last executing test programs: 4.070155213s ago: executing program 0 (id=3067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300000800eb00b704000002000000850000003300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 3.919210489s ago: executing program 0 (id=3071): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0xfffffffffffffff9, 0x12) (async) write$cgroup_subtree(r2, 0x0, 0x22) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_skb=0x4, r2, 0x8, 0x0, 0x49}, 0x94) 3.78504388s ago: executing program 2 (id=3072): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) 3.563626135s ago: executing program 2 (id=3074): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = getpid() syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="eab5d9", 0x3}], 0x1}, 0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000640)=""/148, 0x94}], 0x4}, 0x42) unlink(&(0x7f0000000140)='./cgroup\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b91c021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={r4}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xb}, 0xbafa, 0xff, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, r2, 0xffffffffffffffff, r1, 0x2) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) 3.254960124s ago: executing program 3 (id=3076): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x4000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.966843789s ago: executing program 0 (id=3077): r0 = syz_clone(0x19420000, 0x0, 0xffffff4f, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a000000000000611f5c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x800000000000}) gettid() 2.615949747s ago: executing program 3 (id=3079): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x100000, 0x8, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r6) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x9, 0x6, 0x63, 0x0, 0x10000, 0x1110, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbf7, 0x4, @perf_config_ext={0xd, 0x7f}, 0x4140, 0x8, 0x80000000, 0x8, 0x3, 0xffff, 0xb448, 0x0, 0x321, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 2.550695718s ago: executing program 2 (id=3080): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 2.022802853s ago: executing program 2 (id=3082): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x3, 0x80, 0x2, 0x0, 0x5, 0x2, 0x2f96de45b297f51a, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x2606, 0x7ff}, 0x10010, 0x6c, 0x0, 0x6, 0x2, 0x2d9, 0x0, 0x0, 0x8, 0x0, 0x400000004}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3c2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x8000}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0xf, 0x3, 0x7, 0xf9, 0x0, 0x100000000, 0x4040, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc, 0x2, @perf_config_ext={0x3, 0x8001}, 0x2601, 0x80000001, 0x77, 0x7, 0x1ff, 0xa4f8, 0x7, 0x0, 0x7, 0x0, 0xe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'wg2\x00', 0x200}) recvmsg$unix(r2, &(0x7f00000009c0)={&(0x7f0000000200), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000300)=""/193, 0xc1}, {&(0x7f0000000400)=""/171, 0xab}, {&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/148, 0x94}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/11, 0xb}, {&(0x7f0000000740)=""/116, 0x74}, {&(0x7f00000007c0)=""/167, 0xa7}], 0xa, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000a00)={'nr0\x00', @local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x305401, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000ac0)={0x5, &(0x7f0000000a80)=[{0x3, 0x7, 0x4, 0x1}, {0x7fff, 0x7, 0x8, 0x1}, {0x7, 0x81, 0x7, 0x7}, {0xcb5, 0x0, 0x2, 0xffff}, {0xff, 0x3, 0xf, 0xf}]}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000b00)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r3, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xfffffff8, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002000)={r3, 0x20, &(0x7f0000001fc0)={&(0x7f0000000f40)=""/91, 0x5b, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x17, 0x14, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ldst={0x7, 0x3, 0x2, 0x8, 0x4, 0x40, 0xc}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x678, 0xa7, &(0x7f0000000e00)=""/167, 0x40f00, 0x8, '\x00', r5, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x0, 0x6, 0x81}, 0x10, r8, r3, 0x7, &(0x7f0000002040)=[r3], &(0x7f0000002080)=[{0x8000000, 0x5, 0x2, 0x1}, {0x4, 0x5, 0x0, 0x8}, {0x2, 0x1, 0x4, 0xa}, {0x3, 0x3, 0x1, 0xb}, {0x3, 0x1, 0x8, 0x2}, {0x1, 0x5, 0xe, 0x5}, {0x1, 0x5, 0xf, 0x2}], 0x10, 0x7f}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002280)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000023c0)={0x6, 0x3, &(0x7f00000021c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x0, 0x1, 0x1, 0x6, 0x2, 0xc, 0x1}], &(0x7f0000002200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002240)={0x0, 0x6, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000022c0)=[r3, r6, r6, r9, r6, r6], &(0x7f0000002300)=[{0x4, 0x5, 0xb, 0x5}, {0x1, 0x2, 0x2, 0xc}, {0x1, 0x2, 0x10, 0x6}, {0x0, 0x3, 0xc, 0x8}, {0x0, 0x5, 0x7, 0xb}, {0x3, 0x5, 0x3}, {0x3, 0x2, 0x3, 0xb}, {0x4, 0x4, 0x10, 0x7}, {0x3, 0x4, 0x2, 0x5}], 0x10, 0x8}, 0x94) close(r0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f0000002480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x7, 0x4}]}, @fwd={0x8}]}, {0x0, [0x30, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000002500)=""/48, 0x46, 0x30, 0x0, 0x6}, 0x28) r11 = openat$cgroup_ro(r3, &(0x7f0000002580)='blkio.bfq.io_service_time\x00', 0x0, 0x0) close(r9) ioctl$TUNGETVNETHDRSZ(r11, 0x800454d7, &(0x7f00000025c0)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000002600)='syzkaller\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002640)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x5, '\x00', r5, r10, 0x3, 0x4, 0x2}, 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa) 1.574953411s ago: executing program 1 (id=3085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r0, r0, 0x2f, 0x1c, 0x4}, 0x20) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="bea55522eb4cca0577fc60f843", 0xd}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x158}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90a24fc601000040006000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000400), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x1) close(0x3) 1.557521717s ago: executing program 3 (id=3086): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1, 0x0, 0x0, 0x12}, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="b048d19827921fec3a71145bf4bd5eda22c0f5aea532ed114841f8ffd0d635baeb685b29fe", 0x25}, {&(0x7f0000000140)="6a24690ef730cadaf1fb26bad27b7c28de84585c7be434b893f0c89398b164f41023cadd99f36876078059ac38272ec8456af59e07", 0x35}], 0x2, &(0x7f0000000200)=[{0xc8, 0x115, 0x4, "9e45f6363c495a46c4b6c005e7a1c388a529e9422bca1dc807293c7c61fe86d16f4db7251e4f881afbaf01dda5535305a43121915411fdda9822ae5167b745f5985a5cb7b96dd90f9ff4316a55c1081109a6fcf8afbb3d7a248b2e9562b23e408d7cff6aa2b9ec2c3c2553e8b2a99d3e418f088bf56f8ee6d3ebf1253f039522226147bbbae4780a73ef0e80cc5410db08f71bee152175c5949546d11a6f3f65526b6cdbef942195c20134a4c8ea1516bbf46fa553ec"}, {0x40, 0x101, 0x4, "afbb286e596392a30910367a1bf9b51ffecc8f86cf52e6b11965001f3deca989e83eb8f94a85cc36800206"}, {0x80, 0x11, 0x2, "3feab25ab8320734f5465052db7e1f5acaf697fe35104424f78fb09d83e0e0c5e9775784005c676b0bebe5c89623325475f80bc609872e593b6f854b92d48f101a221763cb1a1c17b4e6015b9c521afe21004ca878de9c9069c3f7dbac410249bf0abb0ad7b9a03f677c534d2c"}, {0xd8, 0x0, 0x3, "2d7790f59482faa8a83589d14031ef803f2927b4d7dfab328e13bf66377c3bd220a161c24b8ba253d07773731ed967eb046920f975a213f00ed98997f7bf9fdb0e37ef1ca9c10d9d7748eedc42e55c42f5c97caba84b87f4658f0d60f8aa11dc3bea1ad20ab8a991f9a8b74191c7216ed08984c4ef47eb21daec02339925dfc61786ef2a756bbb69814b1ffbce9dcfa89526275f1ad8acdc0ca26a8f00e061ffea1f187c363e4f23b1b3d9463351c0fd4f58798e1cf8be95b3abbab7e59d12577b"}, {0xb0, 0x112, 0x209b502e, "5ebaeb226a5f3a62e5853d06179a7bc39bf248e45d1fdc9f62a362daabcc41e9b351172ea220623dd2e37e4ba305ce71cbdca04102ef227d376e6625e3e95c10823d8f7617c703cfb2cec68412eb3ce0f15ee47c7bb97c11cdc4e324bd41d09fea238859a6b8e4e6ff0a8ae44d83bdcd99555a2b290b7f490fe9bd95c6111c4bce7170e92e5c363d0c081901db097e0ab02ba8731aeae9db907f5bff9b46cc"}], 0x310}, 0x24000010) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.413322544s ago: executing program 1 (id=3087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x4100}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.410127393s ago: executing program 3 (id=3088): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = getpid() syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="eab5d9", 0x3}], 0x1}, 0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000640)=""/148, 0x94}], 0x4}, 0x42) unlink(&(0x7f0000000140)='./cgroup\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b91c021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={r4}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xb}, 0xbafa, 0xff, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, r2, 0xffffffffffffffff, r1, 0x2) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) 1.368747041s ago: executing program 1 (id=3089): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="100000000000000040"], 0x10}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000006b25c7265a4ec9feb0100180000001c0000000200000000000000000000030000000000000000"], &(0x7f0000000240)=""/237, 0x36, 0xed, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x4, 0xfffff013}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'macvtap0\x00', 0x2000}) r5 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r5, &(0x7f0000002940)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0}, 0x20000041) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.197973811s ago: executing program 1 (id=3090): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000060000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0xfffffffc, 0x1, 0x0, 0x8}, {0x0, 0x3, 0x5}, {0x0, 0x4, 0x10007}], 0x10, 0x4000}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 1.053238008s ago: executing program 1 (id=3091): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 1.051088498s ago: executing program 2 (id=3092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x17a, 0x17a, 0x5, [@union={0x10, 0x2, 0x0, 0x5, 0x0, 0x1, [{0x6, 0x1, 0x1f}, {0x1, 0x2, 0x8}]}, @enum={0x10, 0x5, 0x0, 0x6, 0x4, [{0x6, 0xfbb2}, {0xa, 0x9}, {0xb, 0x6}, {0x6, 0xad97}, {0x0, 0x8}]}, @union={0x1, 0x5, 0x0, 0x5, 0x1, 0x3, [{0x2, 0x3, 0x1}, {0x10, 0x4, 0x2a}, {0x9, 0x1, 0x10001}, {0xa, 0x4, 0x7}, {0x3, 0x5, 0x6}]}, @datasec={0x7, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x4, 0xff}], 'f7'}, @ptr={0x4}, @struct={0xb, 0x9, 0x0, 0x4, 0x0, 0x0, [{0x10, 0x5, 0x9a}, {0xe, 0x0, 0x3}, {0x5, 0x1, 0x2}, {0x8, 0x5, 0xfffffff9}, {0x7, 0x0, 0x7f}, {0x0, 0x3}, {0xe, 0x4, 0x1000}, {0x4, 0x5, 0x3}, {0x1, 0x5, 0x2}]}, @enum64={0xa, 0x4, 0x0, 0x13, 0x1, 0x9, [{0x3, 0x3, 0x91}, {0xa, 0x3, 0x200}, {0x3, 0x6, 0xffffff80}, {0xc, 0xbe6, 0x2}]}]}, {0x0, [0x5f, 0x2e, 0x1e]}}, &(0x7f0000000180)=""/139, 0x199, 0x8b, 0x0, 0x80000000}, 0x28) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x5f, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x43a1bd73, 0x7, 0xfffffffffffffffd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x1, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r3, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0xd6, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x9, 0x0, r4, 0x1ff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x2, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x39, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000080), 0x11ffffce1) 813.271738ms ago: executing program 0 (id=3093): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0xf6ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) 685.115221ms ago: executing program 3 (id=3094): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0xffff, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040)=r4, 0x3b) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f00000002c0)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="933407ddf270f4d9a66c632d595938b8e81869968a543d0a56f761a1fe94f801fca385775f57d2c863b4b576a9352e07fbb3eb4267897458b9271c5c6eab525e2e4a5a9c2cc6b84fff89a5cb84ead949eab8e9d6cb59b27f8c146d9c4acd93c6c76d164357766632e06b40319a2d715b50401279a0dde186b3", 0x79}], 0x1, &(0x7f0000001340)=[{0x1010, 0x10a, 0x2, "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"}, {0x70, 0x116, 0x8, "344e206d4d613e0da04e7815b1c4cdff0482c6c790a200ec0b5135f75e8284a8b30c7da898c559e58dcc8ee8ebae69bcc55c62ef6c668d03d7959229ecd187ebc6950b12daed309d2afab0d8e4137f93dee7517b3af8da5e2bed6a8d61"}, {0x1010, 0x10f, 0x9, "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"}, {0xe8, 0x10c, 0x9, "cdd0848a07b885dbb21b917ca4e65c2a1b33557fff2e4f7e3802a1f474f03f6327f83f2344eba9699ab8003a94cd0bea5f63e5c367a13a36daa074583486585d3953ed115e0a408873268bac58dea4ad72c3aac28f5fd564778fa045dca1aa4e05774a756a03edb00e75f19bd7356e26f3421036e03ab21f13dec90ba0a296c201debda982afeccc0cdd24a647a0794d5dd3bf2803e9a414aaae5f95c37cd8ba69352e687620f4304fdc08912a3b373f7f40ef388abf851dd5179147da7b0ca0230c297b82b25214a4e7d43a1ae6f3bbb5cc"}, {0x68, 0x1, 0x5b9e, "face053b0a2ca8d2eb3b7cd0e43bcf4867861ad8f90027f8d2f2b1aeb6b6799eae59e1bfda9121734dcc8d26d78b2f734becde0e2027b288b84ddf5bef740c5c1dbb3b9d361494f8168fa40e01cf30c43bc5f23f3a93"}, {0x1010, 0x37612b5be3ea4112, 0x3, "c973f614becc9fda12a054274be0936219f78ddc4b8fdd664a09a1ce1474bd087edd662821318350e2dfd67f10f18b4222f839a35f7348f0259bb5b87360063a309db677b3e8c04942b564c8982889c85da519d16432c77c2f14d23f6ece323f0396372ed3cb229c90c225a6105de5cd7008cfa8276ced4857104a09a4d33300991f9a747ac873a2c4d55b49e6e741070556e88716cd11a79dab7f5ee1d074c51aea29c51e20236fb7d0e894f061ed4786289334752e4fa05686ad9bdaf3feb26be4aae1e78908b345501a2ba2e644b8ce2a5dd0ee8f17cafde89d0c0eea455c19fa8f8cdf9fd7806d7697b8f59360e7b83a33aed0d9f62343865e247d26c060cba1ad5b71778970962e5076eb25c1d530d6bcb9c548982520e1455d08ca726630ea7c18e30315b819659b1d73fbd0e723b232e62750800289e481caf30131ee691b385de74b1db28add9bf04d416cf19994837ade5522f724e329bcfd1f80e702b1932a306e724ff0569f7e974c72dfb2c641fabd32a1871320636a82b20834d3e85245122b5a9e56cd01e6e0da415af4dc2fd155b57b93b6a39f67ea887d0408e4149209c6b9deb37bd026a5814ac122edaa52c807c43719662f7e576c3aa7b0bc57fbab962380ef328e3fc5152b3d31abd3e36ca60e25895ce262051df2e5dbda54d952a1e22c6ee4bdd827f4de0111e6878f301bb52f08e9e2dd562981b6e287406eb8fd82c80f7e022e08b9f509c852bc8554729e814389dfff2da29f608389b87b93576a0b72ec6e6b3493fae6b11dc88b380bb69d716645f70ce8082d04dfeecf1c3be4791918898fccc332f52a2f0e77977b1b789b042f09e9726c366490a942477e303597780a759d908299df8f8edeba0ed5bc599124b4f35555f1bd19ef622c41828467ea9f745c0df42b2d0c8cb2b85a1b80390c857547e71472f8ab54e3ba15ffbe481a6b378f7451dba922b578c4d043e9f285ba3ef5d8c14d58591b7d1eeba455fa3e0c40dc3d3aaaaf7f647f6899de7b90393b3312f916c55dcc1f4eacdf49d3fbe5a6c8494724f83bc4626aa664487fd7ee439fa89cb9f8ec3baba5af538a6cfff17ed23f447008df75bbb59d079dd84fbc1adc22076c61ed7233a30f5c26e3d25eb581e6725a6d8be159a70aab2267f410f97d557af014e140aaa72a108b2413081f3a8b6ccfc167378dbea9135e28ff773c07b68d23fd97d78a7fef20ecb2a7ec7b1b2eab479d0d21496f8adfa35016dcd5134010f7b2835ba772e2cfc6ee22f4af97b0c33c79a3f00016b3ad430b69e8b593758dfc5e46656973fdd50ca55dd5fcd3b6b3d8ae067c253338dd0d23a172d76957105b538c3c4de6e7371f333f9204528b68b874149954d9afbf73b8755ea98ef2e4720e9302c477aac237354891201c0d53540ba18d9e74032873ff769a4c9151c64b2ddc4f576b316043fbfaa715e921f25edbe6968d74ad748ba4d22f6fd63f79ec21c43670674cc1878c0bdefce0f24e459e0cc156a04a1d82af40b4c0ba9ed9573648dfbbac48edd7904cb1e82171337b02fa68d0dac2df3f940ef5e576640d23b248a7a645bb2bdc6ea701a644c1ac97eb4f535ddef18da2303c86eca8bdcd0bcb27c59cddc6f4ea163d85480aa73af6a8d04ce6df7d996c375567ebbb7fb8f0415892c01c5297265d24f3788156a783278d54dd01ef194ea8aa8ddee64523ea3d3eafbe6cb16812a49cace774fad9a93ae21a1b07f4bdf378c56446f7a7e05a768e03fc801a3244daa215d2069ce70f9f1b1fb47dd2c6427042ce07670322c54cb6f670588a02e6bb1ae1d2dc05a2a2f55092c81b3b74493581b5e60bc1e340b6350213ab5f52c985e3de6f4b137a249ca129b6d8002a3c17c646120ed90813a26b2b0f038093f07d94e77c0a02c3d192faaa4a6211906cae7f905090be2a2c683da50e802e4d4c3f858cc824bbd4150327035d444d59042b2ac1ddc94b2e0d855e82f76d3b1771748ef107d21a183b96ad816ca788e85cde2737029d85974fd7e87af311f009bd804075a277284f795878e6506a30b0c025d460fb2f0f7aa41aff17d4cc22dccbf59425a80d918dc1f75e881e494c55b9288171c02884f18b2d96898dfed7bbac166d74fcf6bbe459fe668e1aaf2d5e3eadc358a84794994556058593b253df6ba0463ea1be1bdbd0ccc8dc29a9359726882df14b29ec61f52e319d78af525ba889c7860771737a57545089dbc36bd20a3fe38d6d62308688b79f66a1609b376084a9e6631f622e13b52f099f132bf3936618e179cdd04df1ade251167bc3548c6756947972831c0612feca19bbf4b9f11e6ef562089ea7f5da3a986aa905d4e50f0a27a1cf1791cc1946b523418abdc7b2284faca6ab724e8476692db5946079a9900f5873d10199493fb855b6f0309dcb7625ec06844b01c1ff1e2c0c950c1f67267ba5bcdba665f36d5df6c65ac50c087b80cd65db9d59e8bdfa65e53e366bf7aec97c67637b995c797d690a9844f3027e592f7bafac25b29027ab6c4753bb62a03cd9feef17c1d2abe28682cba187162d2525e7e105190f7b8749da11483cc23415664503959cd8494da56d6d46d46ded0e7eae52cef0e5584c09f6f5afadad54b6930a494025a3d653e37326dea8a253b04d6642287acaab9f622a1611aead48ebbd7e707342413faa6d52f00d8a0e1d3c9f3b55c3d33c141275790ebe3fd5fdde417683c2449603f0716bd341ecac551c367bd82b33374455b8a3d57b3b5c9aa559ae6a7c05492ec0cb3f45010ef839e1a0169efd69d7ee4d3983043c6f22583f4aa7db994e29c55c627965993849280444f1eae82bc47664ca32decb399bf98352e87e163407692aa2eece9b15922eb06701ffb25282d66d8e5a1356c4337720d058cb29049d99e091db1d077990c29c6be9789332c0ea7fafa95f97971c3bd632b775a3fd77989ad1952fcb71bd34f43dea368fc33261d64c7c28195c42e1e9053a93accc567472fc3754335c7105fcfd27a48f962b2969053652927feee1f56e694213f443a7d44898c13c99dc9e9315a9e065a174dfb85ac0ad9896529424ae13b5ac1823c6f0d6e04b18fd23626b4171fc0b7ae3fca4500da234c59592b93c98a9ece16241e469e49668e2533e13722afc5b29e79b453b8e94d269658db3532333a51068a108092d3df55bde17ba47e84fd07389c23005674d4ba84371c9d45c82b701727999a654efa57e62eaa52afe5bcc9baa7097df364e4744a5a28724390298fb923b2b247e8ab0223a58642754a3cdeb04bcc5ed27e83c6e9f0b6759468fde879f1de145096e6b9f139c093c0e55ce8bbb71fd7f0fcb9bc21f87b05ca166cfeb3db0cbe1e4c01c1cda9b1165b5e6b85e5c7e1fdf438a0f95fdaddffbed3e6561420eb0ecd1d8daa8ad1306dc506e5b2270caf0af5ae0fdffcef104d8183f7c3debc28425c7068205846013d300e1a6927070d0e6cb90f9c652d9f5768ab222af5037e01877eb4ad71945e0207ec123b78d02a30e7ff544152a3efb92e29d3f9d699109972c9c1fe086a22deea8e706e2257a178117ec7dcb59bd5831caab93677779339bd9a939f7fe5fa744ad88b5ef46c8323d7bd02a0218074454947a6016c96b3cd625385d407e86429dc3376c70eae074af28bbf9d37a79a30b02eef2f6b0601f3f53c0208696a45058432ebba3fe04e81323d5a8069896eff2ba2489d5f4e514eb4dabe12ef1d0efb25b53b852c2ab3e25f43b844f94fb6b6930deeb55f83d0ffbfc4a03a0589a18c9748070264cc1bd594b6870f6e48346bd51f36cd2bb0a9c85df2652bb33c32fef0ea703af9fc20f014ee163c4e76d664d66acadfd07e36c073bffec6acc4fd71c1a19494dd8ba3d176b096a39b80eb4496291b5675e624b3cd0bb8f21b3be53a572483fb47c21ebc945c4327175ab5040a455ff29a81551f7cd30eaa02dc4feca2ed62577641cca413e0e6fcf8ab79c40ed996918302b3116d3e3b27e402b796f50f0a447b20fa7cb6bf7a1c2cd32d966d16847d411f3eaa2ed1e17d8eb35c18c5ad3617bb8e166878c9e6964f75f79addafb302e1c98ab3d03c9530af13dc0ed4d87bf34468bc54a3a94f086d178f428b5f44f4b8dedcfbdb0a55dbfa8f822c00dfdc9ef12bd2a36e338b9a3abbff35f58530810442d07c7c8b6078393edbf5412207e2744b889ab517ae97243e41fd055de92415f6ba3f4c16afd3e5ff9d31b341e0b0a7b26c2b0924b95ea17ac4bc45b807b8b5c89a60eef46b2184dbfeb05b8beb425314e11a51ccdba5e12b8976be5ef862b770146b3d0c7cab6d2887e51224ae86f9a78fc1c88c7f73c7a223b887c508676ae4434412c88e588156bd81a011150f71ad43ab00c18f8dcbc3bbd5c0d908e0dd9bba6d3678ad82865fb20824dd74a6c4f2875028e6ae9709543668b37ed3ad9f4ec7d3f30c69668c39ea4263590ea77f64fd5260d2ecb6c1136925568ad9d89a08361eb8297d56e0d1316b75f21643a2b029df878a978d7394b0325aefff47a4f32fc7df704bf4f48fc18378e14f607152c412b9c70bd9f1a83df7a799cf6730c58a4d65732a9da4232977a230e3054ec9d91982f46b99239cb6303f91f7403478a21befa96ebed843075bf45cba7c84c19e2f276603d969b937c3cf825916f30cdd4f1cc6f89ee2142a7a512e89e25ed86029495348cb22438d6e5fed047ef520680371c7431c48c523f55a2c59e5f31eb5ba04b97c29d96c9b43aabb778af5965100a6c9c39ac9b10e130a54c440a2ec584eb979afb4dd3b63cc5d74d01f282a0204232780b1635930e95625d649ff5bf2dbb4d9f9620205fdf91bf9fa81ba22766a90abfac0b978ba5e3450df54f98474fcde2245aa3a1e77ae720a7f5752d16a48a168f82630cfad85df8107bad5bb5b9891c6068b6afc1a9f332be42139fc06944f4f07bafdddb712c0139d13dfed2a3de6b47b97a53375a4c6e735abe42bc5a413d8c06628a5c8b7001c30e87c171c004f7b43997ac7790ce134edcebf654e1aba97de3d0845be88f5d774cd628b979256cb5e1ccd24112fd84a52afe91907ac4ff9272ecabf7540a0309dac21614b61282b15f4970d7169ad61e50fbe8d7f94be6fdaf0f5d81ce6df95fddaafd6b0b2dd827fa4c64327cc61f2b77bb0c757855b36250ced651075e10c0bc9b6b7ebda8092ab48539701c8ae5e8d413e32a005a443228ab8cf87ae0a31096c3f0dcd872c1029c694755e8b273d31ace0b3f1ab657bb4cbf9ec169c8bf6a14449ea21832f4000017a773860f4b33e97099d8f5ea50b2c92c5553e7de831d36396275e77772bf5c8ce56f30dada9fc371c060bd267641b6c68e6aefba6dd2ad85c0e0b4d3ebb5633fae8d813a70f63d5db9beefb709b6038293c5ae1ee30955f118377f7d1b661dfe5463d5612c53ea592ecc90d158159023fe69bb360cb5fa169c2228aa0ab924acb80efb4d29780d214d37d3b1a86d9ee47ae6975c667de69d14cbca70ab23944ba3d9bec7928acf0d78d25dd79c61151c8e0cd88fafbe5165420e0a0d893f147407ac36052f58af0fa2ecb5d91d3bee41d778c6be50844805fe3fcb4cf206d0bf75413326981cbff02901e7450efbaf377928858dffb7de4993902ab25053091f75da874115c05d96e5bee54baaff1635aab508e86db0d2df2fc7934289e6d3e98c34e5a77d2c39d861c81ef1361fcbf4178b5276e7cfef5cb80f2da04ad0e457ad085110616248db9b646aca636d19703986eb7a4aeca39813"}, {0xc8, 0x1, 0x4, "e1dd261cf4b2827c736e9615fad9c690d79afd90e92bd2abfc181190e35b59b62aa966743cd2f7636636101baf08437ffd1138ffcf930e3cca65e2044b5b0ab5aaaa4269dcf1f67673ed8ff418a78b691b3fdf60f7c7f2f7c98d7e2de85da00a5c34d9bce2f6bdd209a0fc2cc06c5bb73a0f0a1bc52459fe378a7d855f18ee129cdda07f30ddf88ab14aa2162d4143ae2c8675c7bd5c342ebf6c09471369f6efa4b97773ebbf0ce5de14a121df717d399801d25bc914a267"}], 0x32b8}, 0x20004005) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 282.015522ms ago: executing program 0 (id=3095): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f0000000000)="6b7530008c6cd1f9e0ea4850a06adcb329c78d3acf3d4961984477123b9fdae94cf1b7de9f98486b2e2f46be33f324bcc846fb69ca2a48f3974ba66b10182d528450e3a2c4843dca488e2dfadadd89aa14b580e8a1423c8cb9c9c9", 0x5b}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696", 0x29a}], 0x4, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x15}}, {@remote, 0x1}, {@empty, 0x2}]}]}}}], 0x58}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) (async) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) 153.820385ms ago: executing program 3 (id=3096): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x48068b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x7682, 0x3ff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x48068b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x7682, 0x3ff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80440, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x30, 0x3, 0x9, 0xfffff028}, {0x6, 0x7, 0x4, 0x5}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x100c, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x100c, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xb8123, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xb8123, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) close(r2) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x40010040) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900), 0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close(r5) (async) close(r5) socket$kcm(0xa, 0x1, 0x0) (async) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_devices(r5, 0x0, 0xffdd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28d59, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_bp={0x0}, 0xa810, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10004000) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x2e}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000500)="9e907c9820ad0556b10e48649c73ff4a3434be36104de6d1427b6abcac36995ee686bf7ccd93b9fd3e9a4dd437b08826729013002f09e8285b50f9896e68732e0d02fd5b87e2b264a6be2fc038f1900b8e10d5bef73dc8f9f36b012e4aa10e303b5026ec1e0a40894cda21c9228cdce0d641600ff88c32dcbeb97371c370b43abb44189ecc9699efdd536c9ab134abd7b353d9defa9b20a6e8303e", &(0x7f0000000100)=""/35}, 0x20) 104.998611ms ago: executing program 1 (id=3097): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x6000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.148486ms ago: executing program 0 (id=3098): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc4200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x0, 0x28}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000003000000000000008100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000043d6814492ef9ced2bd60080007b8af8ff00000000bfa200000000e9fe2733ff000007020000f8ffffffb703000008000000b704000002000000852e2771d510ee23c8000000080000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x27, 0xf, 0x0, &(0x7f0000000140)="e90204000000000000007f530800d3", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r10}, 0x38) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x83}, {}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x3, 0x7, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000002c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x5, 0x1, 0x10, 0x1}, {0x1, 0x3, 0x9, 0xc}, {0x2, 0x5, 0xc, 0x1}, {0x3, 0x1, 0xf, 0xa}, {0x3, 0x1, 0xe, 0x6}, {0x4, 0x1, 0x3, 0x8}, {0x5, 0x4, 0xd, 0x9}, {0x4, 0x4, 0x5, 0x8}, {0x4, 0x3, 0xe, 0xb}], 0x10, 0x400}, 0x94) 0s ago: executing program 2 (id=3099): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000070000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0xfffffffc, 0x1, 0x0, 0x8}, {0x0, 0x3, 0x5}, {0x0, 0x4, 0x10007}], 0x10, 0x4000}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) kernel console output (not intermixed with test programs): 275.001770][ T9267] ? show_regs_print_info+0x20/0x20 [ 275.007415][ T9267] ? load_image+0x400/0x400 [ 275.012664][ T9267] ? __might_sleep+0xe0/0xe0 [ 275.017441][ T9267] ? __lock_acquire+0x7d40/0x7d40 [ 275.022761][ T9267] should_fail_ex+0x39d/0x4d0 [ 275.027572][ T9267] should_failslab+0x9/0x20 [ 275.032336][ T9267] slab_pre_alloc_hook+0x59/0x310 [ 275.037716][ T9267] ? d_instantiate+0x6f/0x90 [ 275.042650][ T9267] kmem_cache_alloc+0x5a/0x2d0 [ 275.047607][ T9267] ? alloc_empty_file+0x9e/0x1d0 [ 275.052829][ T9267] alloc_empty_file+0x9e/0x1d0 [ 275.057937][ T9267] alloc_file+0x5c/0x600 [ 275.062515][ T9267] alloc_file_pseudo+0x184/0x210 [ 275.067811][ T9267] ? alloc_empty_backing_file+0xe0/0xe0 [ 275.073994][ T9267] anon_inode_getfile+0xc5/0x1a0 [ 275.079264][ T9267] __se_sys_perf_event_open+0xee7/0x1c50 [ 275.085050][ T9267] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 275.090813][ T9267] ? lock_chain_count+0x20/0x20 [ 275.096126][ T9267] ? lockdep_hardirqs_on+0x98/0x150 [ 275.101366][ T9267] ? __x64_sys_perf_event_open+0x20/0xc0 [ 275.107255][ T9267] do_syscall_64+0x55/0xa0 [ 275.111803][ T9267] ? clear_bhb_loop+0x40/0x90 [ 275.116973][ T9267] ? clear_bhb_loop+0x40/0x90 [ 275.121871][ T9267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.127814][ T9267] RIP: 0033:0x7fb789d9c799 [ 275.132369][ T9267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.152664][ T9267] RSP: 002b:00007fb78abba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 275.161246][ T9267] RAX: ffffffffffffffda RBX: 00007fb78a015fa0 RCX: 00007fb789d9c799 [ 275.169467][ T9267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 275.177685][ T9267] RBP: 00007fb78abba090 R08: 0000000000000000 R09: 0000000000000000 [ 275.186303][ T9267] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000002 [ 275.194524][ T9267] R13: 00007fb78a016038 R14: 00007fb78a015fa0 R15: 00007ffd1d905878 [ 275.203235][ T9267] [ 275.271298][ T9263] netlink: 'syz.0.1177': attribute type 21 has an invalid length. [ 275.314023][ T9263] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1177'. [ 275.324398][ T9263] netlink: 'syz.0.1177': attribute type 4 has an invalid length. [ 275.337008][ T9263] netlink: 'syz.0.1177': attribute type 5 has an invalid length. [ 275.383791][ T9263] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1177'. [ 275.946775][ T9286] netlink: 'syz.3.1182': attribute type 25 has an invalid length. [ 276.576873][ T9304] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 277.396730][ T9315] FAULT_INJECTION: forcing a failure. [ 277.396730][ T9315] name failslab, interval 1, probability 0, space 0, times 0 [ 277.452830][ T9315] CPU: 0 PID: 9315 Comm: syz.0.1194 Not tainted syzkaller #0 [ 277.460293][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.470395][ T9315] Call Trace: [ 277.473723][ T9315] [ 277.476689][ T9315] dump_stack_lvl+0x18c/0x250 [ 277.481521][ T9315] ? show_regs_print_info+0x20/0x20 [ 277.486937][ T9315] ? load_image+0x400/0x400 [ 277.491736][ T9315] ? __might_sleep+0xe0/0xe0 [ 277.496628][ T9315] ? __lock_acquire+0x7d40/0x7d40 [ 277.501712][ T9315] should_fail_ex+0x39d/0x4d0 [ 277.506531][ T9315] should_failslab+0x9/0x20 [ 277.511681][ T9315] slab_pre_alloc_hook+0x59/0x310 [ 277.516746][ T9315] ? d_instantiate+0x6f/0x90 [ 277.521644][ T9315] kmem_cache_alloc+0x5a/0x2d0 [ 277.526539][ T9315] ? alloc_empty_file+0x9e/0x1d0 [ 277.531525][ T9315] alloc_empty_file+0x9e/0x1d0 [ 277.536335][ T9315] alloc_file+0x5c/0x600 [ 277.540813][ T9315] alloc_file_pseudo+0x184/0x210 [ 277.545917][ T9315] ? alloc_empty_backing_file+0xe0/0xe0 [ 277.551622][ T9315] anon_inode_getfile+0xc5/0x1a0 [ 277.556947][ T9315] __se_sys_perf_event_open+0xee7/0x1c50 [ 277.562913][ T9315] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 277.568976][ T9315] ? lock_chain_count+0x20/0x20 [ 277.574029][ T9315] ? lockdep_hardirqs_on+0x98/0x150 [ 277.579336][ T9315] ? __x64_sys_perf_event_open+0x20/0xc0 [ 277.585092][ T9315] do_syscall_64+0x55/0xa0 [ 277.589618][ T9315] ? clear_bhb_loop+0x40/0x90 [ 277.594400][ T9315] ? clear_bhb_loop+0x40/0x90 [ 277.599598][ T9315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.605591][ T9315] RIP: 0033:0x7feb2bf9c799 [ 277.610021][ T9315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.629913][ T9315] RSP: 002b:00007feb2cdef028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 277.638659][ T9315] RAX: ffffffffffffffda RBX: 00007feb2c216090 RCX: 00007feb2bf9c799 [ 277.646734][ T9315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 277.654895][ T9315] RBP: 00007feb2cdef090 R08: 0000000000000000 R09: 0000000000000000 [ 277.663075][ T9315] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 277.671527][ T9315] R13: 00007feb2c216128 R14: 00007feb2c216090 R15: 00007ffddfaa3d48 [ 277.679626][ T9315] [ 278.691886][ T9347] ref_ctr_offset mismatch. inode: 0x5e9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x10000000 [ 280.409898][ T9388] netlink: 'syz.2.1219': attribute type 25 has an invalid length. [ 281.079357][ T9411] netlink: 'syz.2.1230': attribute type 25 has an invalid length. [ 281.697283][ T9435] netlink: 'syz.0.1240': attribute type 25 has an invalid length. [ 281.854835][ T9441] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 282.765954][ T9471] netlink: 'syz.2.1253': attribute type 10 has an invalid length. [ 282.779212][ T9471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1253'. [ 282.790235][ T9471] team0: entered promiscuous mode [ 282.799766][ T9471] team_slave_0: entered promiscuous mode [ 282.820331][ T9471] team_slave_1: entered promiscuous mode [ 282.827247][ T9471] bond0: entered promiscuous mode [ 282.832858][ T9471] å1ÿ: entered promiscuous mode [ 282.842369][ T9471] bond_slave_1: entered promiscuous mode [ 282.849241][ T9471] team0: entered allmulticast mode [ 282.859450][ T9471] team_slave_0: entered allmulticast mode [ 282.866082][ T9471] team_slave_1: entered allmulticast mode [ 282.871967][ T9471] bond0: entered allmulticast mode [ 282.881682][ T9471] å1ÿ: entered allmulticast mode [ 282.889601][ T9471] bond_slave_1: entered allmulticast mode [ 282.902556][ T9471] bridge0: port 3(team0) entered blocking state [ 282.909777][ T9471] bridge0: port 3(team0) entered disabled state [ 282.929395][ T9471] bridge0: port 3(team0) entered blocking state [ 282.935877][ T9471] bridge0: port 3(team0) entered forwarding state [ 283.356772][ T5790] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 283.556991][ T9485] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 283.609065][ T9485] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1255'. [ 283.635515][ T9487] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 283.642195][ T9487] syzkaller1: Linktype set failed because interface is up [ 284.000093][ T9492] ref_ctr_offset mismatch. inode: 0x634 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xffffff8c [ 285.444466][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 286.449415][ T9509] netlink: 'syz.0.1266': attribute type 4 has an invalid length. [ 286.485421][ T9509] netlink: 189348 bytes leftover after parsing attributes in process `syz.0.1266'. [ 287.017152][ T9531] netlink: 'syz.3.1273': attribute type 25 has an invalid length. [ 289.594486][ T9583] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 290.255910][ T9599] netlink: 'syz.2.1295': attribute type 28 has an invalid length. [ 290.273761][ T9599] netlink: 'syz.2.1295': attribute type 29 has an invalid length. [ 290.292795][ T9599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1295'. [ 291.358618][ T9628] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1306'. [ 291.761114][ T9642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1310'. [ 291.805083][ T9642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1310'. [ 291.846641][ T9644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1310'. [ 291.876032][ T9642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1310'. [ 293.869033][ T9703] netlink: 'syz.1.1331': attribute type 21 has an invalid length. [ 294.451439][ T9724] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1340'. [ 297.320197][ T9814] netlink: 'syz.2.1367': attribute type 25 has an invalid length. [ 297.449732][ T9818] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1371'. [ 297.867562][ T9820] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1372'. [ 299.115159][ T9846] netlink: 'syz.3.1382': attribute type 25 has an invalid length. [ 299.235059][ T9849] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1381'. [ 299.255533][ T9849] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1381'. [ 299.278942][ T9849] tipc: Started in network mode [ 299.295251][ T9849] tipc: Node identity d, cluster identity 56 [ 299.302325][ T9849] tipc: Node number set to 13 [ 299.957233][ T9875] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1389'. [ 300.502623][ T9879] netlink: 'syz.0.1391': attribute type 2 has an invalid length. [ 300.528226][ T9883] netlink: 'syz.3.1392': attribute type 25 has an invalid length. [ 302.943255][ T9887] netlink: 'syz.0.1394': attribute type 25 has an invalid length. [ 303.307681][ T9921] netlink: 'syz.0.1406': attribute type 25 has an invalid length. [ 303.429908][ T9931] netlink: 'syz.2.1411': attribute type 2 has an invalid length. [ 305.941526][ T9965] netlink: 'syz.3.1423': attribute type 2 has an invalid length. [ 306.139390][ T9977] netlink: 'syz.2.1424': attribute type 25 has an invalid length. [ 307.142150][ T9997] TCP: TCP_TX_DELAY enabled [ 308.932466][ T9995] tap0: tun_chr_ioctl cmd 2147767507 [ 308.947724][T10003] netlink: 'syz.1.1433': attribute type 21 has an invalid length. [ 308.958254][T10003] IPv6: NLM_F_CREATE should be specified when creating new route [ 308.982874][T10003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.990678][T10003] IPv6: NLM_F_CREATE should be set when creating new route [ 308.998126][T10003] IPv6: NLM_F_CREATE should be set when creating new route [ 309.005720][T10003] IPv6: NLM_F_CREATE should be set when creating new route [ 309.150480][T10018] netlink: 'syz.1.1437': attribute type 2 has an invalid length. [ 309.225297][T10022] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1438'. [ 310.035904][T10031] netlink: 'syz.2.1440': attribute type 25 has an invalid length. [ 310.301613][T10013] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1445'. [ 312.892887][T10049] netlink: 'syz.0.1455': attribute type 25 has an invalid length. [ 312.932009][T10055] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 312.950304][T10055] bridge0: port 3(team0) entered disabled state [ 313.013943][T10055] team0: left allmulticast mode [ 313.019089][T10055] team_slave_0: left allmulticast mode [ 313.033684][T10055] team_slave_1: left allmulticast mode [ 313.039298][T10055] bond0: left allmulticast mode [ 313.050459][T10055] å1ÿ: left allmulticast mode [ 313.055641][T10055] bond_slave_1: left allmulticast mode [ 313.061281][T10055] team0: left promiscuous mode [ 313.066699][T10055] team_slave_0: left promiscuous mode [ 313.072486][T10055] team_slave_1: left promiscuous mode [ 313.078161][T10055] bond0: left promiscuous mode [ 313.084018][T10055] å1ÿ: left promiscuous mode [ 313.089040][T10055] bond_slave_1: left promiscuous mode [ 313.107195][T10055] bridge0: port 3(team0) entered disabled state [ 313.122342][T10055] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.418388][T10072] netlink: zone id is out of