last executing test programs: 22.417836646s ago: executing program 3 (id=895): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000018000000", @ANYBLOB, @ANYRES16=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000740)="86dd", 0x0, 0x40, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x25, 0xc2, &(0x7f0000000200)="0b0487a3985d4b5aad6a004ff7be56c6f37c01d370f8dd9da3683f5cba14ca200073fa48bc", &(0x7f0000000240)=""/194, 0x5, 0x0, 0xd6, 0x83, &(0x7f0000000340)="32f3c753736cd46b5657497bbc5ca0c7aee43666413e88e2f643adc150a3e10e83074ca4d540241c82f4c328f1725bfbb3c34170ed4e7b8fd526c609a5ca81ef65111f9cd8316955f0121d02fb3740a4cbaafd307871ef450dda62ba22359545986e787fcf613ed2069a81535280599232cabbb2aa08cbf72dc3385b6293043549c7daa1d8689c2723be21db95e142e71460f13442de92ab93e4078e0b9c421f5b3671255eebbe3f62120692799c0f4b74ef8ba1385029e4f41b81602ebdb60acd14edd7cba16e9daeea582ba8884565177ab05b996a", &(0x7f0000000440)="fcfcd21ef4b3e603d7d1aef7ba0f0d47a7ab96e7128c7648fe9a9c4dcb3c062008ad50ccf810ca5a981b06511cbf32023c8370d3eb05070d16a2064df1513e9d1a945153b79c6e76b3877470ac98575036fb90e5aed14b90ca0ef1358b6535fcd942efedca5b2508b0778ca1437f4979f3f95c106d600799c5378e0d0ec39609d1fa18", 0x9, 0x0, 0x6}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@generic={&(0x7f0000000640)='./file0\x00', r8}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe44fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000300)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="e748470b014c9664d40cd7ae2904a6678b8aeac84b9dbba6620ca27fd1995eaeb76ac4cf0731ebb2e1e2c16d4136ba01f727", 0x32}, {&(0x7f0000000140)="926e6d1a0f151a73dd6d3b57228e43ef898500ecb089b968c2e9cb5489a612509dee548e3976664b02f6fd22adf8ac91166bb49f5a48638bd755884a602f5785d1f91986ebf5a032c8682711da19c2797deb6d6a5639ce3191c4d325aca89724f0a78c1445b33026e7b35afc0ec0deeec317634fecf957f4c7c0acf8e312f662f1e80f", 0x83}, {&(0x7f0000000200)="9ad984aac8ba6a00fb8a875fca03c53b785ed86e28f7", 0x16}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000013010000a1000000680000000000000003010000001000009a5727d765cc6092e47c37bc64ee8bc5a1702bd2b178980e5ae041aafd8fb2036bd20142ea255e46f5577090898953081e92028ec9c7d82f6538817251d8e17337a16e2a2543597a43ba24d49f7785ed9a15000000000000"], 0x78}, 0x0) sendmsg$inet(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'geneve1\x00', @broadcast}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @random="00009e0c1100"}) 19.606998744s ago: executing program 3 (id=897): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)}], 0x1}, 0x60044084) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=[{0xb0, 0x0, 0x7, "0743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c81e0720dd17d0c71e1a4b8e7501e749dc9d0239e7c0a14957b5083e47c3f2067f9e77699d9a59783e0363179965ef92e37c3efd106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b7745943ced3bb4"}, {0x30, 0x0, 0x4, "b71cc98015701df1a14a06da101e38a395be39f28b1e5cccae9708d6"}, {0xc8, 0x107, 0x7, "67fe31de3edd141f0c76bebc733acab75b1eb805a0c13fe84d113c956f151d923a8a9c1517b70706a382f656b2489f8e3eaee06565415a85807004243428cc6375ea1b2516ecabc6b7d5cfff94ea23aa2538c448e9534f1b8aaa248cf0320bbdd14e529faa11aaf30e7e165c1bbf74a2efb15fb837faa215e73736eb1d00b84cdaa4fe9c8fe9baa9af3ec4b9b7b3c36f75748df69d5becfbf2d48e41bbb0c0b7a852a8023223573a37bc7324aa6945e141f3da"}, {0x30, 0x0, 0x6, "f2d4827b9a79c3f76b0c386c93af9725254d0941cc583960584657b878b6"}, {0x10, 0x3a, 0x2}, {0x10, 0x29, 0xe72}], 0x1f8}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000078010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x6, 0x0, &(0x7f0000000100)="e0b9547ed387", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r3], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19.578444284s ago: executing