last executing test programs: 2.087247228s ago: executing program 3 (id=8345): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000ff8977fbac141416e000000107079ffeb18000440f050f00845002f2075f0039010586038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2000000}, 0x2c) 1.567895411s ago: executing program 3 (id=8348): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(r3) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xffbff034}]}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eaf", 0xe}], 0x1}, 0xc4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 1.471027624s ago: executing program 1 (id=8349): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0xf00}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.372045606s ago: executing program 2 (id=8350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x6, 0x8, 0x5, 0x40}, 0x50) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x9, @mcast1, 0xfff, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x28, 0x29, 0x2, "be7252b8b0da2a1877da06d7ae22b17d24"}], 0x28}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x23, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9fff54860c8d0a99e5830a78d3a", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x40000000}, 0x48) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, r3, 0xc, 0x2000, 0x0, @value=r6}, 0x20) 1.365938846s ago: executing program 1 (id=8351): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(r3) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xffbff034}]}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eaf", 0xe}], 0x1}, 0xc4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 1.365663266s ago: executing program 0 (id=8352): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="1848000002000000000000000000000095000000000000003d7b000200000000ed600cf8dd1f5e6e171fcd61a34e1e3599a1b1a69d78cb3d5348"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000001100)=r2, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x8000}) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1, 0x0, 0xffffff82}, 0x8040) close(r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\n\x00\x00\x00( \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="98b6ef60aec7d693295203888e582966d1efc48cc03e47e23eedd0f098e1926ae90f980a5e92b1bce6dfb9062099b3f97be6ab86853032d17ec5943dd99a4aabaa6608bd9b9cefdb6b44059de8ba84cf37f0cbc290941126f88df838d99ab913d6f4886f2699c80fc9f1263fe100b2f05e3c19b79f27cec1fa6dae746b1d717d90efdd956c9a363c348cf7429e4e7612da2b9a72ba8fa158bb27f61669c60f2fda90f10e2e165b68b96bfc16d284", @ANYRES64=0x0], 0x20) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="ed570924a04076e7a05c9a1df4a4a8d74d272701a3ba496b677d44c4c2d3edff29d6fd12b7bc1c6f6468bd8eafdb74f63756a83a66caed8d0c2d56439cad4bbd4100e0b6df3d3c157810df6b90da489a81c7bc48c00c9995b65c79006b47cac6171712d78259c1d5a4335555c631923a26cb9786fdacabd665d94e7687cec1b23cf08b5de17045201e7fae08db9c47cfa19a8ffef7762daf9ca316925775225ed050a32ac01458e3865d17d1cd62841819316e98ca36c8651a8ef808cf1bc7188969bcd205f004c58159bc941c6399a88bc124c8a0a47dc4e3546429ec3c363375811e7653317492a4486debfcab21d7af4fa39528e49a6b2885edd369dc1c6ec7b8c2311c393c725856147b06ce109172c480cc4ea6e3c30198ac84e75318f2f6a4ddad661ea76b41c1b614d2353ecd1e005772fff23095f20d54046cd7c0f938fa1c9d5c27adda5ef552a1d6fc1f271da3816f7b82540b12923b2d38f906912a8031e24fe6c1f9e6692b074128a3cd03faafeed41e5615bdb86ce3aa1e000c18010e95934b1c8a1dd14922773e8951889f9be3291b6842845ac06a28e233a394a57e6ce572b8810e98f7a7256ca494de41fe6c72099d38a6f4964f32ca61880c695d757d3346a0dc8e7c92e555e5c12b8cb9be8d9289fee2f17ef988d3e7acc8eeae5e7cde98153c409c48504eccd618b2676930711159b631c76b69c792a44a3696979495f06ddaffb7f60af1af0ab2df1ff3653a902201ffa93f77202b4637abfe654ab42abfadac65a09c45afde7aaec8623f9424885ec7c5fd4adf111192a5d36bb73e79cdc2a6a25e3a29d665beae71db419984f05bce4b0576d44e0c7f26c722aff26af467acaf2fd2e0d153b95281d59c985229772a2deeda2e27cda3010c66abf08dbb7d7b461bbe1f143762c03b755f81d829b77314e6cfc2fcca5269567b206530e15263c55045707db56b51ed3f797e086fde879863eff033bcacf01880c634df426cfb495c81c4048754a3f05b212909ac7a2a050461a60821b2b7e99a2ed2b2a87e90fa5995cfa3884758eca6d4aa8e35b952d3f4be73ad9c27bcdd287e895597b6ce0294ceede0abd6b8cf60cd5dfb0afcd2088611d10a39736eb224e369ff117bbd94c5a311c9b7075b739f0ac7780d1412d552dcd278245f98251b93b326c8d1ccb3c2a96bb7c161363bfc4f52aaa252af790c3a57979d1d81df8e147e0bdd46704a51d48765c1d1fff316c892b66b8d13319783ead3c7f89600e8f4440393eb2e3fff2319fc45cefb740c59db8680c9d17fb2f37f194d317e5e989d0c5c361f0915ebe2efea196dd3d8d2fd747043738d91fe4a4c02a7369c333c253a78eed8098fda8b92bd37b65bdfec9f1c499cfbd8dff47a81d01d88633984a63eb4277dc34d7c42eaf891c14d9a12b6971436023ffb223cc973382ec5c4d1188d2b9ccdb1faf96062088bdd25284f311bc2fb8b4d1e355e2f76ec15342d4d9413fed8987965eddcf69335c62d2d3fb66d68e203f9b71c998abd92a5b5b9f07da2ddb44eb05b25a1a8a991d7c602558ca40cddfa98371c893b1002f7f8cdcf913fc085a20aa584fee9614a7d3d7444c8a4a00cdcefb0c172ffcd9c6cd0653ecaf3526318f3b3cddc32c84d76c0f93f7d18cc625bb02b89df352a8eeba1662b4bd2a948266b2fb9dccae4d8fca25a9f3121fcb8056a0f8cbf31fc694035f588c46769d8ef23bd63de1c9fbbfab871d0d47764ef1805f86a09b35f6038c3c28bdd2dd8c61742f49e138fb833dec4d899057f676b9b91aa1d3f3eb54afa17c9ba78e678679ac88f4192ba7edf891b043d5020fd09246615e9e9941fb47cf6a6ee83115e2ef7d5aa9ffa63b7cb90068f4f769dbf78039e7dc794e41845ecafc75c126816e673fd534cec3c1304ea915b8e9a0cd8970722a419994e44d04db4ee81dfe23cc3abfd2c060a6ae7e6bac7589a2c8d4abc58aa90b6560823d5b82f6158adc8b61bca70b554d23cb6d5f7e06f6f05", 0x595}], 0x1}, 0x400c000) sendmsg$sock(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000001380)={0x4, 0x80, 0x85, 0x3, 0x1, 0x0, 0x0, 0x80000000000062af, 0x62f02, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x110, 0xfffffffffffffff4, 0x4b2, 0x5, 0x1002, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000018c0)="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", 0x1c6}], 0x1, 0x0, 0x3c, 0xc9e}, 0x0) r9 = openat$cgroup_ro(r6, &(0x7f0000000e80)='memory.events.local\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f80)={{r6, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x16, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000004000000000000000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018620000030000000000000004000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000bbace1ec47"], &(0x7f0000000e00)='GPL\x00', 0x2d, 0x24, &(0x7f0000000e40)=""/36, 0x41000, 0x25, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x5, 0x5, 0x7, 0xe1c}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001040)=[r6, r10, r5, r6], &(0x7f0000001080)=[{0x0, 0x5, 0x4, 0x6}, {0x2, 0x4, 0x9, 0xa}, {0x5, 0x3, 0x9, 0xb}], 0x10, 0x8}, 0x94) 1.274798128s ago: executing program 2 (id=8353): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7, 0xffffffffffffffff, 0x6000}, 0xc) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000080040000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000003c000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x5, 0x3, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_devices(r9, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) 1.129484141s ago: executing program 0 (id=8354): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x77) (async) close(r1) socket$kcm(0x10, 0x2, 0x10) (async) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) (async) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000010007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 1.127937012s ago: executing program 3 (id=8355): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x834) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3, 0x0, 0xfe59}, 0x0) 1.027991754s ago: executing program 2 (id=8356): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000076006bab9a3fe3d86e17aa076b876c1d000000000500000000000000e69ee51cd34460bc06000000427ca1acf7303c77089235b9d8f9ce9ea3dc01aca73651f60a84c9f4d4938037e70e4509c5bb00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r1, 0x4, 0x1, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@ifindex, r4, 0x5, 0x0, r4, @void, @value=r4, @void, @void, r5}, 0x20) socketpair(0x8, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005700000095000000506a41ef"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.017993165s ago: executing program 0 (id=8357): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$inet(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="1400000000000000000000000700000094040000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e000000164010102000000001100000000000000000000000100000008000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aaac14143f000000001c"], 0x90}, 0x4000040) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r2, r0}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}]}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0xc3200, 0xc, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc6004", 0x15}], 0x1}, 0x0) 999.691035ms ago: executing program 3 (id=8358): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x5, 0x5ba, 0x0, 0x201}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0xd, 0x7, 0xa, 0x9, 0x0, 0x8, 0x10008, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x1}, 0x40, 0x9, 0xffffffff, 0x5, 0x35ac, 0x3a, 0x5, 0x0, 0xd, 0x0, 0x100000001}, r4, 0xc, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x0, 0x83, 0x45, 0x0, 0x0, 0x901, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe9, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x10, 0x4, 0x0, 0x1, 0x200, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, r2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000006b119a00000000080000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 983.247795ms ago: executing program 1 (id=8359): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0xd0010100) 860.165198ms ago: executing program 2 (id=8360): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 746.966421ms ago: executing program 1 (id=8361): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) (async) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000000c0)=r1, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c08000000000000010800000000000f030000001711eb030000000000000f01000000ea00613e0041bd978f0562dfd49546bd48480e56a54541f5a2"], 0x0, 0x38, 0x0, 0x1, 0x8}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110) (async) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/171, 0xab}], 0x1, &(0x7f0000000300)=""/225, 0xe1}, 0x10000) 722.657742ms ago: executing program 0 (id=8362): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) (fail_nth: 61) close(r3) 672.018613ms ago: executing program 2 (id=8363): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', r3, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="2e0b2d11ed25c84e8dfaabd4623a1d9d53fa5142974e7d61c2526db55068f3c64c6449b44d8d72794bfbdfd22159f3012c797d86f1c972b53f8135048b52f68fa869fa46a6d368aeccc80ba718de", @ANYBLOB='\x00'/28], 0x37) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000280)=r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000585000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r14 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r13}, 0x8) close(r14) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r15}, 0xc) socket$kcm(0x10, 0x400000002, 0x0) 631.080324ms ago: executing program 3 (id=8364): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x5, 0x7c, 0x14}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x9, 0x28, 0x3, 0x9, 0x0, 0x5, 0x80088, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x2, 0xd541, 0xa, 0x1, 0x7, 0xd4, 0x5, 0x0, 0x3, 0x0, 0x3}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x9, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010003000800000001000000", @ANYRES32, @ANYBLOB="000000fb0c6883e149cf531aa4d446fbf166c1010400"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000008000000000000000030000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) (async) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) (async) r9 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc60", 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, 0x0, 0x0) 236.360584ms ago: executing program 1 (id=8365): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext={0xb, 0x6}, 0x14411, 0xc8, 0x200, 0x3, 0xfffffffffffffff7, 0x0, 0x7fff, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112032900fc08000000000220"], 0xfdef) 108.385077ms ago: executing program 0 (id=8366): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xe}, 0x80, 0x0}, 0x0) 84.992347ms ago: executing program 1 (id=8367): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='cpu==0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x13\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2zaSDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3$\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\xdf\xa1Z\x1cg\x9b\xc1\x8c\xee.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc)}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfa\x9aM\xec\x00G}\xdaw+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc7\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00'/302) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 64.840707ms ago: executing program 3 (id=8368): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e00)="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", 0x2e8}], 0x1}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x12cd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r3}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = openat$cgroup_int(r1, &(0x7f0000000280)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000007c0)=ANY=[], 0x6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5, 0x40000000}, 0x402, 0x0, 0x0, 0x7, 0x5f, 0x40000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x404, 0xed8, 0x4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 217.92µs ago: executing program 2 (id=8369): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) (fail_nth: 89) 0s ago: executing program 0 (id=8370): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) kernel console output (not intermixed with test programs): interface: batadv_slave_0 [ 1578.364658][T28074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.498053][T28074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.627020][T28074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.634035][T28074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.759294][T28074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.215868][T28074] hsr_slave_0: entered promiscuous mode [ 1579.245586][T28074] hsr_slave_1: entered promiscuous mode [ 1579.264449][T28074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1579.280145][T28074] Cannot create hsr debugfs directory [ 1579.347618][T27444] Bluetooth: hci4: command tx timeout [ 1581.424869][T27444] Bluetooth: hci4: command tx timeout [ 1584.919306][T28260] syzkaller0: entered promiscuous mode [ 1584.944847][T28260] syzkaller0: entered allmulticast mode [ 1585.361759][T28275] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.7148'. [ 1588.769395][T28276] netlink: 'syz.1.7148': attribute type 10 has an invalid length. [ 1588.858577][T28074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1588.905175][T28074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1589.025090][T28283] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7150'. [ 1589.084032][T28283] team0: Port device team_slave_0 removed [ 1589.098994][T28283] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1589.124966][T28074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1589.136713][T28074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1589.317204][T28286] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1589.511315][T22090] hsr_slave_0: left promiscuous mode [ 1589.539303][T22090] hsr_slave_1: left promiscuous mode [ 1589.563559][T22090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1589.572977][T22090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.590264][T22090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1589.607136][T22090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1589.626397][T22090] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1589.634302][T22090] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1589.649565][T22090] batman_adv: batadv0: Interface deactivated: vlan1 [ 1589.664798][T22090] batman_adv: batadv0: Removing interface: vlan1 [ 1589.673379][T22090] bridge0: port 4(dummy0) entered disabled state [ 1589.691888][T22090] batadv0: left allmulticast mode [ 1589.705314][T22090] batadv0: left promiscuous mode [ 1589.710477][T22090] bridge0: port 3(batadv0) entered disabled state [ 1589.738000][T22090] bridge_slave_1: left allmulticast mode [ 1589.754673][T22090] bridge_slave_1: left promiscuous mode [ 1589.773296][T22090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.800634][T22090] bridge_slave_0: left promiscuous mode [ 1589.823233][T22090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.903532][T22090] veth1_vlan: left promiscuous mode [ 1589.920186][T22090] veth0_vlan: left promiscuous mode [ 1590.650788][T22090] team0 (unregistering): Port device geneve1 removed [ 1591.335154][T28318] delete_channel: no stack [ 1591.384008][T22090] team0 (unregistering): Port device team_slave_1 removed [ 1592.309477][T28074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.383918][T28074] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.397605][T16895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.404816][T16895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1592.501769][T16897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.509006][T16897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.088736][T28074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.293751][T28074] veth0_vlan: entered promiscuous mode [ 1593.338147][T28074] veth1_vlan: entered promiscuous mode [ 1593.426474][T28074] veth0_macvtap: entered promiscuous mode [ 1593.466451][T28074] veth1_macvtap: entered promiscuous mode [ 1593.523007][T28074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.540715][T28074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.552675][T28074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.584575][T28074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.594459][T28074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.644572][T28074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.654451][T28074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.684588][T28074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.706878][T28074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1593.747019][T28074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.778764][T28074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.809458][T28074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.843086][T28074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.878902][T28074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.910050][T28074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.930807][T28074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.973411][T28074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.006680][T28074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.089359][T28389] netlink: 'syz.1.7169': attribute type 10 has an invalid length. [ 1594.126001][T28389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7169'. [ 1594.153660][T28074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.183974][T28074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.193542][T28074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.202701][T28074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.377141][T22090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.401171][T22090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.467964][T28399] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1594.567170][T28399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.592698][T28399] bond0 (unregistering): Released all slaves [ 1594.639238][T22090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.685371][T22090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.984933][T28418] netlink: 'syz.2.7101': attribute type 21 has an invalid length. [ 1595.024923][T28418] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7101'. [ 1595.034081][T28418] netlink: 'syz.2.7101': attribute type 4 has an invalid length. [ 1595.975455][T28448] netlink: 'syz.0.7179': attribute type 3 has an invalid length. [ 1595.983880][T28448] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1596.101492][T28447] netlink: 'syz.3.7180': attribute type 10 has an invalid length. [ 1596.156043][T28447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7180'. [ 1596.247457][T28447] batman_adv: batadv0: Adding interface: vlan1 [ 1596.253930][T28447] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1596.371009][T28447] batman_adv: batadv0: Interface activated: vlan1 [ 1598.446270][T28489] netlink: 'syz.2.7188': attribute type 10 has an invalid length. [ 1600.222768][T28512] netlink: 'syz.0.7197': attribute type 29 has an invalid length. [ 1600.264651][T28512] netlink: 'syz.0.7197': attribute type 3 has an invalid length. [ 1600.323443][T28512] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1600.386989][T28513] netlink: 'syz.0.7197': attribute type 29 has an invalid length. [ 1600.449070][T28513] netlink: 'syz.0.7197': attribute type 29 has an invalid length. [ 1600.774899][T28519] syzkaller0: entered promiscuous mode [ 1600.780446][T28519] syzkaller0: entered allmulticast mode [ 1605.373208][T28582] netlink: 'syz.1.7220': attribute type 39 has an invalid length. [ 1606.364925][T28593] netlink: 'syz.1.7223': attribute type 39 has an invalid length. [ 1607.318384][T28598] netlink: 'syz.3.7224': attribute type 3 has an invalid length. [ 1607.462596][T28598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7224'. [ 1607.510986][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.517676][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.645844][T28622] netlink: 'syz.0.7232': attribute type 39 has an invalid length. [ 1611.782050][T28623] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7231'. [ 1611.820566][T28623] openvswitch: netlink: Key type 29 is not supported [ 1611.865002][T28622] macvlan0: entered promiscuous mode [ 1611.870464][T28622] macvlan0: entered allmulticast mode [ 1611.956553][T28621] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7231'. [ 1612.008667][T28621] bridge_slave_1: default FDB implementation only supports local addresses [ 1613.002506][T28632] netlink: 'syz.3.7236': attribute type 29 has an invalid length. [ 1613.031230][T28632] netlink: 'syz.3.7236': attribute type 3 has an invalid length. [ 1613.064799][T28632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7236'. [ 1613.211234][T28634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1613.218728][T28634] IPv6: NLM_F_CREATE should be set when creating new route [ 1613.226296][T28634] IPv6: NLM_F_CREATE should be set when creating new route [ 1613.233646][T28634] IPv6: NLM_F_CREATE should be set when creating new route [ 1613.268782][T28632] netlink: 'syz.3.7236': attribute type 29 has an invalid length. [ 1613.400985][T28636] netlink: 'syz.0.7235': attribute type 9 has an invalid length. [ 1613.464868][T28632] netlink: 'syz.3.7236': attribute type 29 has an invalid length. [ 1613.484616][T28636] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7235'. [ 1613.628304][T28632] syzkaller0: entered promiscuous mode [ 1613.633864][T28632] syzkaller0: entered allmulticast mode [ 1614.711858][T28638] netlink: 'syz.0.7235': attribute type 9 has an invalid length. [ 1614.814921][T28638] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7235'. [ 1616.003017][T28653] bridge_slave_1: left allmulticast mode [ 1616.009199][T28653] bridge_slave_1: left promiscuous mode [ 1616.023751][T28653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.109107][T28653] bridge_slave_0: left allmulticast mode [ 1616.124825][T28653] bridge_slave_0: left promiscuous mode [ 1616.136762][T28653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.865018][T28674] netlink: 'syz.2.7244': attribute type 39 has an invalid length. [ 1618.964783][T28674] macvlan0: entered promiscuous mode [ 1619.084695][T28674] macvlan0: entered allmulticast mode [ 1619.277048][T28683] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7247'. [ 1619.766585][T28688] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1619.922974][T28692] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.7252'. [ 1619.966559][T28692] netlink: zone id is out of range [ 1620.608975][T28714] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.7256'. [ 1621.794873][T28733] netlink: 'syz.1.7261': attribute type 4 has an invalid length. [ 1621.802819][T28733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7261'. [ 1621.895484][T28733] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1622.783137][T28751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1622.801720][T28751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1622.898023][T28754] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1622.931279][T28751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1623.310217][T28758] netlink: 'syz.0.7271': attribute type 29 has an invalid length. [ 1623.360321][T28758] netlink: 'syz.0.7271': attribute type 29 has an invalid length. [ 1625.743615][T28835] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1627.274661][T28868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7299'. [ 1627.305527][T28868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7299'. [ 1627.367014][T28868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7299'. [ 1627.433427][T28873] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7299'. [ 1627.761878][T28878] netlink: 'syz.0.7303': attribute type 3 has an invalid length. [ 1627.819014][T28878] netlink: 'syz.0.7303': attribute type 1 has an invalid length. [ 1627.861595][T28878] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7303'. [ 1629.421101][T28897] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.7309'. [ 1629.462753][T28897] netlink: 'syz.1.7309': attribute type 10 has an invalid length. [ 1633.930328][T28909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1633.991548][T28915] netlink: 'syz.2.7311': attribute type 4 has an invalid length. [ 1634.000631][T28915] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7311'. [ 1634.021425][T28915] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1634.062752][T28917] netlink: 'syz.1.7313': attribute type 2 has an invalid length. [ 1634.082548][T28917] netlink: 'syz.1.7313': attribute type 8 has an invalid length. [ 1634.124823][T28917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7313'. [ 1634.281123][T28922] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7315'. [ 1634.297643][T28922] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1635.290449][T28954] netlink: 'syz.2.7327': attribute type 29 has an invalid length. [ 1635.363893][T28943] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.7324'. [ 1635.385909][T28954] netlink: 'syz.2.7327': attribute type 29 has an invalid length. [ 1635.406191][T28956] netlink: 'syz.1.7328': attribute type 10 has an invalid length. [ 1635.414230][T28956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7328'. [ 1637.022776][T29011] netlink: 'syz.2.7345': attribute type 4 has an invalid length. [ 1637.085578][T29011] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7345'. [ 1637.154641][T29011] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1638.483591][T29037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1639.540930][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1639.554861][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1639.562878][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1639.572464][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1639.580351][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1639.589325][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1640.309901][T28806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.535176][T29071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1640.718119][T28806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.095617][T28806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.153633][T29057] chnl_net:caif_netlink_parms(): no params data found [ 1641.665348][T27444] Bluetooth: hci0: command tx timeout [ 1643.744845][T27444] Bluetooth: hci0: command tx timeout [ 1644.154445][T29094] ref_ctr_offset mismatch. inode: 0x26a offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1644.190928][T28806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.599267][T29103] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.7372'. [ 1644.636127][T29103] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1644.671556][T29057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.678987][T29057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.687090][T29057] bridge_slave_0: entered allmulticast mode [ 1644.694463][T29057] bridge_slave_0: entered promiscuous mode [ 1644.704831][T29057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.712113][T29057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.720013][T29057] bridge_slave_1: entered allmulticast mode [ 1644.728625][T29057] bridge_slave_1: entered promiscuous mode [ 1644.782779][T29057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.801378][T29057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.904691][T29057] team0: Port device team_slave_0 added [ 1644.956709][T29057] team0: Port device team_slave_1 added [ 1645.093782][T29057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.162617][T29057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.221235][T29057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.333376][T29057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.350192][T29057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.382758][T29057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.445911][T29057] hsr_slave_0: entered promiscuous mode [ 1645.543529][T29057] hsr_slave_1: entered promiscuous mode [ 1645.557143][T29057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.584909][T29057] Cannot create hsr debugfs directory [ 1645.824768][T27444] Bluetooth: hci0: command tx timeout [ 1646.886909][T29165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1647.915375][T27444] Bluetooth: hci0: command tx timeout [ 1648.586102][T29057] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1648.668648][T29057] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1648.767864][T29057] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1648.807135][T29057] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1649.459398][T29057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.587738][T28806] hsr_slave_0: left promiscuous mode [ 1649.629645][T28806] hsr_slave_1: left promiscuous mode [ 1649.655110][T28806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.662578][T28806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.721257][T28806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.735625][T28806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.766071][T28806] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1649.773633][T28806] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1651.003863][T28806] team0 (unregistering): Port device geneve1 removed [ 1652.089749][T28806] team0 (unregistering): Port device team_slave_1 removed [ 1652.869213][T29250] netlink: 'syz.3.7401': attribute type 46 has an invalid length. [ 1652.935915][T29281] netlink: 'syz.2.7406': attribute type 39 has an invalid length. [ 1652.988679][T29057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1653.038905][T28809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.046108][T28809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1653.077267][T28807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.084445][T28807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1653.819521][T29057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.976702][T29057] veth0_vlan: entered promiscuous mode [ 1654.023474][T29057] veth1_vlan: entered promiscuous mode [ 1654.120020][T29057] veth0_macvtap: entered promiscuous mode [ 1654.180879][T29057] veth1_macvtap: entered promiscuous mode [ 1654.236968][T29057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1654.250418][T29057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.274721][T29057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1654.294635][T29057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.304864][T29057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1654.324841][T29057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.335047][T29057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1654.355796][T29057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.376223][T29057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1654.395575][T29057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.414583][T29057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.435298][T29057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.454697][T29057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.474586][T29057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.485433][T29057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.506162][T29057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.524896][T29057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.546239][T29057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1654.638754][T29057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.675803][T29057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.705061][T29057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.744637][T29057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.029344][T28808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.064746][T28808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.194850][T16900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.244294][T16900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.774762][T29331] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 1655.805036][T29331] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 1656.411606][T29354] netlink: 'syz.2.7415': attribute type 4 has an invalid