range [ 313.438893][T10072] netlink: set zone limit has 8 unknown bytes [ 313.580599][T10081] netlink: 'syz.3.1458': attribute type 25 has an invalid length. [ 315.970898][T10088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1456'. [ 316.458752][T10119] netlink: 'syz.2.1469': attribute type 25 has an invalid length. [ 316.697733][T10127] netlink: 'syz.0.1473': attribute type 10 has an invalid length. [ 316.723316][T10127] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.775254][T10127] bond0: (slave team0): Enslaving as an active interface with an up link [ 317.521551][T10139] netlink: 'syz.0.1477': attribute type 10 has an invalid length. [ 317.596088][T10139] netlink: 209280 bytes leftover after parsing attributes in process `syz.0.1477'. [ 317.611859][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.611973][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.665789][T10139] openvswitch: netlink: Flow key attr not present in new flow. [ 320.158129][T10156] netlink: 'syz.2.1483': attribute type 25 has an invalid length. [ 320.169572][T10161] netlink: 'syz.1.1485': attribute type 21 has an invalid length. [ 320.178312][T10161] netlink: 'syz.1.1485': attribute type 6 has an invalid length. [ 320.188794][T10161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1485'. [ 320.382313][T10174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1490'. [ 323.230941][T10197] netlink: 'syz.1.1499': attribute type 17 has an invalid length. [ 323.239936][T10197] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1499'. [ 323.249530][T10197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.582565][T10255] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1517'. [ 327.660761][T10276] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1524'. [ 327.790222][T10282] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1526'. [ 327.836216][T10286] netlink: 'syz.0.1528': attribute type 10 has an invalid length. [ 327.856157][T10286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1528'. [ 327.867555][T10286] veth0_vlan: left promiscuous mode [ 327.874537][T10286] veth0_vlan: entered promiscuous mode [ 327.884605][T10286] batman_adv: batadv0: Adding interface: veth0_vlan [ 327.903307][T10286] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.947668][T10286] batman_adv: batadv0: Interface activated: veth0_vlan [ 328.171041][T10291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1530'. [ 331.113073][T10363] netlink: 'syz.2.1538': attribute type 10 has an invalid length. [ 331.122429][T10363] hsr_slave_0: left promiscuous mode [ 331.129344][T10363] hsr_slave_1: left promiscuous mode [ 331.183669][T10366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1539'. [ 331.725236][T10391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1547'. [ 332.350167][T10394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1550'. [ 334.426517][T10424] netlink: 'syz.2.1560': attribute type 21 has an invalid length. [ 334.436601][T10424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1560'. [ 334.540395][T10424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1560'. [ 334.561199][T10426] netlink: 'syz.0.1561': attribute type 4 has an invalid length. [ 334.677056][T10427] syzkaller0: entered promiscuous mode [ 334.717088][T10427] syzkaller0: entered allmulticast mode [ 335.535055][T10446] can: request_module (can-proto-3) failed. [ 336.408395][T10439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1565'. [ 337.526573][T10481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1580'. [ 338.480673][T10502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1588'. [ 338.870623][T10520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1595'. [ 339.542817][T10544] netlink: 'syz.3.1602': attribute type 3 has an invalid length. [ 339.552360][T10544] netlink: 'syz.3.1602': attribute type 275 has an invalid length. [ 339.571860][T10548] netlink: 'syz.3.1602': attribute type 3 has an invalid length. [ 339.592108][T10548] netlink: 'syz.3.1602': attribute type 275 has an invalid length. [ 340.199967][T10551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1605'. [ 341.710156][T10572] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1610'. [ 341.830506][T10584] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1619'. [ 342.383816][T10601] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1624'. [ 343.689031][T10616] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1630'. [ 344.244235][T10643] FAULT_INJECTION: forcing a failure. [ 344.244235][T10643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.283986][T10643] CPU: 0 PID: 10643 Comm: syz.1.1639 Not tainted syzkaller #0 [ 344.291610][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.302031][T10643] Call Trace: [ 344.305450][T10643] [ 344.308449][T10643] dump_stack_lvl+0x18c/0x250 [ 344.313283][T10643] ? show_regs_print_info+0x20/0x20 [ 344.318626][T10643] ? load_image+0x400/0x400 [ 344.323270][T10643] ? __lock_acquire+0x7d40/0x7d40 [ 344.328526][T10643] ? snprintf+0xe9/0x140 [ 344.332913][T10643] should_fail_ex+0x39d/0x4d0 [ 344.337759][T10643] _copy_to_user+0x2f/0xa0 [ 344.342420][T10643] simple_read_from_buffer+0xe7/0x150 [ 344.348114][T10643] proc_fail_nth_read+0x1e8/0x260 [ 344.353546][T10643] ? proc_fault_inject_write+0x360/0x360 [ 344.359424][T10643] ? fsnotify_perm+0x271/0x5e0 [ 344.364225][T10643] ? proc_fault_inject_write+0x360/0x360 [ 344.370015][T10643] vfs_read+0x28b/0x970 [ 344.374385][T10643] ? kernel_read+0x1e0/0x1e0 [ 344.379001][T10643] ? __fget_files+0x28/0x4b0 [ 344.383958][T10643] ? __fget_files+0x28/0x4b0 [ 344.388738][T10643] ? __fget_files+0x43d/0x4b0 [ 344.393567][T10643] ? __fdget_pos+0x2a3/0x330 [ 344.398308][T10643] ? ksys_read+0x75/0x260 [ 344.402844][T10643] ksys_read+0x150/0x260 [ 344.407197][T10643] ? vfs_write+0x990/0x990 [ 344.411731][T10643] ? trace_sys_enter+0x1f/0x80 [ 344.416611][T10643] do_syscall_64+0x55/0xa0 [ 344.421215][T10643] ? clear_bhb_loop+0x40/0x90 [ 344.426001][T10643] ? clear_bhb_loop+0x40/0x90 [ 344.430780][T10643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.436858][T10643] RIP: 0033:0x7f7ee475cfce [ 344.441284][T10643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 344.461458][T10643] RSP: 002b:00007f7ee568cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.470222][T10643] RAX: ffffffffffffffda RBX: 00007f7ee568d6c0 RCX: 00007f7ee475cfce [ 344.478671][T10643] RDX: 000000000000000f RSI: 00007f7ee568d0a0 RDI: 0000000000000007 [ 344.487112][T10643] RBP: 00007f7ee568d090 R08: 0000000000000000 R09: 0000000000000000 [ 344.495217][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.503286][T10643] R13: 00007f7ee4a16038 R14: 00007f7ee4a15fa0 R15: 00007ffc8c62a748 [ 344.511472][T10643] [ 345.372175][T10655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1645'. [ 347.520907][T10690] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'. [ 349.506293][T10697] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1658'. [ 351.439733][T10736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1669'. [ 354.370161][T10783] netlink: 'syz.1.1686': attribute type 3 has an invalid length. [ 354.378446][T10785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1687'. [ 355.955709][T10820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1697'. [ 358.869211][T10858] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1709'. [ 359.923816][T10886] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1715'. [ 363.089158][T10900] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1720'. [ 365.721685][T10926] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1724'. [ 365.731340][T10926] hsr_slave_0: left promiscuous mode [ 365.737902][T10926] hsr_slave_1: left promiscuous mode [ 365.790532][T10944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1733'. [ 368.256696][T10984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1744'. [ 368.521339][T10998] syzkaller0: entered promiscuous mode [ 368.532819][T10998] syzkaller0: entered allmulticast mode [ 368.734287][T11006] netlink: 'syz.2.1751': attribute type 21 has an invalid length. [ 368.742511][T11006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1751'. [ 368.945472][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 369.107011][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1755'. [ 369.904048][T11047] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1762'. [ 371.929764][T11044] netlink: 'syz.1.1762': attribute type 21 has an invalid length. [ 371.937934][T11044] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1762'. [ 371.947909][T11051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1767'. [ 373.094768][T11096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1779'. [ 373.311536][T11106] netlink: 'syz.3.1783': attribute type 17 has an invalid length. [ 373.332524][T11106] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1783'. [ 375.799446][T11121] netlink: 'syz.3.1786': attribute type 29 has an invalid length. [ 377.560963][T11121] netlink: 'syz.3.1786': attribute type 29 has an invalid length. [ 377.570595][T11118] netlink: 'syz.3.1786': attribute type 39 has an invalid length. [ 378.202875][T11134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1792'. [ 378.297160][T11148] netlink: 'syz.2.1795': attribute type 17 has an invalid length. [ 378.316562][T11148] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1795'. [ 379.052980][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.059437][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.708669][T11156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1799'. [ 381.593818][T11178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1806'. [ 382.252353][T11201] netlink: 'syz.1.1814': attribute type 17 has an invalid length. [ 382.275125][T11201] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1814'. [ 382.519758][T11199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1813'. [ 382.549455][T11211] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 386.574406][T11221] netlink: 'syz.2.1821': attribute type 39 has an invalid length. [ 386.801778][T11232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1823'. [ 388.486601][T11284] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1843'. [ 388.597428][T11285] netlink: 'syz.0.1843': attribute type 1 has an invalid length. [ 388.624030][T11285] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1843'. [ 390.863412][T11278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1841'. [ 391.660384][T11313] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1853'. [ 392.049507][T11326] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1856'. [ 392.279893][T11327] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 394.667436][T11340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1862'. [ 395.642894][T11371] netlink: 'syz.2.1870': attribute type 21 has an invalid length. [ 395.676849][T11371] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1870'. [ 395.706101][T11371] netlink: 'syz.2.1870': attribute type 5 has an invalid length. [ 395.723652][T11371] netlink: 'syz.2.1870': attribute type 6 has an invalid length. [ 395.731751][T11371] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1870'. [ 396.018385][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 396.262248][T11376] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1872'. [ 396.712702][T11393] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1877'. [ 396.741306][T11393] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1877'. [ 396.752371][T11393] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1877'. [ 399.313616][T11419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1887'. [ 400.228640][T11458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1900'. [ 400.284928][T11463] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1902'. [ 400.308161][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.321710][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.339772][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.350650][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.376198][T11463] batadv_slave_1: entered promiscuous mode [ 403.198188][T11477] netlink: 'syz.2.1908': attribute type 21 has an invalid length. [ 403.209463][T11477] netlink: 'syz.2.1908': attribute type 6 has an invalid length. [ 403.217914][T11477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1908'. [ 403.237511][T11482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1910'. [ 403.605542][T11498] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1916'. [ 403.760872][T11502] FAULT_INJECTION: forcing a failure. [ 403.760872][T11502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.782740][T11502] CPU: 0 PID: 11502 Comm: syz.3.1917 Not tainted syzkaller #0 [ 403.790305][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.800472][T11502] Call Trace: [ 403.803802][T11502] [ 403.806853][T11502] dump_stack_lvl+0x18c/0x250 [ 403.811762][T11502] ? show_regs_print_info+0x20/0x20 [ 403.817098][T11502] ? load_image+0x400/0x400 [ 403.821642][T11502] ? __might_fault+0xaa/0x120 [ 403.826366][T11502] ? __lock_acquire+0x7d40/0x7d40 [ 403.828932][T11491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1913'. [ 403.831456][T11502] should_fail_ex+0x39d/0x4d0 [ 403.831494][T11502] _copy_from_user+0x2f/0xe0 [ 403.831519][T11502] ___sys_sendmsg+0x1c7/0x360 [ 403.831538][T11502] ? get_pid_task+0x20/0x1e0 [ 403.831568][T11502] ? __sys_sendmsg+0x2a0/0x2a0 [ 403.831608][T11502] ? __lock_acquire+0x7d40/0x7d40 [ 403.831657][T11502] __se_sys_sendmsg+0x1c2/0x2b0 [ 403.831679][T11502] ? __x64_sys_sendmsg+0x80/0x80 [ 403.831713][T11502] ? lockdep_hardirqs_on+0x98/0x150 [ 403.885376][T11502] do_syscall_64+0x55/0xa0 [ 403.889845][T11502] ? clear_bhb_loop+0x40/0x90 [ 403.894740][T11502] ? clear_bhb_loop+0x40/0x90 [ 403.899450][T11502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.905458][T11502] RIP: 0033:0x7fd90b99c799 [ 403.909901][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.929625][T11502] RSP: 002b:00007fd90c8e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.938073][T11502] RAX: ffffffffffffffda RBX: 00007fd90bc15fa0 RCX: 00007fd90b99c799 [ 403.946078][T11502] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 403.954176][T11502] RBP: 00007fd90c8e8090 R08: 0000000000000000 R09: 0000000000000000 [ 403.962272][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.970269][T11502] R13: 00007fd90bc16038 R14: 00007fd90bc15fa0 R15: 00007ffce9bb2ed8 [ 403.978383][T11502] [ 404.568055][T11515] netlink: 'syz.2.1919': attribute type 9 has an invalid length. [ 404.683699][T11515] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1919'. [ 405.136075][T11514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1922'. [ 405.202350][T11519] netlink: 13310 bytes leftover after parsing attributes in process `syz.0.1923'. [ 405.243416][T11522] netlink: 'syz.0.1923': attribute type 16 has an invalid length. [ 405.270706][T11522] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1923'. [ 405.301910][T11522] veth1_macvtap: entered allmulticast mode [ 407.764400][T11572] FAULT_INJECTION: forcing a failure. [ 407.764400][T11572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.781372][T11572] CPU: 1 PID: 11572 Comm: syz.0.1938 Not tainted syzkaller #0 [ 407.789067][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.799665][T11572] Call Trace: [ 407.802942][T11572] [ 407.806053][T11572] dump_stack_lvl+0x18c/0x250 [ 407.810742][T11572] ? show_regs_print_info+0x20/0x20 [ 407.816034][T11572] ? load_image+0x400/0x400 [ 407.820547][T11572] ? __lock_acquire+0x7d40/0x7d40 [ 407.825663][T11572] should_fail_ex+0x39d/0x4d0 [ 407.830470][T11572] _copy_from_user+0x2f/0xe0 [ 407.835333][T11572] __copy_msghdr+0x3bb/0x580 [ 407.839950][T11572] ___sys_sendmsg+0x214/0x360 [ 407.844902][T11572] ? get_pid_task+0x20/0x1e0 [ 407.849523][T11572] ? __sys_sendmsg+0x2a0/0x2a0 [ 407.854570][T11572] ? __lock_acquire+0x7d40/0x7d40 [ 407.859785][T11572] __se_sys_sendmsg+0x1c2/0x2b0 [ 407.864645][T11572] ? __x64_sys_sendmsg+0x80/0x80 [ 407.869765][T11572] ? lockdep_hardirqs_on+0x98/0x150 [ 407.875009][T11572] do_syscall_64+0x55/0xa0 [ 407.879615][T11572] ? clear_bhb_loop+0x40/0x90 [ 407.884463][T11572] ? clear_bhb_loop+0x40/0x90 [ 407.889312][T11572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.895208][T11572] RIP: 0033:0x7feb2bf9c799 [ 407.899627][T11572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.919346][T11572] RSP: 002b:00007feb2ce10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.927862][T11572] RAX: ffffffffffffffda RBX: 00007feb2c215fa0 RCX: 00007feb2bf9c799 [ 407.935885][T11572] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 407.943859][T11572] RBP: 00007feb2ce10090 R08: 0000000000000000 R09: 0000000000000000 [ 407.951946][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.960189][T11572] R13: 00007feb2c216038 R14: 00007feb2c215fa0 R15: 00007ffddfaa3d48 [ 407.968460][T11572] [ 409.213760][T11554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1933'. [ 409.228599][T11576] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.1940'. [ 409.690855][T11590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1946'. [ 409.956073][T11601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1949'. [ 410.035581][T11605] FAULT_INJECTION: forcing a failure. [ 410.035581][T11605] name failslab, interval 1, probability 0, space 0, times 0 [ 410.054860][T11605] CPU: 1 PID: 11605 Comm: syz.3.1952 Not tainted syzkaller #0 [ 410.062462][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.072840][T11605] Call Trace: [ 410.076177][T11605] [ 410.079150][T11605] dump_stack_lvl+0x18c/0x250 [ 410.083874][T11605] ? fib_rules_lookup+0x9c/0xb40 [ 410.089062][T11605] ? show_regs_print_info+0x20/0x20 [ 410.094325][T11605] ? load_image+0x400/0x400 [ 410.099031][T11605] ? fib_rules_lookup+0x9c/0xb40 [ 410.104119][T11605] should_fail_ex+0x39d/0x4d0 [ 410.109117][T11605] should_failslab+0x9/0x20 [ 410.113792][T11605] slab_pre_alloc_hook+0x59/0x310 [ 410.118899][T11605] kmem_cache_alloc+0x5a/0x2d0 [ 410.123728][T11605] ? dst_alloc+0x105/0x170 [ 410.128296][T11605] dst_alloc+0x105/0x170 [ 410.132707][T11605] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 410.139160][T11605] ? ip_route_output_key_hash_rcu+0x12b1/0x2360 [ 410.145593][T11605] ? ip_route_output_key_hash+0x13d/0x330 [ 410.151351][T11605] ip_route_output_key_hash+0x1f3/0x330 [ 410.157005][T11605] ? ip_route_input_rcu+0x30e0/0x30e0 [ 410.162429][T11605] ? __lock_acquire+0x7d40/0x7d40 [ 410.167612][T11605] ip_route_output_flow+0x2a/0x150 [ 410.172957][T11605] ? security_sk_classify_flow+0x7b/0x90 [ 410.178824][T11605] raw_sendmsg+0x129a/0x1c00 [ 410.183645][T11605] ? compat_raw_ioctl+0x70/0x70 [ 410.188531][T11605] ? __lock_acquire+0x1273/0x7d40 [ 410.193704][T11605] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 410.200156][T11605] ? sock_rps_record_flow+0x19/0x3f0 [ 410.205586][T11605] ? inet_sendmsg+0x7c/0x2f0 [ 410.210215][T11605] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 410.215715][T11605] ? security_socket_sendmsg+0x80/0xa0 [ 410.221291][T11605] ? inet_send_prepare+0x260/0x260 [ 410.226529][T11605] ____sys_sendmsg+0x5ba/0x960 [ 410.231413][T11605] ? __lock_acquire+0x7d40/0x7d40 [ 410.236837][T11605] ? __asan_memset+0x22/0x40 [ 410.241466][T11605] ? __sys_sendmsg_sock+0x30/0x30 [ 410.246616][T11605] ? __import_iovec+0x3fa/0x850 [ 410.251526][T11605] ? import_iovec+0x73/0xa0 [ 410.256177][T11605] ___sys_sendmsg+0x2a6/0x360 [ 410.260918][T11605] ? __sys_sendmsg+0x2a0/0x2a0 [ 410.265743][T11605] ? __lock_acquire+0x7d40/0x7d40 [ 410.271015][T11605] __se_sys_sendmsg+0x1c2/0x2b0 [ 410.275905][T11605] ? __x64_sys_sendmsg+0x80/0x80 [ 410.281028][T11605] ? lockdep_hardirqs_on+0x98/0x150 [ 410.286274][T11605] do_syscall_64+0x55/0xa0 [ 410.290732][T11605] ? clear_bhb_loop+0x40/0x90 [ 410.295452][T11605] ? clear_bhb_loop+0x40/0x90 [ 410.300361][T11605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.306316][T11605] RIP: 0033:0x7fd90b99c799 [ 410.310864][T11605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.330958][T11605] RSP: 002b:00007fd90c8e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.339423][T11605] RAX: ffffffffffffffda RBX: 00007fd90bc15fa0 RCX: 00007fd90b99c799 [ 410.347616][T11605] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 410.355594][T11605] RBP: 00007fd90c8e8090 R08: 0000000000000000 R09: 0000000000000000 [ 410.363595][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.371689][T11605] R13: 00007fd90bc16038 R14: 00007fd90bc15fa0 R15: 00007ffce9bb2ed8 [ 410.379791][T11605] [ 410.681915][T11616] netlink: 'syz.2.1956': attribute type 1 has an invalid length. [ 410.705960][T11616] netlink: 'syz.2.1956': attribute type 2 has an invalid length. [ 410.720853][T11616] netlink: 'syz.2.1956': attribute type 2 has an invalid length. [ 410.733098][T11616] netlink: 'syz.2.1956': attribute type 3 has an invalid length. [ 410.750349][T11616] netlink: 'syz.2.1956': attribute type 4 has an invalid length. [ 410.759033][T11616] netlink: 'syz.2.1956': attribute type 5 has an invalid length. [ 410.770330][T11616] netlink: 'syz.2.1956': attribute type 6 has an invalid length. [ 410.778658][T11616] netlink: 'syz.2.1956': attribute type 7 has an invalid length. [ 410.790992][T11616] netlink: 'syz.2.1956': attribute type 9 has an invalid length. [ 410.799547][T11616] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 410.813659][T11616] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.1956'. [ 413.007553][T11623] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1958'. [ 413.023593][T11638] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1964'. [ 414.627642][T11654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.173959][T11676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1975'. [ 415.451699][T11665] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1973'. [ 416.355970][T11681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1976'. [ 424.285176][T11726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.889104][T11749] syzkaller0: entered promiscuous mode [ 426.008424][T11764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.127990][T11769] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2004'. [ 427.137391][T11769] bridge_slave_1: default FDB implementation only supports local addresses [ 427.271609][T11778] FAULT_INJECTION: forcing a failure. [ 427.271609][T11778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.291863][T11778] CPU: 1 PID: 11778 Comm: syz.0.2007 Not tainted syzkaller #0 [ 427.299507][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.309789][T11778] Call Trace: [ 427.313192][T11778] [ 427.316230][T11778] dump_stack_lvl+0x18c/0x250 [ 427.320983][T11778] ? show_regs_print_info+0x20/0x20 [ 427.326411][T11778] ? load_image+0x400/0x400 [ 427.331056][T11778] ? __might_fault+0xaa/0x120 [ 427.335886][T11778] ? __lock_acquire+0x7d40/0x7d40 [ 427.341048][T11778] should_fail_ex+0x39d/0x4d0 [ 427.345786][T11778] _copy_from_user+0x2f/0xe0 [ 427.350512][T11778] csum_and_copy_from_iter+0x662/0x14a0 [ 427.356221][T11778] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 427.361911][T11778] ? __alloc_pages+0x27a/0x460 [ 427.366727][T11778] ? zone_statistics+0x170/0x170 [ 427.371839][T11778] ? rcu_is_watching+0x15/0xb0 [ 427.376637][T11778] ip_generic_getfrag+0x163/0x2f0 [ 427.381690][T11778] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 427.386573][T11778] ? skb_page_frag_refill+0x199/0x310 [ 427.391980][T11778] __ip_append_data+0x1f30/0x3d40 [ 427.397044][T11778] ? raw_send_hdrinc+0x1170/0x1170 [ 427.402196][T11778] ? ip_setup_cork+0x860/0x860 [ 427.407082][T11778] ? ip_setup_cork+0x530/0x860 [ 427.411861][T11778] ip_append_data+0x10d/0x180 [ 427.416946][T11778] ? raw_send_hdrinc+0x1170/0x1170 [ 427.422245][T11778] raw_sendmsg+0x15c1/0x1c00 [ 427.426950][T11778] ? compat_raw_ioctl+0x70/0x70 [ 427.431815][T11778] ? __lock_acquire+0x1273/0x7d40 [ 427.436968][T11778] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 427.443398][T11778] ? sock_rps_record_flow+0x19/0x3f0 [ 427.448770][T11778] ? inet_sendmsg+0x7c/0x2f0 [ 427.453551][T11778] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 427.459111][T11778] ? security_socket_sendmsg+0x80/0xa0 [ 427.464679][T11778] ? inet_send_prepare+0x260/0x260 [ 427.469806][T11778] ____sys_sendmsg+0x5ba/0x960 [ 427.474612][T11778] ? __lock_acquire+0x7d40/0x7d40 [ 427.479912][T11778] ? __asan_memset+0x22/0x40 [ 427.484559][T11778] ? __sys_sendmsg_sock+0x30/0x30 [ 427.489598][T11778] ? __import_iovec+0x3fa/0x850 [ 427.494840][T11778] ? import_iovec+0x73/0xa0 [ 427.499364][T11778] ___sys_sendmsg+0x2a6/0x360 [ 427.504230][T11778] ? get_pid_task+0x20/0x1e0 [ 427.508998][T11778] ? __sys_sendmsg+0x2a0/0x2a0 [ 427.514145][T11778] ? __lock_acquire+0x7d40/0x7d40 [ 427.519213][T11778] __se_sys_sendmsg+0x1c2/0x2b0 [ 427.524163][T11778] ? __x64_sys_sendmsg+0x80/0x80 [ 427.529125][T11778] ? lockdep_hardirqs_on+0x98/0x150 [ 427.534543][T11778] do_syscall_64+0x55/0xa0 [ 427.538981][T11778] ? clear_bhb_loop+0x40/0x90 [ 427.543899][T11778] ? clear_bhb_loop+0x40/0x90 [ 427.548802][T11778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.554736][T11778] RIP: 0033:0x7feb2bf9c799 [ 427.559279][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.579529][T11778] RSP: 002b:00007feb2ce10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.588055][T11778] RAX: ffffffffffffffda RBX: 00007feb2c215fa0 RCX: 00007feb2bf9c799 [ 427.596423][T11778] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 427.604498][T11778] RBP: 00007feb2ce10090 R08: 0000000000000000 R09: 0000000000000000 [ 427.612565][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.620672][T11778] R13: 00007feb2c216038 R14: 00007feb2c215fa0 R15: 00007ffddfaa3d48 [ 427.628675][T11778] [ 427.833103][T11789] validate_nla: 4 callbacks suppressed [ 427.833121][T11789] netlink: 'syz.1.2011': attribute type 10 has an invalid length. [ 427.887859][T11789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2011'. [ 429.020085][T11813] FAULT_INJECTION: forcing a failure. [ 429.020085][T11813] name failslab, interval 1, probability 0, space 0, times 0 [ 429.043873][T11813] CPU: 1 PID: 11813 Comm: syz.0.2018 Not tainted syzkaller #0 [ 429.051410][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.061487][T11813] Call Trace: [ 429.064895][T11813] [ 429.067961][T11813] dump_stack_lvl+0x18c/0x250 [ 429.072754][T11813] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.079004][T11813] ? show_regs_print_info+0x20/0x20 [ 429.084207][T11813] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.090453][T11813] ? dump_stack+0x9/0x20 [ 429.094716][T11813] should_fail_ex+0x39d/0x4d0 [ 429.099400][T11813] should_failslab+0x9/0x20 [ 429.103905][T11813] slab_pre_alloc_hook+0x59/0x310 [ 429.108948][T11813] ? __lock_acquire+0x7d40/0x7d40 [ 429.113975][T11813] kmem_cache_alloc_node+0x60/0x320 [ 429.119271][T11813] ? __alloc_skb+0x103/0x2c0 [ 429.123888][T11813] __alloc_skb+0x103/0x2c0 [ 429.128417][T11813] netlink_sendmsg+0x66a/0xbf0 [ 429.133201][T11813] ? lockdep_hardirqs_on+0x98/0x150 [ 429.138432][T11813] ? netlink_getsockopt+0x590/0x590 [ 429.143654][T11813] ? aa_sock_msg_perm+0x94/0x150 [ 429.148602][T11813] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.154063][T11813] ? security_socket_sendmsg+0x80/0xa0 [ 429.159523][T11813] ? netlink_getsockopt+0x590/0x590 [ 429.165054][T11813] ____sys_sendmsg+0x5ba/0x960 [ 429.169821][T11813] ? __asan_memset+0x22/0x40 [ 429.174412][T11813] ? __sys_sendmsg_sock+0x30/0x30 [ 429.179426][T11813] ? __import_iovec+0x5f2/0x850 [ 429.184285][T11813] ? import_iovec+0x73/0xa0 [ 429.188813][T11813] ___sys_sendmsg+0x2a6/0x360 [ 429.193487][T11813] ? get_pid_task+0x20/0x1e0 [ 429.198095][T11813] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.202951][T11813] ? __lock_acquire+0x7d40/0x7d40 [ 429.207988][T11813] __se_sys_sendmsg+0x1c2/0x2b0 [ 429.212836][T11813] ? __x64_sys_sendmsg+0x80/0x80 [ 429.217972][T11813] ? lockdep_hardirqs_on+0x98/0x150 [ 429.223369][T11813] do_syscall_64+0x55/0xa0 [ 429.227875][T11813] ? clear_bhb_loop+0x40/0x90 [ 429.232546][T11813] ? clear_bhb_loop+0x40/0x90 [ 429.237309][T11813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.243645][T11813] RIP: 0033:0x7feb2bf9c799 [ 429.248323][T11813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.268605][T11813] RSP: 002b:00007feb2cdef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.277029][T11813] RAX: ffffffffffffffda RBX: 00007feb2c216090 RCX: 00007feb2bf9c799 [ 429.285118][T11813] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 429.293218][T11813] RBP: 00007feb2cdef090 R08: 0000000000000000 R09: 0000000000000000 [ 429.301383][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.309554][T11813] R13: 00007feb2c216128 R14: 00007feb2c216090 R15: 00007ffddfaa3d48 [ 429.317656][T11813] [ 430.413405][T11789] netlink: 'syz.1.2011': attribute type 10 has an invalid length. [ 430.422500][T11789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2011'. [ 430.765399][T11831] netlink: 'syz.0.2023': attribute type 25 has an invalid length. [ 431.502097][T11840] FAULT_INJECTION: forcing a failure. [ 431.502097][T11840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.523739][T11840] CPU: 0 PID: 11840 Comm: syz.2.2026 Not tainted syzkaller #0 [ 431.531277][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.541457][T11840] Call Trace: [ 431.544763][T11840] [ 431.547760][T11840] dump_stack_lvl+0x18c/0x250 [ 431.552590][T11840] ? show_regs_print_info+0x20/0x20 [ 431.557920][T11840] ? load_image+0x400/0x400 [ 431.562465][T11840] ? __lock_acquire+0x7d40/0x7d40 [ 431.567560][T11840] ? snprintf+0xe9/0x140 [ 431.571867][T11840] should_fail_ex+0x39d/0x4d0 [ 431.576624][T11840] _copy_to_user+0x2f/0xa0 [ 431.581087][T11840] simple_read_from_buffer+0xe7/0x150 [ 431.586604][T11840] proc_fail_nth_read+0x1e8/0x260 [ 431.591767][T11840] ? proc_fault_inject_write+0x360/0x360 [ 431.597623][T11840] ? fsnotify_perm+0x271/0x5e0 [ 431.602608][T11840] ? proc_fault_inject_write+0x360/0x360 [ 431.608980][T11840] vfs_read+0x28b/0x970 [ 431.613330][T11840] ? kernel_read+0x1e0/0x1e0 [ 431.618307][T11840] ? __fget_files+0x28/0x4b0 [ 431.623108][T11840] ? __fget_files+0x28/0x4b0 [ 431.627736][T11840] ? __fget_files+0x43d/0x4b0 [ 431.632483][T11840] ? __fdget_pos+0x2a3/0x330 [ 431.637191][T11840] ? ksys_read+0x75/0x260 [ 431.641660][T11840] ksys_read+0x150/0x260 [ 431.646141][T11840] ? vfs_write+0x990/0x990 [ 431.650605][T11840] ? lockdep_hardirqs_on+0x98/0x150 [ 431.656057][T11840] do_syscall_64+0x55/0xa0 [ 431.660555][T11840] ? clear_bhb_loop+0x40/0x90 [ 431.665453][T11840] ? clear_bhb_loop+0x40/0x90 [ 431.670258][T11840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.676277][T11840] RIP: 0033:0x7fb789d5cfce [ 431.680814][T11840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 431.700658][T11840] RSP: 002b:00007fb78abb9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.709205][T11840] RAX: ffffffffffffffda RBX: 00007fb78abba6c0 RCX: 00007fb789d5cfce [ 431.717294][T11840] RDX: 000000000000000f RSI: 00007fb78abba0a0 RDI: 0000000000000004 [ 431.725394][T11840] RBP: 00007fb78abba090 R08: 0000000000000000 R09: 0000000000000000 [ 431.733397][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.741400][T11840] R13: 00007fb78a016038 R14: 00007fb78a015fa0 R15: 00007ffd1d905878 [ 431.749450][T11840] [ 435.625705][T11923] netlink: 'syz.3.2052': attribute type 3 has an invalid length. [ 435.643787][T11923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2052'. [ 436.322075][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 436.361189][T11933] syz.3.2052 (11933) used obsolete PPPIOCDETACH ioctl [ 436.640362][T11941] FAULT_INJECTION: forcing a failure. [ 436.640362][T11941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.698019][T11941] CPU: 1 PID: 11941 Comm: syz.1.2057 Not tainted syzkaller #0 [ 436.705579][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.715927][T11941] Call Trace: [ 436.719249][T11941] [ 436.722313][T11941] dump_stack_lvl+0x18c/0x250 [ 436.727065][T11941] ? show_regs_print_info+0x20/0x20 [ 436.732412][T11941] ? load_image+0x400/0x400 [ 436.737223][T11941] ? __might_fault+0xaa/0x120 [ 436.741957][T11941] ? __lock_acquire+0x7d40/0x7d40 [ 436.747230][T11941] should_fail_ex+0x39d/0x4d0 [ 436.751981][T11941] _copy_from_iter+0x1d9/0x12e0 [ 436.757133][T11941] ? __virt_addr_valid+0x18c/0x540 [ 436.762466][T11941] ? __lock_acquire+0x7d40/0x7d40 [ 436.767532][T11941] ? copyout_mc+0x70/0x70 [ 436.771914][T11941] ? __virt_addr_valid+0x18c/0x540 [ 436.777058][T11941] ? __virt_addr_valid+0x18c/0x540 [ 436.782204][T11941] ? __virt_addr_valid+0x469/0x540 [ 436.787526][T11941] ? __check_object_size+0x506/0xa20 [ 436.792854][T11941] netlink_sendmsg+0x76b/0xbf0 [ 436.797759][T11941] ? netlink_getsockopt+0x590/0x590 [ 436.803107][T11941] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 436.808620][T11941] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 436.813947][T11941] ? security_socket_sendmsg+0x80/0xa0 [ 436.819700][T11941] ? netlink_getsockopt+0x590/0x590 [ 436.824938][T11941] ____sys_sendmsg+0x5ba/0x960 [ 436.829739][T11941] ? __asan_memset+0x22/0x40 [ 436.834372][T11941] ? __sys_sendmsg_sock+0x30/0x30 [ 436.839439][T11941] ? __import_iovec+0x5f2/0x850 [ 436.844548][T11941] ? import_iovec+0x73/0xa0 [ 436.849302][T11941] ___sys_sendmsg+0x2a6/0x360 [ 436.854404][T11941] ? __sys_sendmsg+0x2a0/0x2a0 [ 436.859355][T11941] __se_sys_sendmsg+0x1c2/0x2b0 [ 436.864264][T11941] ? __x64_sys_sendmsg+0x80/0x80 [ 436.869834][T11941] ? lockdep_hardirqs_on+0x98/0x150 [ 436.875436][T11941] do_syscall_64+0x55/0xa0 [ 436.879993][T11941] ? clear_bhb_loop+0x40/0x90 [ 436.884713][T11941] ? clear_bhb_loop+0x40/0x90 [ 436.889533][T11941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.895865][T11941] RIP: 0033:0x7f7ee479c799 [ 436.900322][T11941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.920151][T11941] RSP: 002b:00007f7ee566c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.928691][T11941] RAX: ffffffffffffffda RBX: 00007f7ee4a16090 RCX: 00007f7ee479c799 [ 436.936915][T11941] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 436.945150][T11941] RBP: 00007f7ee566c090 R08: 0000000000000000 R09: 0000000000000000 [ 436.953158][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.961255][T11941] R13: 00007f7ee4a16128 R14: 00007f7ee4a16090 R15: 00007ffc8c62a748 [ 436.969352][T11941] [ 439.812762][T11969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2069'. [ 440.280221][T11986] cgroup: fork rejected by pids controller in /syz3 [ 440.414092][T12040] netlink: 'syz.1.2079': attribute type 10 has an invalid length. [ 440.488734][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.500725][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.584019][T12100] netlink: 164228 bytes leftover after parsing attributes in process `syz.0.2080'. [ 440.600282][T12100] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 440.958610][ T2956] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.654985][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 441.680250][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 441.689164][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 441.732362][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 441.748806][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 441.757365][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 441.838622][T12119] syz.1.2086[12119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.179020][T12103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2081'. [ 443.213375][ T2956] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.317075][ T2956] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.418229][T12125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2089'. [ 443.853820][ T5089] Bluetooth: hci1: command tx timeout [ 445.591937][ T2956] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.607767][T12125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2089'. [ 445.923896][ T5089] Bluetooth: hci1: command tx timeout [ 445.970943][T12115] chnl_net:caif_netlink_parms(): no params data found [ 447.016596][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.068610][T12115] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.108092][T12115] bridge_slave_0: entered allmulticast mode [ 447.153690][T12115] bridge_slave_0: entered promiscuous mode [ 447.188452][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.195946][T12115] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.204045][T12115] bridge_slave_1: entered allmulticast mode [ 447.212278][T12115] bridge_slave_1: entered promiscuous mode [ 447.409851][T12165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2097'. [ 447.531221][T12115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.571260][T12115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.828124][T12192] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2102'. [ 448.003869][ T5089] Bluetooth: hci1: command tx timeout [ 450.083943][ T5089] Bluetooth: hci1: command tx timeout [ 450.695745][T12188] netlink: 'syz.2.2102': attribute type 1 has an invalid length. [ 450.714039][T12188] netlink: 'syz.2.2102': attribute type 4 has an invalid length. [ 450.733624][T12188] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2102'. [ 451.082192][T12204] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2106'. [ 