa/0x120 [ 645.628823][T15150] ? __lock_acquire+0x7d40/0x7d40 [ 645.633917][T15150] should_fail_ex+0x39d/0x4d0 [ 645.638672][T15150] _copy_from_user+0x2f/0xe0 [ 645.643318][T15150] bpf_prog_test_run_skb+0x266/0x12b0 [ 645.648753][T15150] ? lockdep_hardirqs_on+0x98/0x150 [ 645.653979][T15150] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 645.660168][T15150] ? cpu_online+0x60/0x60 [ 645.664546][T15150] bpf_prog_test_run+0x321/0x390 [ 645.669519][T15150] __sys_bpf+0x49d/0x890 [ 645.673786][T15150] ? bpf_link_show_fdinfo+0x390/0x390 [ 645.679199][T15150] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 645.685387][T15150] __x64_sys_bpf+0x7c/0x90 [ 645.689838][T15150] do_syscall_64+0x55/0xa0 [ 645.694294][T15150] ? clear_bhb_loop+0x40/0x90 [ 645.699019][T15150] ? clear_bhb_loop+0x40/0x90 [ 645.703754][T15150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.709712][T15150] RIP: 0033:0x7fd5b7b9cdd9 [ 645.714169][T15150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.733917][T15150] RSP: 002b:00007fd5b89a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 645.742369][T15150] RAX: ffffffffffffffda RBX: 00007fd5b7e15fa0 RCX: 00007fd5b7b9cdd9 [ 645.750374][T15150] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 645.758363][T15150] RBP: 00007fd5b89a7090 R08: 0000000000000000 R09: 0000000000000000 [ 645.766354][T15150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.774347][T15150] R13: 00007fd5b7e16038 R14: 00007fd5b7e15fa0 R15: 00007ffd7348dfa8 [ 645.782356][T15150] [ 645.853893][T15153] netlink: 'syz.2.2621': attribute type 2 has an invalid length. [ 645.948529][T15153] netlink: 'syz.2.2621': attribute type 8 has an invalid length. [ 645.995063][T15153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2621'. [ 647.083320][T15195] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2630'. [ 647.465119][T15203] netlink: 17675 bytes leftover after parsing attributes in process `syz.0.2631'. [ 647.630109][T15213] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 648.311905][T15226] netlink: 'syz.0.2635': attribute type 2 has an invalid length. [ 648.350118][T15226] netlink: 'syz.0.2635': attribute type 8 has an invalid length. [ 648.385332][T15226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2635'. [ 649.113749][T15236] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.2637'. [ 649.202690][T15236] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 653.108709][T15300] netlink: 'syz.3.2648': attribute type 2 has an invalid length. [ 653.130321][T15300] netlink: 'syz.3.2648': attribute type 8 has an invalid length. [ 653.169502][T15300] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2648'. [ 654.425655][T15328] netlink: 'syz.3.2657': attribute type 4 has an invalid length. [ 654.472455][T15324] bˆ¡cÊRݘOC‰ÿæ: renamed from lo (while UP) [ 654.479920][T15328] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2657'. [ 654.598160][T15323] delete_channel: no stack [ 654.757857][T15333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.805830][T15334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.160764][T15345] netlink: 'syz.2.2664': attribute type 2 has an invalid length. [ 655.195240][T15345] netlink: 'syz.2.2664': attribute type 8 has an invalid length. [ 655.221288][T15345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2664'. [ 655.288971][T15351] netlink: 'syz.3.2666': attribute type 2 has an invalid length. [ 655.314693][T15351] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2666'. [ 655.935273][T15360] veth1_macvtap: left promiscuous mode [ 657.624042][T15396] netlink: 'syz.0.2682': attribute type 2 has an invalid length. [ 657.697439][T15396] netlink: 'syz.0.2682': attribute type 8 has an invalid length. [ 657.720299][T15396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2682'. [ 657.761743][T15387] netlink: 'syz.1.2680': attribute type 10 has an invalid length. [ 657.790434][T15387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2680'. [ 657.859109][T15387] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 657.913180][T15387] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.030451][T15387] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 658.219791][T15400] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2683'. [ 658.852653][T15416] netlink: 'syz.2.2689': attribute type 10 has an invalid