last executing test programs: 7.406396073s ago: executing program 1 (id=3045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000400)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x34}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000080)=[{0x30, 0x1, 0x0, 0xfffff034}, {0x6, 0x1, 0x1, 0x40}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xba3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0x6, 0x7}, 0x101000, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xa}, 0x10}, 0x80) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000005c0)={r3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0x77, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xaa, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0xfffffe50, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x3}, {0xd, 0x5}]}, @enum64={0x4, 0x5, 0x0, 0x13, 0x0, 0x2, [{0xa, 0x4, 0x4}, {0xc, 0x4, 0x6}, {0x7, 0x287, 0x3864}, {0xe, 0x7, 0x6}, {0x6, 0xf, 0x743f}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @volatile={0x4, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x5}}, @struct={0x2, 0x1, 0x0, 0x4, 0x1, 0x7fff, [{0xa, 0x1, 0x2}]}, @float={0x1, 0x0, 0x0, 0x10, 0x18}, @ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @struct={0xe, 0x5, 0x0, 0x4, 0x1, 0x6, [{0x10, 0x1, 0x2}, {0xa, 0x0, 0x2}, {0x9, 0x4, 0xd}, {0x2, 0x4, 0xa6a}, {0x4, 0x4}]}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000280)=""/170, 0x128, 0xaa, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="34a600"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0300"/13], 0x50) 6.926807226s ago: executing program 1 (id=3049): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0xff7b) r1 = socket$kcm(0x2, 0x7, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4d884) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) 6.747554382s ago: executing program 1 (id=3052): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10020, 0x0, 0x0, 0x8, 0x1af, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r1) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b3f00004ec6"}) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x7ff, 0x3, &(0x7f00000001c0)=""/3, 0x41000, 0x1, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xf, 0xa0, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[r0, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000003c0)=[{0x4, 0x5, 0xa, 0x3}], 0x10, 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0}, 0x0) 6.633366442s ago: executing program 1 (id=3054): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="008d00000020"}) 6.460414877s ago: executing program 1 (id=3057): sendmsg(0xffffffffffffffff, 0x0, 0x10) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0xf9e59c88292fe920, 0x402, 0x0, 0x4, 0x4000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0xd, r0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}, {0x0}], 0x2}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @multicast2}, 0x4, 0x3, 0x1, 0x2}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001700)="eaad51a3c3a0bcb03325fa5fffe25f4e763e8c4dc9c8c253f11b01afd1517b92acb1521788020db098ca409217257581e8b00be3e890021ffb57bbd9c2855f77af594ac0287e76286502cbeee50065d61ebf6a8f0a8b28644161eccea6e692af7c6149", 0x63}, {&(0x7f0000001780)="6028af6ffc9e9a374ec7c7a09dd2aedc8be5826b1cf9d6ab517429c89c845faab89af2f5d5d1155ec31da301f68d6036fd81e2cec8c2bd179228333a6c59180949737927dc31368c8ca3a94831a3dbb3facfe09248a4f5b32a12ce02486d86fb02c007dfbc706f6b4779e59e6b9032e2b89fb3ac3d2cc0c22a6a0d44564fdabc30c8e151f3d241b3726eb5836431fa4cfdd54a", 0x93}, {&(0x7f00000002c0)="1244d0bcdd378eb9f352681b1b15a74e45a1fcc48c4a1b00ddd30da44744f445160456156a3f0acfaac825f4f80fc4a9d09fa0836b59c526655eeb9b075d", 0x3e}, {&(0x7f0000001840)="6c763f8dddfbdb8989ce9aeaaa653a8963c2cc9ff6efb7105455a0f793c987ca4e4585f45fc309e74aa8dc764c131bd615521405bf14ee4b50a7d10acf144fb3bf0a43c3a3dccd9b90023d862204c4d2b93614ee12", 0x55}, {&(0x7f00000018c0)="938d97fc74c9cf76002f4e2fe55b3416ccea84f0ed2bb98c040364c32c8e3626481a07b6300ca48c8c386b6e8ee7d6aed6dab58b816e557eec24839ded42aa67403d0e490239d2919cd5e90c57ede1713b33888b84f22fb9ba9e5a1414020785668adccaf404e614c051f2382f32921f32d8fcdac93ae5b33f6c498b743724c2505dbdbf8d29a167e4f7441f96fe889a73ed857cad748e75bf39733bb605b8b220a99c11c3844286955573ec9231fbc4c2f28b22aa33c3abe2ab69c21b953795933b5845415e29d7cec7ac79f199b358cd0588c6f2f2c96a2a9cbcc481ac8cd2aa9e", 0xe2}, {&(0x7f00000019c0)="fce56d51a8ffc657d79df05900409b4b622c752941f3f3ce87c55d9eaffd9441fbc74a3131e56e38d3354a58bcf39ac762afd0dcd74d0e997466c03e312be6dcbbd29f1eb47fc60c4a07ca8671ca77b3cfa7dcda54000c0b6095b339bc5d20a77b4400cf604e4c3a72a1541fdb30041fd34e3055ba79ea02", 0x78}, {&(0x7f0000001a40)="6ebc16565447af464ce3d294816e1a11cfda0304a7263a72", 0x18}], 0x7, 0x0, 0x0, 0x900}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB='j-\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000050000000000000000000000000000000000000046b89106df74e2e98bee0596c5f6f9040af750c32c48c1983d8036e946077c9f88a051d48889fdaf576dec8f"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000016c0)={&(0x7f0000000600)="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", &(0x7f0000000180)=""/172, &(0x7f00000002c0), &(0x7f0000001600)="fa26babba1db0cdaf67159", 0x1, r6, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c0000002d006bcd9e3fe3dc6e48aa31086b87033c0000001f03000000000000040014000d000a8a0d0000a122bf8dd34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r9, &(0x7f0000002d40)={&(0x7f0000001640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001b80)=""/172, 0xac}, {&(0x7f0000001c40)=""/109, 0x6d}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/12, 0xc}], 0x4}, 0x1) ioctl$TUNSETOFFLOAD(r8, 0x40047459, 0x1a) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080) 5.278654992s ago: executing program 1 (id=3070): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008800000000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)=[0x0], 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe7982, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x81, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) 2.563619003s ago: executing program 2 (id=3099): socket$kcm(0x2, 0x1, 0x84) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611084000000000063000000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x5040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) 2.463179372s ago: executing program 2 (id=3100): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @loopback={0xff0f000000000000}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x1c8}, 0x33c5c7fe60a346e6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000f9813fe0bd3643da0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0xffffffffffffffff, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = openat$cgroup_type(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_type(r3, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x32, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @private0, 0x20}, 0x80, 0x0}, 0x40844) 1.935486289s ago: executing program 4 (id=3106): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff0000000095007400000000009f7c9177ee43b0f7973ff49cb471b1fa3344ec1d7b00afe5fc906b357720c8bff70a48b41ae137826fc445bba69cddda9242e904"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0xa, 0x0, 0x5, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2, 0x0, 0xffffffffffffffff, 0xfffffe89}, 0x48) r1 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x2a, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x9090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42977ed9d1436a46, @perf_bp={0x0, 0xa}, 0x8020, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5d31, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0xe644, 0x1, 0x8, 0x0, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.934525829s ago: executing program 2 (id=3115): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @loopback={0xff0f000000000000}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x1c8}, 0x33c5c7fe60a346e6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000f9813fe0bd3643da0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0xffffffffffffffff, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_type(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_type(r3, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x32, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @private0, 0x20}, 0x80, 0x0}, 0x40844) 1.69360489s ago: executing program 3 (id=3107): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee2, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1.647408204s ago: executing program 4 (id=3108): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0xdab}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xb, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.513723706s ago: executing program 3 (id=3110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000002000000000000fdffffff850000003600000018110000", @ANYRES32=r2, @ANYBLOB="f8e00000006a4092ab00b7080000030000007b8af8ff000200d700a20000000000ff53420000f8ffffff0100000085005ef482000000950000002000007b"], 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xdc0, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84}, {0x6}]}) 1.503753667s ago: executing program 4 (id=3111): socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, @perf_config_ext={0x200000000000000, 0x8}}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x0, &(0x7f0000000000)="17724b568c1497", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003567d25a806f8c6394f93224fc60320011000a7403004700000037153e370248018000f01700", 0x2c}], 0x1}, 0x0) 1.297779065s ago: executing program 4 (id=3113): r0 = syz_clone(0xa0000000, &(0x7f0000000640)="4359f90b212c9a2f316f2322f6a865cc2565cc3ed4915111993b1d75c1cb66c9e076979fcd5a60e8530a8d042b41b9cf92e98932160dd6cf63206f2f119fa2c6c2efcccd4b57fdc30f3e3cc55818f19b1eecea35240edc4f2976a28e91d7970f99ae1589beb991bfa38397", 0x6b, &(0x7f0000000140), &(0x7f0000000200), &(0x7f00000002c0)="a3de7a4a36323b2cf1b3898a2deb5c14dcc931378486a4f34350d47e3baaad49f319381c9a7740555b37ee203d1afaf8fe81d62fb633243e478dc7186afd6615ea420b8aa7a676a910bf5d41b8138a7f19864950b10ed896f949c9fbd9ce2fbfc246e55b699c72") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0xd, 0x0, 0x0, 0x0, 0x5, 0x4400, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x8}, r0, 0x3, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x2, 0xfffff004}, {0x6, 0x5d, 0x44, 0x80000001}]}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000000004000000000000", @ANYRES32, @ANYBLOB="0600000004000000000100000000000000000000cd9d3816ded087870d8606b56be03787593e65f9c62f0c95f89b7d6ff62afeeca902352237123ebfe4bd4ebb064ae1e784ac3c26493eed604481aaacebfe34aedfadeaf9f3a70c97d7352f7d8f255841e94cdae97cb6fe", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB], 0x50) close(r3) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000180)={'veth0_vlan\x00', @random='\x00\a\x00\x00\v\x00'}) r6 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000005c0)={0x2, &(0x7f0000000380)=[{0x3, 0xc, 0x2, 0x401}, {0xfffc, 0x4, 0x8, 0xc92}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000000)) 1.271679767s ago: executing program 2 (id=3114): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="02007f7fffff"}) 1.186547865s ago: executing program 0 (id=3116): r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x8000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x6, 0x0) close(r2) 1.082081834s ago: executing program 2 (id=3117): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x1, 0x80, 0x1, 0x6, 0x7, 0x9, 0x0, 0x6, 0x10904, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf, 0x0, @perf_config_ext={0x8000000000000000, 0xff}, 0x212, 0x3, 0x9, 0x3, 0x8000000000000000, 0xe, 0xcefa, 0x0, 0x401, 0x0, 0x401}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000280), &(0x7f0000000080)='%pi6 \x00'}, 0x20) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = getpid() sendmsg$unix(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x20, 0x10}, 0x4ccd4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0xa27, 0x7ff, 0x9, 0x400a5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r6, 0xffffffffffffffff, 0x60000000}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb13, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x83, &(0x7f0000000880)=""/131, 0x41000, 0x41, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000380)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xa, 0x10001, 0x7}, 0x10, 0x18043, r2, 0x2, 0x0, &(0x7f00000007c0)=[{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0xd}], 0x10, 0xacbf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000a00)='./file0\x00', 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) 1.081051834s ago: executing program 0 (id=3118): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='))!,%.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() r5 = gettid() r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0xe, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x26}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x9, 0x6, 0x7, 0x783, 0x1}], &(0x7f0000000440)='syzkaller\x00', 0xfffffff8, 0x4b, &(0x7f00000007c0)=""/75, 0x40f00, 0x8ee55e21339a0930, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x4, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)=[r1, r1, r1, r1], &(0x7f0000000a40)=[{0x3, 0x3, 0xf69, 0xb}, {0x3, 0x2, 0xf, 0x2}, {0x0, 0x3, 0xf, 0xd}, {0x1, 0x1, 0x8, 0x9}, {0x0, 0x2, 0xb, 0xa}, {0x4, 0x5, 0xb, 0x8}, {0x3, 0x2, 0x5, 0x9}, {0x2, 0x1, 0x9, 0x1}], 0x10, 0x96}, 0x94) socketpair(0x10, 0x1, 0xffff7fff, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = perf_event_open(&(0x7f0000000c00)={0x4, 0x80, 0x1, 0x9, 0xe, 0x6, 0x0, 0x5bc8, 0x2800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000bc0), 0x1}, 0x102544, 0xfff, 0x1, 0x8, 0x11f, 0x8, 0x2, 0x0, 0x4ecf, 0x0, 0x80000000}, 0x0, 0x9, r0, 0x8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='cpuset.effective_cpus\x00', 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r12, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xf, 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="ca1a0600100000bdef7a22000fb43099e1aff8a13ca610040000"], 0x0, 0x9, 0x22, &(0x7f0000000540)=""/34, 0x41100, 0x60, '\x00', r13, @fallback=0xe, r14, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xf, 0x3, 0xffffff7f}, 0x10, r15, r14, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r14, 0xffffffffffffffff, r14], &(0x7f0000000b40), 0x10, 0x2e765820}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x6, '\x00', r13, r10, 0x4, 0x2, 0x4}, 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r16, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$unix(r3, &(0x7f0000000e40)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000100)="f0a99dead47e6984dea966b93d79dcfc999233a6f71e2775f980d229c8c835b571b6d230d9657dd697191e73aa8c8c7992b804470f8bee5d47a7b9434d06e4c36b9cf0ea281f356decf2041fb59d7b626fa11fdc788a5fe6c897fb5e236377ddad004b495c32748003dd8c2f815a39d591818fbb7e0af55144ec1c464bcca7a26b64a49feef19c0d74d5dc796f96", 0x8e}, {&(0x7f00000001c0)="169f2a80479a0a5d89d9e5c49f198189e59517c55c0f71f6793761c483941aeb5ba5a909dc0b11da51d29a6708303b9b770900ab2a309dfc2889f2f49fd1adfdf22cff6a0654c8e8a5b656d378d34f37bc0a9b0c20cda3863620a38af8e82321d31fc1bd8fce7906d499263a7160da553436213758afb5082bdff49b861908f0bd0f5414588058b75c1706967fee470be080aa6e3c65fbd7b64229f1b54a5d299a81f881642be7dd6732a9e86ff14ba04b3f902e0235f0e0a5755b37095a", 0xbe}, {&(0x7f0000000280)="86d21c89a018316a967b6c1311b1d359aaabe145baf197680872de45685993e3193d20fca065ea898a276c80e3b11afdc3dc4fdf71997a1ca49163a6f3736cc4f26545e5762d91943282b05bfedca51151ffd414e6ac0c284c27e34eb9ed161b1deeffbf8a57aeb80f2e9312de8361e25b5102521ec999a424e8bec2d3cd2f94aa487e9ce51860e7ef6b6c1ff22909e21baf0a8ed7e560e6c7bdfe78cb85811f0c03c182602b6367a2", 0xa9}, {&(0x7f0000000340)="45a2e2d5006a986d78ae543d764f6262c4e72850fec7f8a27e92363a893eb04a1f67290b2ea0e35671748e74346a", 0x2e}, {&(0x7f0000000500)="8fa97967b3daf35371225f3e59e5588e89bc6b6f7458174503d27e55cde70055ed75e1cd7ac09344e0a19225522ca9984ae2d9935b51850e7fc19823d3f54810ab43", 0x42}, {&(0x7f0000000580)="c909bab4716a92d13b14fada106613f2a29dd2377e09fc34b3f8fa76691e44d3673e3db8403360f19748695f105cae1a857a53631f95b4e8202cbe6d7ec5eeca8a34fbaf4308866f8a5b2c66ed6164792074408e343ae79189cce77004f09dda5cf7a363b5b6ea6fb565643e31d333993a1aa95aee3c615e027eb0b13fa90d9bf7a598356f3acb8b5d18fa546b1736d260d1f456a49ac966f3c34930fd887f0947a4", 0xa2}], 0x6, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r2, r2, r1, r0, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r2, r2, r0, r2, r6, r7, r8, r9]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r10, r11, r2]}}], 0xd8, 0x4000000}, 0x14) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000800000bb854ac5bb427f6c00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r17}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.034635898s ago: executing program 3 (id=3119): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff0000000095007400000000009f7c9177ee43b0f7973ff49cb471b1fa3344ec1d7b00afe5fc906b357720c8bff70a48b41ae137826fc445bba69cddda9242e904"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0xa, 0x0, 0x5, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2, 0x0, 0xffffffffffffffff, 0xfffffe89}, 0x48) r1 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x2a, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x9090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42977ed9d1436a46, @perf_bp={0x0, 0xa}, 0x8020, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5d31, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0xe644, 0x1, 0x8, 0x0, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 996.459142ms ago: executing program 4 (id=3120): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, 0x0) r3 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r5, 0x0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x13bb711e) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r8, r4, 0x0, r4}, 0x10) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x17e) 725.797906ms ago: executing program 3 (id=3121): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0xdab}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xb, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 682.774309ms ago: executing program 0 (id=3122): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee2, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) 605.388676ms ago: executing program 0 (id=3123): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xe) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0, 0x20}], 0x2}, 0x20000884) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xfff) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) 580.544329ms ago: executing program 3 (id=3124): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @loopback={0xff0f000000000000}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x1c8}, 0x33c5c7fe60a346e6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000f9813fe0bd3643da0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0xffffffffffffffff, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_type(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_type(r3, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x32, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @private0, 0x20}, 0x80, 0x0}, 0x40844) 158.736396ms ago: executing program 4 (id=3125): socket$kcm(0x2, 0x1, 0x84) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611084000000000063000000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x5040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r0, 0x0, 0x408c4) 151.117216ms ago: executing program 2 (id=3126): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000750000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000370300000000000085000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x6067, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0x200}, 0x80, 0x800, 0x0, 0x0, 0x0, 0x7, 0xfffd, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f2, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r4, 0x9, 0x0, 0x2d3dae4f, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020089000000000076a2295fca712a86df4541c25bfadd0dfa17164085e67742c5b64cfecb7d138400ef76ab725b19c0fe135ff65c2968244d928b7c188fd629af549f0b38a67caca5ddd39e10bd5bfd174e8fea5db6413009f246060f9f9367dcccbdef434c7fe0e9", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r9], 0x20) 105.370891ms ago: executing program 0 (id=3127): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x6, 0x0) close(r2) 2.39819ms ago: executing program 3 (id=3128): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xdf, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3}, 0x1014e0, 0x7, 0x0, 0x5, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071102d00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x7, 0xe, 0x9, 0x0, 0x62, 0x2948b, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x17c, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x8c06, 0xfe86, 0x78b0, 0x6, 0x9, 0x2, 0xfff, 0x0, 0x10000, 0x0, 0x6}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001000000dc000900000000000000f877150b8fc107beb6130254e0fc8d4a6f7b62c9493857ac5691ec35a58bafa3bb1ea42fe4fd67523bca0f0b6ce919a7691a3878fd71a4f16e09fc648f996595aaf54c1595706e4534f79e105f7165852a7cbd005dcd85e152352bcb4bc8ea31fdee844f649d1e181ba6988337f894daf512d622633bc2e98f0af20a637655ba5f1f1948c8b3c671e06f80403b8b30724035af349fa20e4323b28d7665c51a2f1273510119828133def2d9000000"], 0x18}, 0x2004fc10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xda, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="abbb0817070b015b124c4ccfddad0c29cde6faf1ca0cf56da545fb2819e04b0eb11b69ac967a817ca052d8ff061e41188d2bb202bcb282e97cba6e483e6fb4ced53dd9f9a4f00e617e1548787a9dd8240e5a1cd9c9218414c63d9999b5885322c11f3b69a152b19341ffa1ac7889e15f426b47b7c2216af6ca9859e31e17433f2aed0a47721c1f11ec7f07be97a0ff278d27d4b3a11e624c1cec9bf2ed6ab0dd042c9557bce0de44cf53402dce566c8f6d31cdc4e4e2be2c53a9783510a14ff873a3e0b3da5a8768ca13", 0xca}], 0x1, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc645}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x64, [@multicast1, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x5e, 0x1, 0xb, [{@multicast2, 0x40}, {@broadcast, 0x80}, {@loopback, 0xffffcc15}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x6, 0x4, "e55c"}, {0x2, 0xf, "6269ef8b005ce6940842c06f8e"}, {0x6, 0x3, '\''}, {0x7, 0x3, "b7"}]}, @ssrr={0x89, 0x1b, 0x84, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty, @loopback, @loopback]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x10, "212761dc9789a3dd06dea03055ef"}, @end]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@rr={0x7, 0xb, 0x38, [@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010101]}, @cipso={0x86, 0x2e, 0x3, [{0x1, 0x11, "593760398d690032695e6ee77ce725"}, {0x3, 0x9, "04f1515742b8f8"}, {0x1, 0xb, "e56cee4765d8e91cf3"}, {0x2, 0x3, "e7"}]}, @timestamp_prespec={0x44, 0x14, 0x37, 0x3, 0xd, [{@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xff77}]}, @end]}}}], 0x1b0}, 0x4800) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xe) socket$kcm(0x11, 0x0, 0x0) 0s ago: executing program 0 (id=3129): r0 = syz_clone(0xa0000000, &(0x7f0000000640)="4359f90b212c9a2f316f2322f6a865cc2565cc3ed4915111993b1d75c1cb66c9e076979fcd5a60e8530a8d042b41b9cf92e98932160dd6cf63206f2f119fa2c6c2efcccd4b57fdc30f3e3cc55818f19b1eecea35240edc4f2976a28e91d7970f99ae1589beb991bfa38397", 0x6b, &(0x7f0000000140), &(0x7f0000000200), &(0x7f00000002c0)="a3de7a4a36323b2cf1b3898a2deb5c14dcc931378486a4f34350d47e3baaad49f319381c9a7740555b37ee203d1afaf8fe81d62fb633243e478dc7186afd6615ea420b8aa7a676a910bf5d41b8138a7f19864950b10ed896f949c9fbd9ce2fbfc246e55b699c72") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0xd, 0x0, 0x0, 0x0, 0x5, 0x4400, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x8}, r0, 0x3, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x2, 0xfffff004}, {0x6, 0x5d, 0x44, 0x80000001}]}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000000004000000000000", @ANYRES32, @ANYBLOB="0600000004000000000100000000000000000000cd9d3816ded087870d8606b56be03787593e65f9c62f0c95f89b7d6ff62afeeca902352237123ebfe4bd4ebb064ae1e784ac3c26493eed604481aaacebfe34aedfadeaf9f3a70c97d7352f7d8f255841e94cdae97cb6fe", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB], 0x50) close(r3) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000180)={'veth0_vlan\x00', @random='\x00\a\x00\x00\v\x00'}) r6 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000005c0)={0x2, &(0x7f0000000380)=[{0x3, 0xc, 0x2, 0x401}, {0xfffc, 0x4, 0x8, 0xc92}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000000)) kernel console output (not intermixed with test programs): T10766] ? __sctp_connect+0xd80/0xd80 [ 318.631101][T10766] ? __local_bh_enable_ip+0x136/0x1c0 [ 318.636503][T10766] ? _local_bh_enable+0xa0/0xa0 [ 318.641380][T10766] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 318.646959][T10766] ? security_sctp_bind_connect+0x85/0xb0 [ 318.652716][T10766] sctp_sendmsg+0x158d/0x2900 [ 318.657436][T10766] ? aa_sk_perm+0x7dc/0x910 [ 318.661954][T10766] ? sctp_getsockopt+0x8a0/0x8a0 [ 318.666916][T10766] ? aa_af_perm+0x340/0x340 [ 318.671442][T10766] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 318.677885][T10766] ? sock_rps_record_flow+0x17/0x3b0 [ 318.683208][T10766] ? inet_sendmsg+0x78/0x2f0 [ 318.687816][T10766] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 318.693122][T10766] ? security_socket_sendmsg+0x7c/0xa0 [ 318.698605][T10766] ? inet_send_prepare+0x260/0x260 [ 318.703735][T10766] ____sys_sendmsg+0x5b7/0x8f0 [ 318.708531][T10766] ? __sys_sendmsg_sock+0x30/0x30 [ 318.713581][T10766] ? import_iovec+0x6f/0xa0 [ 318.718146][T10766] ___sys_sendmsg+0x236/0x2e0 [ 318.722849][T10766] ? __sys_sendmsg+0x2a0/0x2a0 [ 318.727648][T10766] ? ktime_get_real_ts64+0x440/0x440 [ 318.732972][T10766] __se_sys_sendmsg+0x1af/0x290 [ 318.737854][T10766] ? __x64_sys_sendmsg+0x80/0x80 [ 318.742811][T10766] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 318.748846][T10766] ? lockdep_hardirqs_on+0x94/0x140 [ 318.754070][T10766] do_syscall_64+0x4c/0xa0 [ 318.758501][T10766] ? clear_bhb_loop+0x30/0x80 [ 318.763189][T10766] ? clear_bhb_loop+0x30/0x80 [ 318.767902][T10766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.773815][T10766] RIP: 0033:0x7f6303d0e629 [ 318.778245][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.797872][T10766] RSP: 002b:00007f6301f68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.806326][T10766] RAX: ffffffffffffffda RBX: 00007f6303f87fa0 RCX: 00007f6303d0e629 [ 318.814326][T10766] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000008 [ 318.822336][T10766] RBP: 00007f6301f68090 R08: 0000000000000000 R09: 0000000000000000 [ 318.830341][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.838338][T10766] R13: 00007f6303f88038 R14: 00007f6303f87fa0 R15: 00007ffe70f1bbb8 [ 318.846338][T10766] [ 318.963766][T10766] netlink: 'syz.2.2310': attribute type 10 has an invalid length. [ 319.758660][T10803] netlink: 'syz.1.2319': attribute type 4 has an invalid length. [ 319.847193][T10803] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2319'. [ 320.162773][T10803] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 321.194326][T10815] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2322'. [ 321.330761][T10819] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2323'. [ 322.113931][T10829] netlink: 'syz.1.2326': attribute type 3 has an invalid length. [ 322.122538][T10829] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2326'. [ 322.313832][T10846] FAULT_INJECTION: forcing a failure. [ 322.313832][T10846] name failslab, interval 1, probability 0, space 0, times 0 [ 322.336554][T10846] CPU: 0 PID: 10846 Comm: syz.3.2331 Not tainted syzkaller #0 [ 322.344087][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.354166][T10846] Call Trace: [ 322.357474][T10846] [ 322.360425][T10846] dump_stack_lvl+0x188/0x250 [ 322.365141][T10846] ? show_regs_print_info+0x20/0x20 [ 322.370365][T10846] ? load_image+0x400/0x400 [ 322.374899][T10846] ? __might_sleep+0xf0/0xf0 [ 322.379532][T10846] ? __lock_acquire+0x7d10/0x7d10 [ 322.384597][T10846] should_fail+0x38c/0x4c0 [ 322.389042][T10846] should_failslab+0x5/0x20 [ 322.393564][T10846] slab_pre_alloc_hook+0x51/0xc0 [ 322.398509][T10846] __kmalloc+0x6b/0x330 [ 322.402711][T10846] ? bpf_test_init+0xf8/0x1b0 [ 322.407413][T10846] ? __lock_acquire+0x7d10/0x7d10 [ 322.412498][T10846] bpf_test_init+0xf8/0x1b0 [ 322.417015][T10846] bpf_prog_test_run_skb+0x181/0x1180 [ 322.422391][T10846] ? __fget_files+0x40f/0x480 [ 322.427081][T10846] ? cpu_online+0x60/0x60 [ 322.431413][T10846] bpf_prog_test_run+0x31e/0x390 [ 322.436418][T10846] __sys_bpf+0x5a5/0x6f0 [ 322.440677][T10846] ? bpf_link_show_fdinfo+0x380/0x380 [ 322.446082][T10846] __x64_sys_bpf+0x78/0x90 [ 322.450509][T10846] do_syscall_64+0x4c/0xa0 [ 322.454936][T10846] ? clear_bhb_loop+0x30/0x80 [ 322.459624][T10846] ? clear_bhb_loop+0x30/0x80 [ 322.464317][T10846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.470217][T10846] RIP: 0033:0x7f56751a3629 [ 322.474652][T10846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.494296][T10846] RSP: 002b:00007f56733fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.502713][T10846] RAX: ffffffffffffffda RBX: 00007f567541cfa0 RCX: 00007f56751a3629 [ 322.510696][T10846] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 322.518683][T10846] RBP: 00007f56733fd090 R08: 0000000000000000 R09: 0000000000000000 [ 322.526665][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.534645][T10846] R13: 00007f567541d038 R14: 00007f567541cfa0 R15: 00007ffc23802f68 [ 322.542640][T10846] [ 323.133120][T10873] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 324.981660][T10926] netlink: 'syz.4.2359': attribute type 21 has an invalid length. [ 324.992205][T10926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2359'. [ 326.114344][T10969] pim6reg: tun_chr_ioctl cmd 2148553947 [ 328.157002][T10984] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 328.200971][T10984] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2378'. [ 329.000788][T10985] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2378'. [ 329.571176][T11016] netlink: 'syz.2.2391': attribute type 2 has an invalid length. [ 329.627555][T11016] netlink: 'syz.2.2391': attribute type 2 has an invalid length. [ 329.654545][T11021] netlink: set zone limit has 8 unknown bytes [ 329.710508][T11024] netlink: 'syz.4.2393': attribute type 10 has an invalid length. [ 329.784062][T11024] team0: Port device geneve1 added [ 329.956406][T11032] netlink: 'syz.2.2397': attribute type 4 has an invalid length. [ 329.964217][T11032] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2397'. [ 330.241210][T11042] FAULT_INJECTION: forcing a failure. [ 330.241210][T11042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.304784][T11042] CPU: 1 PID: 11042 Comm: syz.2.2401 Not tainted syzkaller #0 [ 330.312323][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.322489][T11042] Call Trace: [ 330.325791][T11042] [ 330.328870][T11042] dump_stack_lvl+0x188/0x250 [ 330.333577][T11042] ? show_regs_print_info+0x20/0x20 [ 330.338798][T11042] ? load_image+0x400/0x400 [ 330.343426][T11042] ? __lock_acquire+0x7d10/0x7d10 [ 330.348482][T11042] should_fail+0x38c/0x4c0 [ 330.352934][T11042] _copy_from_user+0x2e/0x170 [ 330.357639][T11042] iovec_from_user+0x142/0x370 [ 330.362430][T11042] __import_iovec+0x70/0x490 [ 330.367051][T11042] import_iovec+0x6f/0xa0 [ 330.371410][T11042] ___sys_sendmsg+0x1fd/0x2e0 [ 330.376125][T11042] ? __sys_sendmsg+0x2a0/0x2a0 [ 330.380930][T11042] ? ktime_get_real_ts64+0x440/0x440 [ 330.386270][T11042] __se_sys_sendmsg+0x1af/0x290 [ 330.391150][T11042] ? __x64_sys_sendmsg+0x80/0x80 [ 330.396126][T11042] ? syscall_enter_from_user_mode+0x2a/0x70 [ 330.402049][T11042] do_syscall_64+0x4c/0xa0 [ 330.406586][T11042] ? clear_bhb_loop+0x30/0x80 [ 330.411301][T11042] ? clear_bhb_loop+0x30/0x80 [ 330.416014][T11042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 330.421925][T11042] RIP: 0033:0x7f6303d0e629 [ 330.426355][T11042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.445990][T11042] RSP: 002b:00007f6301f68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.454441][T11042] RAX: ffffffffffffffda RBX: 00007f6303f87fa0 RCX: 00007f6303d0e629 [ 330.462450][T11042] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 330.470454][T11042] RBP: 00007f6301f68090 R08: 0000000000000000 R09: 0000000000000000 [ 330.478466][T11042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.486465][T11042] R13: 00007f6303f88038 R14: 00007f6303f87fa0 R15: 00007ffe70f1bbb8 [ 330.494485][T11042] [ 330.822468][T11075] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.2411'. [ 331.091596][T11081] netlink: 'syz.0.2416': attribute type 4 has an invalid length. [ 331.137768][T11081] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2416'. [ 331.147892][T11081] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 331.688901][T11097] FAULT_INJECTION: forcing a failure. [ 331.688901][T11097] name failslab, interval 1, probability 0, space 0, times 0 [ 331.760665][T11097] CPU: 0 PID: 11097 Comm: syz.2.2421 Not tainted syzkaller #0 [ 331.768202][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.778271][T11097] Call Trace: [ 331.781592][T11097] [ 331.784533][T11097] dump_stack_lvl+0x188/0x250 [ 331.789225][T11097] ? show_regs_print_info+0x20/0x20 [ 331.794440][T11097] ? load_image+0x400/0x400 [ 331.798954][T11097] ? __might_sleep+0xf0/0xf0 [ 331.803549][T11097] ? __lock_acquire+0x7d10/0x7d10 [ 331.808610][T11097] ? lockdep_init_map_type+0x98/0x900 [ 331.814007][T11097] should_fail+0x38c/0x4c0 [ 331.818435][T11097] should_failslab+0x5/0x20 [ 331.822940][T11097] slab_pre_alloc_hook+0x51/0xc0 [ 331.827879][T11097] ? security_inode_alloc+0x30/0x110 [ 331.833171][T11097] kmem_cache_alloc+0x3d/0x290 [ 331.837945][T11097] security_inode_alloc+0x30/0x110 [ 331.843081][T11097] inode_init_always+0x8f4/0xcb0 [ 331.848045][T11097] ? memset+0x1e/0x40 [ 331.852058][T11097] new_inode_pseudo+0x8e/0x210 [ 331.856849][T11097] new_inode+0x25/0x1c0 [ 331.861026][T11097] proc_get_inode+0x21/0x6f0 [ 331.865648][T11097] proc_lookup_de+0x244/0x2f0 [ 331.870378][T11097] __lookup_slow+0x29d/0x410 [ 331.874981][T11097] ? lookup_one_len+0x2d0/0x2d0 [ 331.879852][T11097] ? down_read+0x1aa/0x2e0 [ 331.884284][T11097] lookup_slow+0x53/0x70 [ 331.888537][T11097] walk_component+0x319/0x460 [ 331.893222][T11097] path_lookupat+0x169/0x440 [ 331.897820][T11097] do_o_path+0x9c/0x200 [ 331.902000][T11097] ? do_tmpfile+0x380/0x380 [ 331.906515][T11097] path_openat+0x29c7/0x2fa0 [ 331.911123][T11097] ? verify_lock_unused+0x140/0x140 [ 331.916336][T11097] ? __kasan_slab_alloc+0xb3/0xd0 [ 331.921363][T11097] ? slab_post_alloc_hook+0x4c/0x380 [ 331.926654][T11097] ? __x64_sys_openat+0x135/0x160 [ 331.931682][T11097] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.937762][T11097] ? do_filp_open+0x410/0x410 [ 331.942474][T11097] ? mark_lock+0x94/0x320 [ 331.946806][T11097] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 331.952799][T11097] do_filp_open+0x1e2/0x410 [ 331.957313][T11097] ? vfs_tmpfile+0x300/0x300 [ 331.961937][T11097] ? _raw_spin_unlock+0x24/0x40 [ 331.966796][T11097] ? alloc_fd+0x598/0x630 [ 331.971145][T11097] do_sys_openat2+0x150/0x4b0 [ 331.975833][T11097] ? do_sys_open+0xe0/0xe0 [ 331.980258][T11097] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 331.986468][T11097] __x64_sys_openat+0x135/0x160 [ 331.991330][T11097] do_syscall_64+0x4c/0xa0 [ 331.995748][T11097] ? clear_bhb_loop+0x30/0x80 [ 332.000427][T11097] ? clear_bhb_loop+0x30/0x80 [ 332.005115][T11097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.011028][T11097] RIP: 0033:0x7f6303d0e629 [ 332.015448][T11097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.035055][T11097] RSP: 002b:00007f6301f68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.043470][T11097] RAX: ffffffffffffffda RBX: 00007f6303f87fa0 RCX: 00007f6303d0e629 [ 332.051442][T11097] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 332.059414][T11097] RBP: 00007f6301f68090 R08: 0000000000000000 R09: 0000000000000000 [ 332.067404][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.075389][T11097] R13: 00007f6303f88038 R14: 00007f6303f87fa0 R15: 00007ffe70f1bbb8 [ 332.083384][T11097] [ 332.846635][T11117] netlink: 'syz.3.2429': attribute type 4 has an invalid length. [ 332.880074][T11117] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2429'. [ 332.930310][T11117] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 333.054018][T11124] netlink: 'syz.4.2431': attribute type 21 has an invalid length. [ 333.522814][T11135] device syzkaller0 entered promiscuous mode [ 333.597323][T11147] netlink: 'syz.4.2437': attribute type 21 has an invalid length. [ 334.111586][T11165] netlink: 'syz.2.2443': attribute type 4 has an invalid length. [ 334.184246][T11165] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2443'. [ 334.421685][T11172] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.2446'. [ 334.826663][T11187] netlink: 'syz.0.2451': attribute type 3 has an invalid length. [ 334.834557][T11187] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2451'. [ 335.291347][T11208] raw_sendmsg: syz.1.2457 forgot to set AF_INET. Fix it! [ 337.992256][T11275] Â: renamed from pim6reg1 [ 338.837885][T11297] netlink: 'syz.1.2497': attribute type 10 has an invalid length. [ 338.873139][T11297] bond0: (slave netdevsim0): Releasing backup interface [ 338.933096][T11293] Â: renamed from pim6reg1 [ 338.983281][T11301] netlink: 'syz.1.2497': attribute type 21 has an invalid length. [ 339.001703][T11301] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2497'. [ 339.227543][T11309] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 339.301619][T11309] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2500'. [ 339.377210][T11316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2500'. [ 339.627524][T11324] netlink: 'syz.4.2507': attribute type 27 has an invalid length. [ 339.684305][T11324] netlink: 'syz.4.2507': attribute type 3 has an invalid length. [ 339.801032][T11324] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2507'. [ 340.126017][T11336] netlink: 'syz.4.2511': attribute type 2 has an invalid length. [ 340.144617][T11336] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2511'. [ 340.322528][T11346] netlink: 'syz.2.2510': attribute type 11 has an invalid length. [ 340.344644][T11346] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2510'. [ 340.371930][T11336] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2511'. [ 340.407989][T11331] delete_channel: no stack [ 340.602917][T11356] netlink: 'syz.3.2519': attribute type 10 has an invalid length. [ 340.649851][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.657825][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.800278][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.807896][T11356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.817793][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.825098][T11356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.852670][T11372] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2522'. [ 340.866098][T11356] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 340.933823][T11367] netlink: 'syz.4.2522': attribute type 46 has an invalid length. [ 341.075962][T11368] Â: renamed from pim6reg1 [ 341.173155][T11382] FAULT_INJECTION: forcing a failure. [ 341.173155][T11382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.232439][T11382] CPU: 0 PID: 11382 Comm: syz.4.2525 Not tainted syzkaller #0 [ 341.239961][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.250037][T11382] Call Trace: [ 341.253346][T11382] [ 341.256292][T11382] dump_stack_lvl+0x188/0x250 [ 341.261003][T11382] ? show_regs_print_info+0x20/0x20 [ 341.266247][T11382] ? load_image+0x400/0x400 [ 341.270813][T11382] ? __lock_acquire+0x7d10/0x7d10 [ 341.275874][T11382] ? vfs_write+0x8b2/0xd60 [ 341.280326][T11382] should_fail+0x38c/0x4c0 [ 341.284790][T11382] _copy_from_user+0x2e/0x170 [ 341.289505][T11382] __sys_bpf+0x26d/0x6f0 [ 341.293791][T11382] ? bpf_link_show_fdinfo+0x380/0x380 [ 341.299199][T11382] ? vtime_user_exit+0x2c8/0x3e0 [ 341.304165][T11382] __x64_sys_bpf+0x78/0x90 [ 341.308601][T11382] do_syscall_64+0x4c/0xa0 [ 341.313034][T11382] ? clear_bhb_loop+0x30/0x80 [ 341.317732][T11382] ? clear_bhb_loop+0x30/0x80 [ 341.322446][T11382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 341.328375][T11382] RIP: 0033:0x7f2731b11629 [ 341.332816][T11382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.352458][T11382] RSP: 002b:00007f272fd6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.360894][T11382] RAX: ffffffffffffffda RBX: 00007f2731d8afa0 RCX: 00007f2731b11629 [ 341.368909][T11382] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 341.376905][T11382] RBP: 00007f272fd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 341.384901][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.392892][T11382] R13: 00007f2731d8b038 R14: 00007f2731d8afa0 R15: 00007ffee7542dd8 [ 341.400920][T11382] [ 342.115366][T11404] netlink: 'syz.4.2531': attribute type 11 has an invalid length. [ 342.134992][T11404] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2531'. [ 342.203062][T11410] FAULT_INJECTION: forcing a failure. [ 342.203062][T11410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.229637][T11396] delete_channel: no stack [ 342.237969][T11410] CPU: 1 PID: 11410 Comm: syz.2.2536 Not tainted syzkaller #0 [ 342.245551][T11410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.255721][T11410] Call Trace: [ 342.259021][T11410] [ 342.261961][T11410] dump_stack_lvl+0x188/0x250 [ 342.266676][T11410] ? show_regs_print_info+0x20/0x20 [ 342.271899][T11410] ? load_image+0x400/0x400 [ 342.276424][T11410] ? __lock_acquire+0x7d10/0x7d10 [ 342.281497][T11410] should_fail+0x38c/0x4c0 [ 342.285957][T11410] _copy_from_user+0x2e/0x170 [ 342.290663][T11410] __copy_msghdr_from_user+0xc9/0x630 [ 342.296069][T11410] ? verify_lock_unused+0x140/0x140 [ 342.301310][T11410] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 342.306666][T11410] ___sys_sendmsg+0x19a/0x2e0 [ 342.311379][T11410] ? __sys_sendmsg+0x2a0/0x2a0 [ 342.316198][T11410] ? vfs_write+0x8b2/0xd60 [ 342.320669][T11410] __se_sys_sendmsg+0x1af/0x290 [ 342.325546][T11410] ? __x64_sys_sendmsg+0x80/0x80 [ 342.330503][T11410] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 342.336522][T11410] ? lockdep_hardirqs_on+0x94/0x140 [ 342.341756][T11410] do_syscall_64+0x4c/0xa0 [ 342.346200][T11410] ? clear_bhb_loop+0x30/0x80 [ 342.350910][T11410] ? clear_bhb_loop+0x30/0x80 [ 342.355617][T11410] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.361529][T11410] RIP: 0033:0x7f6303d0e629 [ 342.365951][T11410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.385660][T11410] RSP: 002b:00007f6301f68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.394093][T11410] RAX: ffffffffffffffda RBX: 00007f6303f87fa0 RCX: 00007f6303d0e629 [ 342.402087][T11410] RDX: 0000000004008001 RSI: 0000200000000040 RDI: 0000000000000003 [ 342.410081][T11410] RBP: 00007f6301f68090 R08: 0000000000000000 R09: 0000000000000000 [ 342.418065][T11410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.426045][T11410] R13: 00007f6303f88038 R14: 00007f6303f87fa0 R15: 00007ffe70f1bbb8 [ 342.434081][T11410] [ 342.740647][T11428] netlink: 207220 bytes leftover after parsing attributes in process `syz.1.2541'. [ 342.752165][T11421] Â: renamed from pim6reg1 [ 343.204515][T11445] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2547'. [ 343.499353][T11446] delete_channel: no stack [ 343.644708][T11454] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.654209][T11454] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.691050][T11459] FAULT_INJECTION: forcing a failure. [ 343.691050][T11459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.790376][T11459] CPU: 0 PID: 11459 Comm: syz.3.2553 Not tainted syzkaller #0 [ 343.798004][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.808119][T11459] Call Trace: [ 343.811409][T11459] [ 343.814350][T11459] dump_stack_lvl+0x188/0x250 [ 343.819053][T11459] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.825230][T11459] ? show_regs_print_info+0x20/0x20 [ 343.830454][T11459] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.836647][T11459] should_fail+0x38c/0x4c0 [ 343.841095][T11459] _copy_from_user+0x2e/0x170 [ 343.845787][T11459] __sys_bpf+0x26d/0x6f0 [ 343.850057][T11459] ? bpf_link_show_fdinfo+0x380/0x380 [ 343.855480][T11459] __x64_sys_bpf+0x78/0x90 [ 343.859917][T11459] do_syscall_64+0x4c/0xa0 [ 343.864352][T11459] ? clear_bhb_loop+0x30/0x80 [ 343.869044][T11459] ? clear_bhb_loop+0x30/0x80 [ 343.873759][T11459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.879669][T11459] RIP: 0033:0x7f56751a3629 [ 343.884109][T11459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.903731][T11459] RSP: 002b:00007f56733fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.912171][T11459] RAX: ffffffffffffffda RBX: 00007f567541cfa0 RCX: 00007f56751a3629 [ 343.920172][T11459] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012 [ 343.928160][T11459] RBP: 00007f56733fd090 R08: 0000000000000000 R09: 0000000000000000 [ 343.936153][T11459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.944136][T11459] R13: 00007f567541d038 R14: 00007f567541cfa0 R15: 00007ffc23802f68 [ 343.952136][T11459] [ 344.022057][T11454] team0: Port device bridge0 removed [ 344.141442][T11454] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.148941][T11454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.157234][T11454] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.164497][T11454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.226228][T11454] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 344.322935][T11469] validate_nla: 9 callbacks suppressed [ 344.322965][T11469] netlink: 'syz.1.2556': attribute type 17 has an invalid length. [ 344.373108][T11469] netlink: 'syz.1.2556': attribute type 16 has an invalid length. [ 344.396615][T11469] __nla_validate_parse: 1 callbacks suppressed [ 344.396644][T11469] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2556'. [ 344.604645][T11481] netlink: 'syz.1.2562': attribute type 2 has an invalid length. [ 344.705914][T11489] FAULT_INJECTION: forcing a failure. [ 344.705914][T11489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.734732][T11489] CPU: 0 PID: 11489 Comm: syz.4.2564 Not tainted syzkaller #0 [ 344.742261][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.752332][T11489] Call Trace: [ 344.755633][T11489] [ 344.758584][T11489] dump_stack_lvl+0x188/0x250 [ 344.763289][T11489] ? show_regs_print_info+0x20/0x20 [ 344.768513][T11489] ? load_image+0x400/0x400 [ 344.773059][T11489] ? __lock_acquire+0x7d10/0x7d10 [ 344.778112][T11489] should_fail+0x38c/0x4c0 [ 344.782559][T11489] _copy_from_user+0x2e/0x170 [ 344.787275][T11489] __copy_msghdr_from_user+0xc9/0x630 [ 344.792691][T11489] ? verify_lock_unused+0x140/0x140 [ 344.797926][T11489] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 344.803245][T11489] ? perf_tp_event+0xa92/0xbf0 [ 344.808031][T11489] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 344.813885][T11489] ___sys_sendmsg+0x19a/0x2e0 [ 344.818606][T11489] ? __sys_sendmsg+0x2a0/0x2a0 [ 344.823449][T11489] __se_sys_sendmsg+0x1af/0x290 [ 344.828336][T11489] ? __x64_sys_sendmsg+0x80/0x80 [ 344.833294][T11489] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 344.839310][T11489] ? lockdep_hardirqs_on+0x94/0x140 [ 344.844548][T11489] do_syscall_64+0x4c/0xa0 [ 344.848984][T11489] ? clear_bhb_loop+0x30/0x80 [ 344.853766][T11489] ? clear_bhb_loop+0x30/0x80 [ 344.858471][T11489] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.864401][T11489] RIP: 0033:0x7f2731b11629 [ 344.868840][T11489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.888569][T11489] RSP: 002b:00007f272fd6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.897023][T11489] RAX: ffffffffffffffda RBX: 00007f2731d8afa0 RCX: 00007f2731b11629 [ 344.905019][T11489] RDX: 0000000008040880 RSI: 0000200000000080 RDI: 0000000000000003 [ 344.913034][T11489] RBP: 00007f272fd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 344.921027][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.929018][T11489] R13: 00007f2731d8b038 R14: 00007f2731d8afa0 R15: 00007ffee7542dd8 [ 344.937030][T11489] [ 344.957277][T11496] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 345.000352][T11496] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2565'. [ 345.298180][T11503] netlink: 'syz.4.2573': attribute type 17 has an invalid length. [ 345.328480][T11503] netlink: 'syz.4.2573': attribute type 16 has an invalid length. [ 345.381786][T11503] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2573'. [ 348.215131][T11510] netlink: 'syz.2.2571': attribute type 10 has an invalid length. [ 348.225485][T11510] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.232945][T11510] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.998524][T11548] netlink: 'syz.2.2588': attribute type 17 has an invalid length. [ 349.014920][T11548] netlink: 'syz.2.2588': attribute type 16 has an invalid length. [ 349.033227][T11548] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2588'. [ 349.532621][T11565] FAULT_INJECTION: forcing a failure. [ 349.532621][T11565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.561760][T11565] CPU: 0 PID: 11565 Comm: syz.2.2595 Not tainted syzkaller #0 [ 349.569378][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.579463][T11565] Call Trace: [ 349.582758][T11565] [ 349.585702][T11565] dump_stack_lvl+0x188/0x250 [ 349.590434][T11565] ? show_regs_print_info+0x20/0x20 [ 349.595654][T11565] ? load_image+0x400/0x400 [ 349.600180][T11565] ? __lock_acquire+0x7d10/0x7d10 [ 349.605244][T11565] ? __fget_files+0x40f/0x480 [ 349.610011][T11565] should_fail+0x38c/0x4c0 [ 349.614462][T11565] _copy_from_user+0x2e/0x170 [ 349.619159][T11565] bpf_obj_get_info_by_fd+0x448/0x2dc0 [ 349.624646][T11565] ? perf_tp_event+0xa92/0xbf0 [ 349.629474][T11565] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 349.635310][T11565] ? bpf_map_get_fd_by_id+0x310/0x310 [ 349.640765][T11565] ? __might_fault+0xb3/0x110 [ 349.645472][T11565] ? bpf_lsm_bpf+0x5/0x10 [ 349.649819][T11565] ? security_bpf+0x7a/0xa0 [ 349.654352][T11565] __sys_bpf+0x484/0x6f0 [ 349.658773][T11565] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 349.665056][T11565] ? bpf_link_show_fdinfo+0x380/0x380 [ 349.670485][T11565] ? rcu_nmi_exit+0x6f/0xf0 [ 349.675042][T11565] ? vtime_user_exit+0x2c8/0x3e0 [ 349.680013][T11565] __x64_sys_bpf+0x78/0x90 [ 349.684457][T11565] do_syscall_64+0x4c/0xa0 [ 349.688908][T11565] ? clear_bhb_loop+0x30/0x80 [ 349.693614][T11565] ? clear_bhb_loop+0x30/0x80 [ 349.698336][T11565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 349.704258][T11565] RIP: 0033:0x7f6303d0e629 [ 349.708749][T11565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.728388][T11565] RSP: 002b:00007f6301f68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.736852][T11565] RAX: ffffffffffffffda RBX: 00007f6303f87fa0 RCX: 00007f6303d0e629 [ 349.744845][T11565] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 000000000000000f [ 349.752834][T11565] RBP: 00007f6301f68090 R08: 0000000000000000 R09: 0000000000000000 [ 349.760835][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.768844][T11565] R13: 00007f6303f88038 R14: 00007f6303f87fa0 R15: 00007ffe70f1bbb8 [ 349.776852][T11565] [ 350.117391][T11581] netlink: 'syz.4.2602': attribute type 3 has an invalid length. [ 350.199369][T11581] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2602'. [ 350.451303][T11585] delete_channel: no stack [ 350.861198][T11602] FAULT_INJECTION: forcing a failure. [ 350.861198][T11602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.911000][T11602] CPU: 0 PID: 11602 Comm: syz.4.2611 Not tainted syzkaller #0 [ 350.918543][T11602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.928633][T11602] Call Trace: [ 350.931939][T11602] [ 350.934979][T11602] dump_stack_lvl+0x188/0x250 [ 350.939690][T11602] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 350.945914][T11602] ? show_regs_print_info+0x20/0x20 [ 350.951144][T11602] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 350.957328][T11602] should_fail+0x38c/0x4c0 [ 350.961771][T11602] _copy_from_user+0x2e/0x170 [ 350.966470][T11602] __copy_msghdr_from_user+0xc9/0x630 [ 350.971863][T11602] ? verify_lock_unused+0x140/0x140 [ 350.977092][T11602] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 350.982409][T11602] ___sys_sendmsg+0x19a/0x2e0 [ 350.987110][T11602] ? __sys_sendmsg+0x2a0/0x2a0 [ 350.991897][T11602] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 350.997644][T11602] __se_sys_sendmsg+0x1af/0x290 [ 351.002518][T11602] ? __x64_sys_sendmsg+0x80/0x80 [ 351.007489][T11602] ? syscall_enter_from_user_mode+0x2a/0x70 [ 351.013392][T11602] do_syscall_64+0x4c/0xa0 [ 351.017811][T11602] ? clear_bhb_loop+0x30/0x80 [ 351.022489][T11602] ? clear_bhb_loop+0x30/0x80 [ 351.027166][T11602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.033063][T11602] RIP: 0033:0x7f2731b11629 [ 351.037484][T11602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.057093][T11602] RSP: 002b:00007f272fd6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.065516][T11602] RAX: ffffffffffffffda RBX: 00007f2731d8afa0 RCX: 00007f2731b11629 [ 351.073611][T11602] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 351.081612][T11602] RBP: 00007f272fd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 351.089605][T11602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.097591][T11602] R13: 00007f2731d8b038 R14: 00007f2731d8afa0 R15: 00007ffee7542dd8 [ 351.105579][T11602] [ 351.153263][T11608] netlink: 'syz.3.2613': attribute type 21 has an invalid length. [ 351.180690][T11608] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2613'. [ 351.221284][T11608] netlink: 'syz.3.2613': attribute type 4 has an invalid length. [ 351.277163][T11608] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2613'. [ 351.292380][T11611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2614'. [ 351.449794][T11620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2616'. [ 