program 0 (id=905): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xdb, 0x0, 0x90, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d000000180000", @ANYRES32, @ANYRES16=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x40, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x25, 0xc2, &(0x7f0000000200)="0b0487a3985d4b5aad6a004ff7be56c6f37c01d370f8dd9da3683f5cba14ca200073fa48bc", &(0x7f0000000240)=""/194, 0x5, 0x0, 0xd6, 0x83, &(0x7f0000000340)="32f3c753736cd46b5657497bbc5ca0c7aee43666413e88e2f643adc150a3e10e83074ca4d540241c82f4c328f1725bfbb3c34170ed4e7b8fd526c609a5ca81ef65111f9cd8316955f0121d02fb3740a4cbaafd307871ef450dda62ba22359545986e787fcf613ed2069a81535280599232cabbb2aa08cbf72dc3385b6293043549c7daa1d8689c2723be21db95e142e71460f13442de92ab93e4078e0b9c421f5b3671255eebbe3f62120692799c0f4b74ef8ba1385029e4f41b81602ebdb60acd14edd7cba16e9daeea582ba8884565177ab05b996a", &(0x7f0000000440)="fcfcd21ef4b3e603d7d1aef7ba0f0d47a7ab96e7128c7648fe9a9c4dcb3c062008ad50ccf810ca5a981b06511cbf32023c8370d3eb05070d16a2064df1513e9d1a945153b79c6e76b3877470ac98575036fb90e5aed14b90ca0ef1358b6535fcd942efedca5b2508b0778ca1437f4979f3f95c106d600799c5378e0d0ec39609d1fa18", 0x9, 0x0, 0x6}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@generic={&(0x7f0000000640)='./file0\x00', r6}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe44fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={r5, 0x8a37, 0x8}, 0xc) sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @random="00009e0c1100"}) 19.08016385s ago: executing program 0 (id=900): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x14000, 0x35, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086"], 0xfdef) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.899580617s ago: executing program 1 (id=902): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) socketpair(0x2, 0x4, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000001300)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001480)=""/195, 0xc3}, 0x8100) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa, 0xf, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xd}, 0x84a8, 0x2f, 0x43a1bd79, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) 17.858130209s ago: executing program 0 (id=903): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) r3 = socket$kcm(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x3, 0x0, &(0x7f0000000380)="b10100", 0x0, 0x0, 0x700}, 0x50) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 17.662910375s ago: executing program 3 (id=906): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000018000000", @ANYBLOB, @ANYRES16=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000740)="86dd", 0x0, 0x40, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x25, 0xc2, &(0x7f0000000200)="0b0487a3985d4b5aad6a004ff7be56c6f37c01d370f8dd9da3683f5cba14ca200073fa48bc", &(0x7f0000000240)=""/194, 0x5, 0x0, 0xd6, 0x83, &(0x7f0000000340)="32f3c753736cd46b5657497bbc5ca0c7aee43666413e88e2f643adc150a3e10e83074ca4d540241c82f4c328f1725bfbb3c34170ed4e7b8fd526c609a5ca81ef65111f9cd8316955f0121d02fb3740a4cbaafd307871ef450dda62ba22359545986e787fcf613ed2069a81535280599232cabbb2aa08cbf72dc3385b6293043549c7daa1d8689c2723be21db95e142e71460f13442de92ab93e4078e0b9c421f5b3671255eebbe3f62120692799c0f4b74ef8ba1385029e4f41b81602ebdb60acd14edd7cba16e9daeea582ba8884565177ab05b996a", &(0x7f0000000440)="fcfcd21ef4b3e603d7d1aef7ba0f0d47a7ab96e7128c7648fe9a9c4dcb3c062008ad50ccf810ca5a981b06511cbf32023c8370d3eb05070d16a2064df1513e9d1a945153b79c6e76b3877470ac98575036fb90e5aed14b90ca0ef1358b6535fcd942efedca5b2508b0778ca1437f4979f3f95c106d600799c5378e0d0ec39609d1fa18", 0x9, 0x0, 