last executing test programs: 22.00030407s ago: executing program 4 (id=15149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a80000000000150101000000000085000000560000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x1000, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x80}, {0x6, 0x0, 0x0, 0x4}]}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21.504985064s ago: executing program 4 (id=15154): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xce307, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x8, 0x3}, 0x40, 0x2, 0x80, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e001c740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x400000000000000) 20.709951914s ago: executing program 2 (id=15160): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000004, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0, 0x42}, 0x28) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="184a0000fbff11000100000000080000ab98f66e6f68b68a5d3b9d13e4641498a9df59e5d3170105c653916b1938e5b2fffb4d060000009ab947e7e1adba"], &(0x7f0000000400)='syzkaller\x00', 0x101, 0x1000, &(0x7f0000002480)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x5, 0xc, 0x1, 0x8}, 0x10, 0x1ea65, 0xffffffffffffffff, 0x2, &(0x7f0000001740)=[r0, r0, r0, r4], &(0x7f0000001780)=[{0x2, 0x3, 0x400000a, 0x6}, {0x5, 0x4, 0x7}]}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffff63, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0xffffffffffffffaf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000001000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x41) 20.361286337s ago: executing program 4 (id=15162): perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x4, 0x1, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x600, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x36, 0x34, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xe}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1b}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x830d}, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000001c0)={'wlan1\x00', @remote}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0x2, 0x200000000000001, 0x106) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x17, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f000000000000000800030018000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24030000) 19.855564176s ago: executing program 2 (id=15165): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300000000000000", 0xc}, {&(0x7f0000001480)="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", 0xeb6}], 0x5}, 0x40000) 19.730506869s ago: executing program 4 (id=15166): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x1, 0x5d}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x1) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f00000002c0)={'ip6gretap0\x00', @random='D\x00\x00\x00(E'}) 19.524415312s ago: executing program 2 (id=15168): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.377303513s ago: executing program 4 (id=15170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be54eaf07c3650596", 0x35}], 0x1}, 0x4) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0xaa32, 0x6, 0xfffffffd, 0x0, 0x7f}) getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x445d3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000280)={0xffffffffffffffff, r2}) ioctl$TUNGETVNETLE(r3, 0x8955, &(0x7f0000000040)) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_macvtap\x00', @random="000500004ec6"}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1bedfffffffff7ffff0000000080000000000000", @ANYBLOB="aa173cae57e892b5cd347d574690c42f35987c0dded2a10eeee5df7632c8e12b2e2be19867d3258f8cc2da605c35d92e91f44311dc8ed132bc1c0a2b3816a08efd7484fd8b0a4fae6100eea8609e5f6cec3624cd041b38534294b8cd1548e5060fddda14865bbec126fdd69b6abbfce455a55211c11263530b87573de0aa827eb8f98733ab55d1b50158b8a3c615397a181096e350fa8ea90ea2bd133ed2f378aee545932a61374537760d90c7b4152ba2767d7e3e294efca4bf5dc74087eb41795c845fcf5d9aaa129fbec8b2a5e6c884aa3b0d261b6dad7b488e5f6a2adad77f9652d2b38a30af542f205bdeec31f0b7ce4251de51849a5a108aa49e95", @ANYBLOB="0200000018000000000000000000000000000000b291b7cb38cc6455e24b3c84e7b89cee9fba4b8ac9a18e7f701cac262d16ed4a85531154a2f961167056d78f492427cbf97da35daa97622893772ca548f310b0cb9856dce29bd6431f539e08f1de13ee0b52a798a613369b095fdc484588a33bf6716be832acd5cfe6bd21c6d19a0a0de4dfdf8c0867215be0234804bc8b53c97a07f94c9bbd6676472cb6ad91266ec307a8b5f6ca9014701b6d5b1f45242a625f786c75b05e3470630b97fbd2fb4ab57bf3196f514d2369583bd53fe7f3ff7b70fe62d7b1649dd38ef43c77a00fbc91a56dfa8767de", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000082ffffff0000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0002000000000000b7080000ffff00007b8af8ff00000000bfa20000000000b703000067044823e312317608000000b7044d00010000008500000082000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.541512088s ago: executing program 2 (id=15175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000004, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0, 0x42}, 0x28) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="184a0000fbff11000100000000080000ab98f66e6f68b68a5d3b9d13e4641498a9df59e5d3170105c653916b1938e5b2fffb4d060000009ab947e7e1adba"], &(0x7f0000000400)='syzkaller\x00', 0x101, 0x1000, &(0x7f0000002480)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x5, 0xc, 0x1, 0x8}, 0x10, 0x1ea65, 0xffffffffffffffff, 0x2, &(0x7f0000001740)=[r0, r0, r0, r4], &(0x7f0000001780)=[{0x2, 0x3, 0x400000a, 0x6}, {0x5, 0x4, 0x7}]}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffff63, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0xffffffffffffffaf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000001000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x41) 18.47996854s ago: executing program 4 (id=15176): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xf1000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) 17.322235058s ago: executing program 2 (id=15186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be54eaf07c3650596", 0x35}], 0x1}, 0x4) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0xaa32, 0x6, 0xfffffffd, 0x0, 0x7f}) getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x445d3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000280)={0xffffffffffffffff, r2}) ioctl$TUNGETVNETLE(r3, 0x8955, &(0x7f0000000040)) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_macvtap\x00', @random="000500004ec6"}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1bedfffffffff7ffff0000000080000000000000", @ANYBLOB="aa173cae57e892b5cd347d574690c42f35987c0dded2a10eeee5df7632c8e12b2e2be19867d3258f8cc2da605c35d92e91f44311dc8ed132bc1c0a2b3816a08efd7484fd8b0a4fae6100eea8609e5f6cec3624cd041b38534294b8cd1548e5060fddda14865bbec126fdd69b6abbfce455a55211c11263530b87573de0aa827eb8f98733ab55d1b50158b8a3c615397a181096e350fa8ea90ea2bd133ed2f378aee545932a61374537760d90c7b4152ba2767d7e3e294efca4bf5dc74087eb41795c845fcf5d9aaa129fbec8b2a5e6c884aa3b0d261b6dad7b488e5f6a2adad77f9652d2b38a30af542f205bdeec31f0b7ce4251de51849a5a108aa49e95", @ANYBLOB="0200000018000000000000000000000000000000b291b7cb38cc6455e24b3c84e7b89cee9fba4b8ac9a18e7f701cac262d16ed4a85531154a2f961167056d78f492427cbf97da35daa97622893772ca548f310b0cb9856dce29bd6431f539e08f1de13ee0b52a798a613369b095fdc484588a33bf6716be832acd5cfe6bd21c6d19a0a0de4dfdf8c0867215be0234804bc8b53c97a07f94c9bbd6676472cb6ad91266ec307a8b5f6ca9014701b6d5b1f45242a625f786c75b05e3470630b97fbd2fb4ab57bf3196f514d2369583bd53fe7f3ff7b70fe62d7b1649dd38ef43c77a00fbc91a56dfa8767de", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000082ffffff0000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0002000000000000b7080000ffff00007b8af8ff00000000bfa20000000000b703000067044823e312317608000000b7044d00010000008500000082000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.957157716s ago: executing program 2 (id=15189): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0xf}, 0x10c002, 0xac5d, 0x0, 0x2, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0a00000016000000b30000007f000000000000", @ANYRES32, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="000000000000000000000004f800"/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1c, &(0x7f0000000500)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226, 0x40f00}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001fc0)=ANY=[@ANYRESOCT=r3, @ANYRES8=r2, @ANYRES8=r3, @ANYRESDEC, @ANYRES64, @ANYRES16=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000002000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$kcm(0x2, 0xa, 0x2) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x18001, 0x1000005, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0x12) syz_clone(0x20000000, &(0x7f0000001e00)="00d81aa98261e175d86e670b96e25a040564803048ecb6a91a0f8ae41896d54747c47291359f263c21fd4f1a6c60d37642366da93d72bb7bce097199c07d00ccadf88852fc4fa527771621638e86", 0x4e, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000000580)="3f92520cf13c2b039e6c2c849f0d2570efa8cc56ee7fe830d19b143dc3c8dec9872e8f549912ffd092725143cd744e1b311e7b6a23a13d1efec8a93195b826b72e57802992") r12 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r13 = syz_clone(0xa000600, &(0x7f0000000040)="a7c35e3d3ac6", 0x6, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="d259c64c6d7ae45dfc4487680290e15660b6529648f69df9caebae42e566c7402f7c1099014cb0291071232b549694bb47c1b0ee1f776b6ab81bdaff4da90bfa057790f95eeb47b613e45c7ead0e53a6456006052f05fbf845acef14784bd32a76168a5803e3caec1987edf69e53614ff1fe75a515b3afe7c6") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r13, r12, 0x0, 0x4, &(0x7f0000000240)='GPL\x00'}, 0x30) sendmsg$unix(r7, &(0x7f0000002080)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d80)=[{&(0x7f00000003c0)="da0082e27e029227a7a5f9e05e069cb7461b48dfde1faf50235894ee4c92dd1aa1d76f8d0bcbc9b5e75287f13b5a5714903f658e6e4e777ddced70aee15bae0259abadce295607f5a2f89f59f2ca3c0b3e4408264c0f9869e4002499ada8cf8107121f1a24fbe77dad7ba338", 0x6c}, {&(0x7f0000000640)="ad6ecffc5e27c65d3e031a35c14012ce298c9f1d6325", 0x16}, {&(0x7f0000000940)="6f54e9d3c8d01bec4c9fbc23fd25aa55b0873840f86808bfdca8094c8a25adc394b15529a63cb4f9dba238c53e867eca3afd0208bf4910deef3005d015197afe764f285ecafe1d6c13eac47aba1dbb4e0c6b53cb03b07a7d66da028581e4b388b9de06a3fb494de386334b9bb17e776d3e9c67422005907f", 0x78}, {&(0x7f0000000a40)="1edcbb7671d74419503ac9ec9d849f2e61a2b929fca9f1132a1692fed6b1b5125226664308ec7269c52afc8729924ccaa8c7162da00ad008ee23c087dd1fd2c1aca10ff54d2d", 0x46}, {&(0x7f0000000ac0)="8742744b742529cea18696feb9887d4874f6c271aad64f2e4b84555cc8c990b571c517d0b4bef9bd40eef8ac4fb3f3e491048aefd051ea6f260e23343ba70542e83aafef887a951ad38493bd115fcf63ce7244dfbe1fa5ad358e87130028f61ccfd2a306399e9f602dc7877d68871412e37295033accdb66572f8ae53a3dafb5603a6f61a67edf0821204f2ed1cf62eb50c3418204d6db9ffe148567c5bd33cb80bebcb49243654a275e7649ce04803d9d933a6a60a661aa78b658f80c18f6905b9d65d2c91cf5817834d006b13dd2889eb246c98bf44e0fbd50bc83a756bf3d", 0xe0}, {&(0x7f0000000c40)="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", 0xff0}, {&(0x7f0000001c40)="67a2a3e357f88aa9347cd9f40000000000000001c71632d6301fc1ad02319ac9f4ac80997a2e31457a321c31efe0c1d2150159a65d43bb86965480adba01151bbd3c", 0x42}, {&(0x7f00000020c0)="98ae93e1bd36c3ddf05693f22f06f17dd32290b4ef94269acd3dd297911209c23fb4e099f96067cccec401f3d7602cc9d7cdc51ad3928aef9d7b8f2b24b1801d6ce10db7f44652f82dadb128d501e4cb66645143e4676ce22eb343f2293892046daf3efb0152aeaf971849431bb3e68166fda5102c1dcb49b0b844c427350882bd41f5b2f69bf14672df14bf6590a791934a3baf9754c96c9c8f91fc646444bf2b5d88d3c473772d3f9a0f9e8bf617cfa5688558fc3af6cd4d7b0a09eaeb1189cded848759e9ab4a8d2b0efd6af1c9d775fd03a27403fa1cc113631342cd0613f848e2df76392ed31f47f9b6eb55cc39e4cf171c841cf1", 0xf7}], 0x8, &(0x7f00000021c0)=ANY=[@ANYRESDEC=r6, @ANYRES16, @ANYRES32, @ANYRESHEX=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="000000001c00000000000000000900000200000096ceaf57853f0a2e77acf541c28c62ee0a4cec9a3e9c6a75769509f76c8def1ad1e7afaf941e6da7fd9d5e42a8c5867941b26288d4ae3b3d1fffcdf39a2d8c66b9357aa06537cc11805e73d171e6bcb83541ca0f3ef72d57bcd9bc18a2bda1f5f41a5170385f083f7196cc3d3f40ea22640cccaf91b64c416eeb6a0e11ce90bda8cdceffcb411b012adac7580e28af09f2ff85fa8b13340010d2e3add658c314c4f26da5cb0cfd4b3fc3442cd6", @ANYRESHEX=r5, @ANYRESDEC=r7, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80}, 0x20004000) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r15 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r17 = openat$cgroup_int(r16, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r17, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) setsockopt$sock_attach_bpf(r15, 0x1, 0x3e, &(0x7f0000000500)=r14, 0x4) sendmsg$inet(r15, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @private=0xa010102}, 0x10, 0x0}, 0x2404c8a4) 6.052329558s ago: executing program 3 (id=15250): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff", @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4.977425757s ago: executing program 3 (id=15254): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x1, 0x5d}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x1) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f00000002c0)={'ip6gretap0\x00', @random='D\x00\x00\x00(E'}) 4.879879681s ago: executing program 0 (id=15255): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @call={0x85, 0x0, 0x0, 0x7}], {0x95, 0x0, 0x0, 0x1fffffff}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.727782609s ago: executing program 1 (id=15257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be54eaf07c3650596", 0x35}], 0x1}, 0x4) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0xaa32, 0x6, 0xfffffffd, 0x0, 0x7f}) getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x445d3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000280)={0xffffffffffffffff, r2}) ioctl$TUNGETVNETLE(r3, 0x8955, &(0x7f0000000040)) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_macvtap\x00', @random="000500004ec6"}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1bedfffffffff7ffff0000000080000000000000", @ANYBLOB="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", @ANYBLOB="0200000018000000000000000000000000000000b291b7cb38cc6455e24b3c84e7b89cee9fba4b8ac9a18e7f701cac262d16ed4a85531154a2f961167056d78f492427cbf97da35daa97622893772ca548f310b0cb9856dce29bd6431f539e08f1de13ee0b52a798a613369b095fdc484588a33bf6716be832acd5cfe6bd21c6d19a0a0de4dfdf8c0867215be0234804bc8b53c97a07f94c9bbd6676472cb6ad91266ec307a8b5f6ca9014701b6d5b1f45242a625f786c75b05e3470630b97fbd2fb4ab57bf3196f514d2369583bd53fe7f3ff7b70fe62d7b1649dd38ef43c77a00fbc91a56dfa8767de", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000082ffffff0000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0002000000000000b7080000ffff00007b8af8ff00000000bfa20000000000b703000067044823e312317608000000b7044d00010000008500000082000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.727527029s ago: executing program 3 (id=15258): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x4000, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x8, 0x7, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000020000000700000000000000", @ANYRES32, @ANYBLOB="0000000002000000002a70d36b033f000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, 0x0) 2.726033659s ago: executing program 0 (id=15266): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.27131192s ago: executing program 3 (id=15259): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xffffffffffffff81, 0x6}, 0x10c002, 0x3, 0x0, 0x3, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)}, 0xc000) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000023c0)=""/4095, 0xfff}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x2, 0x0, 0xfffffffffffffe8c}, 0x40000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x7, 0x0) (async) socket$kcm(0x10, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed00000000"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 2.172169855s ago: executing program 1 (id=15260): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4c}, 0x28) socket$kcm(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x0, 0xa000000}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.885344106s ago: executing program 1 (id=15261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be54eaf07c3650596", 0x35}], 0x1}, 0x4) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0xaa32, 0x6, 0xfffffffd, 0x0, 0x7f}) getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x445d3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000280)={0xffffffffffffffff, r2}) ioctl$TUNGETVNETLE(r3, 0x8955, &(0x7f0000000040)) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_macvtap\x00', @random="000500004ec6"}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1bedfffffffff7ffff0000000080000000000000", @ANYBLOB="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", @ANYBLOB="0200000018000000000000000000000000000000b291b7cb38cc6455e24b3c84e7b89cee9fba4b8ac9a18e7f701cac262d16ed4a85531154a2f961167056d78f492427cbf97da35daa97622893772ca548f310b0cb9856dce29bd6431f539e08f1de13ee0b52a798a613369b095fdc484588a33bf6716be832acd5cfe6bd21c6d19a0a0de4dfdf8c0867215be0234804bc8b53c97a07f94c9bbd6676472cb6ad91266ec307a8b5f6ca9014701b6d5b1f45242a625f786c75b05e3470630b97fbd2fb4ab57bf3196f514d2369583bd53fe7f3ff7b70fe62d7b1649dd38ef43c77a00fbc91a56dfa8767de", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000082ffffff0000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0002000000000000b7080000ffff00007b8af8ff00000000bfa20000000000b703000067044823e312317608000000b7044d00010000008500000082000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.820382059s ago: executing program 32 (id=15189): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0xf}, 0x10c002, 0xac5d, 0x0, 0x2, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0a00000016000000b30000007f000000000000", @ANYRES32, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="000000000000000000000004f800"/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1c, &(0x7f0000000500)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226, 0x40f00}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001fc0)=ANY=[@ANYRESOCT=r3, @ANYRES8=r2, @ANYRES8=r3, @ANYRESDEC, @ANYRES64, @ANYRES16=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000002000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$kcm(0x2, 0xa, 0x2) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x18001, 0x1000005, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0x12) syz_clone(0x20000000, &(0x7f0000001e00)="00d81aa98261e175d86e670b96e25a040564803048ecb6a91a0f8ae41896d54747c47291359f263c21fd4f1a6c60d37642366da93d72bb7bce097199c07d00ccadf88852fc4fa527771621638e86", 0x4e, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000000580)="3f92520cf13c2b039e6c2c849f0d2570efa8cc56ee7fe830d19b143dc3c8dec9872e8f549912ffd092725143cd744e1b311e7b6a23a13d1efec8a93195b826b72e57802992") r12 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r13 = syz_clone(0xa000600, &(0x7f0000000040)="a7c35e3d3ac6", 0x6, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="d259c64c6d7ae45dfc4487680290e15660b6529648f69df9caebae42e566c7402f7c1099014cb0291071232b549694bb47c1b0ee1f776b6ab81bdaff4da90bfa057790f95eeb47b613e45c7ead0e53a6456006052f05fbf845acef14784bd32a76168a5803e3caec1987edf69e53614ff1fe75a515b3afe7c6") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r13, r12, 0x0, 0x4, &(0x7f0000000240)='GPL\x00'}, 0x30) sendmsg$unix(r7, &(0x7f0000002080)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d80)=[{&(0x7f00000003c0)="da0082e27e029227a7a5f9e05e069cb7461b48dfde1faf50235894ee4c92dd1aa1d76f8d0bcbc9b5e75287f13b5a5714903f658e6e4e777ddced70aee15bae0259abadce295607f5a2f89f59f2ca3c0b3e4408264c0f9869e4002499ada8cf8107121f1a24fbe77dad7ba338", 0x6c}, {&(0x7f0000000640)="ad6ecffc5e27c65d3e031a35c14012ce298c9f1d6325", 0x16}, {&(0x7f0000000940)="6f54e9d3c8d01bec4c9fbc23fd25aa55b0873840f86808bfdca8094c8a25adc394b15529a63cb4f9dba238c53e867eca3afd0208bf4910deef3005d015197afe764f285ecafe1d6c13eac47aba1dbb4e0c6b53cb03b07a7d66da028581e4b388b9de06a3fb494de386334b9bb17e776d3e9c67422005907f", 0x78}, {&(0x7f0000000a40)="1edcbb7671d74419503ac9ec9d849f2e61a2b929fca9f1132a1692fed6b1b5125226664308ec7269c52afc8729924ccaa8c7162da00ad008ee23c087dd1fd2c1aca10ff54d2d", 0x46}, {&(0x7f0000000ac0)="8742744b742529cea18696feb9887d4874f6c271aad64f2e4b84555cc8c990b571c517d0b4bef9bd40eef8ac4fb3f3e491048aefd051ea6f260e23343ba70542e83aafef887a951ad38493bd115fcf63ce7244dfbe1fa5ad358e87130028f61ccfd2a306399e9f602dc7877d68871412e37295033accdb66572f8ae53a3dafb5603a6f61a67edf0821204f2ed1cf62eb50c3418204d6db9ffe148567c5bd33cb80bebcb49243654a275e7649ce04803d9d933a6a60a661aa78b658f80c18f6905b9d65d2c91cf5817834d006b13dd2889eb246c98bf44e0fbd50bc83a756bf3d", 0xe0}, {&(0x7f0000000c40)="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", 0xff0}, {&(0x7f0000001c40)="67a2a3e357f88aa9347cd9f40000000000000001c71632d6301fc1ad02319ac9f4ac80997a2e31457a321c31efe0c1d2150159a65d43bb86965480adba01151bbd3c", 0x42}, {&(0x7f00000020c0)="98ae93e1bd36c3ddf05693f22f06f17dd32290b4ef94269acd3dd297911209c23fb4e099f96067cccec401f3d7602cc9d7cdc51ad3928aef9d7b8f2b24b1801d6ce10db7f44652f82dadb128d501e4cb66645143e4676ce22eb343f2293892046daf3efb0152aeaf971849431bb3e68166fda5102c1dcb49b0b844c427350882bd41f5b2f69bf14672df14bf6590a791934a3baf9754c96c9c8f91fc646444bf2b5d88d3c473772d3f9a0f9e8bf617cfa5688558fc3af6cd4d7b0a09eaeb1189cded848759e9ab4a8d2b0efd6af1c9d775fd03a27403fa1cc113631342cd0613f848e2df76392ed31f47f9b6eb55cc39e4cf171c841cf1", 0xf7}], 0x8, &(0x7f00000021c0)=ANY=[@ANYRESDEC=r6, @ANYRES16, @ANYRES32, @ANYRESHEX=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="000000001c00000000000000000900000200000096ceaf57853f0a2e77acf541c28c62ee0a4cec9a3e9c6a75769509f76c8def1ad1e7afaf941e6da7fd9d5e42a8c5867941b26288d4ae3b3d1fffcdf39a2d8c66b9357aa06537cc11805e73d171e6bcb83541ca0f3ef72d57bcd9bc18a2bda1f5f41a5170385f083f7196cc3d3f40ea22640cccaf91b64c416eeb6a0e11ce90bda8cdceffcb411b012adac7580e28af09f2ff85fa8b13340010d2e3add658c314c4f26da5cb0cfd4b3fc3442cd6", @ANYRESHEX=r5, @ANYRESDEC=r7, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80}, 0x20004000) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r15 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r17 = openat$cgroup_int(r16, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r17, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) setsockopt$sock_attach_bpf(r15, 0x1, 0x3e, &(0x7f0000000500)=r14, 0x4) sendmsg$inet(r15, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @private=0xa010102}, 0x10, 0x0}, 0x2404c8a4) 1.470808972s ago: executing program 0 (id=15263): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000004, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0, 0x42}, 0x28) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="184a0000fbff11000100000000080000ab98f66e6f68b68a5d3b9d13e4641498a9df59e5d3170105c653916b1938e5b2fffb4d060000009ab947e7e1adba"], &(0x7f0000000400)='syzkaller\x00', 0x101, 0x1000, &(0x7f0000002480)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x5, 0xc, 0x1, 0x8}, 0x10, 0x1ea65, 0xffffffffffffffff, 0x2, &(0x7f0000001740)=[r0, r0, r0, r4], &(0x7f0000001780)=[{0x2, 0x3, 0x400000a, 0x6}, {0x5, 0x4, 0x7}]}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffff63, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0xffffffffffffffaf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000001000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x41) 1.457294766s ago: executing program 3 (id=15264): r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a3894696082417304"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1e00000008000000080000000900000000300000e0ef5d819ea0979ef833d3f3bc6a7aa22a1113a9ff338628583d61173c75edee2f01df04e18a244414288a4a295d356244a1d5f58805a23ade2c9b8dba770fb9697d43711e206643d1dd98ea166b3df0d17981400423abd7e3bb5ae5a152f0b20657bde66fd6ff", @ANYRES32=0x1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0xffff, 0x30046, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x100000000}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xa49, 0x0, 0x3}, 0x0, 0x20000000, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x7, 0xeffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000c3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000020000000100000023000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r11, @ANYRES64, @ANYRESDEC=r10, @ANYBLOB="15c335d167d88cff534958e603dd679a8cdc240a9205681265e3868e4092d00fd994b149919ade8fdbd1101d1bfd5c5ac0ac2e70dac2ef97abc1e9606fb41fef2dbeee53", @ANYRESHEX=0x0], 0x128}, 0x20008010) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYRES8=r9, @ANYRES8=r0, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYRES16=r11], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xfffffffffffffe15, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 1.328683652s ago: executing program 1 (id=15265): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {0x0}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="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", 0xeb6}], 0x5}, 0x40000) 693.040516ms ago: executing program 1 (id=15267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c700000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) 660.544877ms ago: executing program 0 (id=15268): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x20, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 460.591378ms ago: executing program 3 (id=15269): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x104a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x401, 0x1}, 0x10c002, 0x4000000089, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 294.005816ms ago: executing program 0 (id=15270): openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x2f6e, 0x2}, 0xc05e, 0x200000000000c8, 0x2, 0x6, 0xfffffffffffffff8, 0x7fffffff, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffb}, 0x0, 0x1, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000007000000000000ac1414aa"], 0xfdef) 236.389267ms ago: executing program 1 (id=15271): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x41000, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x41000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) close(r1) (async) close(r1) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x43, 0x5, 0xe, 0x3, 0x0, 0x8, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x4de000, 0x1}, 0x320, 0x10000, 0x200, 0x5, 0x2, 0xfffffff9, 0x4, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x72) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x84a00, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000180)=0x1248) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x7, 0xf2, 0x4a, 0x9, 0x0, 0x0, 0x1a0002, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x865b, 0x1, @perf_bp={&(0x7f00000001c0), 0x4}, 0x800, 0x2, 0xffffffff, 0x1, 0x6, 0x80, 0x8, 0x0, 0x200, 0x0, 0x71e8}, r4, 0x1, r2, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80800, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x4) sendmsg$inet(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="40ce4351fe331a37402ce4f02d780384452f99f82d0344584a97af1b1a47f79154cd7f4970f9b2fb32a6ac615d5fa288b043881b5f8b8e8bb57c56ba5e2a7984e39b5b2bdf53dc4dfb8bf29f4709671ba807eb1884778d5e890c78d404d6bb0f50a640490b9d29ae342c6e2e4899ce9ed1b2fe75799d4436b5116b80c0997d7730bc41ab9843ea913e63db48ff743acc897520864cc968f1858f935e1e9823d31885ed8a02c65afec4e67b8a", 0xac}], 0x1}, 0x40000) (async) sendmsg$inet(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="40ce4351fe331a37402ce4f02d780384452f99f82d0344584a97af1b1a47f79154cd7f4970f9b2fb32a6ac615d5fa288b043881b5f8b8e8bb57c56ba5e2a7984e39b5b2bdf53dc4dfb8bf29f4709671ba807eb1884778d5e890c78d404d6bb0f50a640490b9d29ae342c6e2e4899ce9ed1b2fe75799d4436b5116b80c0997d7730bc41ab9843ea913e63db48ff743acc897520864cc968f1858f935e1e9823d31885ed8a02c65afec4e67b8a", 0xac}], 0x1}, 0x40000) r8 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000640)=""/234, 0xea}], 0x4, &(0x7f0000000780)=""/171, 0xab}, 0x100) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x341940, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000008c0)={0x63, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=r10, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000940), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000940), 0x4) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000000000000) (async) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000000000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r11, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000b00)=0x6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r1, r12}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r1, 0x0, 0x8d, 0x3f, &(0x7f0000000b80)="f9b85ccbe3d2d461bd1a63efffbac9d9ecac4e12e20e98d83f08c41eba1d031b4b5e9ddb110335b5e83353d056ed121e13fe30afed033855e70b7e0bb92b8feedb4b57e38cdfc6f25d0a0a5ae58ea0263ebb0e66cb6c6101a3f8b0eedffb35c364192cd9cc1fa5d50902986689ff03d9d5e878196304943d30d7fbfeeda8a72e17180079a1462eff83867324eb", &(0x7f0000000c40)=""/63, 0x400, 0x0, 0x3d, 0x3c, &(0x7f0000000c80)="a6003db375a74f0dd1c2960c638836b61d51963c850a49f2535bc0c88fd234f6e6f9b466acc74e1279e29d87640803b73c7e8fc3426bf73d554e93ddd4", &(0x7f0000000cc0)="9e7b3d11d307c2272b38ae69394b20fdd39127aa32c1b03102c6528e59d662f331cf817db23113f8a53944f64d02ffe7290596b6f4706918ae35b286", 0x4, 0x0, 0x76}, 0x50) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000d80)={0x1, 0x0, [0x0]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', r12}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', r12}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x2, 0x0, r12, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001000)={r1, 0x0, 0x73, 0x0, &(0x7f0000000ec0)="4d26964ca31c4ea8f79efaaede79241d4dbe7d7f1311ecab83f3b09e460c00085b9c79c27a29a27020fb509acb7581f6554b47e3486132562856eb4564744e7bcc7ee051a23f2851ac275cd37a6dc468de072e030c729f910cee35f40005b0858a273eb93297dbae9b46f6e5491d10b1393714", 0x0, 0x5, 0x0, 0x8b, 0x0, &(0x7f0000000f40)="78b3f1742684c5034f09869fce49f3b646f617eeaae69b87d15afae0608b93c2cff9b1f0614313cfa2a6608199146ca3184bc01d47aaa41b77b6f2c86c1bcc7b5ffecf65dc1b423b9516c9015451625bbfc18c805c409437af365ecd7cc607ce57bf37068f01f946a320a4924c29ee784710fc51c5bac36da1a0fcfcf1de7303aad95b0849bcf7dd289aff", 0x0, 0x2, 0x0, 0x400}, 0x50) syz_clone(0x80000000, &(0x7f0000001080)="ecdff089aec02178c300cba7b9b615b772e6cd27007282c5128f2c6f23d42582438fe5fbe98878ba43601fffd085035d64eef0c2fa7d64d81563148b6e66676bccce1c0c74a36baa0caf5307b33d43c6c39cbce8135ef4d7832d1734a58fe938a4ded8400b6b0bb46d82", 0x6a, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)="2dd311ade9ce060745052e928c5fad834b658288bac5540df8761d725f9a84f625e99fcb7c5fefa079f1a844462e534a4e8770d6047a7e6ae7c249e9cdfd8f58a409a9d268443b7c3fcf970a46d3c5d870c133e282918595d7148c97a415737ea76f48412a11469707b4418468830ac1e5686776d19d5d67dad6900b40fe3f772186a726f294e41c53bc") (async) syz_clone(0x80000000, &(0x7f0000001080)="ecdff089aec02178c300cba7b9b615b772e6cd27007282c5128f2c6f23d42582438fe5fbe98878ba43601fffd085035d64eef0c2fa7d64d81563148b6e66676bccce1c0c74a36baa0caf5307b33d43c6c39cbce8135ef4d7832d1734a58fe938a4ded8400b6b0bb46d82", 0x6a, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)="2dd311ade9ce060745052e928c5fad834b658288bac5540df8761d725f9a84f625e99fcb7c5fefa079f1a844462e534a4e8770d6047a7e6ae7c249e9cdfd8f58a409a9d268443b7c3fcf970a46d3c5d870c133e282918595d7148c97a415737ea76f48412a11469707b4418468830ac1e5686776d19d5d67dad6900b40fe3f772186a726f294e41c53bc") 0s ago: executing program 0 (id=15272): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 199836 bytes leftover after parsing attributes in process `syz.0.13231'. [ 2226.356670][T14892] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13232'. [ 2226.366247][T14886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2227.153815][T14921] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13244'. [ 2227.792053][T14942] netlink: 'syz.2.13254': attribute type 2 has an invalid length. [ 2227.837817][T14942] netlink: 'syz.2.13254': attribute type 8 has an invalid length. [ 2227.855931][T14942] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13254'. [ 2227.978964][T14951] netlink: 'syz.4.13257': attribute type 39 has an invalid length. [ 2228.267934][T14959] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2228.426483][T14959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2229.035972][T22949] Bluetooth: hci4: command 0x0406 tx timeout [ 2229.053390][T14979] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13265'. [ 2229.162438][T14984] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13268'. [ 2229.215596][T14984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2232.233065][T15007] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13276'. [ 2233.693974][T15043] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.13286'. [ 2234.262968][T15065] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13294'. [ 2236.083082][T15116] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13315'. [ 2237.334849][T22949] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2237.750514][T15164] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13332'. [ 2239.206403][T15177] netlink: 'syz.1.13337': attribute type 275 has an invalid length. [ 2239.355528][T22949] Bluetooth: hci1: command 0x2016 tx timeout [ 2240.104402][T15228] netlink: 144 bytes leftover after parsing attributes in process `syz.3.13350'. [ 2240.229033][T15225] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13348'. [ 2241.905515][T15265] netlink: 'syz.1.13362': attribute type 10 has an invalid length. [ 2241.933106][T15265] device veth1_macvtap left promiscuous mode [ 2243.058739][T15288] netlink: 'syz.4.13369': attribute type 8 has an invalid length. [ 2243.135798][T15288] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.13369'. [ 2244.058944][T15327] netlink: 'syz.1.13383': attribute type 11 has an invalid length. [ 2244.173414][T15327] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13383'. [ 2244.662807][T15324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2245.191402][T15345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13388'. [ 2245.276128][T15349] FAULT_INJECTION: forcing a failure. [ 2245.276128][T15349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2245.330037][T15349] CPU: 0 PID: 15349 Comm: syz.3.13389 Not tainted syzkaller #0 [ 2245.337671][T15349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2245.347770][T15349] Call Trace: [ 2245.351075][T15349] [ 2245.354027][T15349] dump_stack_lvl+0x188/0x24e [ 2245.358741][T15349] ? show_regs_print_info+0x12/0x12 [ 2245.363969][T15349] ? load_image+0x410/0x410 [ 2245.368509][T15349] ? __lock_acquire+0x7c40/0x7c40 [ 2245.373572][T15349] should_fail_ex+0x390/0x4c0 [ 2245.378289][T15349] strncpy_from_user+0x32/0x340 [ 2245.383181][T15349] bpf_prog_load+0x200/0x1530 [ 2245.387912][T15349] ? map_freeze+0x390/0x390 [ 2245.392465][T15349] ? __might_fault+0xa6/0x120 [ 2245.397189][T15349] ? __might_fault+0xa6/0x120 [ 2245.401899][T15349] ? __might_fault+0xc2/0x120 [ 2245.406636][T15349] ? __might_fault+0xa6/0x120 [ 2245.411357][T15349] ? bpf_lsm_bpf+0x5/0x10 [ 2245.415739][T15349] ? security_bpf+0x7a/0xa0 [ 2245.420286][T15349] __sys_bpf+0x5b8/0x780 [ 2245.424565][T15349] ? bpf_link_show_fdinfo+0x380/0x380 [ 2245.429984][T15349] ? lock_chain_count+0x20/0x20 [ 2245.434882][T15349] __x64_sys_bpf+0x78/0x90 [ 2245.439342][T15349] do_syscall_64+0x4c/0xa0 [ 2245.443789][T15349] ? clear_bhb_loop+0x60/0xb0 [ 2245.448511][T15349] ? clear_bhb_loop+0x60/0xb0 [ 2245.453216][T15349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2245.459142][T15349] RIP: 0033:0x7f0d5899e159 [ 2245.463609][T15349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2245.483246][T15349] RSP: 002b:00007f0d59863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2245.491783][T15349] RAX: ffffffffffffffda RBX: 00007f0d58c25fa0 RCX: 00007f0d5899e159 [ 2245.499782][T15349] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 2245.507778][T15349] RBP: 00007f0d59863090 R08: 0000000000000000 R09: 0000000000000000 [ 2245.515775][T15349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2245.523767][T15349] R13: 00007f0d58c26038 R14: 00007f0d58c25fa0 R15: 00007fff308a7ca8 [ 2245.531777][T15349] [ 2246.947055][T15386] netlink: 'syz.4.13400': attribute type 2 has an invalid length. [ 2246.964462][T15386] netlink: 'syz.4.13400': attribute type 8 has an invalid length. [ 2246.973712][T15386] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13400'. [ 2247.672338][T15396] device sit0 entered promiscuous mode [ 2247.944269][T15411] netlink: 'syz.2.13409': attribute type 2 has an invalid length. [ 2248.000212][T15409] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13407'. [ 2248.011165][T15411] netlink: 'syz.2.13409': attribute type 1 has an invalid length. [ 2248.026390][T15411] netlink: 'syz.2.13409': attribute type 4 has an invalid length. [ 2248.047042][T15411] netlink: 208312 bytes leftover after parsing attributes in process `syz.2.13409'. [ 2249.203744][T15438] netlink: 'syz.0.13416': attribute type 16 has an invalid length. [ 2249.243707][T15438] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13416'. [ 2249.372317][T15426] netlink: 'syz.2.13413': attribute type 21 has an invalid length. [ 2249.415598][T15426] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.13413'. [ 2249.857856][T15455] netlink: 'syz.3.13423': attribute type 29 has an invalid length. [ 2249.904331][T15455] netlink: 'syz.3.13423': attribute type 29 has an invalid length. [ 2249.973185][T15455] netlink: 'syz.3.13423': attribute type 29 has an invalid length. [ 2250.309968][T15466] can: request_module (can-proto-0) failed. [ 2250.920314][T15471] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13427'. [ 2251.026044][T22949] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2254.122096][T15550] validate_nla: 5 callbacks suppressed [ 2254.123447][T15550] netlink: 'syz.2.13454': attribute type 39 has an invalid length. [ 2254.929757][T15550] bond0: (slave syz_tun): Releasing backup interface [ 2255.074266][T22949] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 2255.174142][T15564] netlink: 'syz.0.13460': attribute type 10 has an invalid length. [ 2255.201129][T15564] netlink: 56823 bytes leftover after parsing attributes in process `syz.0.13460'. [ 2255.233888][T15574] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13462'. [ 2255.455536][T15583] netlink: 'syz.0.13466': attribute type 29 has an invalid length. [ 2255.464183][T15583] netlink: 'syz.0.13466': attribute type 29 has an invalid length. [ 2255.477162][T15583] netlink: 'syz.0.13466': attribute type 29 has an invalid length. [ 2255.660081][T15590] netlink: 'syz.0.13466': attribute type 29 has an invalid length. [ 2255.729325][T15587] netlink: 'syz.0.13466': attribute type 29 has an invalid length. [ 2255.772197][T15590] netlink: 'syz.0.13466': attribute type 29 has an invalid length. [ 2255.809701][T15583] can: request_module (can-proto-0) failed. [ 2257.049532][T15609] device syzkaller0 entered promiscuous mode [ 2260.822772][T15622] netlink: 'syz.2.13479': attribute type 16 has an invalid length. [ 2260.831118][T15622] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13479'. [ 2260.841555][T15622] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2260.860446][T15628] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.13483'. [ 2261.033445][T15632] netlink: 144 bytes leftover after parsing attributes in process `syz.1.13484'. [ 2261.125257][T15637] netlink: 'syz.4.13486': attribute type 29 has an invalid length. [ 2261.198397][T15637] netlink: 'syz.4.13486': attribute type 29 has an invalid length. [ 2261.282792][T15637] netlink: 'syz.4.13486': attribute type 29 has an invalid length. [ 2261.467690][T15644] netlink: 'syz.4.13486': attribute type 29 has an invalid length. [ 2261.543294][T15644] netlink: 'syz.4.13486': attribute type 29 has an invalid length. [ 2261.698060][T15652] netlink: 'syz.4.13486': attribute type 29 has an invalid length. [ 2261.784630][T15637] can: request_module (can-proto-0) failed. [ 2262.147815][T15656] netlink: 'syz.1.13492': attribute type 21 has an invalid length. [ 2262.391069][T15668] netlink: 'syz.4.13498': attribute type 2 has an invalid length. [ 2262.412946][T15668] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.13498'. [ 2263.663139][T15709] FAULT_INJECTION: forcing a failure. [ 2263.663139][T15709] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.685458][T15709] CPU: 0 PID: 15709 Comm: syz.4.13512 Not tainted syzkaller #0 [ 2263.693074][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2263.703161][T15709] Call Trace: [ 2263.706470][T15709] [ 2263.709427][T15709] dump_stack_lvl+0x188/0x24e [ 2263.714204][T15709] ? show_regs_print_info+0x12/0x12 [ 2263.719425][T15709] ? load_image+0x410/0x410 [ 2263.723962][T15709] ? __might_sleep+0xd0/0xd0 [ 2263.728575][T15709] ? __lock_acquire+0x7c40/0x7c40 [ 2263.733660][T15709] should_fail_ex+0x390/0x4c0 [ 2263.738373][T15709] should_failslab+0x5/0x20 [ 2263.742900][T15709] slab_pre_alloc_hook+0x59/0x300 [ 2263.747956][T15709] ? __get_vm_area_node+0x122/0x330 [ 2263.753200][T15709] __kmem_cache_alloc_node+0x4f/0x270 [ 2263.758617][T15709] ? __get_vm_area_node+0x122/0x330 [ 2263.763893][T15709] kmalloc_node_trace+0x22/0xe0 [ 2263.768775][T15709] __get_vm_area_node+0x122/0x330 [ 2263.773858][T15709] __vmalloc_node_range+0x357/0x1380 [ 2263.779196][T15709] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2263.784795][T15709] ? aa_get_newest_label+0xf9/0x5b0 [ 2263.790048][T15709] ? free_vm_area+0x50/0x50 [ 2263.794591][T15709] ? end_current_label_crit_section+0x170/0x170 [ 2263.800877][T15709] ? __lock_acquire+0x7c40/0x7c40 [ 2263.805950][T15709] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2263.811533][T15709] __vmalloc+0x76/0x80 [ 2263.815632][T15709] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2263.821211][T15709] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2263.826620][T15709] ? bpf_prog_alloc+0x13/0x1b0 [ 2263.831447][T15709] bpf_prog_alloc+0x1c/0x1b0 [ 2263.836076][T15709] bpf_prog_load+0x7d4/0x1530 [ 2263.840834][T15709] ? map_freeze+0x390/0x390 [ 2263.845403][T15709] ? __might_fault+0xa6/0x120 [ 2263.850124][T15709] ? __might_fault+0xa6/0x120 [ 2263.854822][T15709] ? __might_fault+0xc2/0x120 [ 2263.859528][T15709] ? __might_fault+0xa6/0x120 [ 2263.864230][T15709] ? bpf_lsm_bpf+0x5/0x10 [ 2263.868590][T15709] ? security_bpf+0x7a/0xa0 [ 2263.873135][T15709] __sys_bpf+0x5b8/0x780 [ 2263.877411][T15709] ? bpf_link_show_fdinfo+0x380/0x380 [ 2263.882824][T15709] ? lock_chain_count+0x20/0x20 [ 2263.887726][T15709] __x64_sys_bpf+0x78/0x90 [ 2263.892175][T15709] do_syscall_64+0x4c/0xa0 [ 2263.896631][T15709] ? clear_bhb_loop+0x60/0xb0 [ 2263.901339][T15709] ? clear_bhb_loop+0x60/0xb0 [ 2263.906063][T15709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2263.912003][T15709] RIP: 0033:0x7fee4c19e159 [ 2263.916441][T15709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2263.936068][T15709] RSP: 002b:00007fee4cfdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2263.944516][T15709] RAX: ffffffffffffffda RBX: 00007fee4c425fa0 RCX: 00007fee4c19e159 [ 2263.952509][T15709] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 2263.960502][T15709] RBP: 00007fee4cfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 2263.968499][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2263.976490][T15709] R13: 00007fee4c426038 R14: 00007fee4c425fa0 R15: 00007ffc2e6b0018 [ 2263.984582][T15709] [ 2264.016782][T15709] syz.4.13512: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2264.040495][T15709] CPU: 0 PID: 15709 Comm: syz.4.13512 Not tainted syzkaller #0 [ 2264.048118][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2264.058215][T15709] Call Trace: [ 2264.061533][T15709] [ 2264.064497][T15709] dump_stack_lvl+0x188/0x24e [ 2264.069229][T15709] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2264.075691][T15709] ? show_regs_print_info+0x12/0x12 [ 2264.081019][T15709] ? load_image+0x410/0x410 [ 2264.085671][T15709] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2264.092144][T15709] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2264.098697][T15709] warn_alloc+0x242/0x330 [ 2264.103089][T15709] ? __get_vm_area_node+0x122/0x330 [ 2264.108344][T15709] ? zone_watermark_ok_safe+0x270/0x270 [ 2264.113949][T15709] ? rcu_is_watching+0x11/0xa0 [ 2264.118776][T15709] ? __get_vm_area_node+0x318/0x330 [ 2264.124121][T15709] __vmalloc_node_range+0x37c/0x1380 [ 2264.129481][T15709] ? aa_get_newest_label+0xf9/0x5b0 [ 2264.134732][T15709] ? free_vm_area+0x50/0x50 [ 2264.139376][T15709] ? end_current_label_crit_section+0x170/0x170 [ 2264.145668][T15709] ? __lock_acquire+0x7c40/0x7c40 [ 2264.150732][T15709] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2264.156309][T15709] __vmalloc+0x76/0x80 [ 2264.160413][T15709] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2264.165990][T15709] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2264.171421][T15709] ? bpf_prog_alloc+0x13/0x1b0 [ 2264.176225][T15709] bpf_prog_alloc+0x1c/0x1b0 [ 2264.180850][T15709] bpf_prog_load+0x7d4/0x1530 [ 2264.185581][T15709] ? map_freeze+0x390/0x390 [ 2264.190117][T15709] ? __might_fault+0xa6/0x120 [ 2264.194824][T15709] ? __might_fault+0xa6/0x120 [ 2264.199527][T15709] ? __might_fault+0xc2/0x120 [ 2264.204226][T15709] ? __might_fault+0xa6/0x120 [ 2264.208925][T15709] ? bpf_lsm_bpf+0x5/0x10 [ 2264.213286][T15709] ? security_bpf+0x7a/0xa0 [ 2264.217823][T15709] __sys_bpf+0x5b8/0x780 [ 2264.222107][T15709] ? bpf_link_show_fdinfo+0x380/0x380 [ 2264.227540][T15709] ? lock_chain_count+0x20/0x20 [ 2264.232430][T15709] __x64_sys_bpf+0x78/0x90 [ 2264.236881][T15709] do_syscall_64+0x4c/0xa0 [ 2264.241334][T15709] ? clear_bhb_loop+0x60/0xb0 [ 2264.246034][T15709] ? clear_bhb_loop+0x60/0xb0 [ 2264.250752][T15709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2264.256685][T15709] RIP: 0033:0x7fee4c19e159 [ 2264.261122][T15709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2264.280749][T15709] RSP: 002b:00007fee4cfdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2264.289198][T15709] RAX: ffffffffffffffda RBX: 00007fee4c425fa0 RCX: 00007fee4c19e159 [ 2264.297216][T15709] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 2264.305213][T15709] RBP: 00007fee4cfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 2264.313207][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.321205][T15709] R13: 00007fee4c426038 R14: 00007fee4c425fa0 R15: 00007ffc2e6b0018 [ 2264.329215][T15709] [ 2264.348088][T15709] Mem-Info: [ 2264.351348][T15709] active_anon:12042 inactive_anon:0 isolated_anon:0 [ 2264.351348][T15709] active_file:21408 inactive_file:40830 isolated_file:0 [ 2264.351348][T15709] unevictable:768 dirty:57 writeback:0 [ 2264.351348][T15709] slab_reclaimable:22733 slab_unreclaimable:99411 [ 2264.351348][T15709] mapped:30140 shmem:1361 pagetables:591 [ 2264.351348][T15709] sec_pagetables:0 bounce:0 [ 2264.351348][T15709] kernel_misc_reclaimable:0 [ 2264.351348][T15709] free:1305314 free_pcp:11905 free_cma:0 [ 2264.399498][T15709] Node 0 active_anon:48168kB inactive_anon:0kB active_file:85632kB inactive_file:163120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120560kB dirty:228kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:14316kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no [ 2264.480095][T15709] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2264.512008][T15709] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2264.605494][T15709] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 2264.624968][T15709] Node 0 DMA32 free:1315728kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:48168kB inactive_anon:0kB active_file:85632kB inactive_file:163120kB unevictable:1536kB writepending:228kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:27080kB local_pcp:9268kB free_cma:0kB [ 2264.674406][T15709] lowmem_reserve[]: 0 0 1 1 1 [ 2264.679826][T15709] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 2264.796918][T15709] lowmem_reserve[]: 0 0 0 0 0 [ 2264.824247][T15709] Node 1 Normal free:3890152kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21456kB local_pcp:11660kB free_cma:0kB [ 2264.867410][T15709] lowmem_reserve[]: 0 0 0 0 0 [ 2264.874963][T15709] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2264.900122][T15709] Node 0 DMA32: 1876*4kB (UME) 2992*8kB (UME) 1604*16kB (UME) 1056*32kB (UME) 2256*64kB (UME) 1227*128kB (UME) 495*256kB (UM) 344*512kB (UM) 254*1024kB (UM) 34*2048kB (UME) 71*4096kB (UM) = 1315728kB [ 2264.931517][T15709] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2264.964180][T15709] Node 1 Normal: 240*4kB (U) 51*8kB (UE) 35*16kB (UME) 39*32kB (UME) 18*64kB (UME) 6*128kB (UME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890152kB [ 2264.989612][T15709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2265.003972][T15709] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2265.017459][T15709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2265.027475][T15709] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2265.037497][T15709] 63599 total pagecache pages [ 2265.042416][T15709] 0 pages in swap cache [ 2265.047046][T15709] Free swap = 124540kB [ 2265.051443][T15709] Total swap = 124996kB [ 2265.078958][T15709] 2097051 pages RAM [ 2265.099626][T15709] 0 pages HighMem/MovableOnly [ 2265.115552][T15709] 415226 pages reserved [ 2265.120078][T15709] 0 pages cma reserved [ 2265.741941][T15745] netlink: 'syz.3.13523': attribute type 39 has an invalid length. [ 2266.576329][T15749] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13525'. [ 2266.610937][T15751] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13526'. [ 2267.658036][T15777] netlink: 'syz.3.13535': attribute type 2 has an invalid length. [ 2267.691142][T15784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13534'. [ 2267.724549][T15777] netlink: 'syz.3.13535': attribute type 1 has an invalid length. [ 2267.744882][T15784] : renamed from caif0 [ 2267.800826][T15777] netlink: 'syz.3.13535': attribute type 4 has an invalid length. [ 2267.863410][T15777] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.13535'. [ 2268.326027][T15784] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2268.527028][T15791] netlink: 144 bytes leftover after parsing attributes in process `syz.2.13539'. [ 2268.551607][T15791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13539'. [ 2268.900663][T15798] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13542'. [ 2269.251531][T15804] netlink: 'syz.3.13543': attribute type 16 has an invalid length. [ 2269.278247][T15804] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13543'. [ 2270.897207][T15844] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13560'. [ 2271.701498][T15871] netlink: 'syz.1.13569': attribute type 21 has an invalid length. [ 2271.716548][T15871] netlink: 'syz.1.13569': attribute type 6 has an invalid length. [ 2271.724468][T15871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13569'. [ 2273.250167][T15909] netlink: 'syz.1.13582': attribute type 29 has an invalid length. [ 2273.306094][T15909] netlink: 'syz.1.13582': attribute type 29 has an invalid length. [ 2273.334356][T15910] netlink: 'syz.1.13582': attribute type 29 has an invalid length. [ 2273.383540][T15909] netlink: 'syz.1.13582': attribute type 29 has an invalid length. [ 2273.492799][T15909] netlink: 'syz.1.13582': attribute type 29 has an invalid length. [ 2273.553462][T15916] netlink: 'syz.4.13584': attribute type 21 has an invalid length. [ 2273.573694][T15916] netlink: 'syz.4.13584': attribute type 6 has an invalid length. [ 2273.604222][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13584'. [ 2273.700974][T15919] netlink: 'syz.0.13586': attribute type 21 has an invalid length. [ 2273.729929][T15919] netlink: 'syz.0.13586': attribute type 6 has an invalid length. [ 2273.761839][T15919] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13586'. [ 2275.452184][T15951] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.13599'. [ 2276.489639][T15970] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13607'. [ 2279.731888][T16026] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13628'. [ 2280.262352][T16028] netlink: 'syz.2.13629': attribute type 10 has an invalid length. [ 2280.282033][T16028] netlink: 2 bytes leftover after parsing attributes in process `syz.2.13629'. [ 2280.391229][T16028] bridge0: port 3(hsr0) entered disabled state [ 2280.398638][T16028] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.408103][T16028] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.524181][T16028] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2280.576242][T16028] bridge0: port 3(hsr0) entered blocking state [ 2280.583118][T16028] bridge0: port 3(hsr0) entered forwarding state [ 2280.590585][T16028] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.598364][T16028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.606811][T16028] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.614754][T16028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2280.720560][T16028] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2280.997710][T16041] netlink: 144 bytes leftover after parsing attributes in process `syz.1.13633'. [ 2281.097663][T16043] netlink: 'syz.4.13634': attribute type 2 has an invalid length. [ 2281.135624][T16044] netlink: 'syz.4.13634': attribute type 2 has an invalid length. [ 2281.944641][T16066] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13644'. [ 2282.785923][T16072] netlink: 'syz.1.13645': attribute type 11 has an invalid length. [ 2282.800874][T16072] netlink: 'syz.1.13645': attribute type 6 has an invalid length. [ 2282.810810][T16072] netlink: 125060 bytes leftover after parsing attributes in process `syz.1.13645'. [ 2283.258026][T16092] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.13650'. [ 2283.295934][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.302715][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.358028][T16092] netlink: zone id is out of range [ 2283.418948][T16092] netlink: zone id is out of range [ 2283.488271][T16092] netlink: zone id is out of range [ 2283.558918][T16092] netlink: zone id is out of range [ 2283.643141][T16092] netlink: zone id is out of range [ 2283.704809][T16092] netlink: zone id is out of range [ 2283.762092][T16092] netlink: zone id is out of range [ 2283.796385][T16092] netlink: zone id is out of range [ 2283.864336][T16092] netlink: zone id is out of range [ 2283.940291][T16092] netlink: zone id is out of range [ 2285.573924][T16120] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13659'. [ 2285.657684][T16123] netlink: 'syz.3.13660': attribute type 10 has an invalid length. [ 2285.711395][T16123] device netdevsim0 entered promiscuous mode [ 2286.064590][T16136] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2286.363612][T16144] netlink: 'syz.1.13667': attribute type 39 has an invalid length. [ 2286.742399][T16154] netlink: 'syz.2.13668': attribute type 2 has an invalid length. [ 2286.771796][T16154] netlink: 'syz.2.13668': attribute type 8 has an invalid length. [ 2286.804056][T16154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13668'. [ 2288.699587][T16187] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.13679'. [ 2290.238288][T16222] netlink: 'syz.1.13687': attribute type 2 has an invalid length. [ 2290.265847][T16222] netlink: 'syz.1.13687': attribute type 8 has an invalid length. [ 2290.274018][T16222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13687'. [ 2290.332195][T16226] netlink: 'syz.2.13690': attribute type 21 has an invalid length. [ 2290.350955][T16226] netlink: 'syz.2.13690': attribute type 6 has an invalid length. [ 2292.592569][T16267] netlink: 'syz.2.13704': attribute type 2 has an invalid length. [ 2292.640221][T16267] netlink: 'syz.2.13704': attribute type 8 has an invalid length. [ 2292.698626][T16267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13704'. [ 2294.263180][T16312] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.13719'. [ 2294.779342][T16320] FAULT_INJECTION: forcing a failure. [ 2294.779342][T16320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2294.814354][T16320] CPU: 1 PID: 16320 Comm: syz.2.13721 Not tainted syzkaller #0 [ 2294.822002][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2294.832104][T16320] Call Trace: [ 2294.835435][T16320] [ 2294.838404][T16320] dump_stack_lvl+0x188/0x24e [ 2294.843130][T16320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2294.849338][T16320] ? show_regs_print_info+0x12/0x12 [ 2294.854599][T16320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2294.860828][T16320] should_fail_ex+0x390/0x4c0 [ 2294.865629][T16320] _copy_to_user+0x2c/0x130 [ 2294.870185][T16320] simple_read_from_buffer+0xe3/0x150 [ 2294.875611][T16320] proc_fail_nth_read+0x1a6/0x220 [ 2294.880689][T16320] ? proc_fault_inject_write+0x310/0x310 [ 2294.886392][T16320] ? fsnotify_perm+0x248/0x550 [ 2294.891216][T16320] ? proc_fault_inject_write+0x310/0x310 [ 2294.896921][T16320] vfs_read+0x2db/0x960 [ 2294.901148][T16320] ? kernel_read+0x1e0/0x1e0 [ 2294.905799][T16320] ? __fget_files+0x28/0x460 [ 2294.910459][T16320] ? __fget_files+0x3fc/0x460 [ 2294.915209][T16320] ? __fdget_pos+0x2ae/0x360 [ 2294.919855][T16320] ? ksys_read+0x70/0x260 [ 2294.924251][T16320] ksys_read+0x14d/0x260 [ 2294.928550][T16320] ? vfs_write+0x9a0/0x9a0 [ 2294.933024][T16320] ? lockdep_hardirqs_on+0x94/0x140 [ 2294.938286][T16320] do_syscall_64+0x4c/0xa0 [ 2294.942744][T16320] ? clear_bhb_loop+0x60/0xb0 [ 2294.947489][T16320] ? clear_bhb_loop+0x60/0xb0 [ 2294.952199][T16320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2294.958133][T16320] RIP: 0033:0x7fcfbd35e98e [ 2294.962580][T16320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2294.982212][T16320] RSP: 002b:00007fcfbe264fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2294.990651][T16320] RAX: ffffffffffffffda RBX: 00007fcfbe2656c0 RCX: 00007fcfbd35e98e [ 2294.998650][T16320] RDX: 000000000000000f RSI: 00007fcfbe2650a0 RDI: 0000000000000007 [ 2295.006641][T16320] RBP: 00007fcfbe265090 R08: 0000000000000000 R09: 0000000000000000 [ 2295.014644][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2295.022638][T16320] R13: 00007fcfbd626038 R14: 00007fcfbd625fa0 R15: 00007ffe4234b5a8 [ 2295.030649][T16320] [ 2295.064083][T16322] netlink: 'syz.3.13720': attribute type 2 has an invalid length. [ 2295.097954][T16322] netlink: 'syz.3.13720': attribute type 8 has an invalid length. [ 2295.134675][T16329] netlink: 'syz.4.13723': attribute type 3 has an invalid length. [ 2295.144171][T16322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13720'. [ 2295.156083][T16329] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13723'. [ 2296.408642][T16362] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.13732'. [ 2297.114972][T16382] netlink: 'syz.0.13737': attribute type 2 has an invalid length. [ 2297.144825][T16382] netlink: 'syz.0.13737': attribute type 8 has an invalid length. [ 2297.156564][T16382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13737'. [ 2297.424178][T16389] netlink: 'syz.2.13741': attribute type 39 has an invalid length. [ 2297.456684][T16392] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13742'. [ 2297.758369][T16403] netlink: 10 bytes leftover after parsing attributes in process `syz.4.13748'. [ 2299.995279][T16458] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13765'. [ 2300.441955][T16464] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.13767'. [ 2301.441278][T16499] netlink: 'syz.0.13777': attribute type 10 has an invalid length. [ 2301.449552][T16499] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13777'. [ 2301.492441][T16499] bridge0: port 3(hsr0) entered disabled state [ 2301.498923][T16499] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.506453][T16499] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.532204][T16499] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2301.553758][T16499] bridge0: port 3(hsr0) entered blocking state [ 2301.560088][T16499] bridge0: port 3(hsr0) entered forwarding state [ 2301.566715][T16499] bridge0: port 2(bridge_slave_1) entered blocking state [ 2301.573890][T16499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2301.581426][T16499] bridge0: port 1(bridge_slave_0) entered blocking state [ 2301.588669][T16499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2301.608009][T16499] device bridge0 entered promiscuous mode [ 2301.614200][T16499] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2301.692291][T16519] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13782'. [ 2301.902632][T16530] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.13784'. [ 2303.876282][T16586] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13801'. [ 2304.205659][T16595] netlink: 'syz.4.13806': attribute type 29 has an invalid length. [ 2304.214088][T16595] netlink: 'syz.4.13806': attribute type 29 has an invalid length. [ 2304.296854][T16594] netlink: 'syz.4.13806': attribute type 29 has an invalid length. [ 2304.315108][T16603] netlink: 'syz.2.13808': attribute type 11 has an invalid length. [ 2304.319282][T16593] netlink: 'syz.4.13806': attribute type 29 has an invalid length. [ 2304.376961][T16603] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13808'. [ 2304.852763][T16601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2305.979991][T16630] netlink: 'syz.4.13816': attribute type 2 has an invalid length. [ 2306.752332][T16642] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13820'. [ 2307.192610][T16651] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13823'. [ 2308.003317][T16658] netlink: 'syz.3.13824': attribute type 12 has an invalid length. [ 2308.042694][T16658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13824'. [ 2308.092272][T16665] netlink: 'syz.0.13826': attribute type 2 has an invalid length. [ 2308.121089][T16665] netlink: 'syz.0.13826': attribute type 8 has an invalid length. [ 2308.154881][T16665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13826'. [ 2308.712598][T16675] netlink: 'syz.0.13830': attribute type 4 has an invalid length. [ 2308.768067][T16679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2308.961789][T16679] net_ratelimit: 3657 callbacks suppressed [ 2308.961888][T16679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2309.531220][T16696] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.13839'. [ 2310.645948][T16720] netlink: 'syz.3.13843': attribute type 17 has an invalid length. [ 2310.705450][T16720] netlink: 'syz.3.13843': attribute type 16 has an invalid length. [ 2310.736781][T16720] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13843'. [ 2311.841905][T16741] netlink: 'syz.1.13848': attribute type 29 has an invalid length. [ 2311.866174][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13848'. [ 2311.945293][T16726] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2311.955188][T16726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2312.005440][T16741] netlink: 'syz.1.13848': attribute type 29 has an invalid length. [ 2312.013402][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13848'. [ 2312.133386][T16745] netlink: 'syz.3.13852': attribute type 21 has an invalid length. [ 2312.175524][T16745] netlink: 176 bytes leftover after parsing attributes in process `syz.3.13852'. [ 2313.441560][T16780] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.13862'. [ 2313.723583][T16787] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2313.791231][T16787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2315.052628][T16821] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13877'. [ 2315.498908][T16830] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13880'. [ 2316.770007][T16853] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13899'. [ 2317.452732][T16869] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13895'. [ 2318.630118][T16898] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.13906'. [ 2318.904892][T16909] netlink: 'syz.3.13909': attribute type 10 has an invalid length. [ 2320.612879][T16914] netlink: 'syz.3.13909': attribute type 10 has an invalid length. [ 2320.858918][T16935] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13916'. [ 2320.934698][T16941] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13918'. [ 2321.299496][T16949] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.13920'. [ 2322.695219][T16978] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.13931'. [ 2323.851683][T16984] netlink: 'syz.1.13935': attribute type 2 has an invalid length. [ 2323.894236][T16984] netlink: 'syz.1.13935': attribute type 8 has an invalid length. [ 2323.930318][T16984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13935'. [ 2325.078460][T17008] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13945'. [ 2325.113376][T17011] bridge0: port 3(batadv0) entered blocking state [ 2325.120600][T17011] bridge0: port 3(batadv0) entered disabled state [ 2325.133602][T17011] device batadv0 entered promiscuous mode [ 2325.140356][T17011] bridge0: port 3(batadv0) entered blocking state [ 2325.146963][T17011] bridge0: port 3(batadv0) entered forwarding state [ 2325.491217][T17009] IPv6: Can't replace route, no match found [ 2325.621935][ T9264] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2325.631385][ T9264] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2326.050089][T17028] sctp: [Deprecated]: syz.2.13952 (pid 17028) Use of int in maxseg socket option. [ 2326.050089][T17028] Use struct sctp_assoc_value instead [ 2326.157354][T17036] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13954'. [ 2326.510532][T17044] tipc: Started in network mode [ 2326.531981][T17044] tipc: Node identity 9215a268, cluster identity 4711 [ 2326.572462][T17044] tipc: Node number set to 2450891368 [ 2327.150028][T17054] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2327.249410][T17059] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13960'. [ 2327.410481][T17054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2327.749512][T17073] netlink: 'syz.1.13966': attribute type 39 has an invalid length. [ 2327.771655][T17071] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.13965'. [ 2328.381392][T17082] netlink: 'syz.1.13969': attribute type 2 has an invalid length. [ 2328.401259][T17082] netlink: 'syz.1.13969': attribute type 8 has an invalid length. [ 2328.442678][T17082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13969'. [ 2329.904639][T17106] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13978'. [ 2331.343689][T17137] netlink: 'syz.0.13989': attribute type 21 has an invalid length. [ 2331.362225][T17137] netlink: 176 bytes leftover after parsing attributes in process `syz.0.13989'. [ 2331.592400][T17141] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13992'. [ 2332.063155][T17148] netlink: 'syz.3.13995': attribute type 2 has an invalid length. [ 2332.072139][T17148] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.13995'. [ 2332.089362][T17149] netlink: 'syz.3.13995': attribute type 2 has an invalid length. [ 2332.102388][T17149] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.13995'. [ 2332.901436][T17166] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.14003'. [ 2333.841861][T17191] netlink: 'syz.2.14010': attribute type 10 has an invalid length. [ 2334.463909][T17191] team0: Port device wlan1 removed [ 2334.511373][T17191] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2336.559368][T17245] netlink: 'syz.3.14035': attribute type 10 has an invalid length. [ 2336.606982][T17253] FAULT_INJECTION: forcing a failure. [ 2336.606982][T17253] name failslab, interval 1, probability 0, space 0, times 0 [ 2336.640765][T17245] team0: Device wg1 is of different type [ 2336.667646][T17253] CPU: 1 PID: 17253 Comm: syz.4.14034 Not tainted syzkaller #0 [ 2336.675271][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2336.685385][T17253] Call Trace: [ 2336.688814][T17253] [ 2336.691795][T17253] dump_stack_lvl+0x188/0x24e [ 2336.696526][T17253] ? show_regs_print_info+0x12/0x12 [ 2336.701765][T17253] ? load_image+0x410/0x410 [ 2336.706350][T17253] ? __might_sleep+0xd0/0xd0 [ 2336.711014][T17253] ? __lock_acquire+0x7c40/0x7c40 [ 2336.716092][T17253] should_fail_ex+0x390/0x4c0 [ 2336.720831][T17253] should_failslab+0x5/0x20 [ 2336.725382][T17253] slab_pre_alloc_hook+0x59/0x300 [ 2336.730475][T17253] ? __lock_acquire+0x138a/0x7c40 [ 2336.735591][T17253] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2336.741362][T17253] __kmem_cache_alloc_node+0x4f/0x270 [ 2336.746818][T17253] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2336.752576][T17253] __kmalloc+0xa3/0x240 [ 2336.756777][T17253] tomoyo_realpath_from_path+0xe2/0x5c0 [ 2336.762359][T17253] ? tomoyo_domain+0xd2/0x120 [ 2336.767081][T17253] ? tomoyo_path_number_perm+0x205/0x650 [ 2336.772766][T17253] tomoyo_path_number_perm+0x22f/0x650 [ 2336.778278][T17253] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2336.783784][T17253] ? ksys_write+0x1ce/0x260 [ 2336.788328][T17253] ? common_file_perm+0x171/0x1c0 [ 2336.793450][T17253] ? __fget_files+0x28/0x460 [ 2336.798103][T17253] security_file_ioctl+0x6c/0xa0 [ 2336.803091][T17253] __se_sys_ioctl+0x48/0x170 [ 2336.807743][T17253] do_syscall_64+0x4c/0xa0 [ 2336.812209][T17253] ? clear_bhb_loop+0x60/0xb0 [ 2336.817091][T17253] ? clear_bhb_loop+0x60/0xb0 [ 2336.821808][T17253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2336.827759][T17253] RIP: 0033:0x7fee4c19e159 [ 2336.832219][T17253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2336.851870][T17253] RSP: 002b:00007fee4cfbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2336.860372][T17253] RAX: ffffffffffffffda RBX: 00007fee4c426090 RCX: 00007fee4c19e159 [ 2336.868383][T17253] RDX: 0000200000000180 RSI: 0000000040107446 RDI: 0000000000000006 [ 2336.876395][T17253] RBP: 00007fee4cfbe090 R08: 0000000000000000 R09: 0000000000000000 [ 2336.884408][T17253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2336.892937][T17253] R13: 00007fee4c426128 R14: 00007fee4c426090 R15: 00007ffc2e6b0018 [ 2336.900959][T17253] [ 2336.935699][T17253] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2336.983953][T17251] netlink: 'syz.3.14035': attribute type 10 has an invalid length. [ 2337.012879][T17251] team0: Device wg1 is of different type [ 2337.159771][T17258] ¥: port 1(team0) entered blocking state [ 2337.166758][T17258] ¥: port 1(team0) entered disabled state [ 2337.174253][T17258] device team0 entered promiscuous mode [ 2337.180594][T17258] device team_slave_0 entered promiscuous mode [ 2337.187259][T17258] device team_slave_1 entered promiscuous mode [ 2337.215031][T17263] device team0 left promiscuous mode [ 2337.224934][T17263] device team_slave_0 left promiscuous mode [ 2337.232850][T17263] device team_slave_1 left promiscuous mode [ 2337.251848][T17263] ¥: port 1(team0) entered disabled state [ 2337.757699][T17277] netlink: 'syz.2.14045': attribute type 39 has an invalid length. [ 2338.347728][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14049'. [ 2338.357712][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14049'. [ 2338.373388][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14049'. [ 2338.385018][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14049'. [ 2339.048323][T17304] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14055'. [ 2339.422629][T17318] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2339.621192][T17318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2340.360512][T17350] IPv6: Can't replace route, no match found [ 2340.502900][T17349] IPv6: Can't replace route, no match found [ 2340.770643][T17360] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14072'. [ 2340.956942][T17365] device syzkaller0 entered promiscuous mode [ 2341.080929][T17365] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.14073'. [ 2342.144768][T17387] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14080'. [ 2342.172056][T17389] IPv6: Can't replace route, no match found [ 2344.168440][T17415] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14089'. [ 2344.756168][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.762618][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2346.105826][T17403] IPv6: Can't replace route, no match found [ 2346.569817][T17424] netlink: 'syz.4.14092': attribute type 29 has an invalid length. [ 2346.612727][T17424] netlink: 'syz.4.14092': attribute type 29 has an invalid length. [ 2346.642784][T17432] IPv6: Can't replace route, no match found [ 2346.692648][T17425] netlink: 'syz.4.14092': attribute type 29 has an invalid length. [ 2346.755919][T17428] netlink: 'syz.4.14092': attribute type 29 has an invalid length. [ 2347.151679][T17437] IPv6: Can't replace route, no match found [ 2347.660356][T17458] IPv6: Can't replace route, no match found [ 2347.824927][T17463] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14104'. [ 2348.150164][T17468] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.14107'. [ 2348.212004][T17470] IPv6: Can't replace route, no match found [ 2348.526235][T17480] netlink: 'syz.1.14110': attribute type 29 has an invalid length. [ 2348.740328][T17480] netlink: 'syz.1.14110': attribute type 29 has an invalid length. [ 2348.761527][T17488] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14123'. [ 2348.785947][T17478] netlink: 'syz.1.14110': attribute type 29 has an invalid length. [ 2348.810683][T17484] IPv6: Can't replace route, no match found [ 2348.819987][T17483] netlink: 'syz.1.14110': attribute type 29 has an invalid length. [ 2349.224451][T17492] IPv6: Can't replace route, no match found [ 2350.075728][T17519] IPv6: Can't replace route, no match found [ 2350.256078][T17523] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14124'. [ 2350.549106][T17529] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14128'. [ 2351.213547][T17538] netlink: 'syz.0.14127': attribute type 29 has an invalid length. [ 2351.276038][T17538] netlink: 'syz.0.14127': attribute type 29 has an invalid length. [ 2352.105225][T17568] IPv6: Can't replace route, no match found [ 2352.586245][T17586] validate_nla: 2 callbacks suppressed [ 2352.586267][T17586] netlink: 'syz.4.14145': attribute type 17 has an invalid length. [ 2352.620093][T17586] netlink: 'syz.4.14145': attribute type 16 has an invalid length. [ 2352.651836][T17586] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14145'. [ 2352.798383][T17589] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14146'. [ 2352.844296][T17591] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14147'. [ 2353.184567][T17601] netlink: 'syz.3.14149': attribute type 29 has an invalid length. [ 2353.295267][T17601] netlink: 'syz.3.14149': attribute type 29 has an invalid length. [ 2353.406905][T17599] netlink: 'syz.3.14149': attribute type 29 has an invalid length. [ 2353.680537][T17603] netlink: 'syz.3.14149': attribute type 29 has an invalid length. [ 2354.863365][T17646] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14162'. [ 2355.022625][T17653] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14163'. [ 2355.394777][T17662] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14165'. [ 2356.206967][T17677] IPv6: Can't replace route, no match found [ 2356.585927][T17687] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2356.656290][T17687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2356.994984][T17699] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14180'. [ 2357.687981][T17709] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14183'. [ 