351.616737][T11629] FAULT_INJECTION: forcing a failure. [ 351.616737][T11629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.655663][T11629] CPU: 1 PID: 11629 Comm: syz.2.2621 Not tainted syzkaller #0 [ 351.663181][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.673245][T11629] Call Trace: [ 351.676540][T11629] [ 351.679492][T11629] dump_stack_lvl+0x188/0x250 [ 351.684204][T11629] ? show_regs_print_info+0x20/0x20 [ 351.689423][T11629] ? load_image+0x400/0x400 [ 351.693954][T11629] ? __lock_acquire+0x7d10/0x7d10 [ 351.699010][T11629] ? vfs_write+0x8b2/0xd60 [ 351.703464][T11629] should_fail+0x38c/0x4c0 [ 351.707907][T11629] _copy_from_user+0x2e/0x170 [ 351.712610][T11629] __sys_bpf+0x26d/0x6f0 [ 351.716889][T11629] ? bpf_link_show_fdinfo+0x380/0x380 [ 351.722450][T11629] ? rcu_nmi_exit+0x6f/0xf0 [ 351.726987][T11629] ? vtime_user_exit+0x2c8/0x3e0 [ 351.731954][T11629] __x64_sys_bpf+0x78/0x90 [ 351.736411][T11629] do_syscall_64+0x4c/0xa0 [ 351.740842][T11629] ? clear_bhb_loop+0x30/0x80 [ 351.745561][T11629] ? clear_bhb_loop+0x30/0x80 [ 351.750260][T11629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.756175][T11629] RIP: 0033:0x7f6303d0e629 [ 351.760605][T11629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.780239][T11629] RSP: 002b:00007f6301f68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.788689][T11629] RAX: ffffffffffffffda RBX: 00007f6303f87fa0 RCX: 00007f6303d0e629 [ 351.796693][T11629] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 000000000000001a [ 351.804787][T11629] RBP: 00007f6301f68090 R08: 0000000000000000 R09: 0000000000000000 [ 351.812775][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.820766][T11629] R13: 00007f6303f88038 R14: 00007f6303f87fa0 R15: 00007ffe70f1bbb8 [ 351.828774][T11629] [ 352.191381][T11651] FAULT_INJECTION: forcing a failure. [ 352.191381][T11651] name failslab, interval 1, probability 0, space 0, times 0 [ 352.206141][T11649] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 352.225336][T11651] CPU: 1 PID: 11651 Comm: syz.3.2629 Not tainted syzkaller #0 [ 352.232870][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.242966][T11651] Call Trace: [ 352.246291][T11651] [ 352.249267][T11651] dump_stack_lvl+0x188/0x250 [ 352.253999][T11651] ? show_regs_print_info+0x20/0x20 [ 352.259256][T11651] ? load_image+0x400/0x400 [ 352.263824][T11651] ? __lock_acquire+0x7d10/0x7d10 [ 352.268908][T11651] should_fail+0x38c/0x4c0 [ 352.273395][T11651] should_failslab+0x5/0x20 [ 352.277947][T11651] slab_pre_alloc_hook+0x51/0xc0 [ 352.282933][T11651] __kmalloc+0x6b/0x330 [ 352.287132][T11651] ? kernfs_fop_write_iter+0x155/0x4c0 [ 352.292748][T11651] ? end_current_label_crit_section+0x14b/0x170 [ 352.299051][T11651] kernfs_fop_write_iter+0x155/0x4c0 [ 352.304464][T11651] ? iov_iter_init+0xb4/0x170 [ 352.309205][T11651] vfs_write+0x745/0xd60 [ 352.313503][T11651] ? file_end_write+0x250/0x250 [ 352.318435][T11651] ? __fget_files+0x40f/0x480 [ 352.323193][T11651] ? mutex_lock_nested+0x17/0x20 [ 352.328175][T11651] ? __fdget_pos+0x2bf/0x370 [ 352.332795][T11651] ? ksys_write+0x71/0x260 [ 352.337260][T11651] ksys_write+0x152/0x260 [ 352.341632][T11651] ? __ia32_sys_read+0x80/0x80 [ 352.346448][T11651] ? lockdep_hardirqs_on+0x94/0x140 [ 352.351701][T11651] do_syscall_64+0x4c/0xa0 [ 352.356149][T11651] ? clear_bhb_loop+0x30/0x80 [ 352.360869][T11651] ? clear_bhb_loop+0x30/0x80 [ 352.365721][T11651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.371658][T11651] RIP: 0033:0x7f56751a3629 [ 352.376130][T11651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.395783][T11651] RSP: 002b:00007f56733fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.404246][T11651] RAX: ffffffffffffffda RBX: 00007f567541cfa0 RCX: 00007f56751a3629 [ 352.412255][T11651] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000009 [ 352.420262][T11651] RBP: 00007f56733fd090 R08: 0000000000000000 R09: 0000000000000000 [ 352.428280][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.436290][T11651] R13: 00007f567541d038 R14: 00007f567541cfa0 R15: 00007ffc23802f68 [ 352.444406][T11651] [ 353.141163][T11673] netlink: 'syz.3.2635': attribute type 4 has an invalid length. [ 353.188345][T11673] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2635'. [ 353.219180][T11673] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 353.276326][T11679] device bridge_slave_1 left promiscuous mode [ 353.325331][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.374279][T11679] device bridge_slave_0 left promiscuous mode [ 353.401629][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.005345][T11698] FAULT_INJECTION: forcing a failure. [ 354.005345][T11698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.033557][T11698] CPU: 1 PID: 11698 Comm: syz.3.2643 Not tainted syzkaller #0 [ 354.041167][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 354.051248][T11698] Call Trace: [ 354.054548][T11698] [ 354.057491][T11698] dump_stack_lvl+0x188/0x250 [ 354.062191][T11698] ? show_regs_print_info+0x20/0x20 [ 354.067419][T11698] ? load_image+0x400/0x400 [ 354.072093][T11698] ? __lock_acquire+0x7d10/0x7d10 [ 354.077141][T11698] ? vfs_write+0x8b2/0xd60 [ 354.081582][T11698] should_fail+0x38c/0x4c0 [ 354.086030][T11698] _copy_from_user+0x2e/0x170 [ 354.090729][T11698] __sys_bpf+0x26d/0x6f0 [ 354.095000][T11698] ? bpf_link_show_fdinfo+0x380/0x380 [ 354.100408][T11698] ? vtime_user_exit+0x2c8/0x3e0 [ 354.105371][T11698] __x64_sys_bpf+0x78/0x90 [ 354.109814][T11698] do_syscall_64+0x4c/0xa0 [ 354.114262][T11698] ? clear_bhb_loop+0x30/0x80 [ 354.118956][T11698] ? clear_bhb_loop+0x30/0x80 [ 354.123656][T11698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 354.129566][T11698] RIP: 0033:0x7f56751a3629 [ 354.134008][T11698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.153637][T11698] RSP: 002b:00007f56733fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.162068][T11698] RAX: ffffffffffffffda RBX: 00007f567541cfa0 RCX: 00007f56751a3629 [ 354.170076][T11698] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 354.178070][T11698] RBP: 00007f56733fd090 R08: 0000000000000000 R09: 0000000000000000 [ 354.186063][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.194057][T11698] R13: 00007f567541d038 R14: 00007f567541cfa0 R15: 00007ffc23802f68 [ 354.202058][T11698] [ 354.512640][T11717] netlink: 'syz.4.2649': attribute type 4 has an invalid length. [ 354.534948][T11717] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2649'. [ 354.591718][T11717] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 354.978912][T11727] netlink: 'syz.2.2651': attribute type 10 has an invalid length. [ 355.014133][T11731] netlink: 'syz.4.2652': attribute type 10 has an invalid length. [ 355.037313][T11727] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.2651'. [ 355.054130][T11727] openvswitch: netlink: Flow key attr not present in new flow. [ 355.083553][T11731] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 355.493547][T11755] netlink: 'syz.2.2662': attribute type 4 has an invalid length. [ 355.506442][T11755] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2662'. [ 355.589792][T11758] device wg2 entered promiscuous mode [ 356.104022][T11779] netlink: 'syz.3.2670': attribute type 21 has an invalid length. [ 356.599075][T11799] netlink: 'syz.2.2675': attribute type 4 has an invalid length. [ 356.615713][T11799] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2675'. [ 356.745952][T11803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2677'. [ 358.744002][T11810] FAULT_INJECTION: forcing a failure. [ 358.744002][T11810] name failslab, interval 1, probability 0, space 0, times 0 [ 358.778245][T11810] CPU: 0 PID: 11810 Comm: syz.4.2680 Not tainted syzkaller #0 [ 358.785765][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.795835][T11810] Call Trace: [ 358.799127][T11810] [ 358.802070][T11810] dump_stack_lvl+0x188/0x250 [ 358.806780][T11810] ? show_regs_print_info+0x20/0x20 [ 358.812008][T11810] ? load_image+0x400/0x400 [ 358.816532][T11810] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 358.822541][T11810] ? lock_chain_count+0x20/0x20 [ 358.827420][T11810] should_fail+0x38c/0x4c0 [ 358.831870][T11810] should_failslab+0x5/0x20 [ 358.836394][T11810] slab_pre_alloc_hook+0x51/0xc0 [ 358.841369][T11810] ? skb_clone+0x1bd/0x350 [ 358.845815][T11810] kmem_cache_alloc+0x3d/0x290 [ 358.850599][T11810] skb_clone+0x1bd/0x350 [ 358.854872][T11810] bpf_clone_redirect+0x15f/0x470 [ 358.859915][T11810] bpf_prog_b960c4b57b3b3b2a+0x56/0x6d4 [ 358.865479][T11810] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 358.871488][T11810] ? lock_chain_count+0x20/0x20 [ 358.876350][T11810] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 358.882609][T11810] ? lockdep_hardirqs_on+0x94/0x140 [ 358.887871][T11810] ? ktime_get+0x7b/0x270 [ 358.892237][T11810] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 358.898491][T11810] ? ktime_get_real_ts64+0x440/0x440 [ 358.903791][T11810] ? read_lock_is_recursive+0x10/0x10 [ 358.909183][T11810] bpf_test_run+0x4ae/0x800 [ 358.913708][T11810] ? convert___skb_to_skb+0x4c0/0x4c0 [ 358.919083][T11810] ? eth_get_headlen+0x200/0x200 [ 358.924028][T11810] ? bpf_prog_test_run_skb+0x44a/0x1180 [ 358.929584][T11810] ? convert___skb_to_skb+0x3d/0x4c0 [ 358.934893][T11810] bpf_prog_test_run_skb+0x9cc/0x1180 [ 358.940283][T11810] ? cpu_online+0x60/0x60 [ 358.944723][T11810] bpf_prog_test_run+0x31e/0x390 [ 358.949669][T11810] __sys_bpf+0x5a5/0x6f0 [ 358.953919][T11810] ? bpf_link_show_fdinfo+0x380/0x380 [ 358.959307][T11810] ? vtime_user_exit+0x2c8/0x3e0 [ 358.964287][T11810] __x64_sys_bpf+0x78/0x90 [ 358.968744][T11810] do_syscall_64+0x4c/0xa0 [ 358.973188][T11810] ? clear_bhb_loop+0x30/0x80 [ 358.977877][T11810] ? clear_bhb_loop+0x30/0x80 [ 358.982556][T11810] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.988458][T11810] RIP: 0033:0x7f2731b11629 [ 358.992893][T11810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.012505][T11810] RSP: 002b:00007f272fd6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.020920][T11810] RAX: ffffffffffffffda RBX: 00007f2731d8afa0 RCX: 00007f2731b11629 [ 359.028908][T11810] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 359.036880][T11810] RBP: 00007f272fd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 359.044854][T11810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.052832][T11810] R13: 00007f2731d8b038 R14: 00007f2731d8afa0 R15: 00007ffee7542dd8 [ 359.060826][T11810] [ 359.309936][T11821] netlink: 'syz.2.2684': attribute type 29 has an invalid length. [ 359.324125][T11821] netlink: 'syz.2.2684': attribute type 29 has an invalid length. [ 359.348071][T11821] netlink: 'syz.2.2684': attribute type 29 has an invalid length. [ 359.375423][T11821] netlink: 'syz.2.2684': attribute type 29 has an invalid length. [ 359.504311][T11836] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2691'. [ 359.521040][T11833] netlink: 'syz.2.2692': attribute type 4 has an invalid length. [ 359.553373][T11836] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 359.565955][T11833] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2692'. [ 359.691985][T11836] netlink: 'syz.3.2691': attribute type 10 has an invalid length. [ 360.050714][T11836] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 360.119618][T11853] device syzkaller0 entered promiscuous mode [ 360.361040][T11868] device wg2 entered promiscuous mode [ 360.583834][T11884] netlink: 'syz.2.2706': attribute type 4 has an invalid length. [ 360.591941][T11884] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2706'. [ 360.669019][T11887] netlink: 'syz.1.2707': attribute type 21 has an invalid length. [ 360.687048][T11887] netlink: 'syz.1.2707': attribute type 1 has an invalid length. [ 360.695306][T11887] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2707'. [ 360.733905][T11891] netlink: 'syz.2.2710': attribute type 9 has an invalid length. [ 360.741960][T11891] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2710'. [ 360.777602][T11893] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2711'. [ 360.788906][T11893] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 360.906628][T11893] netlink: 'syz.1.2711': attribute type 10 has an invalid length. [ 360.949491][T11893] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 361.406492][T11917] netlink: 'syz.1.2720': attribute type 4 has an invalid length. [ 361.448437][T11920] FAULT_INJECTION: forcing a failure. [ 361.448437][T11920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.461972][T11917] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2720'. [ 361.506877][T11917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 361.537780][T11920] CPU: 1 PID: 11920 Comm: syz.2.2721 Not tainted syzkaller #0 [ 361.545287][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 361.555384][T11920] Call Trace: [ 361.558678][T11920] [ 361.561620][T11920] dump_stack_lvl+0x188/0x250 [ 361.566326][T11920] ? show_regs_print_info+0x20/0x20 [ 361.571548][T11920] ? load_image+0x400/0x400 [ 361.576079][T11920] ? __lock_acquire+0x7d10/0x7d10 [ 361.581147][T11920] should_fail+0x38c/0x4c0 [ 361.585599][T11920] _copy_to_user+0x2e/0x130 [ 361.590135][T11920] simple_read_from_buffer+0xe3/0x150 [ 361.595548][T11920] proc_fail_nth_read+0x1a6/0x220 [ 361.600596][T11920] ? proc_fault_inject_write+0x310/0x310 [ 361.606254][T11920] ? fsnotify_perm+0x254/0x560 [ 361.611041][T11920] ? proc_fault_inject_write+0x310/0x310 [ 361.616695][T11920] vfs_read+0x301/0xd60 [ 361.620883][T11920] ? kernel_read+0x1e0/0x1e0 [ 361.625519][T11920] ? __fget_files+0x40f/0x480 [ 361.630241][T11920] ? mutex_lock_nested+0x17/0x20 [ 361.635211][T11920] ? __fdget_pos+0x2bf/0x370 [ 361.639828][T11920] ? ksys_read+0x71/0x260 [ 361.644187][T11920] ksys_read+0x152/0x260 [ 361.648452][T11920] ? vfs_write+0xd60/0xd60 [ 361.652887][T11920] ? lockdep_hardirqs_on+0x94/0x140 [ 361.658108][T11920] do_syscall_64+0x4c/0xa0 [ 361.662549][T11920] ? clear_bhb_loop+0x30/0x80 [ 361.667253][T11920] ? clear_bhb_loop+0x30/0x80 [ 361.671953][T11920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 361.677868][T11920] RIP: 0033:0x7f6303cceece [ 361.682301][T11920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 361.701943][T11920] RSP: 002b:00007f6301f67fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.710381][T11920] RAX: ffffffffffffffda RBX: 00007f6301f686c0 RCX: 00007f6303cceece [ 361.718373][T11920] RDX: 000000000000000f RSI: 00007f6301f680a0 RDI: 0000000000000004 [ 361.726356][T11920] RBP: 00007f6301f68090 R08: 0000000000000000 R09: 0000000000000000 [ 361.734345][T11920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.742340][T11920] R13: 00007f6303f88038 R14: 00007f6303f87fa0 R15: 00007ffe70f1bbb8 [ 361.750347][T11920] [ 362.634784][T11935] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2727'. [ 362.667769][T11935] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 362.828025][T11946] netlink: 'syz.0.2727': attribute type 10 has an invalid length. [ 362.893005][T11949] device wg2 left promiscuous mode [ 362.946384][T11949] device wg2 entered promiscuous mode [ 362.995712][T11955] netlink: 'syz.2.2734': attribute type 4 has an invalid length. [ 363.008417][T11955] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2734'. [ 363.654509][T11983] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.2743'. [ 364.027843][T11993] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2745'. [ 364.136902][T11995] netlink: 'syz.2.2747': attribute type 4 has an invalid length. [ 364.178826][T11995] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2747'. [ 364.777346][T12009] netlink: 'syz.3.2752': attribute type 10 has an invalid length. [ 365.305204][T12028] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 366.350753][T12058] validate_nla: 1 callbacks suppressed [ 366.350769][T12058] netlink: 'syz.4.2773': attribute type 4 has an invalid length. [ 366.369028][T12058] __nla_validate_parse: 3 callbacks suppressed [ 366.369042][T12058] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2773'. [ 366.384964][T12058] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 366.622383][T12070] netlink: 'syz.1.2777': attribute type 3 has an invalid length. [ 366.662535][T12070] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2777'. [ 366.959584][T12088] netlink: 'syz.4.2788': attribute type 4 has an invalid length. [ 366.986015][T12088] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2788'. [ 367.052307][T12088] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 367.571110][T12093] chnl_net:caif_netlink_parms(): no params data found [ 367.762975][T12093] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.771014][T12093] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.793406][T12093] device bridge_slave_0 entered promiscuous mode [ 367.814741][T12132] netlink: 'syz.0.2800': attribute type 4 has an invalid length. [ 367.830370][T12132] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2800'. [ 367.844270][T12132] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 367.865252][T12093] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.872674][T12093] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.880914][T12093] device bridge_slave_1 entered promiscuous mode [ 367.905500][T12093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.918658][T12093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.022512][T12093] team0: Port device team_slave_0 added [ 368.078540][T12093] team0: Port device team_slave_1 added [ 368.172793][T12093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.199307][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.283209][T12093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.329885][T12093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.404966][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.454351][T12093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.541467][T12093] device hsr_slave_0 entered promiscuous mode [ 368.566713][T12093] device hsr_slave_1 entered promiscuous mode [ 368.573527][T12093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.581633][T12093] Cannot create hsr debugfs