length. [ 658.880507][T15416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2689'. [ 658.904926][T15416] bridge0: port 3(ipvlan1) entered blocking state [ 658.913206][T15416] bridge0: port 3(ipvlan1) entered disabled state [ 658.925587][T15416] ipvlan1: entered allmulticast mode [ 658.934712][T15416] veth0_vlan: entered allmulticast mode [ 658.946698][T15416] ipvlan1: left allmulticast mode [ 658.954565][T15416] veth0_vlan: left allmulticast mode [ 658.966115][T15416] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 659.078758][T15416] netlink: 'syz.2.2689': attribute type 10 has an invalid length. [ 659.099496][T15416] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2689'. [ 659.118250][T15416] hsr0: entered promiscuous mode [ 659.125018][T15416] bridge0: port 3(hsr0) entered blocking state [ 659.145477][T15416] bridge0: port 3(hsr0) entered disabled state [ 659.160005][T15416] hsr0: entered allmulticast mode [ 659.165115][T15416] hsr_slave_0: entered allmulticast mode [ 659.179413][T15416] hsr_slave_1: entered allmulticast mode [ 659.188601][T15416] bridge0: port 3(hsr0) entered blocking state [ 659.195030][T15416] bridge0: port 3(hsr0) entered forwarding state [ 659.772534][T15435] netlink: 'syz.2.2696': attribute type 2 has an invalid length. [ 659.787064][T15435] netlink: 'syz.2.2696': attribute type 8 has an invalid length. [ 659.806353][T15435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2696'. [ 661.022193][T15460] netlink: 'syz.2.2702': attribute type 29 has an invalid length. [ 661.081727][T15460] netlink: 'syz.2.2702': attribute type 29 has an invalid length. [ 661.139810][T15463] netlink: 'syz.2.2702': attribute type 29 has an invalid length. [ 661.320055][T15469] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 661.327114][T15469] syzkaller1: linktype set to 786 [ 661.593795][T15475] netlink: 'syz.2.2710': attribute type 2 has an invalid length. [ 661.602288][T15475] netlink: 'syz.2.2710': attribute type 8 has an invalid length. [ 661.613701][T15475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2710'. [ 663.282616][T15527] netlink: 'syz.0.2727': attribute type 2 has an invalid length. [ 663.309098][T15527] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2727'. [ 663.619842][T15536] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2731'. [ 663.951308][T15544] validate_nla: 3 callbacks suppressed [ 663.951327][T15544] netlink: 'syz.1.2734': attribute type 21 has an invalid length. [ 664.675627][T15562] syz.1.2742: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 664.736278][T15562] CPU: 1 PID: 15562 Comm: syz.1.2742 Not tainted syzkaller #0 [ 664.743854][T15562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.753988][T15562] Call Trace: [ 664.757326][T15562] [ 664.760330][T15562] dump_stack_lvl+0x18c/0x250 [ 664.765079][T15562] ? show_regs_print_info+0x20/0x20 [ 664.770350][T15562] ? load_image+0x420/0x420 [ 664.774938][T15562] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 664.781448][T15562] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 664.788038][T15562] warn_alloc+0x246/0x340 [ 664.792476][T15562] ? stack_trace_save+0xaa/0x100 [ 664.797486][T15562] ? zone_watermark_ok_safe+0x230/0x230 [ 664.803115][T15562] ? kasan_set_track+0x5f/0x70 [ 664.807967][T15562] ? kasan_set_track+0x4e/0x70 [ 664.812791][T15562] ? __kasan_kmalloc+0x8f/0xa0 [ 664.817617][T15562] ? xsk_init_queue+0xad/0x100 [ 664.822531][T15562] ? xsk_setsockopt+0x4e5/0x760 [ 664.827446][T15562] ? do_sock_setsockopt+0x175/0x1a0 [ 664.832695][T15562] ? __x64_sys_setsockopt+0x182/0x200 [ 664.838155][T15562] __vmalloc_node_range+0x126/0x1330 [ 664.843539][T15562] ? free_vm_area+0x50/0x50 [ 664.848136][T15562] vmalloc_user+0x74/0x80 [ 664.852560][T15562] ? xskq_create+0xbf/0x170 [ 664.857128][T15562] xskq_create+0xbf/0x170 [ 664.861525][T15562] xsk_init_queue+0xad/0x100 [ 664.866212][T15562] xsk_setsockopt+0x4e5/0x760 [ 664.870958][T15562] ? xsk_poll+0x680/0x680 [ 664.875356][T15562] ? __fget_files+0x28/0x4b0 [ 664.880049][T15562] ? __fget_files+0x28/0x4b0 [ 664.884697][T15562] ? aa_sock_opt_perm+0x74/0x100 [ 664.889698][T15562] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 664.895326][T15562] ? security_socket_setsockopt+0x7e/0xa0 [ 664.901128][T15562] ? xsk_poll+0x680/0x680 [ 664.905522][T15562] do_sock_setsockopt+0x175/0x1a0 [ 