length. [ 1656.433209][T29354] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7415'. [ 1656.461738][T29354] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1656.616363][T29362] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.7423'. [ 1656.656387][T29362] IPv6: NLM_F_CREATE should be specified when creating new route [ 1656.666810][T29362] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7423'. [ 1657.435960][T29388] netlink: 'syz.0.7433': attribute type 21 has an invalid length. [ 1657.454140][T29388] netlink: 'syz.0.7433': attribute type 7 has an invalid length. [ 1657.645307][T29395] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7435'. [ 1657.654392][T29395] tc_dump_action: action bad kind [ 1657.726404][T29393] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7435'. [ 1657.761295][T29391] netlink: 'syz.2.7434': attribute type 4 has an invalid length. [ 1657.819182][T29391] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7434'. [ 1657.896834][T29391] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1658.099774][T29411] netlink: 'syz.3.7440': attribute type 39 has an invalid length. [ 1658.217992][T29416] netlink: 'syz.2.7442': attribute type 1 has an invalid length. [ 1658.228016][T29416] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.7442'. [ 1658.823544][T29419] netlink: 'syz.2.7442': attribute type 3 has an invalid length. [ 1658.836008][T29419] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7442'. [ 1659.360230][T29436] delete_channel: no stack [ 1659.384892][T29436] delete_channel: no stack [ 1659.649774][T29436] syzkaller0: entered promiscuous mode [ 1659.727460][T29436] syzkaller0: entered allmulticast mode [ 1659.769562][T29441] netlink: 'syz.1.7450': attribute type 4 has an invalid length. [ 1659.804764][T29441] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1660.053674][T29441] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1660.232736][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1660.254894][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1660.264259][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1660.278643][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1660.286631][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1660.301089][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1662.386704][ T5776] Bluetooth: hci1: command tx timeout [ 1662.504264][T16900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.614349][T16900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.748403][T16900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.901654][T16900] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.981712][T29483] netlink: 'syz.1.7460': attribute type 4 has an invalid length. [ 1662.990260][T29483] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7460'. [ 1663.000006][T29483] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1663.032390][T29484] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7463'. [ 1663.054044][T29445] chnl_net:caif_netlink_parms(): no params data found [ 1663.390424][T29445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.414984][T29445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.422249][T29445] bridge_slave_0: entered allmulticast mode [ 1663.456181][T29445] bridge_slave_0: entered promiscuous mode [ 1663.479005][T29445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.495422][T29445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.514782][T29445] bridge_slave_1: entered allmulticast mode [ 1663.546263][T29445] bridge_slave_1: entered promiscuous mode [ 1663.995521][T29445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.024029][T29445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.306639][T29527] netlink: 'syz.2.7473': attribute type 4 has an invalid length. [ 1664.327408][T29527] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7473'. [ 1664.344063][T29527] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1664.475102][T27444] Bluetooth: hci1: command tx timeout [ 1664.509438][T29445] team0: Port device team_slave_0 added [ 1664.521345][T29445] team0: Port device team_slave_1 added [ 1664.731266][T29445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.745076][T29445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.781353][T29445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.828131][T29445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.841997][T29445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.890629][T29445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.068664][T27444] Bluetooth: hci0: ISO packet for unknown connection handle 62 [ 1665.272799][T29445] hsr_slave_0: entered promiscuous mode [ 1665.411550][T29445] hsr_slave_1: entered promiscuous mode [ 1665.447073][T29445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1665.455230][T29445] Cannot create hsr debugfs directory [ 1665.697952][T29565] netlink: 'syz.3.7485': attribute type 4 has an invalid length. [ 1665.715137][T29565] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7485'. [ 1665.750435][T29565] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1665.906780][T27444] Bluetooth: hci2: command 0x0406 tx timeout [ 1666.093335][T29583] netlink: 'syz.3.7488': attribute type 27 has an invalid length. [ 1666.332072][T29587] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7490'. [ 1666.345444][T29587] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7490'. [ 1666.555253][ T5776] Bluetooth: hci1: command tx timeout [ 1666.781309][T29594] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7493'. [ 1667.073362][T29615] netlink: 'syz.2.7495': attribute type 4 has an invalid length. [ 1667.093139][T29615] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7495'. [ 1667.123966][T29615] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1667.485161][T29625] netlink: 'syz.2.7499': attribute type 1 has an invalid length. [ 1667.498053][T29625] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.7499'. [ 1667.515772][T16900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1667.535312][T16900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.543261][T16900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.556890][T16900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1667.569170][T29629] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.7500'. [ 1667.575682][T16900] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1667.599921][T16900] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1667.867204][T16900] team0 (unregistering): Port device geneve1 removed [ 1668.277994][T16900] team0 (unregistering): Port device team_slave_1 removed [ 1668.625061][ T5776] Bluetooth: hci1: command tx timeout [ 1668.961038][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.967453][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.018485][T29445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1669.091516][T29642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1669.102165][T29445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1669.115030][T29642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1669.152998][T29445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1669.164914][T29642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1669.175103][T29445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1669.410091][T29650] netlink: 'syz.3.7506': attribute type 4 has an invalid length. [ 1669.422662][T29650] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7506'. [ 1669.440061][T29650] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1669.572505][T29445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.647628][T29445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.704194][T28807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.711448][T28807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.762548][T28807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.769766][T28807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.983408][T29669] netlink: 'syz.2.7511': attribute type 29 has an invalid length. [ 1670.003648][T29669] netlink: 'syz.2.7511': attribute type 29 has an invalid length. [ 1670.657250][T29686] netlink: 'syz.3.7515': attribute type 4 has an invalid length. [ 1670.685945][T29686] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7515'. [ 1670.696013][T29686] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1670.741406][T29445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1670.863858][T29445] veth0_vlan: entered promiscuous mode [ 1670.900785][T29445] veth1_vlan: entered promiscuous mode [ 1670.999335][T29445] veth0_macvtap: entered promiscuous mode [ 1671.027575][T29445] veth1_macvtap: entered promiscuous mode [ 1671.077830][T29445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.105588][T29445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.134614][T29445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.155115][T29445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.166179][T29445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.178801][T29445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.189206][T29445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.204876][T29445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.223987][T29445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.295147][T29445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.324742][T29445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.349376][T29445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.365013][T29445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.382581][T29445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.431263][T29445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.452553][T29445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.474748][T29445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.506719][T29445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.539306][T29445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.574633][T29445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.603846][T29445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.629243][T29445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.937100][T28806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.979757][T28806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.100921][T28803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.146008][T28803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.439817][T29741] netlink: 'syz.2.7525': attribute type 4 has an invalid length. [ 1672.457810][T29741] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1672.489844][T29741] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1673.791304][T29782] netlink: 'syz.3.7534': attribute type 4 has an invalid length. [ 1673.860524][T29782] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7534'. [ 1674.037136][T29794] netlink: 'syz.1.7536': attribute type 4 has an invalid length. [ 1674.044317][T29793] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.7537'. [ 1674.063517][T29794] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1674.105708][T29794] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1674.139069][T29793] netlink: 'syz.0.7537': attribute type 10 has an invalid length. [ 1674.170758][T29793] veth0_macvtap: left promiscuous mode [ 1674.346111][T29803] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.7539'. [ 1674.373453][T29805] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7539'. [ 1674.410255][T29803] openvswitch: netlink: Message has 20476 unknown bytes. [ 1674.556744][T29810] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1674.570279][T29814] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1675.049485][T29818] netlink: 'syz.1.7543': attribute type 9 has an invalid length. [ 1675.064889][T29818] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7543'. [ 1675.540693][T29828] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7546'. [ 1675.600083][T29828] team0: Port device team_slave_0 removed [ 1675.635770][T29828] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1675.761964][T29835] netlink: 'syz.1.7548': attribute type 4 has an invalid length. [ 1675.788337][T29835] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7548'. [ 1675.810878][T29835] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1675.999455][T29849] netlink: 'syz.2.7553': attribute type 28 has an invalid length. [ 1676.008074][T29849] netlink: 'syz.2.7553': attribute type 29 has an invalid length. [ 1676.044771][T29849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7553'. [ 1676.108431][T29849] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7553'. [ 1676.161148][T29852] netlink: 'syz.2.7553': attribute type 28 has an invalid length. [ 1676.197679][T29854] netlink: 'syz.3.7555': attribute type 2 has an invalid length. [ 1676.215021][T29852] netlink: 'syz.2.7553': attribute type 29 has an invalid length. [ 1676.225260][T29854] netlink: 'syz.3.7555': attribute type 8 has an invalid length. [ 1676.254254][T29854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7555'. [ 1678.123382][T29878] delete_channel: no stack [ 1678.745866][T29875] netlink: 'syz.2.7560': attribute type 4 has an invalid length. [ 1678.753649][T29875] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1679.372262][T29891] netlink: 'syz.2.7566': attribute type 10 has an invalid length. [ 1679.404967][T29891] __nla_validate_parse: 2 callbacks suppressed [ 1679.404985][T29891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7566'. [ 1680.172532][T29912] netlink: 'syz.1.7574': attribute type 4 has an invalid length. [ 1680.182993][T29912] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7574'. [ 1680.198846][T29912] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1680.481866][T29922] netlink: 'syz.2.7579': attribute type 1 has an invalid length. [ 1680.489953][T29922] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.7579'. [ 1680.688935][T29931] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.7583'. [ 1680.969615][T29940] netlink: 'syz.2.7585': attribute type 4 has an invalid length. [ 1680.987023][T29940] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7585'. [ 1680.996704][T29940] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1681.094159][ T5776] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1681.203591][T29949] netlink: 'syz.0.7590': attribute type 2 has an invalid length. [ 1681.990561][T29966] netlink: 'syz.3.7595': attribute type 4 has an invalid length. [ 1682.045258][T29966] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7595'. [ 1682.104933][T29966] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1683.843249][T30006] netlink: 'syz.2.7605': attribute type 4 has an invalid length. [ 1683.862489][T30006] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7605'. [ 1683.893385][T30006] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1684.283586][T30025] netlink: 'syz.0.7614': attribute type 39 has an invalid length. [ 1684.302327][T30025] macvlan0: entered promiscuous mode [ 1684.313379][T30025] macvlan0: entered allmulticast mode [ 1684.894168][T30039] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.7618'. [ 1685.069700][T30041] netlink: 'syz.0.7620': attribute type 4 has an invalid length. [ 1685.091966][T30041] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7620'. [ 1685.151392][T30041] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1686.014803][T30069] netlink: 'syz.2.7632': attribute type 39 has an invalid length. [ 1686.297779][T30077] netlink: 'syz.3.7631': attribute type 10 has an invalid length. [ 1686.329288][T30077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7631'. [ 1686.371659][T30077] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1686.391053][T30077] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1686.429402][T30077] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1686.639224][T30083] netlink: 'syz.2.7636': attribute type 4 has an invalid length. [ 1686.657408][T30083] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7636'. [ 1686.695487][T30083] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1686.942215][T30096] netlink: 'syz.2.7641': attribute type 39 has an invalid length. [ 1687.588899][T30113] netlink: 'syz.0.7645': attribute type 10 has an invalid length. [ 1687.618439][T30113] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7645'. [ 1687.644206][T30113] hsr0: entered promiscuous mode [ 1687.650301][T30113] bridge0: port 3(hsr0) entered blocking state [ 1687.674935][T30113] bridge0: port 3(hsr0) entered disabled state [ 1687.688196][T30113] hsr0: entered allmulticast mode [ 1687.698103][T30113] hsr_slave_0: entered allmulticast mode [ 1687.708267][T30113] hsr_slave_1: entered allmulticast mode [ 1687.721533][T30113] bridge0: port 3(hsr0) entered blocking state [ 1687.727991][T30113] bridge0: port 3(hsr0) entered forwarding state [ 1687.760041][T30117] netlink: 'syz.2.7649': attribute type 4 has an invalid length. [ 1687.772142][T30117] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7649'. [ 1687.787831][T30117] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1688.238088][T30135] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7655'. [ 