451.135178][T12115] team0: Port device team_slave_0 added [ 451.145442][T12198] netlink: 'syz.0.2104': attribute type 25 has an invalid length. [ 451.237847][T12115] team0: Port device team_slave_1 added [ 451.547214][T12115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.565680][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.600748][T12115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.871656][T12115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.879618][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.912494][T12115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.129929][T12231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2111'. [ 454.255671][T12115] hsr_slave_0: entered promiscuous mode [ 454.276260][T12115] hsr_slave_1: entered promiscuous mode [ 455.719515][ T2956] hsr_slave_0: left promiscuous mode [ 455.750718][ T2956] hsr_slave_1: left promiscuous mode [ 455.764266][ T2956] bridge_slave_1: left allmulticast mode [ 455.773630][ T2956] bridge_slave_1: left promiscuous mode [ 455.781201][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.807626][ T2956] bridge_slave_0: left allmulticast mode [ 455.814282][ T2956] bridge_slave_0: left promiscuous mode [ 455.821067][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.916988][ T2956] veth1_macvtap: left promiscuous mode [ 455.923263][ T2956] veth0_macvtap: left promiscuous mode [ 455.954169][ T2956] veth1_vlan: left promiscuous mode [ 455.959853][ T2956] veth0_vlan: left promiscuous mode [ 456.889033][ T2956] team0 (unregistering): Port device macvlan0 removed [ 457.482007][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 457.540999][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 457.620215][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.698071][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.260870][ T2956] team0 (unregistering): Port device bond0 removed [ 458.277400][ T2956] team0 (unregistering): Port device bridge0 removed [ 458.335940][ T2956] bond0 (unregistering): Released all slaves [ 460.481367][T12279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2120'. [ 461.555560][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2125'. [ 461.587363][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2125'. [ 461.628785][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2125'. [ 461.729556][T12314] syzkaller0: entered promiscuous mode [ 461.738841][T12314] syzkaller0: entered allmulticast mode [ 461.748978][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2125'. [ 462.180459][T12333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2130'. [ 462.464798][T12341] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2130'. [ 463.997483][T12115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 464.010146][T12332] netlink: 'syz.0.2130': attribute type 21 has an invalid length. [ 464.018266][T12332] netlink: 'syz.0.2130': attribute type 11 has an invalid length. [ 464.027156][T12333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2130'. [ 464.038413][T12339] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2131'. [ 464.063178][T12341] C: renamed from team_slave_0 [ 464.072972][T12341] netlink: 'syz.0.2130': attribute type 3 has an invalid length. [ 464.087184][T12341] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2130'. [ 464.097320][T12341] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 464.120645][T12115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 464.155881][T12115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 464.170136][T12115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 464.448553][T12115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.758555][T12115] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.802023][T10358] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.809400][T10358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.896385][T10358] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.903650][T10358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.090368][T12115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.437536][T12115] veth0_vlan: entered promiscuous mode [ 466.487761][T12115] veth1_vlan: entered promiscuous mode [ 466.628404][T12115] veth0_macvtap: entered promiscuous mode [ 466.682857][T12115] veth1_macvtap: entered promiscuous mode [ 466.780362][T12384] __nla_validate_parse: 1 callbacks suppressed [ 466.780399][T12384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2140'. [ 466.821809][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.839090][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.850108][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.882538][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.907432][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.927433][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.965663][T12115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.034823][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.060584][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.088784][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.109818][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.138315][T12115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.158562][T12115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.180658][T12115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.274605][T12115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.283384][T12115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.325667][T12115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.358749][T12115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.709868][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.740411][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.867652][T12412] syzkaller0: entered promiscuous mode [ 467.882131][T12412] syzkaller0: entered allmulticast mode [ 472.024891][T12430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2151'. [ 472.053636][T12442] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 472.085940][T12442] syzkaller0: entered promiscuous mode [ 472.091534][T12442] syzkaller0: entered allmulticast mode [ 472.146605][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.176164][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.499820][T12507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2162'. [ 478.033008][T12536] netlink: 'syz.0.2160': attribute type 9 has an invalid length. [ 478.116578][T12536] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2160'. [ 478.157742][T12529] netlink: 'syz.0.2160': attribute type 9 has an invalid length. [ 478.212845][T12531] netlink: 'syz.2.2166': attribute type 3 has an invalid length. [ 478.226346][T12529] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2160'. [ 478.242867][T12531] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2166'. [ 480.191498][T12583] netlink: 'syz.3.2177': attribute type 3 has an invalid length. [ 480.230812][T12583] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2177'. [ 482.871753][T12629] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2193'. [ 482.954051][T12626] netlink: 'syz.0.2191': attribute type 3 has an invalid length. [ 482.962569][T12626] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2191'. [ 483.188194][T12645] netlink: 151496 bytes leftover after parsing attributes in process `syz.2.2201'. [ 483.769491][T12668] syz.0.2209[12668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.769629][T12668] syz.0.2209[12668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.867541][T12670] netlink: 'syz.3.2208': attribute type 1 has an invalid length. [ 483.913168][T12670] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2208'. [ 483.933357][T12670] netlink: 'syz.3.2208': attribute type 1 has an invalid length. [ 484.195606][T12679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2211'. [ 484.757070][T12698] netlink: 'syz.3.2218': attribute type 13 has an invalid length. [ 484.859904][T12698] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2218'. [ 484.884928][T12698] erspan0: refused to change device tx_queue_len [ 484.893876][T12698] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 485.958696][T12730] netlink: 'syz.0.2229': attribute type 25 has an invalid length. [ 486.254305][T12729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2230'. [ 488.315905][T12798] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2256'. [ 488.347545][T12798] team_slave_0: entered allmulticast mode [ 488.369453][T12798] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 488.530520][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.587420][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.610984][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.652716][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.666696][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 488.677545][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.054655][T10318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.073252][T12815] netlink: 'syz.3.2259': attribute type 10 has an invalid length. [ 489.083910][T12815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2259'. [ 489.093439][T12815] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 489.105493][T12815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.165769][T10318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.310215][T10318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.534672][T12802] chnl_net:caif_netlink_parms(): no params data found [ 489.666655][T12802] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.674363][T12802] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.681770][T12802] bridge_slave_0: entered allmulticast mode [ 489.690486][T12802] bridge_slave_0: entered promiscuous mode [ 489.802651][T12802] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.818415][T12802] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.840799][T12802] bridge_slave_1: entered allmulticast mode [ 489.865375][T12802] bridge_slave_1: entered promiscuous mode [ 489.872631][T12833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2263'. [ 490.013735][T10318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.130593][T12802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.175945][T12802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.296448][T12802] team0: Port device team_slave_0 added [ 490.434852][T12802] team0: Port device team_slave_1 added [ 490.552363][T12802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.561497][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.589902][T12802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.623734][T12844] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 490.633755][T12844] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2267'. [ 490.770473][T12802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.778437][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.808639][ T5790] Bluetooth: hci0: command tx timeout [ 490.844532][T12802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.956456][T12855] netlink: 'syz.0.2271': attribute type 10 has an invalid length. [ 490.965164][T12855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2271'. [ 490.975328][T12855] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 490.987133][T12855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.997061][T12857] netlink: 'syz.3.2273': attribute type 2 has an invalid length. [ 491.018475][T12857] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2273'. [ 491.110062][T12802] hsr_slave_0: entered promiscuous mode [ 491.137944][T12802] hsr_slave_1: entered promiscuous mode [ 491.194303][T12802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.223391][T12802] Cannot create hsr debugfs directory [ 491.493396][T12861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2275'. [ 491.531667][T12859] netlink: 'syz.3.2273': attribute type 25 has an invalid length. [ 492.883629][ T5790] Bluetooth: hci0: command tx timeout [ 493.609072][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2282'. [ 493.623729][T12893] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2282'. [ 493.781798][T12802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 493.917414][T12802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 493.931819][T12802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 493.951221][T12802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 494.195495][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.203259][T10318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.409715][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.442499][T10318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.474927][T10318] bridge_slave_1: left allmulticast mode [ 494.482346][T10318] bridge_slave_1: left promiscuous mode [ 494.499730][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.560534][T10318] bridge_slave_0: left allmulticast mode [ 494.579539][T10318] bridge_slave_0: left promiscuous mode [ 494.604981][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.714109][T10318] veth1_macvtap: left promiscuous mode [ 494.719706][T10318] veth0_macvtap: left promiscuous mode [ 494.735132][T10318] veth1_vlan: left promiscuous mode [ 494.743390][T10318] veth0_vlan: left promiscuous mode [ 494.963700][ T5790] Bluetooth: hci0: command tx timeout [ 495.642248][T10318] team0 (unregistering): Port device team_slave_1 removed [ 495.700130][T10318] team0 (unregistering): Port device team_slave_0 removed [ 495.755677][T10318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.808215][T10318] bond0 (unregistering): (slave cå1ÿ): Releasing backup interface [ 496.140326][T10318] team0 (unregistering): Port device bond0 removed [ 496.187016][T10318] bond0 (unregistering): Released all slaves [ 496.302402][T12920] netlink: 'syz.3.2291': attribute type 10 has an invalid length. [ 496.407326][T12920] team0 (unregistering): Port device team_slave_0 removed [ 496.430133][T12920] team0 (unregistering): Port device team_slave_1 removed [ 496.478776][T12915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2290'. [ 496.489084][T12921] netlink: 'syz.3.2291': attribute type 9 has an invalid length. [ 496.943147][T12802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.043668][ T5790] Bluetooth: hci0: command tx timeout [ 497.097183][T12802] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.150619][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.159067][T10333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.233375][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.240659][T10333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.426854][T12953] netlink: 'syz.1.2297': attribute type 153 has an invalid length. [ 497.453897][T12953] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2297'. [ 497.475768][T12802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.475795][T12802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.872193][T12975] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2300'. [ 497.934219][T12975] caif0: entered promiscuous mode [ 497.968553][T12975] caif0: entered allmulticast mode [ 498.220930][T12802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.439511][T12802] veth0_vlan: entered promiscuous mode [ 498.471410][T12802] veth1_vlan: entered promiscuous mode [ 498.590590][T12802] veth0_macvtap: entered promiscuous mode [ 498.621089][T12981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2302'. [ 498.634624][T12986] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 498.699539][T12986] bond0: (slave team0): Releasing backup interface [ 498.839853][T12986] team0 (unregistering): Port device C removed [ 498.909780][T12986] team0 (unregistering): Port device team_slave_1 removed [ 498.944267][T12986] team0 (unregistering): Port device macvlan0 removed [ 498.953030][T12986] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.972183][T12986] team0 (unregistering): Port device bridge0 removed [ 498.996131][T12802] veth1_macvtap: entered promiscuous mode [ 499.004311][T12994] netlink: 'syz.0.2303': attribute type 9 has an invalid length. [ 499.069791][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.093576][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.114155][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.133329][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.163954][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.184091][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.197413][T12802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.218472][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.251433][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.262659][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.276722][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.292730][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.304110][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.324800][T12802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.362903][T12802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.387501][T12802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.407004][T12802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.426080][T12802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.620766][T10318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.663121][T10318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.732438][T13018] netlink: 'syz.3.2312': attribute type 10 has an invalid length. [ 499.874437][T10358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.885982][T10358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.925965][T13013] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2311'. [ 500.634888][T13028] netlink: 'syz.3.2313': attribute type 25 has an invalid length. [ 501.044785][T13038] netlink: 'syz.2.2318': attribute type 10 has an invalid length. [ 501.357848][T13038] team0 (unregistering): Port device team_slave_0 removed [ 501.503055][T13038] team0 (unregistering): Port device team_slave_1 removed [ 501.612958][T13044] netlink: 'syz.2.2318': attribute type 9 has an invalid length. [ 501.930815][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.948569][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.041122][T13066] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.2327'. [ 502.561403][T13081] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2333'. [ 503.171475][T13077] netlink: 'syz.2.2330': attribute type 25 has an invalid length. [ 503.779696][T13100] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 503.815711][T13100] team0: Port device wlan1 added [ 504.587825][T13108] netlink: 'syz.1.2340': attribute type 10 has an invalid