2358.493785][T17714] IPv6: Can't replace route, no match found [ 2358.507703][T17725] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2358.542914][T17725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2359.427934][T17764] FAULT_INJECTION: forcing a failure. [ 2359.427934][T17764] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.488676][T17764] CPU: 1 PID: 17764 Comm: syz.2.14198 Not tainted syzkaller #0 [ 2359.496315][T17764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2359.506418][T17764] Call Trace: [ 2359.509730][T17764] [ 2359.512698][T17764] dump_stack_lvl+0x188/0x24e [ 2359.517434][T17764] ? show_regs_print_info+0x12/0x12 [ 2359.522671][T17764] ? load_image+0x410/0x410 [ 2359.527225][T17764] ? __might_sleep+0xd0/0xd0 [ 2359.531914][T17764] ? __lock_acquire+0x7c40/0x7c40 [ 2359.537003][T17764] should_fail_ex+0x390/0x4c0 [ 2359.541759][T17764] should_failslab+0x5/0x20 [ 2359.546307][T17764] slab_pre_alloc_hook+0x59/0x300 [ 2359.551488][T17764] ? tomoyo_encode+0x28a/0x550 [ 2359.556315][T17764] __kmem_cache_alloc_node+0x4f/0x270 [ 2359.561746][T17764] ? tomoyo_encode+0x28a/0x550 [ 2359.566562][T17764] __kmalloc+0xa3/0x240 [ 2359.570777][T17764] tomoyo_encode+0x28a/0x550 [ 2359.575423][T17764] tomoyo_realpath_from_path+0x578/0x5c0 [ 2359.581150][T17764] ? tomoyo_domain+0xd2/0x120 [ 2359.585890][T17764] ? tomoyo_path_number_perm+0x205/0x650 [ 2359.591587][T17764] tomoyo_path_number_perm+0x22f/0x650 [ 2359.597103][T17764] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2359.602623][T17764] ? ksys_write+0x1ce/0x260 [ 2359.607188][T17764] ? common_file_perm+0x171/0x1c0 [ 2359.612306][T17764] ? __fget_files+0x28/0x460 [ 2359.616963][T17764] security_file_ioctl+0x6c/0xa0 [ 2359.621958][T17764] __se_sys_ioctl+0x48/0x170 [ 2359.626613][T17764] do_syscall_64+0x4c/0xa0 [ 2359.631087][T17764] ? clear_bhb_loop+0x60/0xb0 [ 2359.635822][T17764] ? clear_bhb_loop+0x60/0xb0 [ 2359.640552][T17764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2359.646511][T17764] RIP: 0033:0x7fcfbd39e159 [ 2359.650974][T17764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2359.670725][T17764] RSP: 002b:00007fcfbe244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2359.679298][T17764] RAX: ffffffffffffffda RBX: 00007fcfbd626090 RCX: 00007fcfbd39e159 [ 2359.687440][T17764] RDX: 0000200000000180 RSI: 0000000040107446 RDI: 0000000000000006 [ 2359.695457][T17764] RBP: 00007fcfbe244090 R08: 0000000000000000 R09: 0000000000000000 [ 2359.703474][T17764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2359.711503][T17764] R13: 00007fcfbd626128 R14: 00007fcfbd626090 R15: 00007ffe4234b5a8 [ 2359.719570][T17764] [ 2359.750393][T17764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2362.032755][T17776] netlink: 164 bytes leftover after parsing attributes in process `syz.0.14203'. [ 2362.074779][T17772] IPv6: Can't replace route, no match found [ 2362.121135][T17782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2362.618863][T17802] netlink: 'syz.3.14213': attribute type 39 has an invalid length. [ 2363.057423][T17815] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2363.174727][T17815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2363.214231][T17814] IPv6: Can't replace route, no match found [ 2364.054103][T17849] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2364.237171][T17849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2364.332350][T17851] IPv6: Can't replace route, no match found [ 2364.703299][T17855] netlink: 763 bytes leftover after parsing attributes in process `syz.4.14227'. [ 2365.598660][T17884] bond0: (slave dummy0): Error: Slave device does not support XDP [ 2365.706217][T17879] mac80211_hwsim hwsim107 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2366.054661][T17890] IPv6: Can't replace route, no match found [ 2366.071393][T17891] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2366.175428][T17891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2366.419427][T17900] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14249'. [ 2367.448537][T17921] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.14254'. [ 2367.546830][T17921] openvswitch: netlink: Key type 386 is out of range max 32 [ 2368.046057][T17931] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14257'. [ 2368.149505][T17931] netlink: 'syz.1.14257': attribute type 1 has an invalid length. [ 2368.665945][T17945] IPv6: Can't replace route, no match found [ 2368.764776][T17952] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.14265'. [ 2368.898466][T17952] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.14265'. [ 2369.086725][T17969] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14268'. [ 2372.885653][T17999] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.14276'. [ 2372.905473][T18002] netlink: 763 bytes leftover after parsing attributes in process `syz.2.14275'. [ 2373.187898][T18013] IPv6: Can't replace route, no match found [ 2373.219877][T18020] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14281'. [ 2373.692313][T18032] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2373.788634][T18032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2373.905652][T18040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2374.290507][T18051] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14292'. [ 2374.313495][T18051] netlink: 'syz.3.14292': attribute type 10 has an invalid length. [ 2374.402543][T18051] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2374.506241][T18051] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2374.620053][T18059] IPv6: Can't replace route, no match found [ 2375.068998][T18070] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2375.138768][T18073] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14299'. [ 2375.192321][T18070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2375.411047][T18083] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2375.437206][T18083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2375.492547][T18085] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14302'. [ 2375.633642][T18085] device hsr_slave_1 left promiscuous mode [ 2376.018933][T18101] netlink: 'syz.1.14309': attribute type 30 has an invalid length. [ 2376.054087][T18103] FAULT_INJECTION: forcing a failure. [ 2376.054087][T18103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2376.141425][T18101] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2376.196458][T18103] CPU: 0 PID: 18103 Comm: syz.3.14307 Not tainted syzkaller #0 [ 2376.204108][T18103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2376.214208][T18103] Call Trace: [ 2376.217521][T18103] [ 2376.220476][T18103] dump_stack_lvl+0x188/0x24e [ 2376.225186][T18103] ? show_regs_print_info+0x12/0x12 [ 2376.230413][T18103] ? load_image+0x410/0x410 [ 2376.234972][T18103] ? __lock_acquire+0x7c40/0x7c40 [ 2376.240036][T18103] ? __mutex_trylock_common+0x15c/0x260 [ 2376.245636][T18103] should_fail_ex+0x390/0x4c0 [ 2376.250355][T18103] _copy_from_user+0x2c/0x170 [ 2376.255061][T18103] do_tcp_setsockopt+0x59f/0x1b50 [ 2376.260127][T18103] ? tcp_set_window_clamp+0x5a0/0x5a0 [ 2376.265554][T18103] ? mutex_lock_nested+0x10/0x10 [ 2376.270524][T18103] ? aa_sk_perm+0x81f/0x950 [ 2376.275053][T18103] ? sock_common_setsockopt+0x32/0xb0 [ 2376.280463][T18103] ? tcp_setsockopt+0x39/0xe0 [ 2376.285169][T18103] ? tcp_enable_tx_delay+0x70/0x70 [ 2376.290310][T18103] ? sock_common_recvmsg+0x190/0x190 [ 2376.295624][T18103] smc_setsockopt+0x219/0xb80 [ 2376.300400][T18103] ? smc_shutdown+0x9a0/0x9a0 [ 2376.305101][T18103] ? aa_sock_opt_perm+0x74/0x100 [ 2376.310082][T18103] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 2376.315679][T18103] ? security_socket_setsockopt+0x7a/0xa0 [ 2376.321435][T18103] ? smc_shutdown+0x9a0/0x9a0 [ 2376.326142][T18103] __sys_setsockopt+0x2bf/0x3d0 [ 2376.331022][T18103] __x64_sys_setsockopt+0xb1/0xc0 [ 2376.336097][T18103] do_syscall_64+0x4c/0xa0 [ 2376.340537][T18103] ? clear_bhb_loop+0x60/0xb0 [ 2376.345233][T18103] ? clear_bhb_loop+0x60/0xb0 [ 2376.349932][T18103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2376.355866][T18103] RIP: 0033:0x7f0d5899e159 [ 2376.360325][T18103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2376.379967][T18103] RSP: 002b:00007f0d59842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2376.388415][T18103] RAX: ffffffffffffffda RBX: 00007f0d58c26090 RCX: 00007f0d5899e159 [ 2376.396416][T18103] RDX: 000000000000001e RSI: 0000000000000006 RDI: 0000000000000003 [ 2376.404415][T18103] RBP: 00007f0d59842090 R08: 0000000000000004 R09: 0000000000000000 [ 2376.412410][T18103] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 2376.420410][T18103] R13: 00007f0d58c26128 R14: 00007f0d58c26090 R15: 00007fff308a7ca8 [ 2376.428423][T18103] [ 2376.563652][T18108] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14310'. [ 2376.598357][T18101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2376.622485][T18098] IPv6: Can't replace route, no match found [ 2376.644156][T18106] netlink: 'syz.0.14310': attribute type 10 has an invalid length. [ 2376.676358][T18106] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2377.064339][T18121] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2377.241577][T18121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2377.272722][T18125] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14318'. [ 2377.295761][T18127] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14319'. [ 2377.623963][T18137] netlink: 'syz.0.14323': attribute type 2 has an invalid length. [ 2377.634119][T18137] netlink: 'syz.0.14323': attribute type 1 has an invalid length. [ 2377.681442][T18137] netlink: 'syz.0.14323': attribute type 4 has an invalid length. [ 2377.689696][T18137] netlink: 'syz.0.14323': attribute type 6 has an invalid length. [ 2377.704355][T18137] netlink: 'syz.0.14323': attribute type 7 has an invalid length. [ 2377.712987][T18137] netlink: 'syz.0.14323': attribute type 5 has an invalid length. [ 2377.763273][T18137] netlink: 206468 bytes leftover after parsing attributes in process `syz.0.14323'. [ 2377.886267][T18139] IPv6: Can't replace route, no match found [ 2378.038306][T18154] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2378.082358][T18154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2378.160088][T18157] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14328'. [ 2378.213758][T18157] netlink: 'syz.2.14328': attribute type 10 has an invalid length. [ 2378.265158][T18157] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2378.325719][T18161] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14331'. [ 2378.638617][T18178] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14337'. [ 2379.050536][T18193] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2379.137981][T18193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2379.180019][T18188] IPv6: Can't replace route, no match found [ 2379.772418][T18215] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14353'. [ 2380.328147][T18230] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2380.354820][T18230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2380.402795][T18228] IPv6: Can't replace route, no match found [ 2380.439667][T18237] netlink: 'syz.4.14362': attribute type 22 has an invalid length. [ 2380.456836][T18237] netlink: 14502 bytes leftover after parsing attributes in process `syz.4.14362'. [ 2380.615257][T18242] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14361'. [ 2380.708786][T18242] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2380.763851][T18242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2382.425138][T18253] netlink: 'syz.1.14366': attribute type 29 has an invalid length. [ 2382.529873][T18257] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14368'. [ 2382.539563][T18256] FAULT_INJECTION: forcing a failure. [ 2382.539563][T18256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2382.553715][T18253] netlink: 'syz.1.14366': attribute type 29 has an invalid length. [ 2382.565489][T18256] CPU: 0 PID: 18256 Comm: syz.4.14367 Not tainted syzkaller #0 [ 2382.573125][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2382.583236][T18256] Call Trace: [ 2382.586547][T18256] [ 2382.589501][T18256] dump_stack_lvl+0x188/0x24e [ 2382.594233][T18256] ? show_regs_print_info+0x12/0x12 [ 2382.599465][T18256] ? load_image+0x410/0x410 [ 2382.604011][T18256] ? __lock_acquire+0x7c40/0x7c40 [ 2382.609069][T18256] ? do_raw_spin_unlock+0x11d/0x230 [ 2382.614297][T18256] should_fail_ex+0x390/0x4c0 [ 2382.619014][T18256] _copy_from_user+0x2c/0x170 [ 2382.623723][T18256] ppp_get_filter+0xa3/0x1c0 [ 2382.628382][T18256] ? ppp_set_compress+0x720/0x720 [ 2382.633447][T18256] ppp_ioctl+0xe36/0x1b20 [ 2382.637812][T18256] ? ppp_poll+0x250/0x250 [ 2382.642172][T18256] ? __fget_files+0x28/0x460 [ 2382.646809][T18256] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2382.651795][T18256] ? security_file_ioctl+0x7c/0xa0 [ 2382.656944][T18256] ? ppp_poll+0x250/0x250 [ 2382.661305][T18256] __se_sys_ioctl+0xfa/0x170 [ 2382.665936][T18256] do_syscall_64+0x4c/0xa0 [ 2382.670391][T18256] ? clear_bhb_loop+0x60/0xb0 [ 2382.675095][T18256] ? clear_bhb_loop+0x60/0xb0 [ 2382.679816][T18256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2382.685740][T18256] RIP: 0033:0x7fee4c19e159 [ 2382.690186][T18256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2382.709815][T18256] RSP: 002b:00007fee4cfbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2382.718343][T18256] RAX: ffffffffffffffda RBX: 00007fee4c426090 RCX: 00007fee4c19e159 [ 2382.726341][T18256] RDX: 0000200000000180 RSI: 0000000040107446 RDI: 0000000000000006 [ 2382.734332][T18256] RBP: 00007fee4cfbe090 R08: 0000000000000000 R09: 0000000000000000 [ 2382.742330][T18256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2382.750320][T18256] R13: 00007fee4c426128 R14: 00007fee4c426090 R15: 00007ffc2e6b0018 [ 2382.758366][T18256] [ 2383.007835][T18268] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14372'. [ 2383.503099][T18273] netlink: 'syz.1.14376': attribute type 39 has an invalid length. [ 2383.514463][T18280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14377'. [ 2383.772818][T18283] netlink: 'syz.0.14378': attribute type 10 has an invalid length. [ 2383.791928][T18283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14378'. [ 2383.855102][T18289] netlink: 'syz.0.14378': attribute type 29 has an invalid length. [ 2383.913417][T18283] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2383.946259][T18283] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2384.015666][T18283] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2384.040939][T18289] netlink: 'syz.0.14378': attribute type 29 has an invalid length. [ 2384.086084][T18291] netlink: 'syz.0.14378': attribute type 29 has an invalid length. [ 2384.671294][T18321] netlink: 'syz.3.14389': attribute type 39 has an invalid length. [ 2384.854306][T18323] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14390'. [ 2384.887621][T18327] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14392'. [ 2385.515191][T18352] netlink: 'syz.1.14398': attribute type 29 has an invalid length. [ 2385.534966][T18350] netlink: 'syz.1.14398': attribute type 10 has an invalid length. [ 2385.546416][T18350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14398'. [ 2385.570888][T18350] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2385.579357][T18350] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2385.644939][T18350] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2385.668719][T18352] netlink: 'syz.1.14398': attribute type 29 has an invalid length. [ 2385.682175][T18353] netlink: 'syz.1.14398': attribute type 29 has an invalid length. [ 2385.737407][T18357] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2385.815533][T18357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2386.108435][T18365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2386.152822][T18365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2386.179556][T18367] netlink: 'syz.2.14405': attribute type 39 has an invalid length. [ 2387.074072][T18387] IPv6: Can't replace route, no match found [ 2387.784160][T18395] netlink: 'syz.2.14416': attribute type 10 has an invalid length. [ 2387.805666][T18395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14416'. [ 2387.851087][T18395] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2387.883257][T18400] netlink: 'syz.2.14416': attribute type 29 has an invalid length. [ 2387.913317][T18395] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2387.991576][T18403] FAULT_INJECTION: forcing a failure. [ 2387.991576][T18403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2388.033417][T18395] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2388.055127][T18403] CPU: 1 PID: 18403 Comm: syz.3.14418 Not tainted syzkaller #0 [ 2388.062847][T18403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2388.072981][T18403] Call Trace: [ 2388.076301][T18403] [ 2388.079273][T18403] dump_stack_lvl+0x188/0x24e [ 2388.084005][T18403] ? show_regs_print_info+0x12/0x12 [ 2388.089260][T18403] ? load_image+0x410/0x410 [ 2388.093826][T18403] ? __lock_acquire+0x7c40/0x7c40 [ 2388.098918][T18403] ? cap_capable+0x189/0x220 [ 2388.103591][T18403] should_fail_ex+0x390/0x4c0 [ 2388.108333][T18403] _copy_from_user+0x2c/0x170 [ 2388.113066][T18403] __sys_bpf+0x2ea/0x780 [ 2388.117367][T18403] ? bpf_link_show_fdinfo+0x380/0x380 [ 2388.122820][T18403] ? lock_chain_count+0x20/0x20 [ 2388.127733][T18403] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2388.133784][T18403] __x64_sys_bpf+0x78/0x90 [ 2388.138258][T18403] do_syscall_64+0x4c/0xa0 [ 2388.142726][T18403] ? clear_bhb_loop+0x60/0xb0 [ 2388.147458][T18403] ? clear_bhb_loop+0x60/0xb0 [ 2388.152187][T18403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2388.158166][T18403] RIP: 0033:0x7f0d5899e159 [ 2388.162644][T18403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2388.182381][T18403] RSP: 002b:00007f0d59863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2388.191024][T18403] RAX: ffffffffffffffda RBX: 00007f0d58c25fa0 RCX: 00007f0d5899e159 [ 2388.199044][T18403] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2388.207051][T18403] RBP: 00007f0d59863090 R08: 0000000000000000 R09: 0000000000000000 [ 2388.215063][T18403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2388.223085][T18403] R13: 00007f0d58c26038 R14: 00007f0d58c25fa0 R15: 00007fff308a7ca8 [ 2388.231138][T18403] [ 2388.291301][T18400] netlink: 'syz.2.14416': attribute type 29 has an invalid length. [ 2388.309090][T18402] netlink: 'syz.2.14416': attribute type 29 has an invalid length. [ 2388.356541][T18405] netlink: 'syz.4.14420': attribute type 1 has an invalid length. [ 2388.394880][T18405] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.14420'. [ 2388.572632][T18410] netlink: 'syz.3.14422': attribute type 11 has an invalid length. [ 