1688.504293][T30142] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7659'. [ 1689.734127][T30158] netlink: 'syz.0.7663': attribute type 4 has an invalid length. [ 1689.742550][T30158] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7663'. [ 1689.784837][T30158] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1689.836130][T30165] bridge_slave_1: left allmulticast mode [ 1689.883079][T30165] bridge_slave_1: left promiscuous mode [ 1689.913674][T30165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.957994][T30165] bridge_slave_0: left allmulticast mode [ 1689.964077][T30165] bridge_slave_0: left promiscuous mode [ 1689.990388][T30165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.375007][T30173] bridge0: port 4(batadv0) entered blocking state [ 1690.381582][T30173] bridge0: port 4(batadv0) entered disabled state [ 1690.409236][T30173] batadv0: entered allmulticast mode [ 1690.425371][T16900] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1690.434759][T16900] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1690.444080][T30173] batadv0: entered promiscuous mode [ 1690.455944][T30173] bridge0: port 4(batadv0) entered blocking state [ 1690.462504][T30173] bridge0: port 4(batadv0) entered forwarding state [ 1691.143511][T30193] netlink: 'syz.2.7676': attribute type 4 has an invalid length. [ 1691.160127][T30193] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7676'. [ 1691.170900][T30193] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1691.709272][T30219] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7685'. [ 1691.739563][T30219] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 1691.815101][T30223] netlink: 'syz.1.7684': attribute type 27 has an invalid length. [ 1692.039246][T30223] bond0: (slave bond_slave_0): Releasing backup interface [ 1692.189181][T30233] netlink: 'syz.0.7690': attribute type 4 has an invalid length. [ 1692.197698][T30233] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7690'. [ 1692.208839][T30233] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1692.262878][T30238] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.7692'. [ 1692.293762][T30238] netlink: 'syz.3.7692': attribute type 10 has an invalid length. [ 1692.305637][T30238] netlink: 'syz.3.7692': attribute type 4 has an invalid length. [ 1692.323655][T30238] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7692'. [ 1692.375129][T30240] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7693'. [ 1692.553183][T30240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1692.591670][T30240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1692.631920][T30240] bond0 (unregistering): Released all slaves [ 1692.757822][T30252] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1692.776062][T30252] dvmrp1: linktype set to 804 [ 1693.062767][T30272] netlink: 'syz.1.7702': attribute type 4 has an invalid length. [ 1693.074725][T30272] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7702'. [ 1693.094622][T30272] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1693.372801][T30280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7706'. [ 1693.395155][T30280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7706'. [ 1693.414881][T30280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7706'. [ 1693.712518][T30298] mac80211_hwsim hwsim86 wlan1: entered promiscuous mode [ 1693.744294][T30298] mac80211_hwsim hwsim86 wlan1: entered allmulticast mode [ 1693.819357][T30299] netlink: 'syz.1.7716': attribute type 4 has an invalid length. [ 1693.844888][T30299] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1693.954472][T30304] can: request_module (can-proto-5) failed. [ 1694.294879][T30322] netlink: 'syz.3.7726': attribute type 29 has an invalid length. [ 1694.305724][T30322] netlink: 'syz.3.7726': attribute type 29 has an invalid length. [ 1694.441950][T30323] netlink: 'syz.2.7728': attribute type 4 has an invalid length. [ 1694.450299][T30323] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1695.580643][T30357] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1696.182279][T30391] Ÿë: port 1(ip6gretap0) entered blocking state [ 1696.204742][T30391] Ÿë: port 1(ip6gretap0) entered disabled state [ 1696.211301][T30391] ip6gretap0: entered allmulticast mode [ 1696.276868][T30391] ip6gretap0: entered promiscuous mode [ 1696.326623][T30393] validate_nla: 1 callbacks suppressed [ 1696.326655][T30393] netlink: 'syz.0.7752': attribute type 4 has an invalid length. [ 1696.347927][T30393] __nla_validate_parse: 10 callbacks suppressed [ 1696.347962][T30393] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7752'. [ 1696.370419][T30393] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1696.387972][T30397] netlink: 'syz.2.7754': attribute type 10 has an invalid length. [ 1696.625569][T27444] Bluetooth: hci4: command 0x0406 tx timeout [ 1697.550910][T30416] netlink: 'syz.1.7763': attribute type 9 has an invalid length. [ 1697.559012][T30416] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7763'. [ 1697.778201][T30423] netlink: 'syz.3.7765': attribute type 4 has an invalid length. [ 1697.814733][T30423] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7765'. [ 1697.836659][T30423] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1698.292241][T30434] netlink: 'syz.3.7769': attribute type 10 has an invalid length. [ 1698.313371][T30434] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7769'. [ 1698.333830][T30434] hsr0: entered promiscuous mode [ 1698.888820][T30449] netlink: 'syz.0.7776': attribute type 4 has an invalid length. [ 1698.899258][T30449] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7776'. [ 1698.911254][T30449] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1699.667127][T30460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1699.985117][T30467] netlink: 'syz.3.7783': attribute type 4 has an invalid length. [ 1700.034265][T30467] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7783'. [ 1700.143519][T30469] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.7784'. [ 1700.175951][T30469] netlink: 'syz.0.7784': attribute type 10 has an invalid length. [ 1700.367646][T30471] netlink: 'syz.2.7785': attribute type 4 has an invalid length. [ 1700.402002][T30471] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7785'. [ 1700.494608][T30471] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1700.542499][T30479] netlink: 'syz.0.7788': attribute type 9 has an invalid length. [ 1700.564024][T30479] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7788'. [ 1701.174346][T30496] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7794'. [ 1701.214257][T30496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1701.562207][T30511] netlink: 'syz.1.7799': attribute type 4 has an invalid length. [ 1701.571709][T30511] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7799'. [ 1701.582004][T30511] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1701.657292][T30517] FAULT_INJECTION: forcing a failure. [ 1701.657292][T30517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1701.671991][T30517] CPU: 1 PID: 30517 Comm: syz.0.7802 Not tainted syzkaller #0 [ 1701.679499][T30517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1701.689686][T30517] Call Trace: [ 1701.692966][T30517] [ 1701.695912][T30517] dump_stack_lvl+0x18c/0x250 [ 1701.700630][T30517] ? show_regs_print_info+0x20/0x20 [ 1701.705958][T30517] ? load_image+0x420/0x420 [ 1701.710496][T30517] ? __might_fault+0xaa/0x120 [ 1701.715209][T30517] ? __lock_acquire+0x7d80/0x7d80 [ 1701.720260][T30517] ? __virt_addr_valid+0x10c/0x380 [ 1701.725413][T30517] should_fail_ex+0x394/0x4c0 [ 1701.730136][T30517] _copy_from_user+0x2f/0xe0 [ 1701.734846][T30517] generic_map_update_batch+0x53e/0x800 [ 1701.740442][T30517] ? rcu_read_unlock+0xa0/0xa0 [ 1701.745251][T30517] ? __fdget+0x180/0x210 [ 1701.749525][T30517] ? rcu_read_unlock+0xa0/0xa0 [ 1701.754305][T30517] bpf_map_do_batch+0x3f2/0x600 [ 1701.759185][T30517] ? bpf_lsm_key_alloc+0x10/0x10 [ 1701.764158][T30517] __sys_bpf+0x381/0x890 [ 1701.768443][T30517] ? bpf_link_show_fdinfo+0x390/0x390 [ 1701.773822][T30517] ? lock_chain_count+0x20/0x20 [ 1701.778691][T30517] __x64_sys_bpf+0x7c/0x90 [ 1701.783126][T30517] do_syscall_64+0x55/0xb0 [ 1701.787542][T30517] ? clear_bhb_loop+0x40/0x90 [ 1701.792243][T30517] ? clear_bhb_loop+0x40/0x90 [ 1701.796934][T30517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.802863][T30517] RIP: 0033:0x7f154ab9e019 [ 1701.807327][T30517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.826963][T30517] RSP: 002b:00007f154bab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1701.835497][T30517] RAX: ffffffffffffffda RBX: 00007f154ae25fa0 RCX: 00007f154ab9e019 [ 1701.843488][T30517] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1701.851488][T30517] RBP: 00007f154bab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.859474][T30517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1701.867461][T30517] R13: 00007f154ae26038 R14: 00007f154ae25fa0 R15: 00007ffe3d5d1098 [ 1701.875461][T30517] [ 1701.927760][T30519] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7803'. [ 1702.077472][T30526] netlink: 'syz.3.7806': attribute type 2 has an invalid length. [ 1702.113412][T30526] netlink: 'syz.3.7806': attribute type 8 has an invalid length. [ 1702.140309][T30526] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7806'. [ 1702.228636][T30532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7808'. [ 1702.249413][T30532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7808'. [ 1702.316452][T30536] netlink: 'syz.0.7810': attribute type 29 has an invalid length. [ 1702.347885][T30536] netlink: 'syz.0.7810': attribute type 29 has an invalid length. [ 1702.572813][T30538] netlink: 'syz.2.7811': attribute type 4 has an invalid length. [ 1702.594882][T30538] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7811'. [ 1702.628814][T30538] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1703.248666][T30568] netlink: 'syz.3.7822': attribute type 3 has an invalid length. [ 1703.267960][T30568] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7822'. [ 1703.333677][T30569] netlink: 'syz.2.7823': attribute type 4 has an invalid length. [ 1703.343178][T30569] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7823'. [ 1703.391710][T30569] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1703.666812][T30579] syzkaller0: entered promiscuous mode [ 1703.680948][T30579] syzkaller0: entered allmulticast mode [ 1703.773160][T30589] netlink: 'syz.2.7827': attribute type 10 has an invalid length. [ 1703.977259][T30589] team0 (unregistering): Port device team_slave_1 removed [ 1704.255358][T30608] netlink: 'syz.3.7834': attribute type 4 has an invalid length. [ 1704.263512][T30608] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1704.280133][T30608] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1704.573055][T30626] FAULT_INJECTION: forcing a failure. [ 1704.573055][T30626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1704.576562][T30621] team0 (unregistering): Port device team_slave_0 removed [ 1704.592808][T30626] CPU: 1 PID: 30626 Comm: syz.3.7840 Not tainted syzkaller #0 [ 1704.600882][T30626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1704.610954][T30626] Call Trace: [ 1704.614232][T30626] [ 1704.617173][T30626] dump_stack_lvl+0x18c/0x250 [ 1704.621871][T30626] ? show_regs_print_info+0x20/0x20 [ 1704.627087][T30626] ? load_image+0x420/0x420 [ 1704.631632][T30626] ? __might_fault+0xaa/0x120 [ 1704.636333][T30626] ? __lock_acquire+0x7d80/0x7d80 [ 1704.641373][T30626] ? __virt_addr_valid+0x10c/0x380 [ 1704.646493][T30626] should_fail_ex+0x394/0x4c0 [ 1704.651184][T30626] _copy_from_user+0x2f/0xe0 [ 1704.655789][T30626] generic_map_update_batch+0x53e/0x800 [ 1704.661339][T30626] ? rcu_read_unlock+0xa0/0xa0 [ 1704.666097][T30626] ? __fdget+0x180/0x210 [ 1704.670337][T30626] ? rcu_read_unlock+0xa0/0xa0 [ 1704.675095][T30626] bpf_map_do_batch+0x3f2/0x600 [ 1704.680061][T30626] ? bpf_lsm_key_alloc+0x10/0x10 [ 1704.685021][T30626] __sys_bpf+0x381/0x890 [ 1704.689282][T30626] ? bpf_link_show_fdinfo+0x390/0x390 [ 1704.694692][T30626] ? lock_chain_count+0x20/0x20 [ 1704.699564][T30626] __x64_sys_bpf+0x7c/0x90 [ 1704.703993][T30626] do_syscall_64+0x55/0xb0 [ 1704.708430][T30626] ? clear_bhb_loop+0x40/0x90 [ 1704.713109][T30626] ? clear_bhb_loop+0x40/0x90 [ 1704.717782][T30626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.723673][T30626] RIP: 0033:0x7f051a79e019 [ 1704.728085][T30626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.747697][T30626] RSP: 002b:00007f05189f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1704.756111][T30626] RAX: ffffffffffffffda RBX: 00007f051aa26090 RCX: 00007f051a79e019 [ 1704.764079][T30626] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1704.772048][T30626] RBP: 00007f05189f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.780037][T30626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.788039][T30626] R13: 00007f051aa26128 R14: 00007f051aa26090 R15: 00007fff5507f558 [ 1704.796026][T30626] [ 1704.833568][T30621] team0 (unregistering): Port device team_slave_1 removed [ 1704.854817][T30628] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7841'. [ 1705.325427][T30645] syzkaller0: entered promiscuous mode [ 1705.331284][T30645] syzkaller0: entered allmulticast mode [ 1705.352714][T30643] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1708.920551][T30684] validate_nla: 3 callbacks suppressed [ 1708.920572][T30684] netlink: 'syz.0.7860': attribute type 1 has an invalid length. [ 1708.941170][T30684] netlink: 'syz.0.7860': attribute type 3 has an invalid length. [ 1708.949113][T30684] __nla_validate_parse: 2 callbacks suppressed [ 1708.949130][T30684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7860'. [ 1709.035908][T30690] netlink: 'syz.2.7861': attribute type 4 has an invalid length. [ 1709.084779][T30690] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7861'. [ 1709.096210][T30690] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1712.249746][T30714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1712.545108][T30724] netlink: 'syz.2.7873': attribute type 4 has an invalid length. [ 1712.553080][T30724] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7873'. [ 1712.562891][T30724] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1713.896278][T30744] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7881'. [ 1713.940356][T30744] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7881'. [ 1713.966765][T30747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1714.115264][T30752] netlink: 'syz.0.7883': attribute type 4 has an invalid length. [ 1714.135659][T30752] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7883'. [ 1714.155726][T30752] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1714.222890][T30754] netlink: 'syz.1.7884': attribute type 4 has an invalid length. [ 1714.239841][T30754] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1714.254322][T30754] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1714.281357][T30758] FAULT_INJECTION: forcing a failure. [ 1714.281357][T30758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1714.298931][T30760] syz.3.7887: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1714.301417][T30758] CPU: 1 PID: 30758 Comm: syz.2.7886 Not tainted syzkaller #0 [ 1714.322098][T30758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1714.332230][T30758] Call Trace: [ 1714.335532][T30758] [ 1714.338475][T30758] dump_stack_lvl+0x18c/0x250 [ 1714.343179][T30758] ? show_regs_print_info+0x20/0x20 [ 1714.348408][T30758] ? load_image+0x420/0x420 [ 1714.352943][T30758] ? __might_fault+0xaa/0x120 [ 1714.357642][T30758] ? __lock_acquire+0x7d80/0x7d80 [ 1714.362702][T30758] should_fail_ex+0x394/0x4c0 [ 1714.367411][T30758] _copy_from_iter+0x1cd/0x1290 [ 1714.372289][T30758] ? rep_movs_alternative+0x4a/0x90 [ 1714.377513][T30758] ? copyout_mc+0x70/0x70 [ 1714.381870][T30758] ? copyout_mc+0x70/0x70 [ 1714.386231][T30758] ? __virt_addr_valid+0x10c/0x380 [ 1714.391374][T30758] ? page_copy_sane+0x16a/0x270 [ 1714.396273][T30758] copy_page_from_iter+0x7b/0x100 [ 1714.401328][T30758] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1714.407184][T30758] unix_stream_sendmsg+0x562/0xbf0 [ 1714.412342][T30758] ? unix_show_fdinfo+0x280/0x280 [ 1714.417380][T30758] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1714.423912][T30758] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1714.429480][T30758] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1714.434788][T30758] ? security_socket_sendmsg+0x80/0xa0 [ 1714.440269][T30758] ? unix_show_fdinfo+0x280/0x280 [ 1714.445313][T30758] ____sys_sendmsg+0x61b/0x980 [ 1714.450094][T30758] ? __asan_memset+0x22/0x40 [ 1714.454702][T30758] ? __sys_sendmsg_sock+0x30/0x30 [ 1714.459742][T30758] ? __import_iovec+0x5f2/0x850 [ 1714.464623][T30758] ? import_iovec+0x73/0xa0 [ 1714.469157][T30758] ___sys_sendmsg+0x2a6/0x360 [ 1714.473848][T30758] ? get_pid_task+0x20/0x1e0 [ 1714.478464][T30758] ? __sys_sendmsg+0x2b0/0x2b0 [ 1714.483271][T30758] ? __lock_acquire+0x7d80/0x7d80 [ 1714.488333][T30758] __se_sys_sendmsg+0x1d0/0x2c0 [ 1714.493196][T30758] ? __x64_sys_sendmsg+0x80/0x80 [ 1714.498164][T30758] ? lockdep_hardirqs_on+0x98/0x150 [ 1714.503381][T30758] do_syscall_64+0x55/0xb0 [ 1714.507814][T30758] ? clear_bhb_loop+0x40/0x90 [ 1714.512500][T30758] ? clear_bhb_loop+0x40/0x90 [ 1714.517190][T30758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.523092][T30758] RIP: 0033:0x7f409af9e019 [ 1714.527525][T30758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.547156][T30758] RSP: 002b:00007f40991f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1714.555627][T30758] RAX: ffffffffffffffda RBX: 00007f409b225fa0 RCX: 00007f409af9e019 [ 1714.563636][T30758] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1714.571650][T30758] RBP: 00007f40991f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1714.579654][T30758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1714.587637][T30758] R13: 00007f409b226038 R14: 00007f409b225fa0 R15: 00007fffdfa11c98 [ 1714.595660][T30758] [ 1714.598687][T30760] CPU: 0 PID: 30760 Comm: syz.3.7887 Not tainted syzkaller #0 [ 1714.606182][T30760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1714.616260][T30760] Call Trace: [ 1714.619544][T30760] [ 1714.622474][T30760] dump_stack_lvl+0x18c/0x250 [ 1714.627182][T30760] ? show_regs_print_info+0x20/0x20 [ 1714.632379][T30760] ? load_image+0x420/0x420 [ 1714.636885][T30760] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1714.643300][T30760] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1714.649822][T30760] warn_alloc+0x246/0x340 [ 1714.654162][T30760] ? stack_trace_save+0xaa/0x100 [ 1714.659099][T30760] ? zone_watermark_ok_safe+0x230/0x230 [ 1714.664655][T30760] ? kasan_set_track+0x5f/0x70 [ 1714.669421][T30760] ? kasan_set_track+0x4e/0x70 [ 1714.674178][T30760] ? __kasan_kmalloc+0x8f/0xa0 [ 1714.678937][T30760] ? xsk_init_queue+0xad/0x100 [ 1714.683784][T30760] ? xsk_setsockopt+0x4c9/0x750 [ 1714.688638][T30760] ? do_sock_setsockopt+0x175/0x1a0 [ 1714.693832][T30760] ? __x64_sys_setsockopt+0x182/0x200 [ 1714.699231][T30760] __vmalloc_node_range+0x129/0x1320 [ 1714.704543][T30760] ? free_vm_area+0x50/0x50 [ 1714.709058][T30760] vmalloc_user+0x74/0x80 [ 1714.713400][T30760] ? xskq_create+0xbf/0x170 [ 1714.717902][T30760] xskq_create+0xbf/0x170 [ 1714.722246][T30760] xsk_init_queue+0xad/0x100 [ 1714.726840][T30760] xsk_setsockopt+0x4c9/0x750 [ 1714.731519][T30760] ? xsk_poll+0x670/0x670 [ 1714.735851][T30760] ? __fget_files+0x28/0x460 [ 1714.740441][T30760] ? aa_sock_opt_perm+0x74/0x100 [ 1714.745386][T30760] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1714.750932][T30760] ? security_socket_setsockopt+0x7e/0xa0 [ 1714.756647][T30760] ? xsk_poll+0x670/0x670 [ 1714.760976][T30760] do_sock_setsockopt+0x175/0x1a0 [ 1714.766001][T30760] ? __fdget+0x180/0x210 [ 1714.770249][T30760] __x64_sys_setsockopt+0x182/0x200 [ 1714.775448][T30760] do_syscall_64+0x55/0xb0 [ 1714.779859][T30760] ? clear_bhb_loop+0x40/0x90 [ 1714.784535][T30760] ? clear_bhb_loop+0x40/0x90 [ 1714.789218][T30760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.795109][T30760] RIP: 0033:0x7f051a79e019 [ 1714.799528][T30760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.819133][T30760] RSP: 002b:00007f051b57f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1714.827557][T30760] RAX: ffffffffffffffda RBX: 00007f051aa25fa0 RCX: 00007f051a79e019 [ 1714.835536][T30760] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1714.843507][T30760] RBP: 00007f051a83500c R08: 0000000000000004 R09: 0000000000000000 [ 1714.851475][T30760] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1714.859443][T30760] R13: 00007f051aa26038 R14: 00007f051aa25fa0 R15: 00007fff5507f558 [ 1714.867423][T30760] [ 1714.884788][T30760] Mem-Info: [ 1714.888044][T30760] active_anon:8737 inactive_anon:0 isolated_anon:0 [ 1714.888044][T30760] active_file:21068 inactive_file:40596 isolated_file:0 [ 1714.888044][T30760] unevictable:768 dirty:101 writeback:0 [ 1714.888044][T30760] slab_reclaimable:11561 slab_unreclaimable:96331 [ 1714.888044][T30760] mapped:29920 shmem:1361 pagetables:584 [ 1714.888044][T30760] sec_pagetables:0 bounce:0 [ 1714.888044][T30760] kernel_misc_reclaimable:0 [ 1714.888044][T30760] free:1320918 free_pcp:8940 free_cma:0 [ 1714.944294][T30760] Node 0 active_anon:34748kB inactive_anon:0kB active_file:84272kB inactive_file:162184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119680kB dirty:400kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11260kB pagetables:2136kB sec_pagetables:0kB all_unreclaimable? no [ 1715.003175][T30760] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1715.047938][T30760] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1715.077494][T30760] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1715.083433][T30760] Node 0 DMA32 free:1364996kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34640kB inactive_anon:0kB active_file:84272kB inactive_file:161360kB unevictable:1536kB writepending:444kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:28172kB local_pcp:14644kB free_cma:0kB [ 1715.124760][T30770] FAULT_INJECTION: forcing a failure. [ 1715.124760][T30770] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.164645][T30770] CPU: 1 PID: 30770 Comm: syz.2.7891 Not tainted syzkaller #0 [ 1715.172172][T30770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1715.182235][T30770] Call Trace: [ 1715.185544][T30770] [ 1715.188475][T30770] dump_stack_lvl+0x18c/0x250 [ 1715.193173][T30770] ? sctp_sendmsg+0x1519/0x27b0 [ 1715.198029][T30770] ? ___sys_sendmsg+0x2a6/0x360 [ 1715.202886][T30770] ? show_regs_print_info+0x20/0x20 [ 1715.208088][T30770] ? load_image+0x420/0x420 [ 1715.213128][T30770] should_fail_ex+0x394/0x4c0 [ 1715.217821][T30770] should_failslab+0x9/0x20 [ 1715.222326][T30770] slab_pre_alloc_hook+0x59/0x300 [ 1715.227351][T30770] ? sctp_add_bind_addr+0x8c/0x360 [ 1715.232478][T30770] __kmem_cache_alloc_node+0x53/0x250 [ 1715.237856][T30770] ? sctp_add_bind_addr+0x8c/0x360 [ 1715.242967][T30770] kmalloc_trace+0x2a/0xe0 [ 1715.247384][T30770] sctp_add_bind_addr+0x8c/0x360 [ 1715.252324][T30770] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1715.257958][T30770] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1715.263675][T30770] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1715.269740][T30770] ? sctp_v6_is_any+0x64/0x70 [ 1715.274415][T30770] ? sctp_copy_one_addr+0x8c/0x350 [ 1715.279527][T30770] sctp_bind_addr_copy+0xb3/0x3c0 [ 1715.284554][T30770] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1715.290894][T30770] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1715.296179][T30770] ? __sctp_connect+0xd80/0xd80 [ 1715.301024][T30770] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1715.306398][T30770] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1715.311942][T30770] ? security_sctp_bind_connect+0x89/0xb0 [ 1715.317663][T30770] sctp_sendmsg+0x1519/0x27b0 [ 1715.322351][T30770] ? sctp_getsockopt+0xb60/0xb60 [ 1715.327293][T30770] ? aa_af_perm+0x330/0x330 [ 1715.331803][T30770] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1715.338222][T30770] ? sock_rps_record_flow+0x19/0x3f0 [ 1715.343511][T30770] ? inet_sendmsg+0xce/0x2a0 [ 1715.348100][T30770] ? inet_send_prepare+0x250/0x250 [ 1715.353237][T30770] ____sys_sendmsg+0x61b/0x980 [ 1715.358043][T30770] ? __asan_memset+0x22/0x40 [ 1715.362637][T30770] ? __sys_sendmsg_sock+0x30/0x30 [ 1715.367669][T30770] ? __import_iovec+0x5f2/0x850 [ 1715.372527][T30770] ? import_iovec+0x73/0xa0 [ 1715.377043][T30770] ___sys_sendmsg+0x2a6/0x360 [ 1715.381743][T30770] ? get_pid_task+0x20/0x1e0 [ 1715.386339][T30770] ? __sys_sendmsg+0x2b0/0x2b0 [ 1715.391116][T30770] ? __lock_acquire+0x7d80/0x7d80 [ 1715.396156][T30770] __se_sys_sendmsg+0x1d0/0x2c0 [ 1715.401006][T30770] ? __x64_sys_sendmsg+0x80/0x80 [ 1715.405953][T30770] ? lockdep_hardirqs_on+0x98/0x150 [ 1715.411157][T30770] do_syscall_64+0x55/0xb0 [ 1715.415657][T30770] ? clear_bhb_loop+0x40/0x90 [ 1715.420328][T30770] ? clear_bhb_loop+0x40/0x90 [ 1715.425002][T30770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1715.430890][T30770] RIP: 0033:0x7f409af9e019 [ 1715.435302][T30770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.454905][T30770] RSP: 002b:00007f40991f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1715.463315][T30770] RAX: ffffffffffffffda RBX: 00007f409b225fa0 RCX: 00007f409af9e019 [ 1715.471285][T30770] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1715.479253][T30770] RBP: 00007f40991f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.487252][T30770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1715.495250][T30770] R13: 00007f409b226038 R14: 00007f409b225fa0 R15: 00007fffdfa11c98 [ 1715.503235][T30770] [ 1715.544318][T30760] lowmem_reserve[]: 0 0 0 0 0 [ 1715.554639][T30760] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1715.621757][T30773] netlink: 'syz.1.7892': attribute type 10 has an invalid length. [ 1715.631603][T30760] lowmem_reserve[]: 0 0 0 0 0 [ 1715.640760][T30760] Node 1 Normal free:3903316kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8004kB local_pcp:0kB free_cma:0kB [ 1715.705389][T30760] lowmem_reserve[]: 0 0 0 0 0 [ 1715.710211][T30760] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1715.747988][T30760] Node 0 DMA32: 1213*4kB (UM) 2552*8kB (UME) 1917*16kB (UME) 2298*32kB (UM) 1433*64kB (UME) 474*128kB (UM) 502*256kB (UME) 359*512kB (UME) 187*1024kB (UM) 14*2048kB (M) 134*4096kB (UM) = 1363204kB [ 1715.771018][T30760] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1715.783308][T30760] Node 1 Normal: 263*4kB (UE) 61*8kB (UE) 41*16kB (UE) 274*32kB (UE) 86*64kB (UME) 20*128kB (UME) 5*256kB (U) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UE) 946*4096kB (M) = 3903316kB [ 1715.820349][T30760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1715.835170][T30760] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1715.865244][T30760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1715.915429][T30760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1715.931401][T30760] 63025 total pagecache pages [ 1715.939338][T30760] 0 pages in swap cache [ 1715.943550][T30760] Free swap = 124996kB [ 1715.948860][T30760] Total swap = 124996kB [ 1715.953696][T30760] 2097051 pages RAM [ 1715.958002][T30760] 0 pages HighMem/MovableOnly [ 1715.962732][T30760] 416955 pages reserved [ 1715.970803][T30760] 0 pages cma reserved [ 1716.041611][T30786] netlink: 'syz.1.7897': attribute type 4 has an invalid length. [ 1716.050657][T30786] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7897'. [ 1716.060460][T30786] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1716.409018][T30807] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7905'. [ 1716.495142][T30807] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.7905'. [ 1717.065659][T30796] FAULT_INJECTION: forcing a failure. [ 1717.065659][T30796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1717.187711][T30796] CPU: 1 PID: 30796 Comm: syz.0.7902 Not tainted syzkaller #0 [ 1717.195237][T30796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1717.205312][T30796] Call Trace: [ 1717.208597][T30796] [ 1717.211526][T30796] dump_stack_lvl+0x18c/0x250 [ 1717.216212][T30796] ? show_regs_print_info+0x20/0x20 [ 1717.221409][T30796] ? load_image+0x420/0x420 [ 1717.225924][T30796] ? __lock_acquire+0x7d80/0x7d80 [ 1717.230958][T30796] ? snprintf+0xe9/0x140 [ 1717.235219][T30796] should_fail_ex+0x394/0x4c0 [ 1717.239903][T30796] _copy_to_user+0x2f/0xa0 [ 1717.244317][T30796] simple_read_from_buffer+0xe7/0x150 [ 1717.249691][T30796] proc_fail_nth_read+0x1e8/0x260 [ 1717.254720][T30796] ? proc_fault_inject_write+0x360/0x360 [ 1717.262553][T30796] ? fsnotify_perm+0x271/0x5e0 [ 1717.267337][T30796] ? proc_fault_inject_write+0x360/0x360 [ 1717.272979][T30796] vfs_read+0x298/0x990 [ 1717.277145][T30796] ? kernel_read+0x1e0/0x1e0 [ 1717.281737][T30796] ? __fget_files+0x28/0x460 [ 1717.286327][T30796] ? __fget_files+0x3fc/0x460 [ 1717.291008][T30796] ? __fdget_pos+0x2a3/0x330 [ 1717.295600][T30796] ? ksys_read+0x74/0x260 [ 1717.299936][T30796] ksys_read+0x151/0x260 [ 1717.304196][T30796] ? vfs_write+0x9a0/0x9a0 [ 1717.308613][T30796] ? lockdep_hardirqs_on+0x98/0x150 [ 1717.313821][T30796] do_syscall_64+0x55/0xb0 [ 1717.318248][T30796] ? clear_bhb_loop+0x40/0x90 [ 1717.322925][T30796] ? clear_bhb_loop+0x40/0x90 [ 1717.327604][T30796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1717.333497][T30796] RIP: 0033:0x7f154ab5e84e [ 1717.337916][T30796] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1717.357527][T30796] RSP: 002b:00007f154bab7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1717.365939][T30796] RAX: ffffffffffffffda RBX: 00007f154bab86c0 RCX: 00007f154ab5e84e [ 1717.373909][T30796] RDX: 000000000000000f RSI: 00007f154bab80a0 RDI: 0000000000000009 [ 1717.381889][T30796] RBP: 00007f154bab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1717.389858][T30796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.397824][T30796] R13: 00007f154ae26038 R14: 00007f154ae25fa0 R15: 00007ffe3d5d1098 [ 1717.405804][T30796] [ 1717.785577][T30830] netlink: 'syz.1.7913': attribute type 21 has an invalid length. [ 1717.804802][T30830] IPv6: NLM_F_CREATE should be specified when creating new route [ 1717.815411][T30830] IPv6: Can't replace route, no match found [ 1717.867068][T30831] netlink: 'syz.3.7911': attribute type 4 has an invalid length. [ 1717.889970][T30831] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7911'. [ 1717.912931][T30831] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1719.620491][T30873] netlink: 'syz.0.7924': attribute type 4 has an invalid length. [ 1719.644597][T30873] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7924'. [ 1719.732734][T30873] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1721.184899][T30914] netlink: 'syz.2.7940': attribute type 21 has an invalid length. [ 1721.206669][T30913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7941'. [ 1721.227833][T30914] netlink: 'syz.2.7940': attribute type 7 has an invalid length. [ 1721.279334][T30913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7941'. [ 1721.327463][T30916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7941'. [ 1721.358821][T30915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7941'. [ 1721.817940][T30927] FAULT_INJECTION: forcing a failure. [ 1721.817940][T30927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1721.854818][T30927] CPU: 1 PID: 30927 Comm: syz.1.7945 Not tainted syzkaller #0 [ 1721.862351][T30927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1721.872430][T30927] Call Trace: [ 1721.875729][T30927] [ 1721.878678][T30927] dump_stack_lvl+0x18c/0x250 [ 1721.883389][T30927] ? show_regs_print_info+0x20/0x20 [ 1721.888616][T30927] ? load_image+0x420/0x420 [ 1721.893152][T30927] ? __lock_acquire+0x7d80/0x7d80 [ 1721.898206][T30927] ? __lock_acquire+0x7d80/0x7d80 [ 1721.903256][T30927] should_fail_ex+0x394/0x4c0 [ 1721.907972][T30927] _copy_from_user+0x2f/0xe0 [ 1721.912594][T30927] perf_copy_attr+0x16a/0x820 [ 1721.917298][T30927] __se_sys_perf_event_open+0x11b/0x1c60 [ 1721.922938][T30927] ? mutex_unlock+0x10/0x10 [ 1721.927455][T30927] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1721.933118][T30927] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1721.939031][T30927] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1721.944668][T30927] do_syscall_64+0x55/0xb0 [ 1721.949080][T30927] ? clear_bhb_loop+0x40/0x90 [ 1721.953751][T30927] ? clear_bhb_loop+0x40/0x90 [ 1721.958424][T30927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1721.964312][T30927] RIP: 0033:0x7f5f6439e019 [ 1721.968725][T30927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.988415][T30927] RSP: 002b:00007f5f625d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1721.996840][T30927] RAX: ffffffffffffffda RBX: 00007f5f64626090 RCX: 00007f5f6439e019 [ 1722.004809][T30927] RDX: ffffffbfffffffff RSI: 0000000000000000 RDI: 0000200000000200 [ 1722.012776][T30927] RBP: 00007f5f625d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1722.020752][T30927] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1722.028734][T30927] R13: 00007f5f64626128 R14: 00007f5f64626090 R15: 00007ffc96b6ff08 [ 1722.036721][T30927] [ 1722.184696][T30931] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7947'. [ 1723.528352][T30963] netlink: 'syz.3.7960': attribute type 21 has an invalid length. [ 1723.550924][T30963] IPv6: NLM_F_CREATE should be specified when creating new route [ 1723.575326][T30963] IPv6: Can't replace route, no match found [ 1724.507108][T30991] netlink: 'syz.3.7970': attribute type 64 has an invalid length. [ 1725.436322][T31022] netlink: 'syz.1.7979': attribute type 39 has an invalid length. [ 1726.080237][T31042] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7988'. [ 1726.318314][T31053] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7992'. [ 1726.376962][T31056] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.7993'. [ 1726.846137][T31071] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.7999'. [ 1726.950269][T31075] netlink: 'syz.1.8000': attribute type 4 has an invalid length. [ 