length. [ 504.690966][T13108] team0 (unregistering): Port device C removed [ 504.888232][T13108] team0 (unregistering): Port device team_slave_1 removed [ 505.065037][T13108] team0 (unregistering): Port device wlan1 removed [ 505.175174][T13112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2343'. [ 505.227247][T13114] netlink: 'syz.1.2340': attribute type 9 has an invalid length. [ 505.268435][T13119] netlink: 'syz.0.2348': attribute type 25 has an invalid length. [ 506.019468][T13154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2356'. [ 506.190153][T13166] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2359'. [ 507.947053][T13199] netlink: 'syz.0.2370': attribute type 10 has an invalid length. [ 508.067521][T13199] geneve0: entered promiscuous mode [ 508.537469][T13199] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 508.903002][T13204] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2372'. [ 509.021538][T13207] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 509.040491][T13207] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 509.370926][T13215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2369'. [ 510.773324][T13239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 510.783389][T13239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 510.805950][T13239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 510.816880][T13239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 510.826907][T13239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 510.836622][T13239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 510.925983][T10314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.117289][T10314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.287122][T13249] netlink: 'syz.3.2385': attribute type 10 has an invalid length. [ 511.297425][T13249] geneve0: entered promiscuous mode [ 511.329695][T13249] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 511.450881][T10314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.667912][T10314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.766836][T13248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2386'. [ 512.091842][T13235] chnl_net:caif_netlink_parms(): no params data found [ 512.711890][T13235] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.744768][T13235] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.769164][T13235] bridge_slave_0: entered allmulticast mode [ 512.778183][T13235] bridge_slave_0: entered promiscuous mode [ 512.933854][ T5790] Bluetooth: hci2: command tx timeout [ 513.272179][T13235] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.290384][T13235] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.310726][T13235] bridge_slave_1: entered allmulticast mode [ 513.322275][T13235] bridge_slave_1: entered promiscuous mode [ 513.377843][T13288] netlink: 'syz.2.2397': attribute type 10 has an invalid length. [ 513.522499][T13288] geneve0: entered promiscuous mode [ 513.569058][T13288] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 513.990954][T13235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.023987][T13307] netlink: 'syz.1.2407': attribute type 10 has an invalid length. [ 514.052309][T13235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.585404][T13235] team0: Port device team_slave_0 added [ 514.629605][T13235] team0: Port device team_slave_1 added [ 514.709832][T13314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2401'. [ 514.926958][T13235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.941969][T13235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.973915][ T5790] Bluetooth: hci2: command tx timeout [ 515.010137][T13235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.185418][T13235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.202958][T13235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.275765][T13235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.798531][T13235] hsr_slave_0: entered promiscuous mode [ 515.884054][T13235] hsr_slave_1: entered promiscuous mode [ 515.900373][T13235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.929961][T13235] Cannot create hsr debugfs directory [ 516.621289][T13366] syzkaller0: create flow: hash 3931615625 index 2 [ 516.632870][T13361] syzkaller0: entered promiscuous mode [ 516.639098][T13361] syzkaller0: entered allmulticast mode [ 516.725165][T13361] syzkaller0: delete flow: hash 3931615625 index 2 [ 516.737147][ T65] syzkaller0: tun_net_xmit 48 [ 516.792808][T13361] netlink: 'syz.2.2415': attribute type 27 has an invalid length. [ 516.858452][T13361] bond0: (slave bond_slave_0): Releasing backup interface [ 517.044908][ T5790] Bluetooth: hci2: command tx timeout [ 519.123649][ T5790] Bluetooth: hci2: command tx timeout [ 519.270915][T10314] hsr_slave_0: left promiscuous mode [ 519.326867][T10314] hsr_slave_1: left promiscuous mode [ 519.410399][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.442303][T10314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.534785][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.542781][T10314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.604727][T10314] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 519.644419][T10314] batman_adv: batadv0: Removing interface: veth0_vlan [ 519.705347][T10314] bridge_slave_1: left allmulticast mode [ 519.711444][T10314] bridge_slave_1: left promiscuous mode [ 519.776459][T10314] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.306318][T10314] bridge_slave_0: left allmulticast mode [ 520.312582][T10314] bridge_slave_0: left promiscuous mode [ 520.392210][T10314] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.782539][T10314] veth1_macvtap: left promiscuous mode [ 520.804018][T10314] veth1_vlan: left promiscuous mode [ 520.809784][T10314] veth0_vlan: left promiscuous mode [ 521.399127][T10314] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 522.140725][T10314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.210139][T10314] bond0 (unregistering): (slave cå1ÿ): Releasing backup interface [ 522.623134][T10314] bond0 (unregistering): Released all slaves [ 523.475956][T13235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.508517][T13235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 523.580507][T13235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.667804][T13235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.047219][T13235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.107383][T13428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2433'. [ 524.132810][T13235] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.184643][T10358] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.192072][T10358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.229503][T10358] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.237359][T10358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.309565][T13235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.496492][T13235] veth0_vlan: entered promiscuous mode [ 527.568107][T13235] veth1_vlan: entered promiscuous mode [ 527.695880][T13235] veth0_macvtap: entered promiscuous mode [ 527.712401][T13235] veth1_macvtap: entered promiscuous mode [ 527.817095][T13235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.848181][T13235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.883007][T13235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.921034][T13235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.956490][T13235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.993612][T13235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.028338][T13235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.087999][T13235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.113848][T13235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.133321][T13235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.150170][T13235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.161327][T13235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.183220][T13235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.203100][T13235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.227863][T13235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.242910][T13235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.253088][T13235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.262198][T13235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.456485][T10349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.480216][T10349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.558042][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.584155][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.137869][T13647] netlink: 142556 bytes leftover after parsing attributes in process `syz.0.2458'. [ 531.166129][T13647] netlink: 'syz.0.2458': attribute type 1 has an invalid length. [ 531.185533][T13647] netlink: 'syz.0.2458': attribute type 2 has an invalid length. [ 531.240572][T13647] netlink: 'syz.0.2458': attribute type 3 has an invalid length. [ 531.282836][T13647] netlink: 'syz.0.2458': attribute type 4 has an invalid length. [ 531.346996][T13652] netlink: 'syz.2.2459': attribute type 39 has an invalid length. [ 531.595175][T13239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.605890][T13239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.615597][T13239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.624972][T13239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.635385][T13239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 531.684396][T13239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.071655][T13656] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2460'. [ 532.120769][ T2933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.396662][ T2933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.629992][ T2933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.832087][T13685] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2465'. [ 532.858108][ T2933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.761113][T13697] netlink: 'syz.3.2469': attribute type 1 has an invalid length. [ 533.773885][T13239] Bluetooth: hci3: command tx timeout [ 533.803764][T13697] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2469'. [ 534.144079][T13694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2468'. [ 534.295842][ T2933] tipc: Left network mode [ 534.531451][T13659] chnl_net:caif_netlink_parms(): no params data found [ 535.262426][T13702] netlink: 'syz.0.2470': attribute type 10 has an invalid length. [ 535.375709][T13702] team0: Port device wlan1 added [ 535.844707][T13239] Bluetooth: hci3: command tx timeout [ 535.978089][T13659] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.012711][T13659] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.043788][T13659] bridge_slave_0: entered allmulticast mode [ 536.051604][T13659] bridge_slave_0: entered promiscuous mode [ 536.341822][T13659] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.380805][T13659] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.507967][T13659] bridge_slave_1: entered allmulticast mode [ 536.715487][T13659] bridge_slave_1: entered promiscuous mode [ 538.214731][T13239] Bluetooth: hci3: command tx timeout [ 540.250260][T13239] Bluetooth: hci3: command tx timeout [ 540.401772][T13752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2479'. [ 540.416209][T13659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.438042][T13659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.539194][T13659] team0: Port device team_slave_0 added [ 540.712069][T13659] team0: Port device team_slave_1 added [ 541.030311][T13659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.043607][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.105529][T13659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.374430][T13659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.381708][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.554158][T13659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.864629][T13786] netlink: 'syz.3.2486': attribute type 9 has an invalid length. [ 541.893765][T13786] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2486'. [ 542.395783][T13659] hsr_slave_0: entered promiscuous mode [ 542.424491][T13659] hsr_slave_1: entered promiscuous mode [ 542.438613][T13659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.449710][T13659] Cannot create hsr debugfs directory [ 542.550470][T13795] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2488'. [ 542.574480][T13795] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2488'. [ 542.644042][T13790] netlink: 'syz.3.2486': attribute type 9 has an invalid length. [ 542.683289][T13790] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2486'. [ 543.196282][T13804] netlink: 'syz.2.2496': attribute type 39 has an invalid length. [ 543.419757][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.436485][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.450458][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.470886][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.594397][ T2933] veth1_macvtap: left promiscuous mode [ 544.519243][ T2933] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.570780][ T2933] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.947891][ T2933] .` (unregistering): Released all slaves [ 546.676964][T13659] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.711628][T13659] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.747801][T13659] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.828455][T13659] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.085946][T13659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.143047][T13659] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.192365][T10353] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.199972][T10353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.312753][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.320915][T10361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.187317][T13659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.367863][T13659] veth0_vlan: entered promiscuous mode [ 548.418442][T13659] veth1_vlan: entered promiscuous mode [ 548.565240][T13659] veth0_macvtap: entered promiscuous mode [ 548.596230][T13904] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2512'. [ 548.607906][T13659] veth1_macvtap: entered promiscuous mode [ 548.669725][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.691163][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.723816][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.763945][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.783621][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.796702][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.837441][T13659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.908348][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.933586][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.954921][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.983545][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.029736][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.054686][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.071264][T13659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.110574][T13659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.140111][T13659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.163717][T13659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.183107][T13659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.474911][T10361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.510274][T10361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.664572][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.700975][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.761432][T13941] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2522'. [ 550.104475][T13949] IPv6: Can't replace route, no match found [ 551.180291][T13971] netlink: 'syz.2.2530': attribute type 3 has an invalid length. [ 551.188980][T13971] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2530'. [ 551.402055][T13976] FAULT_INJECTION: forcing a failure. [ 551.402055][T13976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.437958][T13976] CPU: 1 PID: 13976 Comm: syz.3.2532 Not tainted syzkaller #0 [ 551.445768][T13976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.456045][T13976] Call Trace: [ 551.459623][T13976] [ 551.462671][T13976] dump_stack_lvl+0x18c/0x250 [ 551.467413][T13976] ? show_regs_print_info+0x20/0x20 [ 551.472667][T13976] ? load_image+0x400/0x400 [ 551.477527][T13976] ? __lock_acquire+0x7d40/0x7d40 [ 551.482873][T13976] should_fail_ex+0x39d/0x4d0 [ 551.487796][T13976] _copy_from_user+0x2f/0xe0 [ 551.492519][T13976] __copy_msghdr+0x3bb/0x580 [ 551.497171][T13976] ___sys_sendmsg+0x214/0x360 [ 551.502013][T13976] ? __sys_sendmsg+0x2a0/0x2a0 [ 551.507208][T13976] ? __lock_acquire+0x7d40/0x7d40 [ 551.512633][T13976] __se_sys_sendmsg+0x1c2/0x2b0 [ 551.517634][T13976] ? __x64_sys_sendmsg+0x80/0x80 [ 551.522640][T13976] ? lockdep_hardirqs_on+0x98/0x150 [ 551.528140][T13976] do_syscall_64+0x55/0xa0 [ 551.532603][T13976] ? clear_bhb_loop+0x40/0x90 [ 551.537405][T13976] ? clear_bhb_loop+0x40/0x90 [ 551.542223][T13976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.548435][T13976] RIP: 0033:0x7fdda539c799 [ 551.553063][T13976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.573070][T13976] RSP: 002b:00007fdda625d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.581900][T13976] RAX: ffffffffffffffda RBX: 00007fdda5615fa0 RCX: 00007fdda539c799 [ 551.590010][T13976] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 551.598128][T13976] RBP: 00007fdda625d090 R08: 0000000000000000 R09: 0000000000000000 [ 551.606143][T13976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.614257][T13976] R13: 00007fdda5616038 R14: 00007fdda5615fa0 R15: 00007ffdc48096b8 [ 551.622293][T13976] [ 554.174900][T14009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2540'. [ 554.292887][T14011] FAULT_INJECTION: forcing a failure. [ 554.292887][T14011] name failslab, interval 1, probability 0, space 0, times 0 [ 554.344170][T14011] CPU: 1 PID: 14011 Comm: syz.2.2541 Not tainted syzkaller #0 [ 554.351829][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.363236][T14011] Call Trace: [ 554.366742][T14011] [ 554.369791][T14011] dump_stack_lvl+0x18c/0x250 [ 554.374706][T14011] ? show_regs_print_info+0x20/0x20 [ 554.380498][T14011] ? load_image+0x400/0x400 [ 554.385049][T14011] should_fail_ex+0x39d/0x4d0 [ 554.389769][T14011] should_failslab+0x9/0x20 [ 554.394310][T14011] slab_pre_alloc_hook+0x59/0x310 [ 