2388.584735][T18410] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14422'. [ 2388.615243][T18411] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2388.660442][T18411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2388.793325][T18409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2389.734221][T18427] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14426'. [ 2389.895301][T18429] IPv6: Can't replace route, no match found [ 2390.520992][T18445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2390.655099][T18445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2390.782405][T18452] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14435'. [ 2391.006145][T18460] validate_nla: 2 callbacks suppressed [ 2391.006184][T18460] netlink: 'syz.0.14438': attribute type 2 has an invalid length. [ 2391.085533][T18460] netlink: 'syz.0.14438': attribute type 8 has an invalid length. [ 2391.116779][T18466] netlink: 'syz.2.14441': attribute type 11 has an invalid length. [ 2391.130461][T18460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14438'. [ 2391.147235][T18466] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14441'. [ 2391.203923][T18466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2391.686956][T18479] IPv6: Can't replace route, no match found [ 2391.874882][T18485] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2391.950572][T18486] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14446'. [ 2391.966291][T18485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2392.003182][T18490] netlink: 'syz.0.14447': attribute type 2 has an invalid length. [ 2392.477351][T18495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2392.648027][T18495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2393.544131][T18525] IPv6: Can't replace route, no match found [ 2393.591460][T18526] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2393.609646][T18526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2393.782723][T18533] netlink: 'syz.1.14462': attribute type 17 has an invalid length. [ 2393.791040][T18533] netlink: 'syz.1.14462': attribute type 16 has an invalid length. [ 2393.799553][T18533] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14462'. [ 2394.039056][T18538] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14464'. [ 2394.098239][T18541] netlink: 'syz.1.14465': attribute type 2 has an invalid length. [ 2394.770207][T18549] netlink: 'syz.4.14470': attribute type 2 has an invalid length. [ 2394.792192][T18553] netlink: 180 bytes leftover after parsing attributes in process `syz.0.14469'. [ 2394.802001][T18549] netlink: 'syz.4.14470': attribute type 1 has an invalid length. [ 2394.853836][T18549] netlink: 'syz.4.14470': attribute type 4 has an invalid length. [ 2394.931191][T18549] netlink: 'syz.4.14470': attribute type 6 has an invalid length. [ 2394.949615][T18549] netlink: 206468 bytes leftover after parsing attributes in process `syz.4.14470'. [ 2395.082364][T18553] netlink: 180 bytes leftover after parsing attributes in process `syz.0.14469'. [ 2395.373437][T18574] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2395.428752][T18574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2395.561823][T18576] IPv6: Can't replace route, no match found [ 2396.383230][T18602] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14482'. [ 2396.436918][T18605] netlink: 'syz.3.14483': attribute type 11 has an invalid length. [ 2396.444944][T18605] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14483'. [ 2396.557337][T18605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2396.950168][T18614] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2396.985026][T18614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2397.191904][T18621] IPv6: Can't replace route, no match found [ 2398.705205][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2398.748053][T18654] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14500'. [ 2398.833548][T18655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2398.926778][T18661] IPv6: Can't replace route, no match found [ 2399.105676][T18664] validate_nla: 2 callbacks suppressed [ 2399.105736][T18664] netlink: 'syz.0.14503': attribute type 4 has an invalid length. [ 2399.122098][T18664] netlink: 'syz.0.14503': attribute type 3 has an invalid length. [ 2399.164729][T18664] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.14503'. [ 2399.255513][T18672] netlink: 'syz.0.14503': attribute type 10 has an invalid length. [ 2399.274445][T18672] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14503'. [ 2400.279637][T18703] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14513'. [ 2400.294281][T18703] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2400.324884][T18703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2400.486535][T18702] IPv6: Can't replace route, no match found [ 2401.771797][T18712] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14518'. [ 2402.884166][T18716] netlink: 'syz.3.14520': attribute type 16 has an invalid length. [ 2402.907698][T18716] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14520'. [ 2403.020866][T18719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14519'. [ 2403.199861][T18722] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14519'. [ 2403.282234][T18716] device syzkaller0 entered promiscuous mode [ 2405.637168][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2405.647502][T18740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2405.971517][T18749] IPv6: Can't replace route, no match found [ 2406.158441][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.164832][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.210811][T18765] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14536'. [ 2406.479195][T18777] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14540'. [ 2406.508103][T18774] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14538'. [ 2406.539019][T18776] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2406.614970][T18776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2406.770756][T18787] netlink: 'syz.1.14543': attribute type 7 has an invalid length. [ 2406.791013][T18787] netlink: 'syz.1.14543': attribute type 6 has an invalid length. [ 2407.135110][T18794] netlink: 'syz.3.14545': attribute type 10 has an invalid length. [ 2409.856681][T18799] IPv6: Can't replace route, no match found [ 2410.445004][T18817] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2410.543375][T18817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2410.943827][T18828] netlink: 'syz.0.14557': attribute type 11 has an invalid length. [ 2410.997070][T18828] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14557'. [ 2411.031550][T18825] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14556'. [ 2411.079761][T18823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2411.705617][T18839] IPv6: Can't replace route, no match found [ 2412.494024][T18870] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14569'. [ 2413.312681][T18877] netlink: 'syz.4.14572': attribute type 29 has an invalid length. [ 2413.331962][T18877] netlink: 'syz.4.14572': attribute type 29 has an invalid length. [ 2413.479310][T18879] IPv6: Can't replace route, no match found [ 2413.488284][T18877] netlink: 'syz.4.14572': attribute type 29 has an invalid length. [ 2413.844936][T18892] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14578'. [ 2414.400742][T18908] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.14583'. [ 2414.441708][T18909] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14583'. [ 2415.066881][T18928] IPv6: Can't replace route, no match found [ 2415.335175][T18936] netlink: 'syz.4.14591': attribute type 7 has an invalid length. [ 2415.359622][T18936] netlink: 'syz.4.14591': attribute type 6 has an invalid length. [ 2415.420169][T18938] netlink: 'syz.0.14592': attribute type 29 has an invalid length. [ 2415.537159][T18938] netlink: 'syz.0.14592': attribute type 29 has an invalid length. [ 2415.563876][T18943] netlink: 'syz.0.14592': attribute type 29 has an invalid length. [ 2415.862186][T18950] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14597'. [ 2416.629746][T18972] IPv6: Can't replace route, no match found [ 2417.168215][T18987] netlink: 'syz.3.14608': attribute type 7 has an invalid length. [ 2417.206466][T18987] netlink: 'syz.3.14608': attribute type 6 has an invalid length. [ 2417.455989][T18992] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.14609'. [ 2417.547579][T18993] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14610'. [ 2418.283054][T19001] IPv6: Can't replace route, no match found [ 2418.298024][T19006] IPv6: Can't replace route, no match found [ 2419.142303][T19039] IPv6: Can't replace route, no match found [ 2419.700528][T19057] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14633'. [ 2419.789459][T19053] IPv6: Can't replace route, no match found [ 2420.113914][T19068] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14637'. [ 2420.524955][T19078] IPv6: Can't replace route, no match found [ 2421.385021][T19112] netlink: 68520 bytes leftover after parsing attributes in process `syz.3.14651'. [ 2421.717270][T19119] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14653'. [ 2421.823544][T19126] IPv6: Can't replace route, no match found [ 2422.468391][T19135] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14658'. [ 2422.744825][T19146] validate_nla: 3 callbacks suppressed [ 2422.744849][T19146] netlink: 'syz.3.14660': attribute type 41 has an invalid length. [ 2423.141081][T19159] netlink: 'syz.1.14664': attribute type 29 has an invalid length. [ 2423.170477][T19159] netlink: 'syz.1.14664': attribute type 29 has an invalid length. [ 2423.224794][T19159] netlink: 'syz.1.14664': attribute type 29 has an invalid length. [ 2423.469974][T19167] IPv6: Can't replace route, no match found [ 2423.888211][T19180] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2423.910844][T19180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2424.089166][T19184] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14674'. [ 2424.268839][T19188] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14676'. [ 2425.118908][T19207] netlink: 'syz.2.14683': attribute type 2 has an invalid length. [ 2425.185495][T19212] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2425.209889][T19212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2425.923089][T19239] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14695'. [ 2426.656926][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2426.723010][T19250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2427.556211][T19277] FAULT_INJECTION: forcing a failure. [ 2427.556211][T19277] name failslab, interval 1, probability 0, space 0, times 0 [ 2427.624090][T19277] CPU: 1 PID: 19277 Comm: syz.3.14704 Not tainted syzkaller #0 [ 2427.631767][T19277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2427.641882][T19277] Call Trace: [ 2427.645220][T19277] [ 2427.648219][T19277] dump_stack_lvl+0x188/0x24e [ 2427.652992][T19277] ? show_regs_print_info+0x12/0x12 [ 2427.658276][T19277] ? load_image+0x410/0x410 [ 2427.662873][T19277] ? __might_sleep+0xd0/0xd0 [ 2427.667540][T19277] ? __lock_acquire+0x7c40/0x7c40 [ 2427.672639][T19277] ? aa_file_perm+0x3ea/0xf00 [ 2427.677406][T19277] should_fail_ex+0x390/0x4c0 [ 2427.682183][T19277] should_failslab+0x5/0x20 [ 2427.686756][T19277] slab_pre_alloc_hook+0x59/0x300 [ 2427.691859][T19277] ? kernfs_fop_write_iter+0x154/0x520 [ 2427.697401][T19277] __kmem_cache_alloc_node+0x4f/0x270 [ 2427.702867][T19277] ? kernfs_fop_write_iter+0x154/0x520 [ 2427.708400][T19277] __kmalloc+0xa3/0x240 [ 2427.712654][T19277] kernfs_fop_write_iter+0x154/0x520 [ 2427.718037][T19277] vfs_write+0x482/0x9a0 [ 2427.722380][T19277] ? file_end_write+0x250/0x250 [ 2427.727417][T19277] ? __fget_files+0x3fc/0x460 [ 2427.732205][T19277] ? __fdget_pos+0x2ae/0x360 [ 2427.736879][T19277] ? ksys_write+0x70/0x260 [ 2427.741382][T19277] ksys_write+0x14d/0x260 [ 2427.745807][T19277] ? __ia32_sys_read+0x80/0x80 [ 2427.750664][T19277] ? lockdep_hardirqs_on+0x94/0x140 [ 2427.755956][T19277] do_syscall_64+0x4c/0xa0 [ 2427.760433][T19277] ? clear_bhb_loop+0x60/0xb0 [ 2427.765172][T19277] ? clear_bhb_loop+0x60/0xb0 [ 2427.769960][T19277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2427.775944][T19277] RIP: 0033:0x7f0d5899e159 [ 2427.780432][T19277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2427.800113][T19277] RSP: 002b:00007f0d59863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2427.808692][T19277] RAX: ffffffffffffffda RBX: 00007f0d58c25fa0 RCX: 00007f0d5899e159 [ 2427.816736][T19277] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 000000000000000a [ 2427.824775][T19277] RBP: 00007f0d59863090 R08: 0000000000000000 R09: 0000000000000000 [ 2427.832810][T19277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2427.840929][T19277] R13: 00007f0d58c26038 R14: 00007f0d58c25fa0 R15: 00007fff308a7ca8 [ 2427.849136][T19277] [ 2430.320071][T19271] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14702'. [ 2430.372878][T19271] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2430.411419][T19271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2431.217237][T19297] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14710'. [ 2432.015651][T19310] IPv6: Can't replace route, no match found [ 2432.023746][T19306] FAULT_INJECTION: forcing a failure. [ 2432.023746][T19306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2432.048858][T19306] CPU: 1 PID: 19306 Comm: syz.2.14712 Not tainted syzkaller #0 [ 2432.056476][T19306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2432.066578][T19306] Call Trace: [ 2432.069906][T19306] [ 2432.072875][T19306] dump_stack_lvl+0x188/0x24e [ 2432.077603][T19306] ? show_regs_print_info+0x12/0x12 [ 2432.082841][T19306] ? load_image+0x410/0x410 [ 2432.087392][T19306] ? __lock_acquire+0x7c40/0x7c40 [ 2432.092558][T19306] ? __phys_addr+0xb6/0x170 [ 2432.097107][T19306] should_fail_ex+0x390/0x4c0 [ 2432.101838][T19306] _copy_from_user+0x2c/0x170 [ 2432.106559][T19306] memdup_user+0x60/0xb0 [ 2432.110843][T19306] ppp_get_filter+0x10d/0x1c0 [ 2432.115555][T19306] ? ppp_set_compress+0x720/0x720 [ 2432.120625][T19306] ppp_ioctl+0xe36/0x1b20 [ 2432.124999][T19306] ? ppp_poll+0x250/0x250 [ 2432.129362][T19306] ? __fget_files+0x28/0x460 [ 2432.134013][T19306] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2432.139024][T19306] ? security_file_ioctl+0x7c/0xa0 [ 2432.144266][T19306] ? ppp_poll+0x250/0x250 [ 2432.148631][T19306] __se_sys_ioctl+0xfa/0x170 [ 2432.153267][T19306] do_syscall_64+0x4c/0xa0 [ 2432.157721][T19306] ? clear_bhb_loop+0x60/0xb0 [ 2432.162431][T19306] ? clear_bhb_loop+0x60/0xb0 [ 2432.167146][T19306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2432.173095][T19306] RIP: 0033:0x7fcfbd39e159 [ 2432.177540][T19306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2432.197269][T19306] RSP: 002b:00007fcfbe244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2432.205720][T19306] RAX: ffffffffffffffda RBX: 00007fcfbd626090 RCX: 00007fcfbd39e159 [ 2432.213724][T19306] RDX: 0000200000000180 RSI: 0000000040107446 RDI: 0000000000000006 [ 2432.221732][T19306] RBP: 00007fcfbe244090 R08: 0000000000000000 R09: 0000000000000000 [ 2432.229739][T19306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2432.237737][T19306] R13: 00007fcfbd626128 R14: 00007fcfbd626090 R15: 00007ffe4234b5a8 [ 2432.245749][T19306] [ 2434.063063][T19362] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14728'. [ 2434.070582][T19364] netlink: 'syz.1.14729': attribute type 11 has an invalid length. [ 2434.090849][T19364] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14729'. [ 2434.119696][T19363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2434.431612][T19372] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14731'. [ 2434.617988][T19373] netlink: 'syz.4.14730': attribute type 16 has an invalid length. [ 2434.637757][T19373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14730'. [ 2434.711366][T19370] IPv6: Can't replace route, no match found [ 2436.132758][T19405] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2436.187324][T19405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2436.659239][T19415] IPv6: Can't replace route, no match found [ 2436.970341][T19430] netlink: 'syz.3.14749': attribute type 2 has an invalid length. [ 2436.992267][T19430] netlink: 'syz.3.14749': attribute type 8 has an invalid length. [ 2437.012431][T19430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14749'. [ 2437.593208][T19447] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2437.626633][T19447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2437.978994][T19454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14756'. [ 2438.027325][T19454] : renamed from caif0 [ 2438.390258][T19454] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2438.473933][T19459] netlink: 'syz.2.14758': attribute type 10 has an invalid length. [ 2438.736931][T19474] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14762'. [ 2438.857104][T19477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2438.864420][T19477] IPv6: NLM_F_CREATE should be set when creating new route [ 2438.871795][T19477] IPv6: NLM_F_CREATE should be set when creating new route [ 2438.879120][T19477] IPv6: NLM_F_CREATE should be set when creating new route [ 2439.264315][T19488] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2439.295602][T19488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2439.387117][T19487] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.14768'. [ 2439.911302][T19501] netlink: 'syz.3.14773': attribute type 21 has an invalid length. [ 2439.940123][T19501] netlink: 176 bytes leftover after parsing attributes in process `syz.3.14773'. [ 2440.325042][T19508] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.14771'. [ 2440.474265][T19516] netlink: 'syz.3.14776': attribute type 2 has an invalid length. [ 2440.502255][T19516] netlink: 'syz.3.14776': attribute type 1 has an invalid length. [ 2440.541827][T19516] netlink: 'syz.3.14776': attribute type 4 has an invalid length. [ 2440.569574][T19516] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.14776'. [ 2441.312877][T19518] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2441.341030][T19518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2442.658236][T19564] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2442.706449][T19564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2444.473629][T19606] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14807'. [ 2445.089709][T19620] netlink: 'syz.1.14811': attribute type 21 has an invalid length. [ 2445.175448][T19620] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14811'. [ 2445.203548][T19621] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14812'. [ 2445.251825][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2445.422406][T19621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2445.677304][T19633] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2445.764849][T19633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2445.870227][T19636] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2445.887692][T19636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2446.131154][T19649] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14822'. [ 2446.909584][T19662] IPv6: Can't replace route, no match found [ 2447.352387][T19682] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2447.399517][T19682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2447.456032][T19680] netlink: 'syz.0.14830': attribute type 10 has an invalid length. [ 2447.746110][T19680] team0: Device wg1 is of different type [ 2447.983239][T19685] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2448.006582][T19685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2448.453771][T19696] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14838'. [ 2449.195638][T19701] IPv6: Can't replace route, no match found [ 2449.300814][T19708] FAULT_INJECTION: forcing a failure. [ 2449.300814][T19708] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.325572][T19708] CPU: 1 PID: 19708 Comm: syz.3.14843 Not tainted syzkaller #0 [ 2449.333214][T19708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2449.343417][T19708] Call Trace: [ 2449.346739][T19708] [ 2449.349710][T19708] dump_stack_lvl+0x188/0x24e [ 2449.354450][T19708] ? show_regs_print_info+0x12/0x12 [ 2449.359703][T19708] ? load_image+0x410/0x410 [ 2449.364276][T19708] ? __might_sleep+0xd0/0xd0 [ 2449.368917][T19708] ? __lock_acquire+0x7c40/0x7c40 [ 2449.374007][T19708] should_fail_ex+0x390/0x4c0 [ 2449.378737][T19708] should_failslab+0x5/0x20 [ 2449.383269][T19708] slab_pre_alloc_hook+0x59/0x300 [ 2449.388327][T19708] ? __lock_acquire+0x7c40/0x7c40 [ 2449.393383][T19708] ? kvmalloc_node+0x6c/0x180 [ 2449.398095][T19708] __kmem_cache_alloc_node+0x4f/0x270 [ 2449.403493][T19708] ? schedule_delayed_monitor_work+0x160/0x160 [ 2449.409689][T19708] ? kvmalloc_node+0x6c/0x180 [ 2449.414401][T19708] __kmalloc_node+0xa2/0x240 [ 2449.419028][T19708] kvmalloc_node+0x6c/0x180 [ 2449.423567][T19708] bpf_test_run_xdp_live+0x1da/0x1a90 [ 2449.428972][T19708] ? 