1727.640388][T31093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8006'. [ 1727.680529][T31093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8006'. [ 1727.714987][T31093] netlink: 13 bytes leftover after parsing attributes in process `syz.3.8006'. [ 1727.895725][T31099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8008'. [ 1728.865948][T31120] netlink: 'syz.2.8017': attribute type 4 has an invalid length. [ 1728.894972][T31120] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8017'. [ 1728.931076][T31120] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1729.352877][T31139] netlink: 'syz.2.8023': attribute type 10 has an invalid length. [ 1729.560853][T31135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1730.075220][T31157] netlink: 'syz.1.8031': attribute type 4 has an invalid length. [ 1730.103355][T31157] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8031'. [ 1730.133808][T31157] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1730.399985][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.417903][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.202251][T31180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1731.458814][T31191] __nla_validate_parse: 1 callbacks suppressed [ 1731.458836][T31191] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.8043'. [ 1731.549565][T31191] netlink: 'syz.1.8043': attribute type 10 has an invalid length. [ 1731.588214][T31191] veth0_macvtap: left promiscuous mode [ 1731.973661][T31199] netlink: 'syz.0.8042': attribute type 4 has an invalid length. [ 1731.990125][T31199] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8042'. [ 1732.010074][T31199] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1732.482975][T31216] netlink: 'syz.1.8053': attribute type 4 has an invalid length. [ 1732.510045][T31216] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8053'. [ 1732.520123][T31216] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1732.685576][T31227] FAULT_INJECTION: forcing a failure. [ 1732.685576][T31227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.736968][T31227] CPU: 0 PID: 31227 Comm: syz.3.8056 Not tainted syzkaller #0 [ 1732.744501][T31227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1732.754585][T31227] Call Trace: [ 1732.757880][T31227] [ 1732.760822][T31227] dump_stack_lvl+0x18c/0x250 [ 1732.765542][T31227] ? show_regs_print_info+0x20/0x20 [ 1732.770804][T31227] ? load_image+0x420/0x420 [ 1732.775354][T31227] ? __might_fault+0xaa/0x120 [ 1732.780068][T31227] ? __lock_acquire+0x7d80/0x7d80 [ 1732.785126][T31227] ? __virt_addr_valid+0x10c/0x380 [ 1732.790284][T31227] should_fail_ex+0x394/0x4c0 [ 1732.795001][T31227] _copy_from_user+0x2f/0xe0 [ 1732.799650][T31227] generic_map_update_batch+0x58c/0x800 [ 1732.805291][T31227] ? rcu_read_unlock+0xa0/0xa0 [ 1732.810130][T31227] ? __fdget+0x180/0x210 [ 1732.814427][T31227] ? rcu_read_unlock+0xa0/0xa0 [ 1732.819240][T31227] bpf_map_do_batch+0x3f2/0x600 [ 1732.824143][T31227] ? bpf_lsm_key_alloc+0x10/0x10 [ 1732.829150][T31227] __sys_bpf+0x381/0x890 [ 1732.833451][T31227] ? bpf_link_show_fdinfo+0x390/0x390 [ 1732.838932][T31227] ? lock_chain_count+0x20/0x20 [ 1732.843865][T31227] __x64_sys_bpf+0x7c/0x90 [ 1732.848339][T31227] do_syscall_64+0x55/0xb0 [ 1732.852798][T31227] ? clear_bhb_loop+0x40/0x90 [ 1732.857524][T31227] ? clear_bhb_loop+0x40/0x90 [ 1732.862248][T31227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1732.868183][T31227] RIP: 0033:0x7f051a79e019 [ 1732.872637][T31227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1732.892293][T31227] RSP: 002b:00007f051b57f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1732.900796][T31227] RAX: ffffffffffffffda RBX: 00007f051aa25fa0 RCX: 00007f051a79e019 [ 1732.908816][T31227] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1732.917012][T31227] RBP: 00007f051b57f090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.925031][T31227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1732.933050][T31227] R13: 00007f051aa26038 R14: 00007f051aa25fa0 R15: 00007fff5507f558 [ 1732.941120][T31227] [ 1733.085663][T31235] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8051'. [ 1733.187838][T31235] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1733.383875][T31242] netlink: 'syz.1.8062': attribute type 29 has an invalid length. [ 1733.415432][T31242] netlink: 'syz.1.8062': attribute type 29 has an invalid length. [ 1733.772677][T31248] netlink: 'syz.2.8065': attribute type 4 has an invalid length. [ 1733.794683][T31248] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8065'. [ 1733.804196][T31248] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1734.268025][T31260] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8068'. [ 1734.453926][T31260] team0: Port device team_slave_0 removed [ 1734.489043][T31260] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1734.712744][T31281] netlink: 'syz.2.8076': attribute type 3 has an invalid length. [ 1734.734834][T31281] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8076'. [ 1735.053698][T31290] netlink: 'syz.2.8078': attribute type 4 has an invalid length. [ 1735.073838][T31290] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8078'. [ 1735.110154][T31290] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1735.430942][T31306] FAULT_INJECTION: forcing a failure. [ 1735.430942][T31306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.469262][T31306] CPU: 1 PID: 31306 Comm: syz.3.8084 Not tainted syzkaller #0 [ 1735.476810][T31306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1735.486919][T31306] Call Trace: [ 1735.490267][T31306] [ 1735.493225][T31302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1735.493238][T31306] dump_stack_lvl+0x18c/0x250 [ 1735.513126][T31306] ? show_regs_print_info+0x20/0x20 [ 1735.518387][T31306] ? load_image+0x420/0x420 [ 1735.522946][T31306] ? __might_fault+0xaa/0x120 [ 1735.527649][T31306] ? __lock_acquire+0x7d80/0x7d80 [ 1735.532687][T31306] ? __virt_addr_valid+0x10c/0x380 [ 1735.537821][T31306] should_fail_ex+0x394/0x4c0 [ 1735.542524][T31306] _copy_from_user+0x2f/0xe0 [ 1735.547128][T31306] generic_map_update_batch+0x58c/0x800 [ 1735.552725][T31306] ? rcu_read_unlock+0xa0/0xa0 [ 1735.557545][T31306] ? __fdget+0x180/0x210 [ 1735.561817][T31306] ? rcu_read_unlock+0xa0/0xa0 [ 1735.566590][T31306] bpf_map_do_batch+0x3f2/0x600 [ 1735.571477][T31306] ? bpf_lsm_key_alloc+0x10/0x10 [ 1735.576446][T31306] __sys_bpf+0x381/0x890 [ 1735.580705][T31306] ? bpf_link_show_fdinfo+0x390/0x390 [ 1735.586118][T31306] ? lock_chain_count+0x20/0x20 [ 1735.590999][T31306] __x64_sys_bpf+0x7c/0x90 [ 1735.595440][T31306] do_syscall_64+0x55/0xb0 [ 1735.599863][T31306] ? clear_bhb_loop+0x40/0x90 [ 1735.604557][T31306] ? clear_bhb_loop+0x40/0x90 [ 1735.609258][T31306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1735.615161][T31306] RIP: 0033:0x7f051a79e019 [ 1735.619587][T31306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.639212][T31306] RSP: 002b:00007f051b57f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1735.647663][T31306] RAX: ffffffffffffffda RBX: 00007f051aa25fa0 RCX: 00007f051a79e019 [ 1735.655647][T31306] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1735.663628][T31306] RBP: 00007f051b57f090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.671625][T31306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1735.679638][T31306] R13: 00007f051aa26038 R14: 00007f051aa25fa0 R15: 00007fff5507f558 [ 1735.687659][T31306] [ 1736.268688][T31326] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.8094'. [ 1736.323739][T31320] netlink: 'syz.0.8091': attribute type 4 has an invalid length. [ 1736.361880][T31320] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1736.427010][T31320] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1736.517472][T31337] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.8098'. [ 1736.567536][T31338] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.8098'. [ 1736.769344][T31344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1736.821410][T31346] netlink: 'syz.0.8108': attribute type 4 has an invalid length. [ 1736.848766][T31346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8108'. [ 1736.876732][T31346] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1736.939486][T31351] netlink: 'syz.3.8103': attribute type 10 has an invalid length. [ 1736.954797][T31351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8103'. [ 1737.200233][T31362] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.8105'. [ 1737.235986][T31364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1737.463519][T31372] netlink: 'syz.3.8112': attribute type 3 has an invalid length. [ 1737.484971][T31372] netlink: 16795 bytes leftover after parsing attributes in process `syz.3.8112'. [ 1737.582064][T31376] netlink: 'syz.2.8113': attribute type 4 has an invalid length. [ 1737.595376][T31376] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8113'. [ 1737.610728][T31376] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1737.806391][T31386] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.8118'. [ 1738.148827][T31402] netlink: 'syz.3.8126': attribute type 4 has an invalid length. [ 1738.164831][T31402] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8126'. [ 1738.185329][T31402] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1738.217404][T31400] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8125'. [ 1738.806240][T31431] FAULT_INJECTION: forcing a failure. [ 1738.806240][T31431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1738.842196][T31431] CPU: 1 PID: 31431 Comm: syz.2.8135 Not tainted syzkaller #0 [ 1738.849716][T31431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1738.859794][T31431] Call Trace: [ 1738.863105][T31431] [ 1738.866074][T31431] dump_stack_lvl+0x18c/0x250 [ 1738.870794][T31431] ? show_regs_print_info+0x20/0x20 [ 1738.876025][T31431] ? load_image+0x420/0x420 [ 1738.880569][T31431] ? __might_fault+0xaa/0x120 [ 1738.885277][T31431] ? __lock_acquire+0x7d80/0x7d80 [ 1738.890315][T31431] should_fail_ex+0x394/0x4c0 [ 1738.895010][T31431] _copy_from_iter+0x1cd/0x1290 [ 1738.899884][T31431] ? rep_movs_alternative+0x4a/0x90 [ 1738.905132][T31431] ? copyout_mc+0x70/0x70 [ 1738.909482][T31431] ? copyout_mc+0x70/0x70 [ 1738.913797][T31431] ? __virt_addr_valid+0x10c/0x380 [ 1738.918921][T31431] ? page_copy_sane+0x16a/0x270 [ 1738.923803][T31431] copy_page_from_iter+0x7b/0x100 [ 1738.928828][T31431] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1738.934660][T31431] unix_stream_sendmsg+0x562/0xbf0 [ 1738.939816][T31431] ? unix_show_fdinfo+0x280/0x280 [ 1738.944897][T31431] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1738.951339][T31431] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1738.956896][T31431] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1738.962222][T31431] ? security_socket_sendmsg+0x80/0xa0 [ 1738.967684][T31431] ? unix_show_fdinfo+0x280/0x280 [ 1738.972707][T31431] ____sys_sendmsg+0x61b/0x980 [ 1738.977481][T31431] ? __asan_memset+0x22/0x40 [ 1738.982089][T31431] ? __sys_sendmsg_sock+0x30/0x30 [ 1738.987114][T31431] ? __import_iovec+0x5f2/0x850 [ 1738.991997][T31431] ? import_iovec+0x73/0xa0 [ 1738.996513][T31431] ___sys_sendmsg+0x2a6/0x360 [ 1739.001202][T31431] ? __sys_sendmsg+0x2b0/0x2b0 [ 1739.005987][T31431] ? trace_call_bpf+0xc3/0x6c0 [ 1739.010766][T31431] __se_sys_sendmsg+0x1d0/0x2c0 [ 1739.015621][T31431] ? __x64_sys_sendmsg+0x80/0x80 [ 1739.020576][T31431] ? lockdep_hardirqs_on+0x98/0x150 [ 1739.025802][T31431] do_syscall_64+0x55/0xb0 [ 1739.030242][T31431] ? clear_bhb_loop+0x40/0x90 [ 1739.034946][T31431] ? clear_bhb_loop+0x40/0x90 [ 1739.039645][T31431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.045551][T31431] RIP: 0033:0x7f409af9e019 [ 1739.049983][T31431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1739.069601][T31431] RSP: 002b:00007f40991f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.078022][T31431] RAX: ffffffffffffffda RBX: 00007f409b225fa0 RCX: 00007f409af9e019 [ 1739.086011][T31431] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1739.094040][T31431] RBP: 00007f40991f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.102022][T31431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.109996][T31431] R13: 00007f409b226038 R14: 00007f409b225fa0 R15: 00007fffdfa11c98 [ 1739.118001][T31431] [ 1739.143681][T31438] netlink: 'syz.3.8137': attribute type 4 has an invalid length. [ 1739.171948][T31438] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1739.345368][T31447] FAULT_INJECTION: forcing a failure. [ 1739.345368][T31447] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.373039][T31447] CPU: 1 PID: 31447 Comm: syz.0.8141 Not tainted syzkaller #0 [ 1739.380567][T31447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1739.390678][T31447] Call Trace: [ 1739.393976][T31447] [ 1739.396917][T31447] dump_stack_lvl+0x18c/0x250 [ 1739.401607][T31447] ? sctp_sendmsg+0x1519/0x27b0 [ 1739.406467][T31447] ? ___sys_sendmsg+0x2a6/0x360 [ 1739.411323][T31447] ? show_regs_print_info+0x20/0x20 [ 1739.416515][T31447] ? load_image+0x420/0x420 [ 1739.421025][T31447] should_fail_ex+0x394/0x4c0 [ 1739.425705][T31447] should_failslab+0x9/0x20 [ 1739.430209][T31447] slab_pre_alloc_hook+0x59/0x300 [ 1739.435236][T31447] ? sctp_add_bind_addr+0x8c/0x360 [ 1739.440342][T31447] __kmem_cache_alloc_node+0x53/0x250 [ 1739.445717][T31447] ? sctp_add_bind_addr+0x8c/0x360 [ 1739.450839][T31447] kmalloc_trace+0x2a/0xe0 [ 1739.455259][T31447] sctp_add_bind_addr+0x8c/0x360 [ 1739.460202][T31447] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1739.465834][T31447] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1739.471548][T31447] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1739.477618][T31447] ? sctp_v6_is_any+0x64/0x70 [ 1739.482288][T31447] ? sctp_copy_one_addr+0x8c/0x350 [ 1739.487404][T31447] sctp_bind_addr_copy+0xb3/0x3c0 [ 1739.492437][T31447] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1739.498761][T31447] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1739.504043][T31447] ? __sctp_connect+0xd80/0xd80 [ 1739.508888][T31447] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1739.514263][T31447] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1739.519806][T31447] ? security_sctp_bind_connect+0x89/0xb0 [ 1739.525523][T31447] sctp_sendmsg+0x1519/0x27b0 [ 1739.530209][T31447] ? sctp_getsockopt+0xb60/0xb60 [ 1739.535145][T31447] ? aa_af_perm+0x330/0x330 [ 1739.539647][T31447] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1739.546065][T31447] ? sock_rps_record_flow+0x19/0x3f0 [ 1739.551350][T31447] ? inet_sendmsg+0xce/0x2a0 [ 1739.555937][T31447] ? inet_send_prepare+0x250/0x250 [ 1739.561044][T31447] ____sys_sendmsg+0x61b/0x980 [ 1739.565820][T31447] ? __asan_memset+0x22/0x40 [ 1739.570408][T31447] ? __sys_sendmsg_sock+0x30/0x30 [ 1739.575422][T31447] ? __import_iovec+0x5f2/0x850 [ 1739.580276][T31447] ? import_iovec+0x73/0xa0 [ 1739.584784][T31447] ___sys_sendmsg+0x2a6/0x360 [ 1739.589454][T31447] ? get_pid_task+0x20/0x1e0 [ 1739.594047][T31447] ? __sys_sendmsg+0x2b0/0x2b0 [ 1739.598818][T31447] ? __lock_acquire+0x7d80/0x7d80 [ 1739.603857][T31447] __se_sys_sendmsg+0x1d0/0x2c0 [ 1739.608708][T31447] ? __x64_sys_sendmsg+0x80/0x80 [ 1739.613677][T31447] ? lockdep_hardirqs_on+0x98/0x150 [ 1739.618904][T31447] do_syscall_64+0x55/0xb0 [ 1739.623328][T31447] ? clear_bhb_loop+0x40/0x90 [ 1739.628005][T31447] ? clear_bhb_loop+0x40/0x90 [ 1739.632679][T31447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.638591][T31447] RIP: 0033:0x7f154ab9e019 [ 1739.643002][T31447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1739.662624][T31447] RSP: 002b:00007f154bab8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.671033][T31447] RAX: ffffffffffffffda RBX: 00007f154ae25fa0 RCX: 00007f154ab9e019 [ 1739.678999][T31447] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1739.686963][T31447] RBP: 00007f154bab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.694928][T31447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.702893][T31447] R13: 00007f154ae26038 R14: 00007f154ae25fa0 R15: 00007ffe3d5d1098 [ 1739.710895][T31447] [ 1740.672091][T31472] netlink: 'syz.3.8150': attribute type 29 has an invalid length. [ 1740.690605][T31472] netlink: 'syz.3.8150': attribute type 29 has an invalid length. [ 1740.768987][T31468] netlink: 'syz.2.8148': attribute type 4 has an invalid length. [ 1740.791409][T31468] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1741.091826][T31479] netlink: 'syz.1.8152': attribute type 21 has an invalid length. [ 1741.989725][T31515] netlink: 'syz.0.8164': attribute type 4 has an invalid length. [ 1742.032404][T31515] __nla_validate_parse: 6 callbacks suppressed [ 1742.032445][T31515] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8164'. [ 1742.063525][T31515] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1742.358451][T31521] netlink: 'syz.1.8166': attribute type 10 has an invalid length. [ 1742.710375][T31539] netlink: 'syz.2.8170': attribute type 10 has an invalid length. [ 1742.735283][T31530] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8169'. [ 