664.910630][T15562] ? __fdget+0x180/0x210 [ 664.914989][T15562] __x64_sys_setsockopt+0x182/0x200 [ 664.920255][T15562] do_syscall_64+0x55/0xa0 [ 664.924770][T15562] ? clear_bhb_loop+0x40/0x90 [ 664.929525][T15562] ? clear_bhb_loop+0x40/0x90 [ 664.934282][T15562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.940283][T15562] RIP: 0033:0x7fe99e59cdd9 [ 664.944775][T15562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.964526][T15562] RSP: 002b:00007fe99f52b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 664.973048][T15562] RAX: ffffffffffffffda RBX: 00007fe99e815fa0 RCX: 00007fe99e59cdd9 [ 664.981079][T15562] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 664.989150][T15562] RBP: 00007fe99e632d69 R08: 0000000000000004 R09: 0000000000000000 [ 664.997184][T15562] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 665.005212][T15562] R13: 00007fe99e816038 R14: 00007fe99e815fa0 R15: 00007ffc2b057908 [ 665.013290][T15562] [ 665.046522][T15573] netlink: 'syz.3.2745': attribute type 2 has an invalid length. [ 665.057482][T15562] Mem-Info: [ 665.074698][T15562] active_anon:18009 inactive_anon:0 isolated_anon:0 [ 665.074698][T15562] active_file:18802 inactive_file:40168 isolated_file:0 [ 665.074698][T15562] unevictable:768 dirty:121 writeback:25 [ 665.074698][T15562] slab_reclaimable:10430 slab_unreclaimable:94308 [ 665.074698][T15562] mapped:25375 shmem:1361 pagetables:581 [ 665.074698][T15562] sec_pagetables:0 bounce:0 [ 665.074698][T15562] kernel_misc_reclaimable:0 [ 665.074698][T15562] free:1327393 free_pcp:9977 free_cma:0 [ 665.135196][T15573] netlink: 'syz.3.2745': attribute type 8 has an invalid length. [ 665.147311][T15573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2745'. [ 665.176166][T15562] Node 0 active_anon:71952kB inactive_anon:0kB active_file:75208kB inactive_file:160472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101584kB dirty:448kB writeback:28kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10672kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no [ 665.301110][T15562] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 665.340962][T15562] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 665.375937][T15562] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 665.382189][T15562] Node 0 DMA32 free:1394000kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:71916kB inactive_anon:0kB active_file:75208kB inactive_file:159640kB unevictable:1536kB writepending:476kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:27148kB local_pcp:9168kB free_cma:0kB [ 665.419432][T15577] netlink: 'syz.0.2746': attribute type 10 has an invalid length. [ 665.430531][T15562] lowmem_reserve[]: 0 0 0 0 0 [ 665.442615][T15577] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2746'. [ 665.469524][T15577] hsr0: entered promiscuous mode [ 665.486239][T15577] bridge0: port 3(hsr0) entered blocking state [ 665.495887][T15562] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 665.513944][T15577] bridge0: port 3(hsr0) entered disabled state [ 665.540470][T15577] hsr0: entered allmulticast mode [ 665.553952][T15562] lowmem_reserve[]: 0 0 0 0 0 [ 665.558840][T15562] Node 1 Normal free:3899508kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13792kB local_pcp:3456kB free_cma:0kB [ 665.584882][T15577] hsr_slave_0: entered allmulticast mode [ 665.598609][T15562] lowmem_reserve[]: 0 0 0 0 0 [ 665.606125][T15562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 665.624682][T15562] Node 0 DMA32: 1634*4kB (UM) 781*8kB (UME) 990*16kB (UME) 1654*32kB (UME) 1423*64kB (UME) 1200*128kB (UM) 445*256kB (UM) 193*512kB (UME) 73*1024kB (UM) 29*2048kB (UM) 176*4096kB (UME) = 1394000kB [ 665.653064][T15577] hsr_slave_1: entered allmulticast mode [ 665.664870][T15562] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 665.681210][T15577] bridge0: port 3(hsr0) entered blocking state [ 665.687569][T15577] bridge0: port 3(hsr0) entered forwarding state [ 665.702942][T15562] Node 1 Normal: 225*4kB (U) 52*8kB (UE) 41*16kB (UE) 194*32kB (UE) 62*64kB (UME) 12*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899508kB [ 665.729923][T15562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.746386][T15562] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 665.784627][T15562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.829014][T15562] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 