0x6}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@generic={&(0x7f0000000640)='./file0\x00', r8}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe44fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000300)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="e748470b014c9664d40cd7ae2904a6678b8aeac84b9dbba6620ca27fd1995eaeb76ac4cf0731ebb2e1e2c16d4136ba01f727", 0x32}, {&(0x7f0000000140)="926e6d1a0f151a73dd6d3b57228e43ef898500ecb089b968c2e9cb5489a612509dee548e3976664b02f6fd22adf8ac91166bb49f5a48638bd755884a602f5785d1f91986ebf5a032c8682711da19c2797deb6d6a5639ce3191c4d325aca89724f0a78c1445b33026e7b35afc0ec0deeec317634fecf957f4c7c0acf8e312f662f1e80f", 0x83}, {&(0x7f0000000200)="9ad984aac8ba6a00fb8a875fca03c53b785ed86e28f7", 0x16}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000013010000a1000000680000000000000003010000001000009a5727d765cc6092e47c37bc64ee8bc5a1702bd2b178980e5ae041aafd8fb2036bd20142ea255e46f5577090898953081e92028ec9c7d82f6538817251d8e17337a16e2a2543597a43ba24d49f7785ed9a15000000000000"], 0x78}, 0x0) sendmsg$inet(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'geneve1\x00', @broadcast}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @random="00009e0c1100"}) 17.662458505s ago: executing program 2 (id=907): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES32=r3], 0x9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0xa, &(0x7f0000000180), 0x4) r6 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000200)={r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2122, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x5, 0xda}, 0x12804, 0x0, 0x88000, 0x9, 0x1, 0xffffffff, 0x1}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, 0x0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r9, 0x0, 0x4000080) recvmsg$kcm(r9, 0x0, 0x40002123) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{}], 0x1}, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) 17.458055882s ago: executing program 1 (id=908): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @struct={0x1, 0x7, 0x0, 0x4, 0x0, 0x80000001, [{0xb, 0x2, 0x49}, {0x1, 0x4, 0x1}, {0x9, 0x2, 0x7}, {0x11, 0x1, 0x3}, {0x3, 0x0, 0x81}, {0xa, 0x1, 0x4}, {0x3, 0x1, 0x100}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x2e, 0x30, 0x2e, 0x0, 0x30, 0x5f]}}, &(0x7f0000000300)=""/215, 0xa4, 0xd7, 0x1, 0x8001}, 0x28) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r4, 0x58, &(0x7f0000000480)}, 0x10) (async) openat$cgroup_pressure(r4, &(0x7f0000000900)='cpu.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) r7 = syz_clone(0x10000, &(0x7f0000000840)="e88d05ceafe4edd92d41aae90071a1f50d00403286d9d0e9700f947c2118d210082edcb7b46773e05de2a842b8348c479edd3604183bf7384973f7682078469b314e2a1b91bbe9bd186ab427055ae1953c704007225a9935b13e86d7106f616fb8601ed9d4d85eec7d93cd3455b486f568f3d45905965842c28978aa14fc919bb98f525d1a6c09d665b72cf32664f5e20bcd7d6fb7757b00b7efac4899269174b6f97666e23a", 0xa6, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="f3d35de4aa88a4e1f79c3963f93ea3f8c84fc3d302a3b27c9bd4bfa07dd8c03ff4439ddba9c43fc24567d8f0f2efc411026f0d90886d2896b0632c88e52f01a2f0fbd3eb14de856f54dd31a041d3096bb04cc82696afcfcd8b2409cb7c6d87a8c9bad3d4ccc6b1407ec15c") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={r7, r4, 0x0, 0x1, &(0x7f0000000a40)='\x00'}, 0x30) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="030000000000000000f2ffffff00b4474cda9600", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="02000000010000000300"/28], 0x50) 17.457725811s ago: executing program 2 (id=909): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xdb, 0x0, 0x90, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d000000180000", @ANYRES32, @ANYRES16=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x40, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@generic={&(0x7f0000000640)='./file0\x00', r6}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe44fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={r5, 