directory [ 368.721120][T12153] FAULT_INJECTION: forcing a failure. [ 368.721120][T12153] name failslab, interval 1, probability 0, space 0, times 0 [ 368.750180][T12153] CPU: 1 PID: 12153 Comm: syz.4.2807 Not tainted syzkaller #0 [ 368.757714][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.767795][T12153] Call Trace: [ 368.771088][T12153] [ 368.774044][T12153] dump_stack_lvl+0x188/0x250 [ 368.778754][T12153] ? show_regs_print_info+0x20/0x20 [ 368.783975][T12153] ? load_image+0x400/0x400 [ 368.788506][T12153] ? __might_sleep+0xf0/0xf0 [ 368.793128][T12153] ? __lock_acquire+0x7d10/0x7d10 [ 368.798178][T12153] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 368.804178][T12153] should_fail+0x38c/0x4c0 [ 368.808629][T12153] should_failslab+0x5/0x20 [ 368.813178][T12153] slab_pre_alloc_hook+0x51/0xc0 [ 368.818138][T12153] kmem_cache_alloc_node+0x47/0x2d0 [ 368.823374][T12153] ? __alloc_skb+0xf4/0x750 [ 368.827901][T12153] __alloc_skb+0xf4/0x750 [ 368.832258][T12153] inet_netconf_notify_devconf+0x16f/0x230 [ 368.838094][T12153] inetdev_event+0x702/0x1370 [ 368.842793][T12153] ? devinet_exit_net+0x220/0x220 [ 368.847927][T12153] raw_notifier_call_chain+0xcb/0x160 [ 368.853324][T12153] unregister_netdevice_many+0x1049/0x19f0 [ 368.859151][T12153] ? rcu_lock_release+0x20/0x20 [ 368.864023][T12153] ? alloc_netdev_mqs+0xc40/0xc40 [ 368.869070][T12153] ? __mutex_lock_common+0x465/0x2400 [ 368.874475][T12153] ? kasan_save_stack+0x4b/0x60 [ 368.879369][T12153] ? kasan_save_stack+0x35/0x60 [ 368.884242][T12153] ? kasan_record_aux_stack+0xb8/0x100 [ 368.889717][T12153] ? task_work_add+0x2f/0x1d0 [ 368.894452][T12153] ? memset+0x1e/0x40 [ 368.898457][T12153] unregister_netdevice_queue+0x324/0x370 [ 368.904208][T12153] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 368.910833][T12153] ? list_netdevice+0x450/0x450 [ 368.915722][T12153] ppp_release+0xec/0x1f0 [ 368.920068][T12153] ? ppp_open+0x70/0x70 [ 368.924235][T12153] __fput+0x234/0x930 [ 368.928240][T12153] task_work_run+0x125/0x1a0 [ 368.932847][T12153] exit_to_user_mode_loop+0x10f/0x130 [ 368.938241][T12153] exit_to_user_mode_prepare+0xee/0x180 [ 368.943803][T12153] syscall_exit_to_user_mode+0x16/0x40 [ 368.949287][T12153] do_syscall_64+0x58/0xa0 [ 368.953724][T12153] ? clear_bhb_loop+0x30/0x80 [ 368.958422][T12153] ? clear_bhb_loop+0x30/0x80 [ 368.963118][T12153] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.969028][T12153] RIP: 0033:0x7f2731b11629 [ 368.973460][T12153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.993098][T12153] RSP: 002b:00007f272fd6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 369.001533][T12153] RAX: 0000000000000000 RBX: 00007f2731d8afa0 RCX: 00007f2731b11629 [ 369.009524][T12153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 369.017603][T12153] RBP: 00007f272fd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 369.025626][T12153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.033608][T12153] R13: 00007f2731d8b038 R14: 00007f2731d8afa0 R15: 00007ffee7542dd8 [ 369.041612][T12153] [ 369.125949][ T4234] Bluetooth: hci5: command 0x0409 tx timeout [ 369.339431][T12157] Â: renamed from pim6reg1 [ 369.612042][T12093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.647772][T12171] netlink: 'syz.4.2812': attribute type 4 has an invalid length. [ 369.683582][T12171] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2812'. [ 369.697675][T12171] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 369.762091][T12093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.862299][T12093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.990008][T12093] bond0: (slave netdevsim0): Releasing backup interface [ 370.015684][T12093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.200886][T12093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 370.226324][T12093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 370.290560][T12093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 370.334346][T12093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.382202][T12197] Â: renamed from pim6reg1 [ 370.392282][T12203] FAULT_INJECTION: forcing a failure. [ 370.392282][T12203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.414236][T12203] CPU: 0 PID: 12203 Comm: syz.1.2823 Not tainted syzkaller #0 [ 370.421748][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.431824][T12203] Call Trace: [ 370.435114][T12203] [ 370.438055][T12203] dump_stack_lvl+0x188/0x250 [ 370.442760][T12203] ? show_regs_print_info+0x20/0x20 [ 370.447977][T12203] ? load_image+0x400/0x400 [ 370.452527][T12203] ? __lock_acquire+0x7d10/0x7d10 [ 370.457578][T12203] should_fail+0x38c/0x4c0 [ 370.462022][T12203] _copy_from_user+0x2e/0x170 [ 370.466721][T12203] __copy_msghdr_from_user+0x48a/0x630 [ 370.472212][T12203] ? verify_lock_unused+0x140/0x140 [ 370.477440][T12203] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 370.482762][T12203] ___sys_sendmsg+0x19a/0x2e0 [ 370.487482][T12203] ? __sys_sendmsg+0x2a0/0x2a0 [ 370.492286][T12203] ? ktime_get_real_ts64+0x440/0x440 [ 370.497609][T12203] __se_sys_sendmsg+0x1af/0x290 [ 370.502483][T12203] ? __x64_sys_sendmsg+0x80/0x80 [ 370.507451][T12203] ? syscall_enter_from_user_mode+0x2a/0x70 [ 370.513366][T12203] do_syscall_64+0x4c/0xa0 [ 370.517799][T12203] ? clear_bhb_loop+0x30/0x80 [ 370.522500][T12203] ? clear_bhb_loop+0x30/0x80 [ 370.527197][T12203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.533105][T12203] RIP: 0033:0x7f050f4da629 [ 370.537532][T12203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.557158][T12203] RSP: 002b:00007f050d734028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.565602][T12203] RAX: ffffffffffffffda RBX: 00007f050f753fa0 RCX: 00007f050f4da629 [ 370.573591][T12203] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 370.581582][T12203] RBP: 00007f050d734090 R08: 0000000000000000 R09: 0000000000000000 [ 370.589579][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.597575][T12203] R13: 00007f050f754038 R14: 00007f050f753fa0 R15: 00007ffe2c69d758 [ 370.605589][T12203] [ 370.662992][T12207] netlink: 'syz.0.2824': attribute type 4 has an invalid length. [ 370.677353][T12207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2824'. [ 370.688325][T12207] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 370.856568][T12214] netlink: 'syz.2.2827': attribute type 3 has an invalid length. [ 370.864581][T12214] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2827'. [ 370.900031][T12093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.971429][T12093] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.003763][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.023443][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.062915][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.080248][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.092400][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.099580][ T7420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.127169][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.140188][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.152754][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.181877][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.189042][ T7420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.205196][ T4226] Bluetooth: hci5: command 0x041b tx timeout [ 371.253048][T12228] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.2832'. [ 371.269927][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.296941][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.329039][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.340173][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.357706][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.399968][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.409618][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.447120][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.462737][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.473664][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.493265][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.512390][T12093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.591174][T12240] Â: renamed from pim6reg1 [ 371.747422][T12249] netlink: 'syz.0.2838': attribute type 4 has an invalid length. [ 371.774303][T12249] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2838'. [ 371.818793][T12249] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 371.880508][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.888267][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.911048][T12093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.999746][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.028577][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.040469][T12257] netlink: 'syz.0.2841': attribute type 17 has an invalid length. [ 372.052023][T12257] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2841'. [ 372.103951][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.123667][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.205442][T12093] device veth0_vlan entered promiscuous mode [ 372.216593][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.232635][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.245280][T12263] netlink: 'syz.1.2845': attribute type 46 has an invalid length. [ 372.258664][T12093] device veth1_vlan entered promiscuous mode [ 372.302512][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 372.311627][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 372.320259][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.339621][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.388119][T12093] device veth0_macvtap entered promiscuous mode [ 372.423038][T12093] device veth1_macvtap entered promiscuous mode [ 372.525499][T12275] netlink: 'syz.2.2851': attribute type 4 has an invalid length. [ 372.533402][T12275] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2851'. [ 372.569675][T12272] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2849'. [ 372.602973][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.635662][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.683019][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.693642][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.710706][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.721454][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.737800][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.748500][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.761839][T12093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.779221][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.790653][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.802688][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.841282][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.856042][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.880924][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.891685][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.903281][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.913514][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.924204][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.934639][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.945710][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.957597][T12093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.981340][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.993217][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.020156][T12093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.046271][T12093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.055743][T12093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.064645][T12093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.168849][ T414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.195433][ T414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.214653][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 373.244204][ T7404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.284366][ T7404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.298580][ T4226] Bluetooth: hci5: command 0x040f tx timeout [ 373.331727][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.509765][T12305] netlink: 'syz.4.2862': attribute type 4 has an invalid length. [ 373.530414][T12305] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2862'. [ 373.566331][T12305] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 373.852863][T12320] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 374.192610][T12338] netlink: 'syz.4.2876': attribute type 4 has an invalid length. [ 374.211468][T12338] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2876'. [ 374.244107][T12338] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 374.637691][T12357] FAULT_INJECTION: forcing a failure. [ 374.637691][T12357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.749485][T12357] CPU: 0 PID: 12357 Comm: syz.3.2883 Not tainted syzkaller #0 [ 374.757006][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.767078][T12357] Call Trace: [ 374.770373][T12357] [ 374.773322][T12357] dump_stack_lvl+0x188/0x250 [ 374.778014][T12357] ? show_regs_print_info+0x20/0x20 [ 374.783228][T12357] ? load_image+0x400/0x400 [ 374.787764][T12357] ? __lock_acquire+0x7d10/0x7d10 [ 374.792801][T12357] ? vfs_write+0x8b2/0xd60 [ 374.797237][T12357] should_fail+0x38c/0x4c0 [ 374.801691][T12357] _copy_from_user+0x2e/0x170 [ 374.806394][T12357] __sys_bpf+0x26d/0x6f0 [ 374.810654][T12357] ? bpf_link_show_fdinfo+0x380/0x380 [ 374.816036][T12357] ? rcu_nmi_exit+0x6f/0xf0 [ 374.820564][T12357] ? vtime_user_exit+0x2c8/0x3e0 [ 374.825520][T12357] __x64_sys_bpf+0x78/0x90 [ 374.829966][T12357] do_syscall_64+0x4c/0xa0 [ 374.834392][T12357] ? clear_bhb_loop+0x30/0x80 [ 374.839080][T12357] ? clear_bhb_loop+0x30/0x80 [ 374.843783][T12357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.849699][T12357] RIP: 0033:0x7fe79e16b629 [ 374.854137][T12357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.873757][T12357] RSP: 002b:00007fe79c3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.882213][T12357] RAX: ffffffffffffffda RBX: 00007fe79e3e5090 RCX: 00007fe79e16b629 [ 374.890196][T12357] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 374.898190][T12357] RBP: 00007fe79c3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 374.906169][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.914153][T12357] R13: 00007fe79e3e5128 R14: 00007fe79e3e5090 R15: 00007ffcc5e62728 [ 374.922156][T12357] [ 375.357015][T12370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2889'. [ 375.366421][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 375.562399][T12376] netlink: 'syz.1.2891': attribute type 4 has an invalid length. [ 375.619656][T12376] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2891'. [ 375.645110][T12376] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 375.823718][T12359] chnl_net:caif_netlink_parms(): no params data found [ 376.310312][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.317876][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.327097][T12359] device bridge_slave_0 entered promiscuous mode [ 376.342856][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.350414][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.359087][T12359] device bridge_slave_1 entered promiscuous mode [ 376.388880][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.400913][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.431542][T12359] team0: Port device team_slave_0 added [ 376.440704][T12359] team0: Port device team_slave_1 added [ 376.519956][T12359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.527980][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.555297][T12359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.567697][T12407] IPv6: Can't replace route, no match found [ 376.574363][T12359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.584987][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.611404][T12359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.623278][T12409] netlink: 'syz.0.2902': attribute type 4 has an invalid length. [ 376.638376][T12409] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2902'. [ 376.648262][T12409] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 376.710063][T12359] device hsr_slave_0 entered promiscuous mode [ 376.728276][T12413] FAULT_INJECTION: forcing a failure. [ 376.728276][T12413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.741610][T12413] CPU: 1 PID: 12413 Comm: syz.1.2904 Not tainted syzkaller #0 [ 376.743541][T12359] device hsr_slave_1 entered promiscuous mode [ 376.749096][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.749111][T12413] Call Trace: [ 376.749119][T12413] [ 376.749128][T12413] dump_stack_lvl+0x188/0x250 [ 376.749161][T12413] ? show_regs_print_info+0x20/0x20 [ 376.749185][T12413] ? load_image+0x400/0x400 [ 376.749213][T12413] ? __lock_acquire+0x7d10/0x7d10 [ 376.749243][T12413] should_fail+0x38c/0x4c0 [ 376.749273][T12413] _copy_from_user+0x2e/0x170 [ 376.749298][T12413] __copy_msghdr_from_user+0xc9/0x630 [ 376.805577][T12413] ? verify_lock_unused+0x140/0x140 [ 376.810844][T12413] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 376.816162][T12413] ___sys_sendmsg+0x19a/0x2e0 [ 376.820860][T12413] ? __sys_sendmsg+0x2a0/0x2a0 [ 376.825647][T12413] ? vfs_write+0x8b2/0xd60 [ 376.830082][T12413] __se_sys_sendmsg+0x1af/0x290 [ 376.834941][T12413] ? __x64_sys_sendmsg+0x80/0x80 [ 376.839882][T12413] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 376.845895][T12413] ? lockdep_hardirqs_on+0x94/0x140 [ 376.851165][T12413] do_syscall_64+0x4c/0xa0 [ 376.855590][T12413] ? clear_bhb_loop+0x30/0x80 [ 376.860269][T12413] ? clear_bhb_loop+0x30/0x80 [ 376.864955][T12413] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.870864][T12413] RIP: 0033:0x7f050f4da629 [ 376.875296][T12413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.894908][T12413] RSP: 002b:00007f050d734028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.903347][T12413] RAX: ffffffffffffffda RBX: 