665.913367][T15562] 60331 total pagecache pages [ 665.918156][T15562] 0 pages in swap cache [ 665.958012][T15562] Free swap = 124996kB [ 665.984667][T15562] Total swap = 124996kB [ 665.993349][T15562] 2097051 pages RAM [ 665.997299][T15562] 0 pages HighMem/MovableOnly [ 666.011094][T15562] 416927 pages reserved [ 666.015338][T15562] 0 pages cma reserved [ 666.026924][T15583] netlink: 'syz.2.2748': attribute type 7 has an invalid length. [ 668.155055][T15603] netlink: 'syz.2.2756': attribute type 10 has an invalid length. [ 668.166891][T15603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2756'. [ 668.193637][T15603] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 668.213657][T15603] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.274402][T15603] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 668.438005][T15609] netlink: 'syz.0.2758': attribute type 2 has an invalid length. [ 668.478452][T15609] netlink: 'syz.0.2758': attribute type 8 has an invalid length. [ 668.495484][T15609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2758'. [ 668.520686][T15611] netlink: 'syz.1.2760': attribute type 40 has an invalid length. [ 669.662068][T15636] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 669.675316][T15636] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2768'. [ 670.029886][T15647] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2772'. [ 670.041178][T15636] netlink: 'syz.2.2768': attribute type 10 has an invalid length. [ 670.174623][T15636] team0: Device ipvlan1 failed to register rx_handler [ 670.510922][T15655] netlink: 'syz.1.2775': attribute type 2 has an invalid length. [ 670.529970][T15655] netlink: 'syz.1.2775': attribute type 8 has an invalid length. [ 670.552355][T15655] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2775'. [ 670.635623][T15659] netlink: 'syz.2.2777': attribute type 2 has an invalid length. [ 670.647941][T15659] netlink: 'syz.2.2777': attribute type 8 has an invalid length. [ 670.657345][T15659] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2777'. [ 670.713974][T15657] netlink: 'syz.3.2776': attribute type 5 has an invalid length. [ 675.413036][T15701] netlink: 'syz.0.2793': attribute type 2 has an invalid length. [ 675.429913][T15701] netlink: 'syz.0.2793': attribute type 8 has an invalid length. [ 675.437948][T15701] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2793'. [ 686.454207][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.460638][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.068506][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 688.078336][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 688.087281][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 688.096600][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 688.104603][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 688.113858][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 690.210207][ T5777] Bluetooth: hci1: command tx timeout [ 691.089528][T13814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 691.112563][T15726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 691.121268][T15726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 691.129542][T15726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 691.138871][T15726] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 691.148905][T15726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 692.290095][T15726] Bluetooth: hci1: command tx timeout [ 693.170926][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 693.177224][T15726] Bluetooth: hci5: command tx timeout [ 694.370203][T15726] Bluetooth: hci1: command tx timeout [ 695.249855][T15726] Bluetooth: hci5: command tx timeout [ 696.459685][T15726] Bluetooth: hci1: command tx timeout [ 696.620951][ T5777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 696.631565][ T5777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 696.639756][ T5777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 696.648539][ T5777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 696.656584][ T5777] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 696.664663][ T5777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 696.767663][T15738] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 696.780375][T15738] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 