554.399469][T14011] kmem_cache_alloc+0x5a/0x2d0 [ 554.404264][T14011] ? dst_alloc+0x105/0x170 [ 554.408736][T14011] dst_alloc+0x105/0x170 [ 554.413621][T14011] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 554.420314][T14011] ? ip_route_output_key_hash_rcu+0x12b1/0x2360 [ 554.426624][T14011] ? ip_route_output_key_hash+0x13d/0x330 [ 554.432461][T14011] ip_route_output_key_hash+0x1f3/0x330 [ 554.438563][T14011] ? ip_route_input_rcu+0x30e0/0x30e0 [ 554.443991][T14011] ? __lock_acquire+0x7d40/0x7d40 [ 554.449328][T14011] ip_route_output_flow+0x2a/0x150 [ 554.454761][T14011] ? security_sk_classify_flow+0x7b/0x90 [ 554.460467][T14011] raw_sendmsg+0x129a/0x1c00 [ 554.465193][T14011] ? compat_raw_ioctl+0x70/0x70 [ 554.470087][T14011] ? __lock_acquire+0x1273/0x7d40 [ 554.475264][T14011] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 554.481717][T14011] ? sock_rps_record_flow+0x19/0x3f0 [ 554.487224][T14011] ? inet_sendmsg+0x7c/0x2f0 [ 554.491848][T14011] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 554.497282][T14011] ? security_socket_sendmsg+0x80/0xa0 [ 554.502898][T14011] ? inet_send_prepare+0x260/0x260 [ 554.508140][T14011] ____sys_sendmsg+0x5ba/0x960 [ 554.513017][T14011] ? __lock_acquire+0x7d40/0x7d40 [ 554.518470][T14011] ? __asan_memset+0x22/0x40 [ 554.523120][T14011] ? __sys_sendmsg_sock+0x30/0x30 [ 554.528623][T14011] ? __import_iovec+0x3fa/0x850 [ 554.533540][T14011] ? import_iovec+0x73/0xa0 [ 554.538367][T14011] ___sys_sendmsg+0x2a6/0x360 [ 554.543091][T14011] ? get_pid_task+0x20/0x1e0 [ 554.547736][T14011] ? __sys_sendmsg+0x2a0/0x2a0 [ 554.552829][T14011] ? __lock_acquire+0x7d40/0x7d40 [ 554.557999][T14011] __se_sys_sendmsg+0x1c2/0x2b0 [ 554.562880][T14011] ? __x64_sys_sendmsg+0x80/0x80 [ 554.568040][T14011] ? trace_sys_enter+0x1f/0x80 [ 554.572840][T14011] do_syscall_64+0x55/0xa0 [ 554.577371][T14011] ? clear_bhb_loop+0x40/0x90 [ 554.582098][T14011] ? clear_bhb_loop+0x40/0x90 [ 554.586888][T14011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.592806][T14011] RIP: 0033:0x7fb46099c799 [ 554.597272][T14011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.617111][T14011] RSP: 002b:00007fb46191d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.626530][T14011] RAX: ffffffffffffffda RBX: 00007fb460c15fa0 RCX: 00007fb46099c799 [ 554.634965][T14011] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 554.643367][T14011] RBP: 00007fb46191d090 R08: 0000000000000000 R09: 0000000000000000 [ 554.651458][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.660442][T14011] R13: 00007fb460c16038 R14: 00007fb460c15fa0 R15: 00007ffdb6453b08 [ 554.669219][T14011] [ 554.691689][T14015] netlink: 'syz.3.2542': attribute type 39 has an invalid length. [ 555.802517][T14035] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2551'. [ 555.810466][T14041] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 556.142436][T14043] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2554'. [ 556.376407][T14043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.486106][T14043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.554611][T14043] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 556.616969][T14043] bond0 (unregistering): Released all slaves [ 556.687709][T14054] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2557'. [ 557.005630][T14064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2561'. [ 557.208539][T14070] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2564'. [ 558.648218][T14097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2570'. [ 559.185801][T14114] netlink: 142556 bytes leftover after parsing attributes in process `syz.0.2580'. [ 559.213658][T14114] netlink: 'syz.0.2580': attribute type 1 has an invalid length. [ 559.236500][T14114] netlink: 'syz.0.2580': attribute type 2 has an invalid length. [ 559.264160][T14114] netlink: 'syz.0.2580': attribute type 3 has an invalid length. [ 559.271970][T14114] netlink: 'syz.0.2580': attribute type 4 has an invalid length. [ 560.129741][T14143] netlink: 'syz.2.2589': attribute type 39 has an invalid length. [ 561.198920][T14148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2590'. [ 561.622487][T14164] netlink: 142556 bytes leftover after parsing attributes in process `syz.1.2594'. [ 561.636005][T14164] netlink: 'syz.1.2594': attribute type 1 has an invalid length. [ 561.648243][T14164] netlink: 'syz.1.2594': attribute type 2 has an invalid length. [ 561.673624][T14164] netlink: 'syz.1.2594': attribute type 3 has an invalid length. [ 561.698947][T14164] netlink: 'syz.1.2594': attribute type 4 has an invalid length. [ 562.174105][T14183] netlink: 'syz.2.2601': attribute type 39 has an invalid length. [ 563.605384][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.611762][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.068336][T14210] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2610'. [ 565.257105][T14199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2606'. [ 565.494558][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 566.188446][T14237] netlink: 'syz.3.2616': attribute type 39 has an invalid length. [ 566.441815][T14244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2620'. [ 568.028180][T14282] netlink: 'syz.1.2633': attribute type 39 has an invalid length. [ 568.415479][T14295] netlink: 'syz.3.2640': attribute type 10 has an invalid length. [ 568.432903][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.449444][T14295] bridge_slave_1: left allmulticast mode [ 568.455571][T14295] bridge_slave_1: left promiscuous mode [ 568.461625][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.730362][T14300] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2642'. [ 568.740324][T14300] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 568.749076][T14300] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 568.976112][T14306] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2645'. [ 568.998337][T14306] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.2645'. [ 569.015827][T14306] tc_dump_action: action bad kind [ 569.046965][T14308] netlink: 'syz.1.2646': attribute type 21 has an invalid length. [ 569.218963][T14313] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2649'. [ 569.472801][T14324] netlink: 'syz.3.2651': attribute type 21 has an invalid length. [ 569.584259][T14324] IPv6: NLM_F_CREATE should be specified when creating new route [ 569.630753][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.638611][T14324] IPv6: NLM_F_CREATE should be set when creating new route [ 569.646261][T14324] IPv6: NLM_F_CREATE should be set when creating new route [ 569.653929][T14324] IPv6: NLM_F_CREATE should be set when creating new route [ 569.674017][T14324] netlink: 'syz.3.2651': attribute type 21 has an invalid length. [ 569.693904][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.712844][T14324] netlink: 'syz.3.2651': attribute type 21 has an invalid length. [ 569.734108][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.764034][T14324] netlink: 'syz.3.2651': attribute type 21 has an invalid length. [ 569.793786][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.821195][T14324] netlink: 'syz.3.2651': attribute type 21 has an invalid length. [ 569.840111][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.861801][T14324] netlink: 'syz.3.2651': attribute type 21 has an invalid length. [ 569.876476][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.894323][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.911714][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.947437][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.976544][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.009728][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.044140][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.072708][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.102348][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.124300][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.148012][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.782766][T14347] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2659'. [ 571.454094][T14383] validate_nla: 12 callbacks suppressed [ 571.454115][T14383] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 571.552188][T14383] netlink: 'syz.3.2672': attribute type 3 has an invalid length. [ 571.552398][T14384] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 571.633873][T14383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2672'. [ 571.647803][T14384] netlink: 'syz.3.2672': attribute type 3 has an invalid length. [ 571.658316][T14384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2672'. [ 571.688198][T14391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2673'. [ 571.855605][T14393] netlink: 'syz.3.2675': attribute type 21 has an invalid length. [ 571.886705][T14393] pimreg: tun_chr_ioctl cmd 1074812118 [ 571.896254][T14394] pimreg: tun_chr_ioctl cmd 1074025677 [ 571.902007][T14394] pimreg: linktype set to 780 [ 571.919716][T14393] pimreg: tun_chr_ioctl cmd 1074025677 [ 571.947676][T14393] pimreg: linktype set to 780 [ 571.962528][T14396] netlink: 'syz.0.2676': attribute type 39 has an invalid length. [ 572.195545][T14401] netlink: 16358 bytes leftover after parsing attributes in process `syz.2.2677'. [ 572.925255][T14421] netlink: 'syz.1.2683': attribute type 10 has an invalid length. [ 572.933336][T14421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2683'. [ 573.055600][T14421] batman_adv: batadv0: Adding interface: veth0_vlan [ 573.093022][T14421] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.151421][T14421] batman_adv: batadv0: Interface activated: veth0_vlan [ 573.179002][T14434] netlink: 'syz.2.2686': attribute type 39 has an invalid length. [ 575.329092][T14441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2688'. [ 575.372097][T14466] netlink: 'syz.0.2696': attribute type 39 has an invalid length. [ 575.489853][T14470] netlink: 703 bytes leftover after parsing attributes in process `syz.3.2698'. [ 575.625531][T14473] netlink: 'syz.1.2700': attribute type 10 has an invalid length. [ 575.644382][T14473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2700'. [ 575.687973][T14473] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 575.731940][T14473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.081042][T14474] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2698'. [ 576.592446][T14494] netlink: 'syz.3.2707': attribute type 39 has an invalid length. [ 577.022750][T14503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2709'. [ 580.125895][T14526] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2713'. [ 580.216894][T14526] openvswitch: netlink: Key type 4112 is out of range max 32 [ 580.683269][T14536] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2719'. [ 581.121328][T14540] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2719'. [ 582.913006][T14552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2723'. [ 583.038494][T14545] netlink: 'syz.3.2720': attribute type 4 has an invalid length. [ 583.087106][T14545] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2720'. [ 583.218841][T14545] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 584.121854][T14599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2738'. [ 586.686059][T14612] netlink: 'syz.1.2742': attribute type 4 has an invalid length. [ 586.701005][T14612] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2742'. [ 586.734374][T14612] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 587.140730][T14633] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2750'. [ 587.312388][T14633] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2750'. [ 588.387997][T14638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2753'. [ 589.611694][T14693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2767'. [ 594.063938][T14725] netlink: 'syz.2.2778': attribute type 21 has an invalid length. [ 594.307314][T14720] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2776'. [ 598.081672][T14769] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2791'. [ 599.976739][T14788] netlink: 'syz.0.2799': attribute type 10 has an invalid length. [ 600.220521][T14788] team0: Device hsr_slave_0 failed to register rx_handler [ 601.211121][T14808] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2806'. [ 602.006041][T14824] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2813'. [ 602.024070][T14824] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 603.406618][T14848] netlink: 'syz.3.2821': attribute type 21 has an invalid length. [ 603.449402][T14848] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.2821'. [ 605.227540][T14893] netlink: 'syz.1.2838': attribute type 21 has an invalid length. [ 607.590489][T14972] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2849'. [ 607.612876][T14972] IPv6: NLM_F_CREATE should be specified when creating new route [ 607.622093][T14972] IPv6: Can't replace route, no match found [ 607.638907][T14972] netlink: 'syz.0.2849': attribute type 1 has an invalid length. [ 611.131620][T15041] netlink: 'syz.3.2872': attribute type 41 has an invalid length. [ 611.144612][T15041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2872'. [ 611.606444][T15092] netlink: 'syz.0.2874': attribute type 10 has an invalid length. [ 611.653733][T15092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2874'. [ 611.766555][T13239] Bluetooth: hci0: command 0x0406 tx timeout [ 611.967846][T15092] bridge0: port 3(ipvlan1) entered blocking state [ 611.984446][T15092] bridge0: port 3(ipvlan1) entered disabled state [ 612.119602][T15092] ipvlan1: entered allmulticast mode [ 612.135369][T15092] veth0_vlan: entered allmulticast mode [ 612.255840][T15092] ipvlan1: left allmulticast mode [ 612.261053][T15092] veth0_vlan: left allmulticast mode [ 612.267164][T15092] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 612.328464][T15121] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2883'. [ 612.348767][T15121] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2883'. [ 612.374997][T15117] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2883'. [ 612.393915][T15121] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2883'. [ 613.014614][T15134] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 613.500392][T15143] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2890'. [ 614.313998][T15134] syzkaller0: entered promiscuous mode [ 614.320627][T15134] syzkaller0: entered allmulticast mode [ 614.393540][T15144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2886'. [ 614.824541][T15167] netlink: set zone limit has 8 unknown bytes [ 615.040612][T15174] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2899'. [ 616.998938][T15165] netlink: 'syz.2.2894': attribute type 10 has an invalid length. [ 617.007050][T15165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2894'. [ 617.019368][T15165] bridge0: port 3(ipvlan1) entered blocking state [ 617.026272][T15165] bridge0: port 3(ipvlan1) entered disabled state [ 617.032968][T15165] ipvlan1: entered allmulticast mode [ 617.038552][T15165] veth0_vlan: entered allmulticast mode [ 617.050382][T15165] ipvlan1: left allmulticast mode [ 617.055635][T15165] veth0_vlan: left allmulticast mode [ 617.061351][T15165] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 617.166916][T15176] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.2901'. [ 617.479261][T15188] netlink: 'syz.2.2906': attribute type 10 has an invalid length. [ 617.543403][T15188] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2906'. [ 617.595415][T15192] netlink: 'syz.2.2906': attribute type 21 has an invalid length. [ 617.619749][T15192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2906'. [ 617.799423][T15188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2906'. [ 617.886924][T15197] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2904'. [ 617.922834][T15193] netlink: 'syz.3.2908': attribute type 10 has an invalid length. [ 617.948276][T15193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2908'. [ 618.031255][T15193] bridge0: port 2(ipvlan1) entered blocking state [ 618.087693][T15193] bridge0: port 2(ipvlan1) entered disabled state [ 618.115439][T15193] ipvlan1: entered allmulticast mode [ 618.132283][T15193] veth0_vlan: entered allmulticast mode [ 618.175119][T15193] ipvlan1: left allmulticast mode [ 618.181749][T15193] veth0_vlan: left allmulticast mode [ 618.208547][T15193] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 618.374865][T15203] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 618.445470][T15204] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 620.824478][T15241] netlink: 'syz.1.2921': attribute type 29 has an invalid length. [ 620.876896][T15241] netlink: 'syz.1.2921': attribute type 29 has an invalid length. [ 620.951982][T15242] netlink: 'syz.3.2920': attribute type 1 has an invalid length. [ 621.387704][T15235] __nla_validate_parse: 1 callbacks suppressed [ 621.387748][T15235] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2919'. [ 621.800728][T15258] netlink: 'syz.1.2927': attribute type 5 has an invalid length. [ 621.824329][T15258] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2927'. [ 622.036020][T15265] bridge_slave_1: left allmulticast mode [ 622.041763][T15265] bridge_slave_1: left promiscuous mode [ 622.091917][T15265] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.139595][T15265] bridge_slave_0: left allmulticast mode [ 622.154463][T15265] bridge_slave_0: left promiscuous mode [ 622.160577][T15265] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.337515][ T3505] wlan1: Trigger new scan to find an IBSS to join [ 623.866132][T15286] netlink: 'syz.1.2937': attribute type 21 has an invalid length. [ 623.948490][T15286] netlink: 'syz.1.2937': attribute type 12 has an invalid length. [ 624.007255][T15286] netlink: 'syz.1.2937': attribute type 13 has an invalid length. [ 624.094522][T15286] netlink: 'syz.1.2937': attribute type 14 has an invalid length. [ 624.173522][T15286] netlink: 'syz.1.2937': attribute type 15 has an invalid length. [ 624.223570][T15286] netlink: 'syz.1.2937': attribute type 16 has an invalid length. [ 624.231755][T15286] netlink: 12914 bytes leftover after parsing attributes in process `syz.1.2937'. [ 624.265285][T15282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2936'. [ 624.794859][T15300] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2941'. [ 624.809942][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.810011][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.570678][T15317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2948'. [ 625.589986][T15317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2948'. [ 