00007f050f753fa0 RCX: 00007f050f4da629 [ 376.911328][T12413] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 376.919310][T12413] RBP: 00007f050d734090 R08: 0000000000000000 R09: 0000000000000000 [ 376.927294][T12413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.935264][T12413] R13: 00007f050f754038 R14: 00007f050f753fa0 R15: 00007ffe2c69d758 [ 376.943250][T12413] [ 376.955259][T12359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.965170][T12359] Cannot create hsr debugfs directory [ 377.046000][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 377.225456][T12422] IPv6: Can't replace route, no match found [ 377.286313][T12359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.476010][T12359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.573787][T12359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.687905][ T7425] wlan1: Trigger new scan to find an IBSS to join [ 377.704538][T12434] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2913'. [ 377.755171][T12359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.805346][T12434] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2913'. [ 377.831080][T12436] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2913'. [ 377.875971][T12438] netlink: 'syz.0.2914': attribute type 4 has an invalid length. [ 377.904170][T12438] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2914'. [ 377.945516][T12438] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 378.205650][T12359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.227789][T12359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.256220][T12359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.279276][T12442] netlink: 'syz.0.2916': attribute type 4 has an invalid length. [ 378.319727][T12442] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2916'. [ 378.359396][T12442] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 378.409049][T12359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.417231][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.423582][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.620525][T12461] FAULT_INJECTION: forcing a failure. [ 378.620525][T12461] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 378.641777][T12459] device syzkaller0 entered promiscuous mode [ 378.675151][T12461] CPU: 0 PID: 12461 Comm: syz.1.2920 Not tainted syzkaller #0 [ 378.682655][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.692731][T12461] Call Trace: [ 378.696026][T12461] [ 378.698979][T12461] dump_stack_lvl+0x188/0x250 [ 378.703693][T12461] ? show_regs_print_info+0x20/0x20 [ 378.708929][T12461] ? load_image+0x400/0x400 [ 378.713453][T12461] ? __lock_acquire+0x7d10/0x7d10 [ 378.718504][T12461] ? lock_chain_count+0x20/0x20 [ 378.723394][T12461] should_fail+0x38c/0x4c0 [ 378.727859][T12461] prepare_alloc_pages+0x1e4/0x5f0 [ 378.732996][T12461] __alloc_pages+0x11b/0x480 [ 378.737619][T12461] ? zone_statistics+0x170/0x170 [ 378.742574][T12461] ? copy_page_from_iter+0x49d/0x760 [ 378.747883][T12461] ? alloc_pages+0x438/0x550 [ 378.752497][T12461] pipe_write+0x5d2/0x1aa0 [ 378.756939][T12461] ? pipe_write+0x191/0x1aa0 [ 378.761558][T12461] ? pipe_read+0x1260/0x1260 [ 378.766165][T12461] ? end_current_label_crit_section+0x14b/0x170 [ 378.772432][T12461] ? memset+0x1e/0x40 [ 378.776442][T12461] ? iov_iter_init+0xb4/0x170 [ 378.781142][T12461] vfs_write+0x745/0xd60 [ 378.785407][T12461] ? file_end_write+0x250/0x250 [ 378.790299][T12461] ? __fget_files+0x40f/0x480 [ 378.795021][T12461] ? __fdget_pos+0x1e2/0x370 [ 378.799631][T12461] ? ksys_write+0x71/0x260 [ 378.804068][T12461] ksys_write+0x152/0x260 [ 378.808423][T12461] ? __ia32_sys_read+0x80/0x80 [ 378.813209][T12461] ? lockdep_hardirqs_on+0x94/0x140 [ 378.818494][T12461] do_syscall_64+0x4c/0xa0 [ 378.822945][T12461] ? clear_bhb_loop+0x30/0x80 [ 378.827648][T12461] ? clear_bhb_loop+0x30/0x80 [ 378.832358][T12461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.838279][T12461] RIP: 0033:0x7f050f4da629 [ 378.842719][T12461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.862347][T12461] RSP: 002b:00007f050d734028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.870802][T12461] RAX: ffffffffffffffda RBX: 00007f050f753fa0 RCX: 00007f050f4da629 [ 378.878809][T12461] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 378.886812][T12461] RBP: 00007f050d734090 R08: 0000000000000000 R09: 0000000000000000 [ 378.894799][T12461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.902785][T12461] R13: 00007f050f754038 R14: 00007f050f753fa0 R15: 00007ffe2c69d758 [ 378.910797][T12461] [ 379.072220][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.097273][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.110968][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.125307][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 379.149784][T12359] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.190854][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.225338][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.245383][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.252603][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.267105][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 379.293121][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 379.316916][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.326035][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.333125][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.362746][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 379.392018][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 379.419445][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 379.437518][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.462689][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.481893][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.497473][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.516157][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.533179][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.553675][T12359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.581892][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.603405][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.616869][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.773619][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.782625][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.802165][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.827747][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.844630][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.913883][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.962266][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.008992][T12359] device veth0_vlan entered promiscuous mode [ 380.022184][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.067951][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.119180][T12359] device veth1_vlan entered promiscuous mode [ 380.150952][T12479] netlink: 'syz.3.2925': attribute type 4 has an invalid length. [ 380.169509][T12479] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2925'. [ 380.240487][T12479] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 380.287530][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 380.308587][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 380.375130][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.404295][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.423629][T12359] device veth0_macvtap entered promiscuous mode [ 380.458182][T12359] device veth1_macvtap entered promiscuous mode [ 380.469337][T12489] FAULT_INJECTION: forcing a failure. [ 380.469337][T12489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.511255][T12489] CPU: 0 PID: 12489 Comm: syz.3.2929 Not tainted syzkaller #0 [ 380.518774][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.528854][T12489] Call Trace: [ 380.532144][T12489] [ 380.535087][T12489] dump_stack_lvl+0x188/0x250 [ 380.539814][T12489] ? show_regs_print_info+0x20/0x20 [ 380.545055][T12489] ? load_image+0x400/0x400 [ 380.549580][T12489] ? __lock_acquire+0x7d10/0x7d10 [ 380.554634][T12489] should_fail+0x38c/0x4c0 [ 380.559078][T12489] _copy_from_user+0x2e/0x170 [ 380.563775][T12489] iovec_from_user+0x142/0x370 [ 380.568572][T12489] __import_iovec+0x70/0x490 [ 380.573198][T12489] import_iovec+0x6f/0xa0 [ 380.577550][T12489] ___sys_sendmsg+0x1fd/0x2e0 [ 380.582260][T12489] ? __sys_sendmsg+0x2a0/0x2a0 [ 380.587062][T12489] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 380.593692][T12489] __se_sys_sendmsg+0x1af/0x290 [ 380.598575][T12489] ? __x64_sys_sendmsg+0x80/0x80 [ 380.603545][T12489] ? syscall_enter_from_user_mode+0x2a/0x70 [ 380.609464][T12489] do_syscall_64+0x4c/0xa0 [ 380.613900][T12489] ? clear_bhb_loop+0x30/0x80 [ 380.618587][T12489] ? clear_bhb_loop+0x30/0x80 [ 380.623285][T12489] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 380.629196][T12489] RIP: 0033:0x7fe79e16b629 [ 380.633624][T12489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.653242][T12489] RSP: 002b:00007fe79c3c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.661676][T12489] RAX: ffffffffffffffda RBX: 00007fe79e3e4fa0 RCX: 00007fe79e16b629 [ 380.669664][T12489] RDX: 000000000000524c RSI: 0000200000000040 RDI: 0000000000000009 [ 380.677657][T12489] RBP: 00007fe79c3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 380.685643][T12489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.693626][T12489] R13: 00007fe79e3e5038 R14: 00007fe79e3e4fa0 R15: 00007ffcc5e62728 [ 380.701625][T12489] [ 380.727028][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.745128][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.767486][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.785039][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.805055][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.817334][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.838207][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.856473][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.873518][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.884279][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.917936][T12359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.939729][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.960166][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.971163][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.980467][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.995970][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.036084][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.054960][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.081665][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.092370][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.109549][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.120848][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.141931][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.160646][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.171838][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.203566][T12359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.211955][ T1325] Bluetooth: hci0: command 0x040f tx timeout [ 381.250915][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.262804][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.277141][T12359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.312364][T12359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.331653][T12359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.351928][T12359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.645345][ T7404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.653223][ T7404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.678817][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 381.733334][T12525] netlink: 'syz.4.2942': attribute type 4 has an invalid length. [ 381.754458][T12525] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2942'. [ 381.766063][T12525] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 381.783962][ T7425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.848316][ T7425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.862899][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 381.890531][T12531] netlink: 'syz.0.2946': attribute type 4 has an invalid length. [ 382.450341][T12558] netlink: 'syz.0.2956': attribute type 4 has an invalid length. [ 382.487708][T12558] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2956'. [ 382.507049][T12558] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 382.613877][T12567] netlink: 'syz.0.2959': attribute type 9 has an invalid length. [ 382.622297][T12567] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2959'. [ 382.645246][ T414] wlan1: Trigger new scan to find an IBSS to join [ 382.722717][T12560] Â: renamed from pim6reg1 [ 382.813345][T12562] chnl_net:caif_netlink_parms(): no params data found [ 382.915239][T12562] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.922539][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.931672][T12562] device bridge_slave_0 entered promiscuous mode [ 382.941296][T12562] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.972078][T12579] TCP: TCP_TX_DELAY enabled [ 382.982380][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.011944][T12562] device bridge_slave_1 entered promiscuous mode [ 383.065708][T12562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.083042][T12562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.114033][T12562] team0: Port device team_slave_0 added [ 383.124295][T12562] team0: Port device team_slave_1 added [ 383.178173][T12562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.193431][T12562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.240583][T12562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.267613][T12562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.282092][T12562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.309916][ T4226] Bluetooth: hci0: command 0x0419 tx timeout [ 383.327257][T12562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.457125][T12562] device hsr_slave_0 entered promiscuous mode [ 383.482978][T12562] device hsr_slave_1 entered promiscuous mode [ 383.502933][T12562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.544630][T12562] Cannot create hsr debugfs directory [ 383.571396][T12599] netlink: 'syz.2.2968': attribute type 4 has an invalid length. [ 383.580683][T12599] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2968'. [ 383.595425][ T7404] wlan1: Creating new IBSS network, BSSID 46:14:d0:a4:6c:42 [ 383.636394][T12599] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 383.960032][T12562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.207778][T12562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.235161][T12612] Â: renamed from pim6reg1 [ 384.299050][T12562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.422904][T12562] bond0: (slave netdevsim0): Releasing backup interface [ 384.433512][T12562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.583408][T12648] netlink: 'syz.1.2983': attribute type 4 has an invalid length. [ 384.593429][T12648] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2983'. [ 384.603228][T12648] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 384.645162][T12621] Bluetooth: hci2: command 0x0409 tx timeout [ 384.675532][T12562] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.710523][T12562] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.748689][T12562] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.781544][T12562] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.073552][T12562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.110061][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.120091][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.136506][T12562] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.160384][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.173868][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.185654][ T7404] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.192790][ T7404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.271797][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.305670][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.318870][T12683] FAULT_INJECTION: forcing a failure. [ 385.318870][T12683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.327825][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.350373][ T7404] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.355572][T12683] CPU: 1 PID: 12683 Comm: syz.3.2994 Not tainted syzkaller #0 [ 385.357661][ T7404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.364924][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.364937][T12683] Call Trace: [ 385.364944][T12683] [ 385.364953][T12683] dump_stack_lvl+0x188/0x250 [ 385.388112][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.388495][T12683] ? show_regs_print_info+0x20/0x20 [ 385.397558][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.401075][T12683] ? load_image+0x400/0x400 [ 385.418791][T12683] ? __lock_acquire+0x7d10/0x7d10 [ 385.423846][T12683] should_fail+0x38c/0x4c0 [ 385.428285][T12683] _copy_from_user+0x2e/0x170 [ 385.432985][T12683] __copy_msghdr_from_user+0x48a/0x630 [ 385.438468][T12683] ? verify_lock_unused+0x140/0x140 [ 385.443682][T12683] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 385.448989][T12683] ___sys_sendmsg+0x19a/0x2e0 [ 385.453667][T12683] ? __sys_sendmsg+0x2a0/0x2a0 [ 385.458486][T12683] ? vfs_write+0x8b2/0xd60 [ 385.462953][T12683] __se_sys_sendmsg+0x1af/0x290 [ 385.467831][T12683] ? __x64_sys_sendmsg+0x80/0x80 [ 385.472802][T12683] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 385.478815][T12683] ? lockdep_hardirqs_on+0x94/0x140 [ 385.484044][T12683] do_syscall_64+0x4c/0xa0 [ 385.488471][T12683] ? clear_bhb_loop+0x30/0x80 [ 385.493163][T12683] ? clear_bhb_loop+0x30/0x80 [ 385.497881][T12683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.503791][T12683] RIP: 0033:0x7fe79e16b629 [ 385.508219][T12683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.528012][T12683] RSP: 