0x8a37, 0x8}, 0xc) sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @random="00009e0c1100"}) 17.364184234s ago: executing program 3 (id=910): socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10b241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000008020000000000000000ac1414aa"], 0xfdef) 17.247641028s ago: executing program 1 (id=911): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000180)={0x2, 0x4e25, @private=0xa010101}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000140)='y', 0x1}, {&(0x7f0000000580)="dbade298eca2c74836ade9251ff0d749a2f40a2da0a85cffdd58edde49ae5f843de41c220179cd1fcbacb8e432c9899435a964f5f0c48dc9a4acb8ed0c2e23d929c25cebcf1a295d1bd305baf15b0941d0064ce8ea574382b4381ebe5dbb71a4d6b4517611c3ce2ac2ebd6d01e30906f9115ab1eda304ba5f64fe7debb72247226da25189daf04a8ae0988117c4ce3d992e8e0e62efae0a2f33065ff6c71", 0x9e}], 0x2}, 0x2000c850) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x5, 0x0, 0x1000009, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x403fff8002}, 0x5025, 0x20000000032, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="0000800000000000000000000000004200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r4, @ANYRES16], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r5}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}, 0x20000884) recvmsg(r1, 0x0, 0x0) r7 = socket$kcm(0x10, 0x0, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b67d25a806f8c6394f96724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504003d0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x0, 0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 17.247121118s ago: executing program 2 (id=912): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x112107, 0xc8, 0x2, 0x9, 0x0, 0x10001, 0xe, 0x0, 0x800}, 0x0, 0x201, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8100073a00fe08000e40000220875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 17.154864381s ago: executing program 3 (id=913): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040042000000a8001600a400014020000400ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 17.012439355s ago: executing program 2 (id=914): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @remote, 0x2}, 0x80, 0x0, 0x0, 0x0, 0xff91}, 0xe07e872420dfefca) 16.994363846s ago: executing program 1 (id=915): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.874530479s ago: executing program 0 (id=916): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) socketpair(0x2, 0x4, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000001300)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001480)=""/195, 0xc3}, 0x8100) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa, 0xf, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xd}, 0x84a8, 0x2f, 0x43a1bd79, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) 16.687759915s ago: executing program 1 (id=917): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411ac1414bb00000000200000000000ea6e1900000000000000"], 0x40}, 0x20002880) syz_clone(0x10000, &(0x7f0000000000)="00981af84068620b127abd6fc0b308c8999e2bc467cae98b34cca1608a4c38908e0eeae2fbdccfec661a9db9d27203a138d44429f2d307de820034274dcca30e02887ba87cd85d62af2c7950daec716f01b1aa1933937b281348d891cd9d92c7ee29635bc4ae638790d1653f2b17c8197be37e0b620cba6391b9254cf0998d05c4527368400263eed5ca1d", 0x8b, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)="77f892f08d2f73111acb80f879f068c7adb5c1190bc69dac6f066d8418956df951b0d2efba4568bd3baa2030c97bff96c0cdb48a85355adf77e2dc6f1b4d70f7cd4ae232b9a9b239db89ccfc7969e53af7637acd0b17fa0d161354c445d34c83d11a20b6efb09c5fde12a8301584cbd285f440dc8679648d26173fffe37bd767ccb35921a9bcb05b10f15c0b1fab8cc311b0e34182ec4f8d9bd85a") r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002, 