1742.790342][T31539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1742.844198][T31539] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1742.908037][T31539] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1742.997178][T31539] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1743.407316][T31544] netlink: 'syz.1.8175': attribute type 4 has an invalid length. [ 1743.444727][T31544] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8175'. [ 1743.454057][T31544] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1743.832255][T31558] netlink: 'syz.1.8181': attribute type 9 has an invalid length. [ 1743.869708][T31558] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8181'. [ 1744.708536][T31580] netlink: 'syz.0.8189': attribute type 4 has an invalid length. [ 1744.740814][T31580] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8189'. [ 1744.757372][T31580] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1744.812321][T31578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8188'. [ 1745.054421][T31590] FAULT_INJECTION: forcing a failure. [ 1745.054421][T31590] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.094774][T31590] CPU: 0 PID: 31590 Comm: syz.3.8194 Not tainted syzkaller #0 [ 1745.102287][T31590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1745.112342][T31590] Call Trace: [ 1745.115623][T31590] [ 1745.118547][T31590] dump_stack_lvl+0x18c/0x250 [ 1745.123228][T31590] ? show_regs_print_info+0x20/0x20 [ 1745.128420][T31590] ? load_image+0x420/0x420 [ 1745.132927][T31590] ? __might_sleep+0xe0/0xe0 [ 1745.137515][T31590] ? __lock_acquire+0x7d80/0x7d80 [ 1745.142538][T31590] should_fail_ex+0x394/0x4c0 [ 1745.147218][T31590] should_failslab+0x9/0x20 [ 1745.151720][T31590] slab_pre_alloc_hook+0x59/0x300 [ 1745.156755][T31590] kmem_cache_alloc_node+0x5e/0x310 [ 1745.161956][T31590] ? perf_event_alloc+0x146/0x2150 [ 1745.167071][T31590] perf_event_alloc+0x146/0x2150 [ 1745.172013][T31590] ? find_lively_task_by_vpid+0x19/0x290 [ 1745.177647][T31590] ? find_lively_task_by_vpid+0x19/0x290 [ 1745.183280][T31590] __se_sys_perf_event_open+0x740/0x1c60 [ 1745.188938][T31590] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1745.194673][T31590] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1745.200312][T31590] ? lock_chain_count+0x20/0x20 [ 1745.205160][T31590] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1745.211143][T31590] ? lockdep_hardirqs_on+0x98/0x150 [ 1745.216338][T31590] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1745.221972][T31590] do_syscall_64+0x55/0xb0 [ 1745.226380][T31590] ? clear_bhb_loop+0x40/0x90 [ 1745.231051][T31590] ? clear_bhb_loop+0x40/0x90 [ 1745.235733][T31590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1745.241619][T31590] RIP: 0033:0x7f051a79e019 [ 1745.246030][T31590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.265635][T31590] RSP: 002b:00007f051b57f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1745.274046][T31590] RAX: ffffffffffffffda RBX: 00007f051aa25fa0 RCX: 00007f051a79e019 [ 1745.282013][T31590] RDX: ffffffbfffffffff RSI: 0000000000000000 RDI: 0000200000000200 [ 1745.289980][T31590] RBP: 00007f051b57f090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.297945][T31590] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1745.305931][T31590] R13: 00007f051aa26038 R14: 00007f051aa25fa0 R15: 00007fff5507f558 [ 1745.313908][T31590] [ 1745.509793][T31599] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8195'. [ 1745.546959][T31597] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8195'. [ 1746.236154][T31607] netlink: 'syz.2.8197': attribute type 1 has an invalid length. [ 1746.622548][T31611] netlink: 'syz.3.8200': attribute type 4 has an invalid length. [ 1746.652943][T31611] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8200'. [ 1746.674893][T31611] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1746.706998][T31615] netlink: 'syz.0.8201': attribute type 11 has an invalid length. [ 1747.022851][T31623] bridge_slave_1: left allmulticast mode [ 1747.114619][T31623] bridge_slave_1: left promiscuous mode [ 1747.125106][T31623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.201280][T31623] bridge_slave_0: left allmulticast mode [ 1747.215241][T31623] bridge_slave_0: left promiscuous mode [ 1747.241427][T31623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.697913][T31650] __nla_validate_parse: 2 callbacks suppressed [ 1748.697931][T31650] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8212'. [ 1748.872768][T31650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1748.894743][T31650] bond0 (unregistering): Released all slaves [ 1748.941337][T31648] netlink: 'syz.2.8213': attribute type 4 has an invalid length. [ 1748.961060][T31648] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1749.024819][T31648] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1749.610457][T31683] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8227'. [ 1749.641889][T31685] netlink: 'syz.0.8226': attribute type 3 has an invalid length. [ 1749.654059][T31679] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8224'. [ 1749.664862][T31685] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1749.713758][T31687] C: renamed from team_slave_0 [ 1749.755360][T31687] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1749.770359][T31686] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1749.904017][T31691] netlink: 'syz.0.8229': attribute type 4 has an invalid length. [ 1749.924997][T31691] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8229'. [ 1749.934500][T31691] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1750.017858][T31700] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8230'. [ 1750.377813][T31716] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.8237'. [ 1751.612301][T31770] netlink: 'syz.0.8254': attribute type 29 has an invalid length. [ 1751.641594][T31770] netlink: 'syz.0.8254': attribute type 29 has an invalid length. [ 1751.701258][T31778] netlink: 'syz.3.8257': attribute type 4 has an invalid length. [ 1752.476319][T31800] netlink: 'syz.0.8267': attribute type 4 has an invalid length. [ 1752.504774][T31800] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1754.007920][T31825] netlink: 'syz.3.8275': attribute type 2 has an invalid length. [ 1754.035657][T31825] __nla_validate_parse: 5 callbacks suppressed [ 1754.035673][T31825] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8275'. [ 1754.506612][T31846] netlink: 'syz.0.8281': attribute type 2 has an invalid length. [ 1754.524816][T31846] netlink: 'syz.0.8281': attribute type 8 has an invalid length. [ 1754.543244][T31846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8281'. [ 1754.600770][T31849] netlink: 'syz.1.8283': attribute type 4 has an invalid length. [ 1754.633743][T31849] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8283'. [ 1754.645942][T31849] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1754.848521][T31854] netlink: 'syz.3.8284': attribute type 1 has an invalid length. [ 1754.907187][T31854] netlink: 'syz.3.8284': attribute type 29 has an invalid length. [ 1754.918257][T31856] netlink: 'syz.2.8285': attribute type 4 has an invalid length. [ 1754.928645][T31856] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8285'. [ 1754.956801][T31856] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1755.003785][T31854] netlink: 'syz.3.8284': attribute type 29 has an invalid length. [ 1755.090573][T31859] netlink: 'syz.3.8284': attribute type 29 has an invalid length. [ 1755.250915][T31864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1755.492882][T31871] netlink: 'syz.0.8291': attribute type 4 has an invalid length. [ 1755.522773][T31871] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8291'. [ 1755.551579][T31873] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.8292'. [ 1755.785520][T31877] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.8293'. [ 1755.843920][T31880] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8294'. [ 1756.127922][T31884] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8297'. [ 1756.150956][T31884] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1756.460128][ T5776] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 1757.002794][T31910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8306'. [ 1757.227703][T31915] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1757.570114][T31921] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1757.597388][T31923] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1757.684047][ T5776] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 1758.366559][T31945] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1759.039883][T31956] validate_nla: 20 callbacks suppressed [ 1759.039920][T31956] netlink: 'syz.2.8325': attribute type 4 has an invalid length. [ 1759.083107][T31956] __nla_validate_parse: 5 callbacks suppressed [ 1759.083145][T31956] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1759.111059][T31956] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1759.426546][T31967] syzkaller0: entered promiscuous mode [ 1759.432274][T31967] syzkaller0: entered allmulticast mode [ 1762.521044][T31974] netlink: 'syz.0.8332': attribute type 4 has an invalid length. [ 1762.529178][T31974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8332'. [ 1762.538976][T31974] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1762.598296][T31995] netlink: 'syz.3.8338': attribute type 4 has an invalid length. [ 1762.614755][T31995] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8338'. [ 1762.623840][T31995] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1762.651060][T31997] FAULT_INJECTION: forcing a failure. [ 1762.651060][T31997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.666158][T31997] CPU: 1 PID: 31997 Comm: syz.0.8340 Not tainted syzkaller #0 [ 1762.673681][T31997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1762.683776][T31997] Call Trace: [ 1762.687098][T31997] [ 1762.690068][T31997] dump_stack_lvl+0x18c/0x250 [ 1762.694798][T31997] ? show_regs_print_info+0x20/0x20 [ 1762.700052][T31997] ? load_image+0x420/0x420 [ 1762.704612][T31997] ? __might_fault+0xaa/0x120 [ 1762.709333][T31997] ? __lock_acquire+0x7d80/0x7d80 [ 1762.714396][T31997] ? __virt_addr_valid+0x10c/0x380 [ 1762.719566][T31997] should_fail_ex+0x394/0x4c0 [ 1762.724302][T31997] _copy_from_user+0x2f/0xe0 [ 1762.728938][T31997] generic_map_update_batch+0x53e/0x800 [ 1762.734660][T31997] ? rcu_read_unlock+0xa0/0xa0 [ 1762.739493][T31997] ? __fdget+0x180/0x210 [ 1762.743777][T31997] ? rcu_read_unlock+0xa0/0xa0 [ 1762.748604][T31997] bpf_map_do_batch+0x3f2/0x600 [ 1762.753494][T31997] ? bpf_lsm_key_alloc+0x10/0x10 [ 1762.758477][T31997] __sys_bpf+0x381/0x890 [ 1762.762741][T31997] ? bpf_link_show_fdinfo+0x390/0x390 [ 1762.768165][T31997] ? lock_chain_count+0x20/0x20 [ 1762.773050][T31997] __x64_sys_bpf+0x7c/0x90 [ 1762.777485][T31997] do_syscall_64+0x55/0xb0 [ 1762.781941][T31997] ? clear_bhb_loop+0x40/0x90 [ 1762.786653][T31997] ? clear_bhb_loop+0x40/0x90 [ 1762.791348][T31997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1762.797259][T31997] RIP: 0033:0x7f154ab9e019 [ 1762.801685][T31997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.821303][T31997] RSP: 002b:00007f154bab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1762.829733][T31997] RAX: ffffffffffffffda RBX: 00007f154ae25fa0 RCX: 00007f154ab9e019 [ 1762.837760][T31997] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1762.845786][T31997] RBP: 00007f154bab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.853769][T31997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1762.861751][T31997] R13: 00007f154ae26038 R14: 00007f154ae25fa0 R15: 00007ffe3d5d1098 [ 1762.869767][T31997] [ 1762.966492][T31999] netlink: 'syz.2.8341': attribute type 3 has an invalid length. [ 1762.997335][T31999] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.8341'. [ 1763.184871][T27444] Bluetooth: hci0: command 0x0406 tx timeout [ 1763.782885][T32016] netlink: 'syz.3.8348': attribute type 4 has an invalid length. [ 1763.814806][T32016] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8348'. [ 1763.824156][T32016] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1764.020859][T32024] netlink: 'syz.1.8351': attribute type 4 has an invalid length. [ 1764.044744][T32024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8351'. [ 1764.074812][T32024] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1764.486027][T32047] netlink: 'syz.1.8361': attribute type 21 has an invalid length. [ 1764.505250][T32047] netlink: 'syz.1.8361': attribute type 3 has an invalid length. [ 1764.524946][T32051] FAULT_INJECTION: forcing a failure. [ 1764.524946][T32051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.540119][T32047] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8361'. [ 1764.554944][T32051] CPU: 0 PID: 32051 Comm: syz.0.8362 Not tainted syzkaller #0 [ 1764.562444][T32051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1764.572510][T32051] Call Trace: [ 1764.575789][T32051] [ 1764.578715][T32051] dump_stack_lvl+0x18c/0x250 [ 1764.583394][T32051] ? show_regs_print_info+0x20/0x20 [ 1764.588596][T32051] ? load_image+0x420/0x420 [ 1764.593096][T32051] ? __might_fault+0xaa/0x120 [ 1764.597767][T32051] ? __lock_acquire+0x7d80/0x7d80 [ 1764.602803][T32051] should_fail_ex+0x394/0x4c0 [ 1764.607484][T32051] _copy_from_iter+0x1cd/0x1290 [ 1764.612335][T32051] ? rep_movs_alternative+0x4a/0x90 [ 1764.617571][T32051] ? copyout_mc+0x70/0x70 [ 1764.621906][T32051] ? copyout_mc+0x70/0x70 [ 1764.626245][T32051] ? __virt_addr_valid+0x10c/0x380 [ 1764.631361][T32051] ? page_copy_sane+0x16a/0x270 [ 1764.636210][T32051] copy_page_from_iter+0x7b/0x100 [ 1764.641231][T32051] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1764.647045][T32051] unix_stream_sendmsg+0x562/0xbf0 [ 1764.652162][T32051] ? unix_show_fdinfo+0x280/0x280 [ 1764.657177][T32051] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1764.663593][T32051] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1764.669131][T32051] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1764.674417][T32051] ? security_socket_sendmsg+0x80/0xa0 [ 1764.679864][T32051] ? unix_show_fdinfo+0x280/0x280 [ 1764.684879][T32051] ____sys_sendmsg+0x61b/0x980 [ 1764.689643][T32051] ? __asan_memset+0x22/0x40 [ 1764.694227][T32051] ? __sys_sendmsg_sock+0x30/0x30 [ 1764.699242][T32051] ? __import_iovec+0x5f2/0x850 [ 1764.704093][T32051] ? import_iovec+0x73/0xa0 [ 1764.708594][T32051] ___sys_sendmsg+0x2a6/0x360 [ 1764.713265][T32051] ? get_pid_task+0x20/0x1e0 [ 1764.717862][T32051] ? __sys_sendmsg+0x2b0/0x2b0 [ 1764.722633][T32051] ? __lock_acquire+0x7d80/0x7d80 [ 1764.727671][T32051] __se_sys_sendmsg+0x1d0/0x2c0 [ 1764.732513][T32051] ? perf_trace_preemptirq_template+0x269/0x330 [ 1764.738754][T32051] ? __x64_sys_sendmsg+0x80/0x80 [ 1764.743693][T32051] ? lockdep_hardirqs_on+0x98/0x150 [ 1764.748896][T32051] do_syscall_64+0x55/0xb0 [ 1764.753307][T32051] ? clear_bhb_loop+0x40/0x90 [ 1764.757976][T32051] ? clear_bhb_loop+0x40/0x90 [ 1764.762643][T32051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1764.768527][T32051] RIP: 0033:0x7f154ab9e019 [ 1764.772934][T32051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.792535][T32051] RSP: 002b:00007f154bab8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1764.800946][T32051] RAX: ffffffffffffffda RBX: 00007f154ae25fa0 RCX: 00007f154ab9e019 [ 1764.808909][T32051] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1764.816875][T32051] RBP: 00007f154bab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.824851][T32051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1764.832815][T32051] R13: 00007f154ae26038 R14: 00007f154ae25fa0 R15: 00007ffe3d5d1098 [ 1764.840791][T32051] [ 1764.871912][T32048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8361'. [ 1765.356445][T32076] FAULT_INJECTION: forcing a failure. [ 1765.356445][T32076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1765.357954][T32076] [ 1765.357961][T32076] ====================================================== [ 1765.357967][T32076] WARNING: possible circular locking dependency detected [ 1765.357991][T32076] syzkaller #0 Not tainted [ 1765.358000][T32076] ------------------------------------------------------ [ 1765.358005][T32076] syz.2.8369/32076 is trying to acquire lock: [ 1765.358014][T32076] ffffffff8d1260a0 (console_owner){-...}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1765.358076][T32076] [ 1765.358076][T32076] but task is already holding lock: [ 1765.358081][T32076] ffff888017c403d8 (&n->list_lock){-.-.}-{2:2}, at: get_partial_node+0x36/0x550 [ 1765.358115][T32076] [ 1765.358115][T32076] which lock already depends on the new lock. [ 1765.358115][T32076] [ 1765.358120][T32076] [ 1765.358120][T32076] the existing dependency chain (in reverse order) is: [ 1765.358125][T32076] [ 1765.358125][T32076] -> #4 (&n->list_lock){-.-.