0xffffffffa00041c0 [ 2449.433152][T19708] ? text_poke_copy+0x7b/0x90 [ 2449.437868][T19708] ? 0xffffffffa00041c0 [ 2449.442048][T19708] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 2449.447975][T19708] ? irqentry_enter+0x33/0x50 [ 2449.452690][T19708] ? xdp_convert_md_to_buff+0x330/0x330 [ 2449.458298][T19708] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2449.464578][T19708] ? bpf_test_init+0x119/0x140 [ 2449.469395][T19708] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2449.474893][T19708] bpf_prog_test_run_xdp+0x757/0xf80 [ 2449.480230][T19708] ? __lock_acquire+0x7c40/0x7c40 [ 2449.485301][T19708] ? dev_put+0x80/0x80 [ 2449.489419][T19708] ? dev_put+0x80/0x80 [ 2449.493516][T19708] bpf_prog_test_run+0x31c/0x390 [ 2449.498487][T19708] __sys_bpf+0x62b/0x780 [ 2449.502760][T19708] ? bpf_link_show_fdinfo+0x380/0x380 [ 2449.508176][T19708] ? lock_chain_count+0x20/0x20 [ 2449.513063][T19708] __x64_sys_bpf+0x78/0x90 [ 2449.517517][T19708] do_syscall_64+0x4c/0xa0 [ 2449.521962][T19708] ? clear_bhb_loop+0x60/0xb0 [ 2449.526669][T19708] ? clear_bhb_loop+0x60/0xb0 [ 2449.531375][T19708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2449.537303][T19708] RIP: 0033:0x7f0d5899e159 [ 2449.541746][T19708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2449.561380][T19708] RSP: 002b:00007f0d59863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2449.569816][T19708] RAX: ffffffffffffffda RBX: 00007f0d58c25fa0 RCX: 00007f0d5899e159 [ 2449.577812][T19708] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2449.585812][T19708] RBP: 00007f0d59863090 R08: 0000000000000000 R09: 0000000000000000 [ 2449.593828][T19708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2449.601835][T19708] R13: 00007f0d58c26038 R14: 00007f0d58c25fa0 R15: 00007fff308a7ca8 [ 2449.609864][T19708] [ 2449.707037][T19715] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2449.750880][T19715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2449.784665][T19714] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2449.826926][T19714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2450.770066][T19726] netlink: 'syz.2.14848': attribute type 10 has an invalid length. [ 2450.785728][T19740] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14855'. [ 2450.889282][T19726] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2450.904148][T19735] netlink: 'syz.0.14854': attribute type 10 has an invalid length. [ 2450.990035][T19735] team0: Device wg1 is of different type [ 2451.124699][T19744] IPv6: Can't replace route, no match found [ 2451.353720][T19753] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2451.382024][T19753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2451.465716][T19755] tipc: Started in network mode [ 2451.472991][T19755] tipc: Node identity 9215a268, cluster identity 4711 [ 2451.481990][T19755] tipc: Node number set to 2450891368 [ 2453.158701][T19777] netlink: 'syz.3.14866': attribute type 10 has an invalid length. [ 2453.308041][T19777] team0: Device wg1 is of different type [ 2453.707900][T19785] IPv6: Can't replace route, no match found [ 2453.965863][T19793] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14872'. [ 2454.633139][T19805] netlink: 'syz.4.14878': attribute type 2 has an invalid length. [ 2454.645200][T19805] netlink: 'syz.4.14878': attribute type 8 has an invalid length. [ 2454.663380][T19805] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14878'. [ 2454.843672][T19810] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14880'. [ 2455.054946][T19819] netlink: 26 bytes leftover after parsing attributes in process `syz.2.14884'. [ 2455.703935][T19827] netlink: 'syz.1.14883': attribute type 10 has an invalid length. [ 2455.758144][T19827] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2455.846250][T19830] IPv6: Can't replace route, no match found [ 2456.154140][T19843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14891'. [ 2456.177065][T19843] : renamed from caif0 [ 2456.390433][T19843] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2456.884396][T19864] netlink: 'syz.0.14900': attribute type 17 has an invalid length. [ 2456.896141][T19864] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14900'. [ 2457.413180][T19870] IPv6: Can't replace route, no match found [ 2457.460739][T19877] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14905'. [ 2458.067028][T19881] netlink: 'syz.0.14906': attribute type 10 has an invalid length. [ 2458.196871][T19881] device dummy0 entered promiscuous mode [ 2458.220181][T19881] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2460.684306][T19949] device bridge_slave_1 left promiscuous mode [ 2460.702994][T19949] bridge0: port 2(bridge_slave_1) entered disabled state [ 2460.736918][T19949] device bridge_slave_0 left promiscuous mode [ 2460.743506][T19949] bridge0: port 1(bridge_slave_0) entered disabled state [ 2461.203995][T19965] netlink: 'syz.2.14933': attribute type 3 has an invalid length. [ 2461.262958][T19965] netlink: 'syz.2.14933': attribute type 1 has an invalid length. [ 2461.577156][T19968] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14934'. [ 2462.037330][T22949] Bluetooth: hci5: unexpected event 0x0f length: 15 > 4 [ 2462.677117][T19985] FAULT_INJECTION: forcing a failure. [ 2462.677117][T19985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2462.846691][T19985] CPU: 1 PID: 19985 Comm: syz.2.14939 Not tainted syzkaller #0 [ 2462.854335][T19985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2462.864439][T19985] Call Trace: [ 2462.867762][T19985] [ 2462.871262][T19985] dump_stack_lvl+0x188/0x24e [ 2462.876524][T19985] ? show_regs_print_info+0x12/0x12 [ 2462.881773][T19985] ? load_image+0x410/0x410 [ 2462.886341][T19985] ? __lock_acquire+0x7c40/0x7c40 [ 2462.891897][T19985] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2462.898112][T19985] should_fail_ex+0x390/0x4c0 [ 2462.902857][T19985] _copy_from_user+0x2c/0x170 [ 2462.907599][T19985] ___sys_recvmsg+0x170/0x590 [ 2462.912363][T19985] ? perf_trace_preemptirq_template+0x268/0x320 [ 2462.918678][T19985] ? __sys_recvmsg+0x2a0/0x2a0 [ 2462.923503][T19985] ? lock_chain_count+0x20/0x20 [ 2462.928436][T19985] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2462.934669][T19985] __x64_sys_recvmsg+0x20d/0x2e0 [ 2462.939665][T19985] ? ___sys_recvmsg+0x590/0x590 [ 2462.944591][T19985] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2462.950553][T19985] do_syscall_64+0x4c/0xa0 [ 2462.955037][T19985] ? clear_bhb_loop+0x60/0xb0 [ 2462.959768][T19985] ? clear_bhb_loop+0x60/0xb0 [ 2462.964500][T19985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2462.970492][T19985] RIP: 0033:0x7fcfbd39e159 [ 2462.974957][T19985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2462.995138][T19985] RSP: 002b:00007fcfbe244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2463.003613][T19985] RAX: ffffffffffffffda RBX: 00007fcfbd626090 RCX: 00007fcfbd39e159 [ 2463.011662][T19985] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000006 [ 2463.019679][T19985] RBP: 00007fcfbe244090 R08: 0000000000000000 R09: 0000000000000000 [ 2463.027790][T19985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2463.035810][T19985] R13: 00007fcfbd626128 R14: 00007fcfbd626090 R15: 00007ffe4234b5a8 [ 2463.043857][T19985] [ 2463.289913][T19994] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14942'. [ 2464.730543][T20009] device syzkaller0 entered promiscuous mode [ 2466.087867][T22949] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2466.096740][T22949] Bluetooth: hci5: Injecting HCI hardware error event [ 2466.105640][T22949] Bluetooth: hci5: hardware error 0x00 [ 2467.598920][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.605464][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.165577][T22949] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2468.249985][T20063] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14962'. [ 2469.720941][T20037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14955'. [ 2470.293907][T20076] IPv6: Can't replace route, no match found [ 2470.354343][T20084] netlink: 'syz.4.14971': attribute type 3 has an invalid length. [ 2470.390736][T20084] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14971'. [ 2470.422544][T20085] netlink: 'syz.3.14972': attribute type 11 has an invalid length. [ 2470.555948][T20085] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14972'. [ 2470.606753][T20083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2470.848462][T20093] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.14973'. [ 2472.263674][T20118] IPv6: Can't replace route, no match found [ 2472.652452][T20131] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14988'. [ 2474.047805][T20164] IPv6: Can't replace route, no match found [ 2474.156792][T20168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15000'. [ 2474.218196][T20168] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2474.385209][T20176] netlink: 'syz.0.15002': attribute type 10 has an invalid length. [ 2474.415399][T20176] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15002'. [ 2474.470269][T20176] bridge0: port 3(hsr0) entered disabled state [ 2474.476910][T20176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2474.484222][T20176] bridge0: port 1(bridge_slave_0) entered disabled state [ 2474.844224][T20187] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.15008'. [ 2475.548526][T20201] IPv6: Can't replace route, no match found [ 2475.760324][T20210] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.15017'. [ 2476.760427][T20243] IPv6: Can't replace route, no match found [ 2476.828146][T20248] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15031'. [ 2477.974191][T20285] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15047'. [ 2478.050974][T20280] IPv6: Can't replace route, no match found [ 2478.692909][T20305] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.15055'. [ 2479.735599][T20328] IPv6: Can't replace route, no match found [ 2480.359390][T20345] device syzkaller0 entered promiscuous mode [ 2480.585507][T20353] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.15070'. [ 2480.743247][T20358] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15072'. [ 2481.319637][T20363] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.15074'. [ 2481.354979][T20372] IPv6: Can't replace route, no match found [ 2482.053642][T20388] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2482.093462][T20388] syzkaller1: linktype set to 804 [ 2482.132122][T20393] syzkaller1: tun_chr_ioctl cmd 35108 [ 2482.715296][T20412] netlink: 'syz.4.15089': attribute type 10 has an invalid length. [ 2482.989428][T20420] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15092'. [ 2483.463715][T20412] team0 (unregistering): Port device team_slave_0 removed [ 2483.508782][T20412] team0 (unregistering): Port device team_slave_1 removed [ 2483.545657][T20417] IPv6: Can't replace route, no match found [ 2483.866613][T20431] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.15094'. [ 2485.100288][T20442] FAULT_INJECTION: forcing a failure. [ 2485.100288][T20442] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.125362][T20442] CPU: 0 PID: 20442 Comm: syz.3.15099 Not tainted syzkaller #0 [ 2485.132972][T20442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2485.143052][T20442] Call Trace: [ 2485.146348][T20442] [ 2485.149313][T20442] dump_stack_lvl+0x188/0x24e [ 2485.154038][T20442] ? show_regs_print_info+0x12/0x12 [ 2485.159277][T20442] ? load_image+0x410/0x410 [ 2485.163819][T20442] ? __might_sleep+0xd0/0xd0 [ 2485.168517][T20442] ? __lock_acquire+0x7c40/0x7c40 [ 2485.173597][T20442] should_fail_ex+0x390/0x4c0 [ 2485.178334][T20442] should_failslab+0x5/0x20 [ 2485.182875][T20442] slab_pre_alloc_hook+0x59/0x300 [ 2485.187943][T20442] ? page_pool_create+0x6d/0x5c0 [ 2485.192912][T20442] __kmem_cache_alloc_node+0x4f/0x270 [ 2485.198326][T20442] ? page_pool_create+0x6d/0x5c0 [ 2485.203308][T20442] kmalloc_node_trace+0x22/0xe0 [ 2485.208220][T20442] page_pool_create+0x6d/0x5c0 [ 2485.213021][T20442] bpf_test_run_xdp_live+0x220/0x1a90 [ 2485.218425][T20442] ? 0xffffffffa00041c0 [ 2485.222616][T20442] ? text_poke_copy+0x7b/0x90 [ 2485.227338][T20442] ? 0xffffffffa00041c0 [ 2485.231516][T20442] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 2485.237449][T20442] ? xdp_convert_md_to_buff+0x330/0x330 [ 2485.243044][T20442] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2485.249322][T20442] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2485.254899][T20442] bpf_prog_test_run_xdp+0x757/0xf80 [ 2485.260228][T20442] ? __lock_acquire+0x7c40/0x7c40 [ 2485.265305][T20442] ? dev_put+0x80/0x80 [ 2485.269411][T20442] ? dev_put+0x80/0x80 [ 2485.273506][T20442] bpf_prog_test_run+0x31c/0x390 [ 2485.278475][T20442] __sys_bpf+0x62b/0x780 [ 2485.282753][T20442] ? bpf_link_show_fdinfo+0x380/0x380 [ 2485.288168][T20442] ? lock_chain_count+0x20/0x20 [ 2485.293041][T20442] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2485.299058][T20442] __x64_sys_bpf+0x78/0x90 [ 2485.303510][T20442] do_syscall_64+0x4c/0xa0 [ 2485.307953][T20442] ? clear_bhb_loop+0x60/0xb0 [ 2485.312656][T20442] ? clear_bhb_loop+0x60/0xb0 [ 2485.317361][T20442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2485.323283][T20442] RIP: 0033:0x7f0d5899e159 [ 2485.327723][T20442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2485.347352][T20442] RSP: 002b:00007f0d59863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2485.355792][T20442] RAX: ffffffffffffffda RBX: 00007f0d58c25fa0 RCX: 00007f0d5899e159 [ 2485.363783][T20442] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2485.371773][T20442] RBP: 00007f0d59863090 R08: 0000000000000000 R09: 0000000000000000 [ 2485.379761][T20442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.387751][T20442] R13: 00007f0d58c26038 R14: 00007f0d58c25fa0 R15: 00007fff308a7ca8 [ 2485.395760][T20442] [ 2485.704167][T20454] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.15104'. [ 2486.197340][T20472] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15111'. [ 2486.273775][T20474] netlink: 'syz.1.15113': attribute type 11 has an invalid length. [ 2486.335070][T20474] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15113'. [ 2486.446024][T20473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2486.874996][T20482] netlink: 212908 bytes leftover after parsing attributes in process `syz.4.15115'. [ 2487.015753][T20482] netlink: zone id is out of range [ 2487.521009][T20495] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15118'. [ 2488.030481][T20500] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.15119'. [ 2489.092811][T20526] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.15128'. [ 2489.632110][T20532] netlink: 'syz.3.15131': attribute type 10 has an invalid length. [ 2490.513451][T20572] netlink: 'syz.3.15142': attribute type 21 has an invalid length. [ 2490.535464][T20572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15142'. [ 2490.566244][T20572] netlink: 'syz.3.15142': attribute type 1 has an invalid length. [ 2490.606926][T20570] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.15143'. [ 2490.695590][T20582] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15144'. [ 2490.704822][T20582] : renamed from caif0 [ 2490.756553][T20582] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2491.320331][T20597] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15151'. [ 2491.416059][T20601] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.15154'. [ 2492.697691][T20622] IPv6: Can't replace route, no match found [ 2492.715911][T20630] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15162'. [ 2492.744383][T20630] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2492.771542][T20629] IPv6: Can't replace route, no match found [ 2492.946874][T20634] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15163'. [ 2493.349736][T20647] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.15168'. [ 2493.802221][T20660] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15171'. [ 2494.506285][T20677] IPv6: Can't replace route, no match found [ 2494.886887][T20685] IPv6: Can't replace route, no match found [ 2495.656976][T20701] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.15185'. [ 2496.545684][T20035] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2496.560786][T20035] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2496.577263][T20035] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2496.588076][T20035] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2496.597970][T20035] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2496.607385][T20035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2497.018824][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2497.180786][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2498.095686][T20736] IPv6: Can't replace route, no match found [ 2498.219873][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2498.334773][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2498.494020][T20757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15201'. [ 2498.518622][T20716] chnl_net:caif_netlink_parms(): no params data found [ 2498.636620][T20035] Bluetooth: hci3: command 0x0409 tx timeout [ 2498.817709][T20716] bridge0: port 1(bridge_slave_0) entered blocking state [ 2498.844314][T20716] bridge0: port 1(bridge_slave_0) entered disabled state [ 2498.884033][T20716] device bridge_slave_0 entered promiscuous mode [ 2498.938659][T20716] bridge0: port 2(bridge_slave_1) entered blocking state [ 2498.961624][T20716] bridge0: port 2(bridge_slave_1) entered disabled state [ 2498.998847][T20716] device bridge_slave_1 entered promiscuous mode [ 2499.071818][ T9] tipc: Left network mode [ 2499.117328][T20716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2499.347316][T20716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2499.646452][T20716] team0: Port device team_slave_0 added [ 2499.653048][T20782] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15206'. [ 2499.927006][T20716] team0: Port device team_slave_1 added [ 2500.122404][T20792] netlink: 'syz.1.15207': attribute type 2 has an invalid length. [ 2500.135467][T20792] netlink: 'syz.1.15207': attribute type 4 has an invalid length. [ 2500.143373][T20792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15207'. [ 2500.271306][T20716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2500.288083][T20716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2500.330539][T20716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2500.349890][T20796] IPv6: Can't replace route, no match found [ 2500.433428][T20716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2500.453442][T20716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2500.532980][T20716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2500.715615][T20035] Bluetooth: hci3: command 0x041b tx timeout [ 2500.812519][T20716] device hsr_slave_0 entered promiscuous mode [ 2500.822071][T20716] device hsr_slave_1 entered promiscuous mode [ 2500.991108][T20811] delete_channel: no stack [ 2502.034086][T20841] IPv6: Can't replace route, no match found [ 2502.577289][T20851] netlink: 'syz.0.15223': attribute type 3 has an invalid length. [ 2502.595647][T20716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2502.667803][T20716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2502.681193][T20851] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15223'. [ 2502.727289][T20864] netlink: 68520 bytes leftover after parsing attributes in process `syz.3.15227'. [ 2502.760028][T20716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2502.796220][T20035] Bluetooth: hci3: command 0x040f tx timeout [ 2502.815024][T20716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2503.814912][T20716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2503.863892][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2503.892523][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2503.944391][T20716] 8021q: adding VLAN 0 to HW filter on device team0 [ 2504.051646][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2504.078923][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2504.097436][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 2504.104621][T11633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2504.176387][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2504.234187][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2504.254513][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2504.294470][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 2504.301860][ T9292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2504.334965][T20894] IPv6: Can't replace route, no match found [ 2504.355866][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2504.427244][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2504.469070][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2504.497458][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2504.526565][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2504.587215][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2504.616733][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2504.632856][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2504.652376][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2504.702427][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2504.732616][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2504.760698][T20716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2504.876490][T20035] Bluetooth: hci3: command 0x0419 tx timeout [ 2505.244654][T20918] IPv6: Can't replace route, no match found [ 2505.371289][T20923] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.15244'. [ 2506.013104][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2506.027253][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2506.217198][T20716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2506.510480][T20943] netlink: 'syz.1.15248': attribute type 11 has an invalid length. [ 2506.568684][T20943] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15248'. [ 2506.659044][T20940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2508.253651][T20980] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.15256'. [ 2508.318998][ T9] device bond0 left promiscuous mode [ 2508.324560][ T9] device bond_slave_0 left promiscuous mode [ 2508.354574][ T9] device bond_slave_1 left promiscuous mode [ 2508.376358][ T9] device bridge0 left promiscuous mode [ 2508.382430][ T9] ¥: port 1(bond0) entered disabled state [ 2508.426000][ T9] device hsr_slave_0 left promiscuous mode [ 2508.433022][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2508.440807][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2508.450428][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2508.458152][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2508.467525][ T9] device batadv0 left promiscuous mode [ 2508.476820][ T9] bridge0: port 3(batadv0) entered disabled state [ 2508.499451][ T9] device bridge_slave_1 left promiscuous mode [ 2508.513976][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.528454][ T9] device bridge_slave_0 left promiscuous mode [ 2508.535051][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.572909][ T9] device veth1_macvtap left promiscuous mode [ 2508.580528][ T9] device veth0_macvtap left promiscuous mode [ 2509.495107][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2509.549313][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2509.901574][ T9] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2509.910756][ T9] bond0 (unregistering): Released all slaves [ 2510.156302][T20998] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.15266'. [ 2510.419667][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2510.446714][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2511.078018][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2511.113464][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2511.178338][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2511.199788][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2511.223720][T20716] device veth0_vlan entered promiscuous mode [ 2511.300800][T20716] device veth1_vlan entered promiscuous mode [ 2511.354587][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2511.488193][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2511.538440][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2511.593208][T20716] device veth0_macvtap entered promiscuous mode [ 2511.667854][T20716] device veth1_macvtap entered promiscuous mode [ 2511.725968][T21027] IPv6: Can't replace route, no match found [ 2511.764924][T20716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2511.805316][T20716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2511.825554][T20716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2511.865360][T20716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2511.892981][T20716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2511.928151][T20716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2511.962467][T20716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2511.981145][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2511.994461][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2512.056795][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2512.095110][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2512.168432][T20716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2512.184211][T22949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2512.198332][T22949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2512.206382][T22949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2512.213832][T20716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.231180][T22949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2512.239026][T22949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2512.247695][T22949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2512.278156][T20716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2512.288902][T20716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.298857][T20716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2512.309362][T20716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.319555][T20716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2512.330094][T20716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.341909][T20716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2512.354396][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2512.392064][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2512.450155][T20716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2512.469497][T20716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2512.510623][T20716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2512.540383][T20716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2512.932761][T21058] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.15272'. [ 2512.953131][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2512.995403][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2513.076708][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2513.203841][ T9287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2513.222167][ T9287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2513.311062][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2513.601144][T21038] chnl_net:caif_netlink_parms(): no params data found [ 2513.906158][T21038] bridge0: port 1(bridge_slave_0) entered blocking state [ 2513.913817][T21038] bridge0: port 1(bridge_slave_0) entered disabled state [ 2513.922835][T21038] device bridge_slave_0 entered promiscuous mode [ 2513.932891][T21038] bridge0: port 2(bridge_slave_1) entered blocking state [ 2513.940351][T21038] bridge0: port 2(bridge_slave_1) entered disabled state [ 2513.949404][T21038] device bridge_slave_1 entered promiscuous mode [ 2513.981759][T21038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2513.997740][T21038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2514.105118][T21038] team0: Port device team_slave_0 added [ 2514.124302][T21038] team0: Port device team_slave_1 added [ 2514.246732][T21038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2514.287378][T21038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.321945][T20035] Bluetooth: hci1: command 0x0409 tx timeout [ 2514.376944][T21038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2514.401126][T21038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2514.415440][T21038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.559439][T21038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2514.682544][T21082] IPv6: Can't replace route, no match found [ 2514.718583][T21038] device hsr_slave_0 entered promiscuous mode [ 2514.734375][T21038] device hsr_slave_1 entered promiscuous mode [ 2514.799801][T21038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2514.809790][T21038] Cannot create hsr debugfs directory [ 2515.030060][T21038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2515.040242][T21038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2515.050977][T21038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2515.060698][T21038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2515.132556][T21038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2515.146277][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2515.154670][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2515.166377][T21038] 8021q: adding VLAN 0 to HW filter on device team0 [ 2515.177716][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2515.187806][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2515.197510][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 2515.204650][ T9287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2515.213053][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2515.227516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2515.240234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2515.250294][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2515.257491][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2515.270281][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2515.286876][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2515.296541][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2515.306319][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2515.323523][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2515.332029][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2515.341209][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2515.351279][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2515.361174][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2515.372203][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2515.382734][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2515.395706][T21038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2515.608929][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2515.617493][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2515.630597][T21038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2516.009123][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2516.022678][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2516.047367][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2516.057074][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2516.067687][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2516.077002][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2516.087946][T21038] device veth0_vlan entered promiscuous mode [ 2516.103880][T21038] device veth1_vlan entered promiscuous mode [ 2516.128029][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2516.137326][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2516.147002][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2516.156361][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2516.168855][T21038] device veth0_macvtap entered promiscuous mode [ 2516.182159][T21038] device veth1_macvtap entered promiscuous mode [ 2516.199846][T21038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2516.212338][T21038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.224020][T21038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2516.235088][T21038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.246959][T21038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2516.257721][T21038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.268494][T21038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2516.279755][T21038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.291386][T21038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2516.303337][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2516.312603][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2516.323976][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2516.343288][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2516.358008][T21038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2516.369188][T21038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.379284][T21038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2516.391357][T21038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.401695][T20035] Bluetooth: hci1: command 0x041b tx timeout [ 2516.408489][T21038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2516.420572][T21038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.430856][T21038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2516.441740][T21038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.453192][T21038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2516.464014][T21038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.479625][T21038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2516.492769][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2516.503468][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2516.532702][T21038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2516.543233][T21038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2516.553108][T21038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2516.563147][T21038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2516.684253][ T9258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2516.694265][ T9258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2516.704307][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2516.772098][ T9258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2516.788415][ T9258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2516.803368][T11608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2518.475631][T20035] Bluetooth: hci1: command 0x040f tx timeout [ 2520.555874][T20035] Bluetooth: hci1: command 0x0419 tx timeout [ 2529.042056][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.048490][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.487387][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.493783][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2623.275727][T22949] Bluetooth: hci3: command 0x0406 tx timeout [ 2638.635515][T20035] Bluetooth: hci1: command 0x0406 tx timeout [ 2651.918479][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.924886][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.357948][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.364345][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.797297][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.803670][ T1280] ieee802154 phy1 wpan1: encryption failed: -22