696.789589][T15738] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 696.799037][T15738] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 696.807581][T15738] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 696.815876][T15738] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 697.329975][T15726] Bluetooth: hci5: command tx timeout [ 699.517186][T15726] Bluetooth: hci5: command tx timeout [ 709.431251][T15743] Bluetooth: hci2: command 0x0406 tx timeout [ 723.895293][T15744] Bluetooth: hci3: command 0x0406 tx timeout [ 748.934377][T15750] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 748.944346][T15750] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 748.952684][T15750] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 748.962790][T15750] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 748.971003][T15750] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 748.978893][T15750] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 748.986683][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.005246][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.506352][T15750] Bluetooth: hci0: command 0x0406 tx timeout [ 752.003531][T15754] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 752.013296][T15754] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 752.022218][T15754] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 752.030782][T15754] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 752.038622][T15754] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 752.046541][T15754] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 757.487691][T15761] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 757.497630][T15761] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 757.510037][T15761] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 757.518438][T15761] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 757.530994][T15761] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 757.545022][T15761] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 757.748001][ T5781] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 757.767614][ T5781] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 757.776409][ T5781] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 757.792430][ T5781] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 757.801752][ T5781] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 757.809310][ T5781] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 803.159638][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 803.166453][ C0] rcu: 0-....: (10465 ticks this GP) idle=6e84/1/0x4000000000000000 softirq=60791/60868 fqs=4482 [ 803.178301][ C0] rcu: hardirqs softirqs csw/system [ 803.184757][ C0] rcu: number: 1414906 181 0 [ 803.191247][ C0] rcu: cputime: 24447 28041 40 ==> 52490(ms) [ 803.199085][ C0] rcu: (t=10500 jiffies g=73013 q=819 ncpus=2) [ 803.205361][ C0] CPU: 0 PID: 15685 Comm: syz.3.2786 Not tainted syzkaller #0 [ 803.212849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.222944][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 803.229117][ C0] Code: 48 8b 3d dc f9 03 0d 48 89 de 5b e9 d3 67 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 803.248730][ C0] RSP: 0018:ffffc90000007cf0 EFLAGS: 00000286 [ 803.254807][ C0] RAX: ffffffff89f39027 RBX: 0000000000000000 RCX: ffff8880250e9e00 [ 803.262783][ C0] RDX: 0000000000000101 RSI: ffffffff8acac9e0 RDI: 00000000ffffffff [ 803.270762][ C0] RBP: 0000000000000001 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 803.278759][ C0] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: ffff888043a803c0 [ 803.286762][ C0] R13: 1ffff11010654150 R14: ffff8880832a0a80 R15: ffff8880831d9610 [ 803.294759][ C0] FS: 00007fd5b89866c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 803.303696][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.310306][ C0] CR2: 00007ffe181aff32 CR3: 000000008590e000 CR4: 00000000003506f0 [ 803.318301][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 803.326288][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 803.334274][ C0] Call Trace: [ 803.337558][ C0] [ 803.340431][ C0] ieee80211_handle_queued_frames+0x67/0x1a0 [ 803.346435][ C0] tasklet_action_common+0x302/0x4d0 [ 803.351739][ C0] ? trace_raw_output_tasklet+0xc0/0xc0 [ 803.357349][ C0] handle_softirqs+0x280/0x820 [ 803.362127][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 803.366912][ C0] ? do_softirq+0x1a0/0x1a0 [ 803.371450][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 803.376689][ C0] __irq_exit_rcu+0xd3/0x190 [ 803.381302][ C0] ? irq_exit_rcu+0x20/0x20 [ 803.385824][ C0] irq_exit_rcu+0x9/0x20 [ 803.390076][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 803.395728][ C0] [ 803.398666][ C0] [ 803.401610][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 803.407652][ C0] RIP: 0010:finish_task_switch+0x32a/0x8f0 [ 803.413557][ C0] Code: 42 0f b6 04 28 84 c0 0f 85 a6 02 00 00 f7 03 20 00 00 00 0f 85 93 01 00 00 4c 89 ff be 04 00 00 00 e8 da ef 81 00 f0 41 ff 0f <0f> 84 a4 00 00 00 81 7d a8 80 00 00 00 0f 84 ac 00 00 00 48 83 c4 [ 803.433197][ C0] RSP: 0018:ffffc90004e2f5b8 EFLAGS: 00000202 [ 803.439276][ C0] RAX: 1ffff11004a1d401 RBX: ffff8880250eb458 RCX: ffffffff815d6b36 [ 803.447278][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017c6a600 [ 803.455272][ C0] RBP: ffffc90004e2f610 R08: ffff888017c6a603 R09: 1ffff11002f8d4c0 [ 803.463250][ C0] R10: dffffc0000000000 R11: ffffed1002f8d4c1 R12: ffff8880250ea340 [ 803.471229][ C0] R13: dffffc0000000000 R14: ffff8880186e5a00 R15: ffff888017c6a600 [ 803.479222][ C0] ? finish_task_switch+0x326/0x8f0 [ 803.484450][ C0] ? finish_task_switch+0x326/0x8f0 [ 803.489664][ C0] __schedule+0x155b/0x45a0 [ 803.494200][ C0] ? mark_lock+0x94/0x320 [ 803.498543][ C0] ? asan.module_dtor+0x20/0x20 [ 803.503418][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 803.509695][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 803.515688][ C0] ? preempt_schedule+0xc0/0xd0 [ 803.520544][ C0] preempt_schedule_common+0x82/0xc0 [ 803.525838][ C0] preempt_schedule+0xc0/0xd0 [ 803.530544][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 803.536186][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 803.541411][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 803.547715][ C0] preempt_schedule_thunk+0x1a/0x30 [ 803.552938][ C0] _raw_spin_unlock_irq+0x40/0x50 [ 803.557976][ C0] acct_collect+0x5db/0x790 [ 803.562517][ C0] ? acct_exit_ns+0xf0/0xf0 [ 803.567033][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 803.573195][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 803.578419][ C0] do_exit+0x863/0x2460 [ 803.582604][ C0] ? lock_chain_count+0x20/0x20 [ 803.587477][ C0] ? put_task_struct+0xc0/0xc0 [ 803.592261][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 803.598428][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 803.603652][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 803.609824][ C0] do_group_exit+0x21b/0x2d0 [ 803.614434][ C0] ? _raw_spin_unlock_irq+0x29/0x50 [ 803.619665][ C0] get_signal+0x12fc/0x13f0 [ 803.624193][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 803.629760][ C0] ? lock_chain_count+0x20/0x20 [ 803.634624][ C0] ? get_sigframe_size+0x20/0x20 [ 803.639596][ C0] exit_to_user_mode_loop+0x70/0x110 [ 803.644921][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 803.650481][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 803.655983][ C0] do_syscall_64+0x61/0xa0 [ 803.660436][ C0] ? clear_bhb_loop+0x40/0x90 [ 803.665121][ C0] ? clear_bhb_loop+0x40/0x90 [ 803.669832][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.675733][ C0] RIP: 0033:0x7fd5b7b9cdd9 [ 803.680155][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.699789][ C0] RSP: 002b:00007fd5b8986028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 803.708214][ C0] RAX: 00000000000000cc RBX: 00007fd5b7e16090 RCX: 00007fd5b7b9cdd9 [ 803.716190][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 803.724171][ C0] RBP: 00007fd5b7c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 803.732148][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 803.740130][ C0] R13: 00007fd5b7e16128 R14: 00007fd5b7e16090 R15: 00007ffd7348dfa8 [ 803.748128][ C0] [ 810.641245][T15769] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 810.651829][T15769] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 810.661827][T15769] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 810.670622][T15769] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 810.689835][T15769] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 810.697440][T15769] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2