625.607859][T15317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2948'. [ 625.628671][T15317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2948'. [ 626.242275][T15326] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2950'. [ 626.333760][ T3505] wlan1: Trigger new scan to find an IBSS to join [ 626.409413][T15327] netlink: 'syz.2.2950': attribute type 29 has an invalid length. [ 626.426488][T15327] netlink: 'syz.2.2950': attribute type 29 has an invalid length. [ 626.620662][T15326] netlink: 'syz.2.2950': attribute type 39 has an invalid length. [ 627.395230][ T12] wlan1: Creating new IBSS network, BSSID 3e:4c:43:ff:fb:09 [ 628.324483][ T12] wlan1: Trigger new scan to find an IBSS to join [ 628.335161][T15337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2952'. [ 628.868736][T15370] netlink: 'syz.1.2965': attribute type 8 has an invalid length. [ 628.893607][T15370] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2965'. [ 629.144100][T15372] netlink: 'syz.2.2966': attribute type 29 has an invalid length. [ 629.180378][T15372] netlink: 'syz.2.2966': attribute type 29 has an invalid length. [ 629.940887][T15380] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2969'. [ 630.664367][T15396] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2973'. [ 631.370897][T10337] wlan1: Trigger new scan to find an IBSS to join [ 631.394171][T15413] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 631.400230][T15413] pim6reg0: persist enabled [ 631.978415][T15405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2976'. [ 631.988038][T15418] netlink: 'syz.3.2981': attribute type 29 has an invalid length. [ 632.021908][T15418] netlink: 'syz.3.2981': attribute type 29 has an invalid length. [ 633.911429][T15430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2983'. [ 634.090492][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'. [ 634.335375][T10337] wlan1: Creating new IBSS network, BSSID f2:5e:32:e7:d4:95 [ 634.746403][T15449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2988'. [ 636.432633][T15479] netlink: 'syz.1.2997': attribute type 39 has an invalid length. [ 636.544993][T15478] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2998'. [ 637.123567][T13239] Bluetooth: hci2: command 0x0406 tx timeout [ 637.867274][T15494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3003'. [ 639.418473][T15528] netlink: 'syz.2.3011': attribute type 3 has an invalid length. [ 639.475507][T15528] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3011'. [ 640.995012][T15543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3016'. [ 644.252552][T15571] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3026'. [ 644.653013][T15583] netlink: 'syz.3.3028': attribute type 39 has an invalid length. [ 645.168036][T15591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3031'. [ 645.917988][T15570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3025'. [ 646.127200][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 647.685596][T15604] netlink: 'syz.3.3034': attribute type 2 has an invalid length. [ 647.708493][T15604] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3034'. [ 647.815949][T15610] sit0: entered allmulticast mode [ 648.052874][T15619] netlink: 'syz.1.3038': attribute type 33 has an invalid length. [ 648.196868][T15619] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3038'. [ 649.236871][T15631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3045'. [ 650.185333][T15670] syzkaller0: entered promiscuous mode [ 653.012833][T15682] netlink: 'syz.2.3062': attribute type 21 has an invalid length. [ 653.021441][T15682] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3062'. [ 653.033680][T15682] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3062'. [ 653.044396][T15678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3061'. [ 654.277316][T15725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3074'. [ 655.701003][T15748] sock: sock_set_timeout: `syz.1.3084' (pid 15748) tries to set negative timeout [ 655.713178][T15748] netlink: 'syz.1.3084': attribute type 39 has an invalid length. [ 655.822390][T15750] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3085'. [ 655.833115][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3085'. [ 655.859874][T15752] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.3086'. [ 656.216091][T15756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3088'. [ 656.939875][T15770] netlink: 'syz.3.3094': attribute type 39 has an invalid length. [ 762.343374][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 762.350756][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13235/1:b..l [ 762.359478][ C0] rcu: (detected by 0, t=10502 jiffies, g=85509, q=44 ncpus=2) [ 762.367546][ C0] task:syz-executor state:R running task stack:21704 pid:13235 ppid:13218 flags:0x00004000 [ 762.379460][ C0] Call Trace: [ 762.382861][ C0] [ 762.385823][ C0] __schedule+0x1553/0x45a0 [ 762.390409][ C0] ? mark_lock+0x94/0x320 [ 762.394781][ C0] ? asan.module_dtor+0x20/0x20 [ 762.399764][ C0] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 762.405701][ C0] ? trace_irq_enable+0x47/0xe0 [ 762.410646][ C0] ? preempt_schedule+0xc0/0xd0 [ 762.415561][ C0] preempt_schedule_common+0x82/0xc0 [ 762.420988][ C0] preempt_schedule+0xc0/0xd0 [ 762.426424][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 762.432132][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 762.437203][ C0] preempt_schedule_thunk+0x1a/0x30 [ 762.442573][ C0] _raw_spin_unlock+0x3a/0x40 [ 762.447280][ C0] ? copy_page_range+0x2b6f/0x3670 [ 762.452424][ C0] copy_page_range+0x2ba0/0x3670 [ 762.457473][ C0] ? pfn_valid+0x450/0x450 [ 762.462007][ C0] ? mas_wr_store_entry+0x151/0x340 [ 762.467245][ C0] ? mas_store+0x37e/0x550 [ 762.471878][ C0] ? mas_empty_area_rev+0x1960/0x1960 [ 762.477330][ C0] ? up_write+0x1c3/0x410 [ 762.481772][ C0] ? anon_vma_interval_tree_verify+0x150/0x150 [ 762.487961][ C0] copy_mm+0x11cb/0x1d50 [ 762.492252][ C0] ? copy_signal+0x680/0x680 [ 762.497044][ C0] ? lockdep_init_map_type+0x9c/0x8e0 [ 762.502730][ C0] ? __init_rwsem+0x122/0x160 [ 762.507447][ C0] ? copy_signal+0x556/0x680 [ 762.512067][ C0] copy_process+0x16f7/0x3d80 [ 762.516786][ C0] ? copy_process+0x96e/0x3d80 [ 762.521760][ C0] ? __pidfd_prepare+0x140/0x140 [ 762.526826][ C0] kernel_clone+0x24b/0x8a0 [ 762.531364][ C0] ? create_io_thread+0x190/0x190 [ 762.536517][ C0] ? __might_fault+0xaa/0x120 [ 762.541234][ C0] __x64_sys_clone+0x1b7/0x230 [ 762.546036][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 762.551105][ C0] ? lock_chain_count+0x20/0x20 [ 762.555990][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 762.561572][ C0] do_syscall_64+0x55/0xa0 [ 762.566019][ C0] ? clear_bhb_loop+0x40/0x90 [ 762.570839][ C0] ? clear_bhb_loop+0x40/0x90 [ 762.575658][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.581698][ C0] RIP: 0033:0x7f07d79c5212 [ 762.586142][ C0] RSP: 002b:00007fff960eef20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 762.594586][ C0] RAX: ffffffffffffffda RBX: 00007fff960eef20 RCX: 00007f07d79c5212 [ 762.602589][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 762.611452][ C0] RBP: 00007fff960ef0ac R08: 0000000000000000 R09: 0000000000000001 [ 762.619454][ C0] R10: 00005555563a27d0 R11: 0000000000000246 R12: 0000000000000001 [ 762.627601][ C0] R13: 00000000000927c0 R14: 00000000000a06fb R15: 00007fff960ef100 [ 762.635619][ C0] [ 762.638668][ C0] rcu: rcu_preempt kthread starved for 10525 jiffies! g85509 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 762.650246][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 762.660431][ C0] rcu: RCU grace-period kthread stack dump: [ 762.666368][ C0] task:rcu_preempt state:R running task stack:26952 pid:17 ppid:2 flags:0x00004000 [ 762.677674][ C0] Call Trace: [ 762.681024][ C0] [ 762.684039][ C0] __schedule+0x1553/0x45a0 [ 762.689322][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 762.695291][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 762.701303][ C0] ? asan.module_dtor+0x20/0x20 [ 762.706450][ C0] ? enqueue_timer+0x23d/0x550 [ 762.711429][ C0] ? __mod_timer+0x984/0xdb0 [ 762.716159][ C0] schedule+0xbd/0x170 [ 762.720352][ C0] schedule_timeout+0x188/0x2d0 [ 762.725702][ C0] ? console_conditional_schedule+0x40/0x40 [ 762.731619][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 762.737639][ C0] ? update_process_times+0x1b0/0x1b0 [ 762.743858][ C0] ? prepare_to_swait_event+0x339/0x360 [ 762.749614][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 762.754506][ C0] ? rcu_gp_init+0x1162/0x1560 [ 762.759656][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 762.764531][ C0] ? dump_blkd_tasks+0x810/0x810 [ 762.769593][ C0] ? rcu_gp_init+0x1560/0x1560 [ 762.774387][ C0] ? trace_irq_enable+0x47/0xe0 [ 762.779281][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 762.784668][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 762.790331][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 762.795035][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 762.800353][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 762.805412][ C0] ? __kthread_parkme+0x162/0x1c0 [ 762.810656][ C0] kthread+0x2fa/0x390 [ 762.814753][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 762.819984][ C0] ? kthread_blkcg+0xd0/0xd0 [ 762.824781][ C0] ret_from_fork+0x48/0x80 [ 762.829402][ C0] ? kthread_blkcg+0xd0/0xd0 [ 762.834037][ C0] ret_from_fork_asm+0x11/0x20 [ 762.838963][ C0] [ 762.842024][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 762.848724][ C0] Sending NMI from CPU 0 to CPUs 1: [ 762.853964][ C1] NMI backtrace for cpu 1 [ 762.853973][ C1] CPU: 1 PID: 15778 Comm: syz.3.3096 Not tainted syzkaller #0 [ 762.853988][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.853996][ C1] RIP: 0010:__get_user_handle_exception+0x0/0x10 [ 762.854024][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 cc cc cc 66 0f 1f 00 53 89 [ 762.854036][ C1] RSP: 0018:ffffc900001ef818 EFLAGS: 00050046 [ 762.854051][ C1] RAX: 6200786c6c257830 RBX: 00000000ffffffff RCX: ffff88807d965a00 [ 762.854062][ C1] RDX: 0000000000000100 RSI: 6200786c6c257830 RDI: 0000000000000000 [ 762.854072][ C1] RBP: 6200786c6c257830 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 762.854082][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: 000000000000001d [ 762.854092][ C1] R13: 6200786c6c257830 R14: 000000000000007f R15: dffffc0000000000 [ 762.854102][ C1] FS: 00007fdda623c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 762.854115][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.854125][ C1] CR2: 00007f23a204eaeb CR3: 00000000496b7000 CR4: 00000000003506e0 [ 762.854141][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 762.854150][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 762.854160][ C1] Call Trace: [ 762.854165][ C1] [ 762.854170][ C1] perf_callchain_user+0xbe4/0x15c0 [ 762.854199][ C1] get_perf_callchain+0x394/0x510 [ 762.854216][ C1] ? put_callchain_entry+0xb0/0xb0 [ 762.854232][ C1] ? kvm_guest_state+0xb7/0xf0 [ 762.854252][ C1] perf_prepare_sample+0x3c7/0x1df0 [ 762.854271][ C1] ? read_lock_is_recursive+0x20/0x20 [ 762.854287][ C1] ? perf_callchain+0x220/0x220 [ 762.854306][ C1] perf_event_output_forward+0x187/0x3e0 [ 762.854323][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 762.854337][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 762.854358][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 762.854375][ C1] __perf_event_overflow+0x447/0x630 [ 762.854395][ C1] perf_swevent_event+0x324/0x630 [ 762.854413][ C1] ? perf_tp_event+0x1450/0x1450 [ 762.854433][ C1] perf_tp_event+0x54f/0x1450 [ 762.854451][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 762.854475][ C1] ? ktime_get+0x7f/0x280 [ 762.854494][ C1] ? trace_irq_enable+0xbb/0xe0 [ 762.854527][ C1] ? sched_clock+0x3f/0x60 [ 762.854543][ C1] ? sched_clock_cpu+0x75/0x430 [ 762.854557][ C1] ? lapic_next_event+0x11/0x20 [ 762.854573][ C1] ? clockevents_program_event+0x230/0x310 [ 762.854592][ C1] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 762.854611][ C1] perf_trace_preemptirq_template+0x269/0x330 [ 762.854631][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 762.854649][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 762.854668][ C1] ? __irq_exit_rcu+0xdf/0x190 [ 762.854683][ C1] ? irq_exit_rcu+0x20/0x20 [ 762.854699][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 762.854715][ C1] trace_irq_enable+0xbb/0xe0 [ 762.854734][ C1] trace_hardirqs_on+0x18/0x40 [ 762.854751][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 762.854767][ C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 762.854782][ C1] Code: 8a e8 92 1e 32 09 65 66 8b 05 ca 51 b1 7e 66 85 c0 75 54 bf 01 00 00 00 e8 cb 1a 0a 00 e8 b6 20 3b 00 fb 65 8b 05 96 51 b1 7e <85> c0 75 05 e8 15 39 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 762.854793][ C1] RSP: 0018:ffffc900001f0180 EFLAGS: 00000282 [ 762.854805][ C1] RAX: 0000000000000302 RBX: 0000000000000200 RCX: d4b649b784ce1700 [ 762.854814][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 762.854825][ C1] RBP: ffffc900001f0210 R08: ffffffff911bf58f R09: 1ffffffff2237eb1 [ 762.854835][ C1] R10: dffffc0000000000 R11: fffffbfff2237eb2 R12: ffffffff893ccf51 [ 762.854846][ C1] R13: ffffffff893ccf51 R14: dffffc0000000000 R15: 1ffff9200003e030 [ 762.854857][ C1] ? ip6_pol_route+0x171/0x1210 [ 762.854871][ C1] ? ip6_pol_route+0x171/0x1210 [ 762.854892][ C1] ? _local_bh_enable+0xa0/0xa0 [ 762.854906][ C1] ? rt6_find_cached_rt+0x21d/0x270 [ 762.854924][ C1] ip6_pol_route+0xdfc/0x1210 [ 762.854938][ C1] ? ip6_pol_route+0x171/0x1210 [ 762.854954][ C1] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 762.854971][ C1] ? sched_clock_cpu+0x75/0x430 [ 762.854989][ C1] fib6_rule_lookup+0x20c/0x570 [ 762.855004][ C1] ? skb_header_pointer+0x120/0x120 [ 762.855021][ C1] ? fib6_lookup+0x2d0/0x2d0 [ 762.855034][ C1] ? mark_lock+0x94/0x320 [ 762.855050][ C1] ? read_lock_is_recursive+0x20/0x20 [ 762.855065][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 762.855084][ C1] ? dev_get_by_index_rcu+0xf4/0x110 [ 762.855102][ C1] ip6_route_output_flags+0x364/0x5d0 [ 762.855118][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 762.855133][ C1] ip6_dst_lookup_tail+0x1ae/0x1530 [ 762.855153][ C1] ? get_random_u8+0x51b/0x970 [ 762.855174][ C1] ? ip6_dst_lookup+0x60/0x60 [ 762.855199][ C1] icmpv6_route_lookup+0xfe/0x600 [ 762.855219][ C1] ? icmpv6_xrlim_allow+0x610/0x610 [ 762.855238][ C1] ? icmpv6_xrlim_allow+0x512/0x610 [ 762.855258][ C1] ? dev_get_by_index+0x22/0x2d0 [ 762.855271][ C1] ? dev_get_by_index+0x22/0x2d0 [ 762.855288][ C1] icmp6_send+0x11a2/0x1b40 [ 762.855306][ C1] ? icmp6_send+0x233/0x1b40 [ 762.855335][ C1] ? icmpv6_push_pending_frames+0x400/0x400 [ 762.855356][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 762.855380][ C1] ? neigh_invalidate+0x1e9/0x450 [ 762.855399][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 762.855416][ C1] ? ip6_negative_advice+0x310/0x310 [ 762.855433][ C1] ip6_link_failure+0x3b/0x4c0 [ 762.855451][ C1] ? ip6_negative_advice+0x310/0x310 [ 762.855475][ C1] ndisc_error_report+0x112/0x160 [ 762.855490][ C1] neigh_invalidate+0x22c/0x450 [ 762.855513][ C1] neigh_timer_handler+0x914/0xff0 [ 762.855535][ C1] call_timer_fn+0x189/0x540 [ 762.855549][ C1] ? neigh_release+0x80/0x80 [ 762.855565][ C1] ? call_timer_fn+0xd2/0x540 [ 762.855579][ C1] ? __run_timers+0x800/0x800 [ 762.855598][ C1] ? neigh_release+0x80/0x80 [ 762.855616][ C1] __run_timers+0x542/0x800 [ 762.855636][ C1] ? detach_timer+0x2b0/0x2b0 [ 762.855657][ C1] run_timer_softirq+0x67/0xf0 [ 762.855672][ C1] handle_softirqs+0x280/0x820 [ 762.855688][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 762.855704][ C1] ? do_softirq+0x1a0/0x1a0 [ 762.855720][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 762.855740][ C1] __irq_exit_rcu+0xd3/0x190 [ 762.855753][ C1] ? irq_exit_rcu+0x20/0x20 [ 762.855770][ C1] irq_exit_rcu+0x9/0x20 [ 762.855783][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 762.855799][ C1] [ 762.855803][ C1] [ 762.855807][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 762.855822][ C1] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 762.855839][ C1] Code: 75 11 e8 72 03 0b 00 48 85 db 75 16 e8 68 03 0b 00 eb 15 e8 61 03 0b 00 e8 cc 5a 08 09 48 85 db 74 ea e8 52 03 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 762.855850][ C1] RSP: 0018:ffffc9000b3e7a00 EFLAGS: 00000246 [ 762.855861][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88807d965a00 [ 762.855871][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 762.855879][ C1] RBP: ffffc9000b3e7ad0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 762.855890][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 1ffff9200167cf44 [ 762.855900][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200167cf65 [ 762.855919][ C1] ? event_function+0x300/0x300 [ 762.855936][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 762.855954][ C1] ? smp_call_function_single+0xee/0x5a0 [ 762.855973][ C1] smp_call_function_single+0x36d/0x5a0 [ 762.855989][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 762.856002][ C1] ? event_function+0x300/0x300 [ 762.856019][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 762.856035][ C1] ? event_function+0x300/0x300 [ 762.856058][ C1] perf_install_in_context+0x5be/0x920 [ 762.856079][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 762.856095][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 762.856109][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 762.856128][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 762.856151][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 762.856173][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 762.856201][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 762.856215][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 762.856232][ C1] do_syscall_64+0x55/0xa0 [ 762.856250][ C1] ? clear_bhb_loop+0x40/0x90 [ 762.856265][ C1] ? clear_bhb_loop+0x40/0x90 [ 762.856280][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.856295][ C1] RIP: 0033:0x7fdda539c799 [ 762.856307][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.856319][ C1] RSP: 002b:00007fdda623c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 762.856333][ C1] RAX: ffffffffffffffda RBX: 00007fdda5616090 RCX: 00007fdda539c799 [ 762.856343][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 762.856353][ C1] RBP: 00007fdda5432bd9 R08: 0000000000000002 R09: 0000000000000000 [ 762.856362][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 762.856372][ C1] R13: 00007fdda5616128 R14: 00007fdda5616090 R15: 00007ffdc48096b8 [ 762.856390][ C1]