002b:00007fe79c3c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.536449][T12683] RAX: ffffffffffffffda RBX: 00007fe79e3e4fa0 RCX: 00007fe79e16b629 [ 385.544432][T12683] RDX: 0000000004008001 RSI: 0000200000000040 RDI: 0000000000000003 [ 385.552419][T12683] RBP: 00007fe79c3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 385.560398][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.568395][T12683] R13: 00007fe79e3e5038 R14: 00007fe79e3e4fa0 R15: 00007ffcc5e62728 [ 385.576409][T12683] [ 385.601203][T12676] Â: renamed from pim6reg1 [ 385.614709][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 385.631100][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.640381][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.652849][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 385.671356][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.752634][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.762223][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.779834][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.789715][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.801818][T12562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.887114][T12693] netlink: 'syz.1.2996': attribute type 4 has an invalid length. [ 385.920844][T12693] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2996'. [ 385.959017][T12693] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 386.164685][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.181647][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.213319][T12562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.726770][T12615] Bluetooth: hci2: command 0x041b tx timeout [ 386.795152][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.812364][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.853782][T12729] netlink: 'syz.1.3007': attribute type 4 has an invalid length. [ 386.877382][T12729] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3007'. [ 386.898265][T12729] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 386.953878][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.968030][T12731] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.3008'. [ 386.985979][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.036924][T12562] device veth0_vlan entered promiscuous mode [ 387.045724][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.053914][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.120049][T12562] device veth1_vlan entered promiscuous mode [ 387.378824][T12562] device veth0_macvtap entered promiscuous mode [ 387.408919][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.445847][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.479752][T12562] device veth1_macvtap entered promiscuous mode [ 387.501377][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.514308][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.557055][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.581119][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.603005][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.625013][T12757] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 387.628842][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.668202][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.693464][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.728104][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.755959][T12761] netlink: set zone limit has 8 unknown bytes [ 387.764382][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.799654][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.838239][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.875062][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.911671][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.941287][T12562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.980276][T12757] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 388.041228][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.056225][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.098845][T12759] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 388.112094][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.135076][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.156156][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.177029][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.193129][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.212144][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.223403][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.234458][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.244734][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.259134][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.270142][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.281063][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.315807][T12562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.370851][T12562] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.415745][T12765] FAULT_INJECTION: forcing a failure. [ 388.415745][T12765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.429547][T12562] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.438644][T12562] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.447684][T12562] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.465201][T12765] CPU: 1 PID: 12765 Comm: syz.0.3019 Not tainted syzkaller #0 [ 388.472699][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.482774][T12765] Call Trace: [ 388.486071][T12765] [ 388.489013][T12765] dump_stack_lvl+0x188/0x250 [ 388.493715][T12765] ? show_regs_print_info+0x20/0x20 [ 388.498934][T12765] ? load_image+0x400/0x400 [ 388.503465][T12765] ? __lock_acquire+0x7d10/0x7d10 [ 388.508511][T12765] should_fail+0x38c/0x4c0 [ 388.512957][T12765] _copy_from_user+0x2e/0x170 [ 388.517667][T12765] iovec_from_user+0x142/0x370 [ 388.522464][T12765] __import_iovec+0x70/0x490 [ 388.527090][T12765] import_iovec+0x6f/0xa0 [ 388.531446][T12765] ___sys_sendmsg+0x1fd/0x2e0 [ 388.536159][T12765] ? __sys_sendmsg+0x2a0/0x2a0 [ 388.540956][T12765] ? vfs_write+0x8b2/0xd60 [ 388.545426][T12765] __se_sys_sendmsg+0x1af/0x290 [ 388.550355][T12765] ? __x64_sys_sendmsg+0x80/0x80 [ 388.555315][T12765] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 388.561325][T12765] ? lockdep_hardirqs_on+0x94/0x140 [ 388.566550][T12765] do_syscall_64+0x4c/0xa0 [ 388.570991][T12765] ? clear_bhb_loop+0x30/0x80 [ 388.575704][T12765] ? clear_bhb_loop+0x30/0x80 [ 388.580407][T12765] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 388.586326][T12765] RIP: 0033:0x7f8b00854629 [ 388.590775][T12765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.610403][T12765] RSP: 002b:00007f8afeaae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.619042][T12765] RAX: ffffffffffffffda RBX: 00007f8b00acdfa0 RCX: 00007f8b00854629 [ 388.627048][T12765] RDX: 0000000000040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 388.635053][T12765] RBP: 00007f8afeaae090 R08: 0000000000000000 R09: 0000000000000000 [ 388.643053][T12765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.651049][T12765] R13: 00007f8b00ace038 R14: 00007f8b00acdfa0 R15: 00007ffe0c71cd98 [ 388.659054][T12765] [ 388.673660][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.702787][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.768328][T12770] netlink: 64967 bytes leftover after parsing attributes in process `syz.1.3021'. [ 388.805359][T12621] Bluetooth: hci2: command 0x040f tx timeout [ 389.091472][ T7406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.116208][ T7406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.165540][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 389.265022][ T7420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.283141][ T7420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.315343][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 389.337961][T12796] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3030'. [ 389.524284][T12791] delete_channel: no stack [ 389.760602][T12814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3036'. [ 389.876962][T12818] FAULT_INJECTION: forcing a failure. [ 389.876962][T12818] name failslab, interval 1, probability 0, space 0, times 0 [ 389.969996][T12818] CPU: 1 PID: 12818 Comm: syz.3.3037 Not tainted syzkaller #0 [ 389.977534][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.987620][T12818] Call Trace: [ 389.990930][T12818] [ 389.993904][T12818] dump_stack_lvl+0x188/0x250 [ 389.998632][T12818] ? stack_trace_save+0xf0/0xf0 [ 390.003545][T12818] ? show_regs_print_info+0x20/0x20 [ 390.008784][T12818] ? load_image+0x400/0x400 [ 390.013329][T12818] ? stack_trace_save+0xa6/0xf0 [ 390.018213][T12818] should_fail+0x38c/0x4c0 [ 390.022673][T12818] ? netlink_trim+0x180/0x220 [ 390.027387][T12818] should_failslab+0x5/0x20 [ 390.031925][T12818] slab_pre_alloc_hook+0x51/0xc0 [ 390.036882][T12818] ? netlink_trim+0x180/0x220 [ 390.041588][T12818] __kmalloc_node_track_caller+0x68/0x3a0 [ 390.047327][T12818] ? netlink_trim+0x180/0x220 [ 390.052025][T12818] ? ieee80211_ibss_disconnect+0x262/0x710 [ 390.057851][T12818] ? ieee80211_ibss_leave+0x21/0x120 [ 390.063160][T12818] ? cfg80211_leave_ibss+0x5a/0x70 [ 390.068300][T12818] ? netlink_trim+0x180/0x220 [ 390.073006][T12818] pskb_expand_head+0x127/0x10f0 [ 390.078009][T12818] netlink_trim+0x180/0x220 [ 390.082540][T12818] netlink_broadcast_filtered+0x7c/0x1170 [ 390.088339][T12818] netlink_broadcast+0x33/0x40 [ 390.093146][T12818] cfg80211_del_sta_sinfo+0x2e1/0x550 [ 390.098560][T12818] ? nl80211_send_station+0x3420/0x3420 [ 390.104170][T12818] ? trace_drv_return_int+0x7e/0x1c0 [ 390.109484][T12818] ? drv_sta_state+0x8d3/0x1060 [ 390.114403][T12818] __sta_info_destroy_part2+0x2f7/0x3f0 [ 390.119988][T12818] __sta_info_flush+0x3b7/0x460 [ 390.124891][T12818] ? sta_info_stop+0x30/0x30 [ 390.129527][T12818] ieee80211_ibss_disconnect+0x262/0x710 [ 390.135198][T12818] ieee80211_ibss_leave+0x21/0x120 [ 390.140353][T12818] __cfg80211_leave_ibss+0x1ce/0x3f0 [ 390.145686][T12818] cfg80211_leave_ibss+0x5a/0x70 [ 390.150659][T12818] cfg80211_change_iface+0x4a8/0xeb0 [ 390.155987][T12818] __cfg80211_wext_siwmode+0x1c2/0x290 [ 390.161477][T12818] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 390.167155][T12818] ? apparmor_capable+0x12c/0x190 [ 390.172200][T12818] ? full_name_hash+0x8e/0xe0 [ 390.176903][T12818] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 390.182565][T12818] ioctl_standard_call+0xd4/0x2b0 [ 390.187618][T12818] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 390.193272][T12818] wext_ioctl_dispatch+0x3da/0x470 [ 390.198400][T12818] ? wext_ioctl_dispatch+0x470/0x470 [ 390.203741][T12818] ? iw_handler_get_private+0x1e0/0x1e0 [ 390.209306][T12818] wext_handle_ioctl+0x113/0x1d0 [ 390.214277][T12818] ? call_commit_handler+0xf0/0xf0 [ 390.219425][T12818] sock_ioctl+0x143/0x710 [ 390.223775][T12818] ? sock_poll+0x410/0x410 [ 390.228231][T12818] ? bpf_lsm_file_ioctl+0x5/0x10 [ 390.233180][T12818] ? security_file_ioctl+0x7c/0xa0 [ 390.238302][T12818] ? sock_poll+0x410/0x410 [ 390.242734][T12818] __se_sys_ioctl+0xfa/0x170 [ 390.247368][T12818] do_syscall_64+0x4c/0xa0 [ 390.251793][T12818] ? clear_bhb_loop+0x30/0x80 [ 390.256477][T12818] ? clear_bhb_loop+0x30/0x80 [ 390.261170][T12818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.267191][T12818] RIP: 0033:0x7fe79e16b629 [ 390.271623][T12818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.291246][T12818] RSP: 002b:00007fe79c3c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.299677][T12818] RAX: ffffffffffffffda RBX: 00007fe79e3e4fa0 RCX: 00007fe79e16b629 [ 390.307784][T12818] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000007 [ 390.315781][T12818] RBP: 00007fe79c3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 390.323778][T12818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.331764][T12818] R13: 00007fe79e3e5038 R14: 00007fe79e3e4fa0 R15: 00007ffcc5e62728 [ 390.339796][T12818] [ 390.462660][T12822] netlink: 'syz.2.3040': attribute type 21 has an invalid length. [ 390.495176][T12822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3040'. [ 390.525000][T12822] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 390.844289][T12843] FAULT_INJECTION: forcing a failure. [ 390.844289][T12843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.886517][T12621] Bluetooth: hci2: command 0x0419 tx timeout [ 390.898708][T12843] CPU: 0 PID: 12843 Comm: syz.0.3046 Not tainted syzkaller #0 [ 390.906234][T12843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.916300][T12843] Call Trace: [ 390.919595][T12843] [ 390.922542][T12843] dump_stack_lvl+0x188/0x250 [ 390.927271][T12843] ? show_regs_print_info+0x20/0x20 [ 390.932493][T12843] ? load_image+0x400/0x400 [ 390.937027][T12843] ? __lock_acquire+0x7d10/0x7d10 [ 390.942080][T12843] ? aa_sk_perm+0x910/0x910 [ 390.946611][T12843] should_fail+0x38c/0x4c0 [ 390.951052][T12843] _copy_from_user+0x2e/0x170 [ 390.955783][T12843] sock_setsockopt+0x2e5/0x24c0 [ 390.960664][T12843] ? __sock_set_mark+0x150/0x150 [ 390.965637][T12843] ? __lock_acquire+0x7d10/0x7d10 [ 390.970686][T12843] ? aa_sk_perm+0x7dc/0x910 [ 390.975214][T12843] ? aa_af_perm+0x340/0x340 [ 390.979731][T12843] ? __fget_files+0x40f/0x480 [ 390.984450][T12843] ? aa_sock_opt_perm+0x74/0x100 [ 390.989404][T12843] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 390.994969][T12843] ? security_socket_setsockopt+0x7a/0xa0 [ 391.000704][T12843] __sys_setsockopt+0x2f6/0x3d0 [ 391.005586][T12843] __x64_sys_setsockopt+0xb1/0xc0 [ 391.010640][T12843] do_syscall_64+0x4c/0xa0 [ 391.015073][T12843] ? clear_bhb_loop+0x30/0x80 [ 391.019766][T12843] ? clear_bhb_loop+0x30/0x80 [ 391.024486][T12843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 391.030429][T12843] RIP: 0033:0x7f8b00854629 [ 391.034862][T12843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.054477][T12843] RSP: 002b:00007f8afea8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 391.062905][T12843] RAX: ffffffffffffffda RBX: 00007f8b00ace090 RCX: 00007f8b00854629 [ 391.070898][T12843] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000003 [ 391.078900][T12843] RBP: 00007f8afea8d090 R08: 0000000000000043 R09: 0000000000000000 [ 391.086898][T12843] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 391.094892][T12843] R13: 00007f8b00ace128 R14: 00007f8b00ace090 R15: 00007ffe0c71cd98 [ 391.102901][T12843] [ 391.249415][T12846] Â: renamed from pim6reg1 [ 391.919421][T12882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3057'. [ 392.150520][T12885] Â: renamed from pim6reg1 [ 392.843925][T12901] FAULT_INJECTION: forcing a failure. [ 392.843925][T12901] name failslab, interval 1, probability 0, space 0, times 0 [ 392.875968][T12901] CPU: 1 PID: 12901 Comm: syz.2.3067 Not tainted syzkaller #0 [ 392.883473][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.893549][T12901] Call Trace: [ 392.896853][T12901] [ 392.899810][T12901] dump_stack_lvl+0x188/0x250 [ 392.904511][T12901] ? show_regs_print_info+0x20/0x20 [ 392.909739][T12901] ? load_image+0x400/0x400 [ 392.914263][T12901] ? __might_sleep+0xf0/0xf0 [ 392.918870][T12901] ? __lock_acquire+0x7d10/0x7d10 [ 392.923912][T12901] ? netlink_insert+0xe95/0x11f0 [ 392.928874][T12901] should_fail+0x38c/0x4c0 [ 392.933315][T12901] should_failslab+0x5/0x20 [ 392.937930][T12901] slab_pre_alloc_hook+0x51/0xc0 [ 392.942891][T12901] kmem_cache_alloc_node+0x47/0x2d0 [ 392.948102][T12901] ? __alloc_skb+0xf4/0x750 [ 392.952636][T12901] __alloc_skb+0xf4/0x750 [ 392.956983][T12901] netlink_sendmsg+0x654/0xbe0 [ 392.961772][T12901] ? netlink_getsockopt+0x570/0x570 [ 392.967004][T12901] ? aa_sock_msg_perm+0x94/0x150 [ 392.971968][T12901] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 392.977271][T12901] ? security_socket_sendmsg+0x7c/0xa0 [ 392.982779][T12901] ? netlink_getsockopt+0x570/0x570 [ 392.987990][T12901] ____sys_sendmsg+0x5b7/0x8f0 [ 392.992791][T12901] ? __sys_sendmsg_sock+0x30/0x30 [ 392.997846][T12901] ? import_iovec+0x6f/0xa0 [ 393.002377][T12901] ___sys_sendmsg+0x236/0x2e0 [ 393.007081][T12901] ? __sys_sendmsg+0x2a0/0x2a0 [ 393.011880][T12901] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 393.017641][T12901] __se_sys_sendmsg+0x1af/0x290 [ 393.022520][T12901] ? __x64_sys_sendmsg+0x80/0x80 [ 393.027492][T12901] ? syscall_enter_from_user_mode+0x2a/0x70 [ 393.033410][T12901] do_syscall_64+0x4c/0xa0 [ 393.037849][T12901] ? clear_bhb_loop+0x30/0x80 [ 393.042542][T12901] ? clear_bhb_loop+0x30/0x80 [ 393.047245][T12901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.053174][T12901] RIP: 0033:0x7faf53971629 [ 393.057608][T12901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.077238][T12901] RSP: 002b:00007faf51bcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.085682][T12901] RAX: ffffffffffffffda RBX: 00007faf53beafa0 RCX: 00007faf53971629 [ 393.093673][T12901] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000007 [ 393.101673][T12901] RBP: 00007faf51bcb090 R08: 0000000000000000 R09: 0000000000000000 [ 393.109660][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.117712][T12901] R13: 00007faf53beb038 R14: 00007faf53beafa0 R15: 00007fff5aa88f48 [ 393.125819][T12901] [ 393.176030][T12914] netlink: 'syz.1.3070': attribute type 21 has an invalid length. [ 393.194519][T12914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3070'. [ 393.244602][T12914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3070'. [ 393.453947][T12927] Â: renamed from pim6reg1 [ 393.859237][T12945] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3082'. [ 393.895911][T12945] netlink: 6328 bytes leftover after parsing attributes in process `syz.4.3082'. [ 393.910795][T12945] tc_dump_action: action bad kind [ 394.093721][T12950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3085'. [ 394.562502][T12956] Â: renamed from pim6reg1 [ 394.909920][T12973] netlink: 'syz.0.3093': attribute type 10 has an invalid length. [ 394.962839][T12961] chnl_net:caif_netlink_parms(): no params data found [ 395.105514][T12982] FAULT_INJECTION: forcing a failure. [ 