}-{2:2}: [ 1765.358145][T32076] _raw_spin_lock_irqsave+0xb4/0x100 [ 1765.358168][T32076] get_partial_node+0x36/0x550 [ 1765.358183][T32076] ___slab_alloc+0x9cc/0x12f0 [ 1765.358197][T32076] kmem_cache_alloc+0x109/0x2c0 [ 1765.358217][T32076] debug_objects_fill_pool+0x53a/0x790 [ 1765.358236][T32076] debug_object_activate+0x36/0x500 [ 1765.358254][T32076] insert_work+0x35/0x310 [ 1765.358271][T32076] __queue_work+0xbfd/0xfd0 [ 1765.358286][T32076] queue_work_on+0x128/0x1f0 [ 1765.358301][T32076] netdevice_event+0x755/0x890 [ 1765.358369][T32076] notifier_call_chain+0x18f/0x380 [ 1765.358388][T32076] register_netdevice+0x1670/0x1ba0 [ 1765.358405][T32076] __ip_tunnel_create+0x3bc/0x4d0 [ 1765.358485][T32076] ip_tunnel_init_net+0x2e2/0x7c0 [ 1765.358500][T32076] ops_init+0x391/0x640 [ 1765.358513][T32076] setup_net+0x3b6/0xa20 [ 1765.358533][T32076] copy_net_ns+0x35e/0x5d0 [ 1765.358552][T32076] create_new_namespaces+0x3ce/0x700 [ 1765.358569][T32076] unshare_nsproxy_namespaces+0x11a/0x160 [ 1765.358587][T32076] ksys_unshare+0x4fa/0x8f0 [ 1765.358604][T32076] __x64_sys_unshare+0x38/0x40 [ 1765.358620][T32076] do_syscall_64+0x55/0xb0 [ 1765.358643][T32076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.358660][T32076] [ 1765.358660][T32076] -> #3 (&pool->lock){-.-.}-{2:2}: [ 1765.358681][T32076] _raw_spin_lock+0x2e/0x40 [ 1765.358702][T32076] __queue_work+0x72f/0xfd0 [ 1765.358716][T32076] queue_work_on+0x128/0x1f0 [ 1765.358730][T32076] rpm_suspend+0x1133/0x1b60 [ 1765.358752][T32076] __pm_runtime_idle+0x12f/0x1a0 [ 1765.358771][T32076] __device_attach+0x352/0x420 [ 1765.358792][T32076] bus_probe_device+0x180/0x260 [ 1765.358810][T32076] device_add+0x87c/0xc40 [ 1765.358825][T32076] serial_base_port_add+0x2f6/0x430 [ 1765.358855][T32076] serial_core_register_port+0x378/0x20b0 [ 1765.358878][T32076] serial8250_register_8250_port+0x15fd/0x1f40 [ 1765.358895][T32076] serial_pnp_probe+0x577/0x750 [ 1765.358911][T32076] pnp_device_probe+0x305/0x4b0 [ 1765.358937][T32076] really_probe+0x247/0xae0 [ 1765.358957][T32076] __driver_probe_device+0x1f5/0x390 [ 1765.358977][T32076] driver_probe_device+0x4f/0x420 [ 1765.358998][T32076] __driver_attach+0x444/0x6d0 [ 1765.359017][T32076] bus_for_each_dev+0x235/0x2b0 [ 1765.359036][T32076] bus_add_driver+0x340/0x630 [ 1765.359054][T32076] driver_register+0x23a/0x310 [ 1765.359067][T32076] serial8250_init+0x9a/0x170 [ 1765.359124][T32076] do_one_initcall+0x242/0x790 [ 1765.359152][T32076] do_initcall_level+0x13d/0x1f0 [ 1765.359209][T32076] do_initcalls+0x69/0xd0 [ 1765.359228][T32076] kernel_init_freeable+0x3d9/0x560 [ 1765.359246][T32076] kernel_init+0x1d/0x1c0 [ 1765.359266][T32076] ret_from_fork+0x48/0x80 [ 1765.359284][T32076] ret_from_fork_asm+0x11/0x20 [ 1765.359302][T32076] [ 1765.359302][T32076] -> #2 (&dev->power.lock){-...}-{2:2}: [ 1765.359329][T32076] _raw_spin_lock_irqsave+0xb4/0x100 [ 1765.359350][T32076] __pm_runtime_resume+0x10f/0x170 [ 1765.359369][T32076] __uart_start+0x171/0x3e0 [ 1765.359389][T32076] uart_write+0x449/0x5d0 [ 1765.359402][T32076] n_tty_write+0xd3d/0x11e0 [ 1765.359421][T32076] file_tty_write+0x529/0x960 [ 1765.359437][T32076] vfs_write+0x474/0x9a0 [ 1765.359456][T32076] ksys_write+0x151/0x260 [ 1765.359475][T32076] do_syscall_64+0x55/0xb0 [ 1765.359490][T32076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.359506][T32076] [ 1765.359506][T32076] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1765.359526][T32076] _raw_spin_lock_irqsave+0xb4/0x100 [ 1765.359546][T32076] serial8250_console_write+0x181/0x18b0 [ 1765.359564][T32076] console_flush_all+0x6ad/0xcf0 [ 1765.359578][T32076] console_unlock+0xad/0x350 [ 1765.359591][T32076] vprintk_emit+0x497/0x610 [ 1765.359604][T32076] _printk+0xde/0x130 [ 1765.359620][T32076] register_console+0xb96/0xf00 [ 1765.359633][T32076] univ8250_console_init+0x45/0x50 [ 1765.359646][T32076] console_init+0x17b/0x5d0 [ 1765.359665][T32076] start_kernel+0x2c8/0x4e0 [ 1765.359679][T32076] x86_64_start_reservations+0x2a/0x30 [ 1765.359692][T32076] copy_bootdata+0x0/0xd0 [ 1765.359704][T32076] secondary_startup_64_no_verify+0x179/0x17b [ 1765.359721][T32076] [ 1765.359721][T32076] -> #0 (console_owner){-...}-{0:0}: [ 1765.359742][T32076] __lock_acquire+0x37ef/0x7d80 [ 1765.359758][T32076] lock_acquire+0x19e/0x420 [ 1765.359774][T32076] console_flush_all+0x676/0xcf0 [ 1765.359792][T32076] console_unlock+0xad/0x350 [ 1765.359808][T32076] vprintk_emit+0x497/0x610 [ 1765.359825][T32076] _printk+0xde/0x130 [ 1765.359844][T32076] should_fail_ex+0x375/0x4c0 [ 1765.359861][T32076] strncpy_from_user+0x36/0x2f0 [ 1765.359882][T32076] strncpy_from_user_nofault+0x71/0x140 [ 1765.359902][T32076] bpf_probe_read_user_str+0x2a/0x70 [ 1765.359913][T32076] bpf_prog_c5968c940db16fdc+0x45/0x47 [ 1765.359927][T32076] trace_call_bpf+0x333/0x6c0 [ 1765.359937][T32076] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1765.359951][T32076] perf_trace_lock_acquire+0x342/0x400 [ 1765.359962][T32076] lock_acquire+0x3ef/0x420 [ 1765.359974][T32076] put_cpu_partial+0x91/0x250 [ 1765.359984][T32076] get_partial_node+0x1f1/0x550 [ 1765.359995][T32076] ___slab_alloc+0x9cc/0x12f0 [ 1765.360005][T32076] __kmem_cache_alloc_node+0x11f/0x250 [ 1765.360021][T32076] kmalloc_trace+0x2a/0xe0 [ 1765.360036][T32076] sctp_add_bind_addr+0x8c/0x360 [ 1765.360049][T32076] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1765.360065][T32076] sctp_bind_addr_copy+0xb3/0x3c0 [ 1765.360081][T32076] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1765.360100][T32076] sctp_sendmsg+0x1519/0x27b0 [ 1765.360117][T32076] ____sys_sendmsg+0x61b/0x980 [ 1765.360133][T32076] ___sys_sendmsg+0x2a6/0x360 [ 1765.360147][T32076] __se_sys_sendmsg+0x1d0/0x2c0 [ 1765.360162][T32076] do_syscall_64+0x55/0xb0 [ 1765.360177][T32076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.360193][T32076] [ 1765.360193][T32076] other info that might help us debug this: [ 1765.360193][T32076] [ 1765.360198][T32076] Chain exists of: [ 1765.360198][T32076] console_owner --> &pool->lock --> &n->list_lock [ 1765.360198][T32076] [ 1765.360221][T32076] Possible unsafe locking scenario: [ 1765.360221][T32076] [ 1765.360226][T32076] CPU0 CPU1 [ 1765.360230][T32076] ---- ---- [ 1765.360234][T32076] lock(&n->list_lock); [ 1765.360243][T32076] lock(&pool->lock); [ 1765.360250][T32076] lock(&n->list_lock); [ 1765.360258][T32076] lock(console_owner); [ 1765.360265][T32076] [ 1765.360265][T32076] *** DEADLOCK *** [ 1765.360265][T32076] [ 1765.360268][T32076] 6 locks held by syz.2.8369/32076: [ 1765.360275][T32076] #0: ffff888062f60130 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xb62/0x27b0 [ 1765.360307][T32076] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: sctp_copy_local_addr_list+0xa4/0x4e0 [ 1765.360341][T32076] #2: ffff888017c403d8 (&n->list_lock){-.-.}-{2:2}, at: get_partial_node+0x36/0x550 [ 1765.360369][T32076] #3: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 1765.360398][T32076] #4: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 1765.360439][T32076] #5: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1765.360479][T32076] [ 1765.360479][T32076] stack backtrace: [ 1765.360485][T32076] CPU: 0 PID: 32076 Comm: syz.2.8369 Not tainted syzkaller #0 [ 1765.360501][T32076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1765.360511][T32076] Call Trace: [ 1765.360517][T32076] [ 1765.360524][T32076] dump_stack_lvl+0x18c/0x250 [ 1765.360542][T32076] ? load_image+0x420/0x420 [ 1765.360564][T32076] ? show_regs_print_info+0x20/0x20 [ 1765.360589][T32076] ? print_circular_bug+0x12b/0x1a0 [ 1765.360612][T32076] check_noncircular+0x2fc/0x400 [ 1765.360636][T32076] ? print_deadlock_bug+0x5d0/0x5d0 [ 1765.360654][T32076] ? lockdep_lock+0xf5/0x230 [ 1765.360682][T32076] __lock_acquire+0x37ef/0x7d80 [ 1765.360710][T32076] ? verify_lock_unused+0x140/0x140 [ 1765.360736][T32076] lock_acquire+0x19e/0x420 [ 1765.360750][T32076] ? console_flush_all+0x10b/0xcf0 [ 1765.360769][T32076] ? __lock_acquire+0x7d80/0x7d80 [ 1765.360782][T32076] ? do_raw_spin_lock+0x11f/0x2b0 [ 1765.360798][T32076] ? read_lock_is_recursive+0x20/0x20 [ 1765.360812][T32076] ? __rwlock_init+0x150/0x150 [ 1765.360830][T32076] ? do_raw_spin_unlock+0x121/0x230 [ 1765.360854][T32076] console_flush_all+0x676/0xcf0 [ 1765.360873][T32076] ? console_flush_all+0x10b/0xcf0 [ 1765.360895][T32076] ? console_flush_all+0x10b/0xcf0 [ 1765.360921][T32076] ? is_console_locked+0x20/0x20 [ 1765.360939][T32076] ? cmp_ex_search+0x1e/0x80 [ 1765.360991][T32076] ? cmp_ex_search+0x1e/0x80 [ 1765.361015][T32076] console_unlock+0xad/0x350 [ 1765.361031][T32076] ? other_cpu_in_panic+0xf0/0xf0 [ 1765.361047][T32076] ? __lock_acquire+0x1262/0x7d80 [ 1765.361066][T32076] vprintk_emit+0x497/0x610 [ 1765.361082][T32076] ? printk_sprint+0x460/0x460 [ 1765.361100][T32076] ? perf_trace_buf_alloc+0x131/0x290 [ 1765.361118][T32076] _printk+0xde/0x130 [ 1765.361138][T32076] ? load_image+0x420/0x420 [ 1765.361163][T32076] should_fail_ex+0x375/0x4c0 [ 1765.361187][T32076] strncpy_from_user+0x36/0x2f0 [ 1765.361213][T32076] strncpy_from_user_nofault+0x71/0x140 [ 1765.361238][T32076] bpf_probe_read_user_str+0x2a/0x70 [ 1765.361256][T32076] bpf_prog_c5968c940db16fdc+0x45/0x47 [ 1765.361274][T32076] trace_call_bpf+0x333/0x6c0 [ 1765.361289][T32076] ? trace_call_bpf+0xc3/0x6c0 [ 1765.361309][T32076] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1765.361340][T32076] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1765.361358][T32076] perf_trace_lock_acquire+0x342/0x400 [ 1765.361375][T32076] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1765.361395][T32076] lock_acquire+0x3ef/0x420 [ 1765.361408][T32076] ? put_cpu_partial+0x6e/0x250 [ 1765.361425][T32076] ? read_lock_is_recursive+0x20/0x20 [ 1765.361440][T32076] ? __lock_acquire+0x7d80/0x7d80 [ 1765.361460][T32076] put_cpu_partial+0x91/0x250 [ 1765.361472][T32076] ? put_cpu_partial+0x6e/0x250 [ 1765.361483][T32076] ? put_cpu_partial+0x6e/0x250 [ 1765.361500][T32076] get_partial_node+0x1f1/0x550 [ 1765.361522][T32076] ___slab_alloc+0x9cc/0x12f0 [ 1765.361541][T32076] ? sctp_add_bind_addr+0x8c/0x360 [ 1765.361564][T32076] __kmem_cache_alloc_node+0x11f/0x250 [ 1765.361586][T32076] ? sctp_add_bind_addr+0x8c/0x360 [ 1765.361605][T32076] ? sctp_add_bind_addr+0x8c/0x360 [ 1765.361623][T32076] kmalloc_trace+0x2a/0xe0 [ 1765.361647][T32076] sctp_add_bind_addr+0x8c/0x360 [ 1765.361668][T32076] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1765.361686][T32076] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1765.361701][T32076] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1765.361716][T32076] ? sctp_v6_is_any+0x64/0x70 [ 1765.361729][T32076] ? sctp_copy_one_addr+0x8c/0x350 [ 1765.361744][T32076] sctp_bind_addr_copy+0xb3/0x3c0 [ 1765.361759][T32076] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1765.361778][T32076] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1765.361795][T32076] ? __sctp_connect+0xd80/0xd80 [ 1765.361809][T32076] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1765.361827][T32076] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1765.361848][T32076] ? security_sctp_bind_connect+0x89/0xb0 [ 1765.361870][T32076] sctp_sendmsg+0x1519/0x27b0 [ 1765.361898][T32076] ? sctp_getsockopt+0xb60/0xb60 [ 1765.361922][T32076] ? aa_af_perm+0x330/0x330 [ 1765.361945][T32076] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1765.361972][T32076] ? sock_rps_record_flow+0x19/0x3f0 [ 1765.361996][T32076] ? inet_sendmsg+0xce/0x2a0 [ 1765.362015][T32076] ? inet_send_prepare+0x250/0x250 [ 1765.362032][T32076] ____sys_sendmsg+0x61b/0x980 [ 1765.362048][T32076] ? __asan_memset+0x22/0x40 [ 1765.362064][T32076] ? __sys_sendmsg_sock+0x30/0x30 [ 1765.362076][T32076] ? __import_iovec+0x5f2/0x850 [ 1765.362097][T32076] ? import_iovec+0x73/0xa0 [ 1765.362115][T32076] ___sys_sendmsg+0x2a6/0x360 [ 1765.362131][T32076] ? __sys_sendmsg+0x2b0/0x2b0 [ 1765.362155][T32076] ? trace_call_bpf+0xc3/0x6c0 [ 1765.362187][T32076] __se_sys_sendmsg+0x1d0/0x2c0 [ 1765.362204][T32076] ? perf_trace_preemptirq_template+0x269/0x330 [ 1765.362228][T32076] ? __x64_sys_sendmsg+0x80/0x80 [ 1765.362257][T32076] ? lockdep_hardirqs_on+0x98/0x150 [ 1765.362280][T32076] do_syscall_64+0x55/0xb0 [ 1765.362297][T32076] ? clear_bhb_loop+0x40/0x90 [ 1765.362314][T32076] ? clear_bhb_loop+0x40/0x90 [ 1765.362338][T32076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.362356][T32076] RIP: 0033:0x7f409af9e019 [ 1765.362371][T32076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.362385][T32076] RSP: 002b:00007f40991f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1765.362402][T32076] RAX: ffffffffffffffda RBX: 00007f409b225fa0 RCX: 00007f409af9e019 [ 1765.362411][T32076] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1765.362420][T32076] RBP: 00007f40991f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1765.362428][T32076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1765.362435][T32076] R13: 00007f409b226038 R14: 00007f409b225fa0 R15: 00007fffdfa11c98 [ 1765.362453][T32076] [ 1766.744214][T32076] CPU: 0 PID: 32076 Comm: syz.2.8369 Not tainted syzkaller #0 [ 1766.751667][T32076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1766.761713][T32076] Call Trace: [ 1766.764996][T32076] [ 1766.767923][T32076] dump_stack_lvl+0x18c/0x250 [ 1766.772606][T32076] ? show_regs_print_info+0x20/0x20 [ 1766.777800][T32076] ? load_image+0x420/0x420 [ 1766.782317][T32076] should_fail_ex+0x394/0x4c0 [ 1766.786999][T32076] strncpy_from_user+0x36/0x2f0 [ 1766.791859][T32076] strncpy_from_user_nofault+0x71/0x140 [ 1766.797411][T32076] bpf_probe_read_user_str+0x2a/0x70 [ 1766.802711][T32076] bpf_prog_c5968c940db16fdc+0x45/0x47 [ 1766.808177][T32076] trace_call_bpf+0x333/0x6c0 [ 1766.812858][T32076] ? trace_call_bpf+0xc3/0x6c0 [ 1766.817618][T32076] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1766.823689][T32076] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1766.829248][T32076] perf_trace_lock_acquire+0x342/0x400 [ 1766.834720][T32076] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1766.841317][T32076] lock_acquire+0x3ef/0x420 [ 1766.845849][T32076] ? put_cpu_partial+0x6e/0x250 [ 1766.850699][T32076] ? read_lock_is_recursive+0x20/0x20 [ 1766.856063][T32076] ? __lock_acquire+0x7d80/0x7d80 [ 1766.861083][T32076] put_cpu_partial+0x91/0x250 [ 1766.865758][T32076] ? put_cpu_partial+0x6e/0x250 [ 1766.870600][T32076] ? put_cpu_partial+0x6e/0x250 [ 1766.875458][T32076] get_partial_node+0x1f1/0x550 [ 1766.880312][T32076] ___slab_alloc+0x9cc/0x12f0 [ 1766.884997][T32076] ? sctp_add_bind_addr+0x8c/0x360 [ 1766.890106][T32076] __kmem_cache_alloc_node+0x11f/0x250 [ 1766.895571][T32076] ? sctp_add_bind_addr+0x8c/0x360 [ 1766.900674][T32076] ? sctp_add_bind_addr+0x8c/0x360 [ 1766.905784][T32076] kmalloc_trace+0x2a/0xe0 [ 1766.910217][T32076] sctp_add_bind_addr+0x8c/0x360 [ 1766.915163][T32076] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1766.920795][T32076] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1766.926519][T32076] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1766.932597][T32076] ? sctp_v6_is_any+0x64/0x70 [ 1766.937301][T32076] ? sctp_copy_one_addr+0x8c/0x350 [ 1766.942411][T32076] sctp_bind_addr_copy+0xb3/0x3c0 [ 1766.947432][T32076] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1766.953768][T32076] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1766.959053][T32076] ? __sctp_connect+0xd80/0xd80 [ 1766.963907][T32076] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1766.969291][T32076] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1766.974842][T32076] ? security_sctp_bind_connect+0x89/0xb0 [ 1766.980563][T32076] sctp_sendmsg+0x1519/0x27b0 [ 1766.985261][T32076] ? sctp_getsockopt+0xb60/0xb60 [ 1766.990215][T32076] ? aa_af_perm+0x330/0x330 [ 1766.994731][T32076] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1767.001168][T32076] ? sock_rps_record_flow+0x19/0x3f0 [ 1767.006471][T32076] ? inet_sendmsg+0xce/0x2a0 [ 1767.011071][T32076] ? inet_send_prepare+0x250/0x250 [ 1767.016193][T32076] ____sys_sendmsg+0x61b/0x980 [ 1767.020975][T32076] ? __asan_memset+0x22/0x40 [ 1767.025571][T32076] ? __sys_sendmsg_sock+0x30/0x30 [ 1767.030617][T32076] ? __import_iovec+0x5f2/0x850 [ 1767.035486][T32076] ? import_iovec+0x73/0xa0 [ 1767.040001][T32076] ___sys_sendmsg+0x2a6/0x360 [ 1767.044676][T32076] ? __sys_sendmsg+0x2b0/0x2b0 [ 1767.049450][T32076] ? trace_call_bpf+0xc3/0x6c0 [ 1767.054241][T32076] __se_sys_sendmsg+0x1d0/0x2c0 [ 1767.059125][T32076] ? perf_trace_preemptirq_template+0x269/0x330 [ 1767.065374][T32076] ? __x64_sys_sendmsg+0x80/0x80 [ 1767.070326][T32076] ? lockdep_hardirqs_on+0x98/0x150 [ 1767.075527][T32076] do_syscall_64+0x55/0xb0 [ 1767.079939][T32076] ? clear_bhb_loop+0x40/0x90 [ 1767.084607][T32076] ? clear_bhb_loop+0x40/0x90 [ 1767.089273][T32076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1767.095162][T32076] RIP: 0033:0x7f409af9e019 [ 1767.099576][T32076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1767.119184][T32076] RSP: 002b:00007f40991f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1767.127609][T32076] RAX: ffffffffffffffda RBX: 00007f409b225fa0 RCX: 00007f409af9e019 [ 1767.135588][T32076] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1767.143568][T32076] RBP: 00007f40991f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.151547][T32076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1767.159520][T32076] R13: 00007f409b226038 R14: 00007f409b225fa0 R15: 00007fffdfa11c98 [ 1767.167508][T32076]