395.105514][T12982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.153234][T12982] CPU: 1 PID: 12982 Comm: syz.4.3095 Not tainted syzkaller #0 [ 395.160773][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.170878][T12982] Call Trace: [ 395.174182][T12982] [ 395.177134][T12982] dump_stack_lvl+0x188/0x250 [ 395.181849][T12982] ? show_regs_print_info+0x20/0x20 [ 395.187081][T12982] ? load_image+0x400/0x400 [ 395.191625][T12982] ? __lock_acquire+0x7d10/0x7d10 [ 395.196696][T12982] should_fail+0x38c/0x4c0 [ 395.201164][T12982] _copy_from_user+0x2e/0x170 [ 395.205871][T12982] __copy_msghdr_from_user+0xc9/0x630 [ 395.211282][T12982] ? verify_lock_unused+0x140/0x140 [ 395.216549][T12982] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 395.221910][T12982] ___sys_sendmsg+0x19a/0x2e0 [ 395.226655][T12982] ? __sys_sendmsg+0x2a0/0x2a0 [ 395.231513][T12982] ? vfs_write+0x8b2/0xd60 [ 395.235996][T12982] __se_sys_sendmsg+0x1af/0x290 [ 395.240887][T12982] ? __x64_sys_sendmsg+0x80/0x80 [ 395.245860][T12982] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 395.251940][T12982] ? lockdep_hardirqs_on+0x94/0x140 [ 395.257188][T12982] do_syscall_64+0x4c/0xa0 [ 395.261623][T12982] ? clear_bhb_loop+0x30/0x80 [ 395.266330][T12982] ? clear_bhb_loop+0x30/0x80 [ 395.271065][T12982] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.276989][T12982] RIP: 0033:0x7f08ed9af629 [ 395.281445][T12982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.301077][T12982] RSP: 002b:00007f08ebc09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.309530][T12982] RAX: ffffffffffffffda RBX: 00007f08edc28fa0 RCX: 00007f08ed9af629 [ 395.317548][T12982] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 395.325725][T12982] RBP: 00007f08ebc09090 R08: 0000000000000000 R09: 0000000000000000 [ 395.333758][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.341754][T12982] R13: 00007f08edc29038 R14: 00007f08edc28fa0 R15: 00007ffdf975aea8 [ 395.349784][T12982] [ 395.445639][T12961] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.459503][T12994] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3097'. [ 395.472756][T12994] netlink: 'syz.2.3097': attribute type 2 has an invalid length. [ 395.487308][T12961] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.504427][T12961] device bridge_slave_0 entered promiscuous mode [ 395.513324][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.520800][T12961] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.530475][T12961] device bridge_slave_1 entered promiscuous mode [ 395.629528][T12961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.641812][T12961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.723797][T12961] team0: Port device team_slave_0 added [ 395.756068][T12961] team0: Port device team_slave_1 added [ 395.784621][T12961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.815074][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.841376][T12961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.915063][T12961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.932312][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.966812][T12961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.987042][T13006] Â: renamed from pim6reg1 [ 396.068164][T12961] device hsr_slave_0 entered promiscuous mode [ 396.075750][T12961] device hsr_slave_1 entered promiscuous mode [ 396.082476][T12961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.090871][T12961] Cannot create hsr debugfs directory [ 396.375846][T12961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.559016][T12961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.570666][T12613] Bluetooth: hci1: command 0x0409 tx timeout [ 396.685910][T13012] Â: renamed from pim6reg1 [ 396.787164][T12961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.938257][T12961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.198650][T12961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.368290][T12961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.421734][T12961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.456096][T12961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 397.573504][ T414] tipc: Left network mode [ 397.946572][T13072] Â: renamed from pim6reg1 [ 398.056542][T12961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.122672][T12961] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.140302][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.156079][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.229713][T13082] netlink: 'syz.3.3128': attribute type 21 has an invalid length. [ 398.248825][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.272626][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.283962][ C0] [ 398.283970][ C0] ================================ [ 398.283975][ C0] WARNING: inconsistent lock state [ 398.283986][ C0] syzkaller #0 Not tainted [ 398.283994][ C0] -------------------------------- [ 398.283997][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 398.284004][ C0] syz.2.3126/13080 [HC2[2]:SC0[0]:HE0:SE1] takes: [ 398.284020][ C0] ffff8880773dba38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 398.284062][ C0] {INITIAL USE} state was registered at: [ 398.284068][ C0] lock_acquire+0x19e/0x400 [ 398.284087][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 398.284103][ C0] trie_update_elem+0xc7/0xc50 [ 398.284118][ C0] bpf_map_update_value+0x57d/0x650 [ 398.284135][ C0] generic_map_update_batch+0x52d/0x7d0 [ 398.284151][ C0] bpf_map_do_batch+0x466/0x600 [ 398.284168][ C0] __sys_bpf+0x671/0x6f0 [ 398.284183][ C0] __x64_sys_bpf+0x78/0x90 [ 398.284198][ C0] do_syscall_64+0x4c/0xa0 [ 398.284213][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 398.284230][ C0] irq event stamp: 8432 [ 398.284235][ C0] hardirqs last enabled at (8431): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 398.284259][ C0] hardirqs last disabled at (8432): [] irqentry_enter+0xf/0x50 [ 398.284280][ C0] softirqs last enabled at (7232): [] __irq_exit_rcu+0x13b/0x230 [ 398.284301][ C0] softirqs last disabled at (6317): [] __irq_exit_rcu+0x13b/0x230 [ 398.284327][ C0] [ 398.284327][ C0] other info that might help us debug this: [ 398.284331][ C0] Possible unsafe locking scenario: [ 398.284331][ C0] [ 398.284335][ C0] CPU0 [ 398.284337][ C0] ---- [ 398.284339][ C0] lock(&trie->lock); [ 398.284348][ C0] [ 398.284351][ C0] lock(&trie->lock); [ 398.284359][ C0] [ 398.284359][ C0] *** DEADLOCK *** [ 398.284359][ C0] [ 398.284362][ C0] 1 lock held by syz.2.3126/13080: [ 398.284370][ C0] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 398.284406][ C0] [ 398.284406][ C0] stack backtrace: [ 398.284410][ C0] CPU: 0 PID: 13080 Comm: syz.2.3126 Not tainted syzkaller #0 [ 398.284424][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.284433][ C0] Call Trace: [ 398.284438][ C0] <#DB> [ 398.284445][ C0] dump_stack_lvl+0x188/0x250 [ 398.284464][ C0] ? show_regs_print_info+0x20/0x20 [ 398.284484][ C0] ? print_usage_bug+0x42a/0x690 [ 398.284498][ C0] ? verify_lock_unused+0x18/0x140 [ 398.284516][ C0] lock_acquire+0x2c3/0x400 [ 398.284534][ C0] ? trie_delete_elem+0x90/0x710 [ 398.284550][ C0] ? read_lock_is_recursive+0x10/0x10 [ 398.284569][ C0] ? perf_trace_lock+0xe4/0x390 [ 398.284588][ C0] ? look_up_lock_class+0x71/0x110 [ 398.284605][ C0] ? verify_lock_unused+0x18/0x140 [ 398.284624][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 398.284639][ C0] ? trie_delete_elem+0x90/0x710 [ 398.284656][ C0] ? _raw_spin_lock+0x40/0x40 [ 398.284671][ C0] ? rcu_lock_acquire+0x9/0x30 [ 398.284691][ C0] trie_delete_elem+0x90/0x710 [ 398.284710][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 398.284732][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x288 [ 398.284748][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 398.284770][ C0] ? perf_event_switch_output+0x730/0x730 [ 398.284791][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 398.284810][ C0] __perf_event_overflow+0x364/0x530 [ 398.284829][ C0] perf_swevent_event+0x4ad/0x530 [ 398.284847][ C0] perf_bp_event+0x276/0x320 [ 398.284865][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 398.284880][ C0] ? perf_trace_lock+0xe4/0x390 [ 398.284910][ C0] ? rcu_lock_acquire+0x9/0x30 [ 398.284927][ C0] ? read_lock_is_recursive+0x10/0x10 [ 398.284949][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 398.284970][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 398.284991][ C0] notify_die+0x141/0x1a0 [ 398.285009][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 398.285028][ C0] ? exc_debug+0x6e/0x130 [ 398.285044][ C0] ? trace_hardirqs_off_finish+0x24/0x1f0 [ 398.285063][ C0] notify_debug+0x20/0x30 [ 398.285081][ C0] exc_debug+0xcf/0x130 [ 398.285100][ C0] asm_exc_debug+0x1a/0x40 [ 398.285117][ C0] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 398.285138][ C0] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 398.285152][ C0] RSP: 0000:ffffc90003adf640 EFLAGS: 00040806 [ 398.285167][ C0] RAX: 0000200000000300 RBX: 0000000000000000 RCX: ffff888019bbbb80 [ 398.285179][ C0] RDX: 000074656e2f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 398.285192][ C0] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 398.285201][ C0] R10: dffffc0000000000 R11: fffff5200075bf27 R12: 0000200000000300 [ 398.285213][ C0] R13: 00007fffffffeff0 R14: 00000000ffffffff R15: dffffc0000000000 [ 398.285233][ C0] [ 398.285237][ C0] [ 398.285241][ C0] perf_callchain_user+0x40e/0xfd0 [ 398.285263][ C0] ? get_callchain_entry+0x181/0x3b0 [ 398.285281][ C0] get_perf_callchain+0x33d/0x460 [ 398.285297][ C0] ? put_callchain_entry+0xb0/0xb0 [ 398.285315][ C0] ? __perf_event_header__init_id+0x3f0/0x500 [ 398.285343][ C0] perf_prepare_sample+0x352/0x1cd0 [ 398.285363][ C0] ? perf_callchain+0x190/0x190 [ 398.285383][ C0] perf_event_output_forward+0x185/0x2e0 [ 398.285400][ C0] ? perf_get_page_size+0x430/0x430 [ 398.285422][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 398.285441][ C0] __perf_event_overflow+0x364/0x530 [ 398.285460][ C0] perf_swevent_hrtimer+0x41b/0x5b0 [ 398.285479][ C0] ? cpu_clock_event_read+0x50/0x50 [ 398.285521][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 398.285537][ C0] ? _raw_spin_unlock+0x40/0x40 [ 398.285550][ C0] ? debug_object_deactivate+0x62/0x390 [ 398.285568][ C0] ? cpu_clock_event_read+0x50/0x50 [ 398.285583][ C0] __hrtimer_run_queues+0x4ad/0xb70 [ 398.285610][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 398.285646][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 398.285668][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 398.285699][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 398.285720][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 398.285740][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 398.285758][ C0] RIP: 0033:0x7faf5395043d [ 398.285773][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 398.285787][ C0] RSP: 002b:00007faf51bca8a8 EFLAGS: 00000283 [ 398.285803][ C0] RAX: 0000000000000300 RBX: 00007faf51bcade0 RCX: 0000000000000000 [ 398.285815][ C0] RDX: 0000200000000300 RSI: 00007faf53a319c0 RDI: 0000200000000300 [ 398.285827][ C0] RBP: 0000200000000300 R08: 00007faf51bcb010 R09: 00000000ffffffff [ 398.285839][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 398.285849][ C0] R13: 0000000000000073 R14: 00007faf53a06e18 R15: 00007faf51bcaea0 [ 398.285868][ C0] [ 398.986820][T12613] Bluetooth: hci1: command 0x041b tx timeout [ 399.019934][ T7422] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.027123][ T7422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.035356][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.044133][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.053606][ T7422] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.060748][ T7422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.242823][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.273138][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.288536][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.300038][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.311858][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.321366][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.340245][T12961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.351107][T12961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.381263][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.392450][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 399.409150][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.417504][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.426167][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.434416][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.443114][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.509748][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 399.517428][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 399.528991][T12961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.546840][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.556001][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.572910][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 399.581856][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.590439][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.598597][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.610316][T12961] device veth0_vlan entered promiscuous mode [ 399.622089][T12961] device veth1_vlan entered promiscuous mode [ 399.639580][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 399.647800][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 399.656181][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 399.664682][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.678943][T12961] device veth0_macvtap entered promiscuous mode [ 399.692070][T12961] device veth1_macvtap entered promiscuous mode [ 399.706510][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.717068][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.726953][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.737394][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.747583][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.758066][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.768007][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.778520][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.788731][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.799217][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.809042][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.819508][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.829359][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.839827][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.850729][T12961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.862893][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.871084][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.879303][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.887984][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.898323][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.908885][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.919090][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.929826][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.939893][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.950596][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.960647][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.971261][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.981286][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.992195][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.003871][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.016619][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.026982][T12961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.037994][T12961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.048939][T12961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.061149][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.070945][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.086077][T12961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.098895][T12961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.108487][T12961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.117701][T12961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.144256][T12961] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 400.178875][ T7422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.181396][T12961] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 400.198357][ T7422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.214700][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.231996][ T7404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.253166][ T7404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.263622][ T414] device hsr_slave_0 left promiscuous mode [ 400.270729][ T414] device hsr_slave_1 left promiscuous mode [ 400.277457][ T414] device bridge_slave_1 left promiscuous mode [ 400.283780][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.291851][ T414] device bridge_slave_0 left promiscuous mode [ 400.299576][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.309688][ T414] device veth1_macvtap left promiscuous mode [ 400.316091][ T414] device veth0_macvtap left promiscuous mode [ 400.322112][ T414] device veth1_vlan left promiscuous mode [ 400.329110][ T414] device veth0_vlan left promiscuous mode [ 400.522493][ T414] team0 (unregistering): Port device team_slave_1 removed [ 400.533993][ T414] team0 (unregistering): Port device team_slave_0 removed [ 400.546174][ T414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.560362][ T414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.593023][ T414] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 400.614766][ T414] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 400.623906][ T414] bond0 (unregistering): Released all slaves [ 400.679564][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.045600][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 403.125486][T12615] Bluetooth: hci1: command 0x0419 tx timeout