0x0, 0x80000, 0x3}]}, 0x94) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) 16.626019657s ago: executing program 3 (id=918): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="109ba5d0a437d4f023982cfda7ff0400"/42], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18f8ff00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r3, @ANYRES8=r3], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x3f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.415381654s ago: executing program 0 (id=919): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000018000000", @ANYBLOB, @ANYRES16=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000740)="86dd", 0x0, 0x40, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x25, 0xc2, &(0x7f0000000200)="0b0487a3985d4b5aad6a004ff7be56c6f37c01d370f8dd9da3683f5cba14ca200073fa48bc", &(0x7f0000000240)=""/194, 0x5, 0x0, 0xd6, 0x83, &(0x7f0000000340)="32f3c753736cd46b5657497bbc5ca0c7aee43666413e88e2f643adc150a3e10e83074ca4d540241c82f4c328f1725bfbb3c34170ed4e7b8fd526c609a5ca81ef65111f9cd8316955f0121d02fb3740a4cbaafd307871ef450dda62ba22359545986e787fcf613ed2069a81535280599232cabbb2aa08cbf72dc3385b6293043549c7daa1d8689c2723be21db95e142e71460f13442de92ab93e4078e0b9c421f5b3671255eebbe3f62120692799c0f4b74ef8ba1385029e4f41b81602ebdb60acd14edd7cba16e9daeea582ba8884565177ab05b996a", &(0x7f0000000440)="fcfcd21ef4b3e603d7d1aef7ba0f0d47a7ab96e7128c7648fe9a9c4dcb3c062008ad50ccf810ca5a981b06511cbf32023c8370d3eb05070d16a2064df1513e9d1a945153b79c6e76b3877470ac98575036fb90e5aed14b90ca0ef1358b6535fcd942efedca5b2508b0778ca1437f4979f3f95c106d600799c5378e0d0ec39609d1fa18", 0x9, 0x0, 0x6}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@generic={&(0x7f0000000640)='./file0\x00', r8}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe44fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000300)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="e748470b014c9664d40cd7ae2904a6678b8aeac84b9dbba6620ca27fd1995eaeb76ac4cf0731ebb2e1e2c16d4136ba01f727", 0x32}, {&(0x7f0000000140)="926e6d1a0f151a73dd6d3b57228e43ef898500ecb089b968c2e9cb5489a612509dee548e3976664b02f6fd22adf8ac91166bb49f5a48638bd755884a602f5785d1f91986ebf5a032c8682711da19c2797deb6d6a5639ce3191c4d325aca89724f0a78c1445b33026e7b35afc0ec0deeec317634fecf957f4c7c0acf8e312f662f1e80f", 0x83}, {&(0x7f0000000200)="9ad984aac8ba6a00fb8a875fca03c53b785ed86e28f7", 0x16}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000013010000a1000000680000000000000003010000001000009a5727d765cc6092e47c37bc64ee8bc5a1702bd2b178980e5ae041aafd8fb2036bd20142ea255e46f5577090898953081e92028ec9c7d82f6538817251d8e17337a16e2a2543597a43ba24d49f7785ed9a15000000000000"], 0x78}, 0x0) sendmsg$inet(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'geneve1\x00', @broadcast}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @random="00009e0c1100"}) 16.339590226s ago: executing program 1 (id=920): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800f90000000000080000002cfeffff050000000d00000001000085000000800e00000005000000fa00000000001d75d2c78c2e42ab9a95fec995b93325b801ca64dfc8fbe2a9d862e5599db0"], 0x0, 0x35, 0x0, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000007002100001e00000071000054bbe9d2e465f7386b4ecbc1cf53180323101f350bd75849bb2a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x38}, 0x40000002) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4080, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r3}) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 16.22330913s ago: executing program 0 (id=921): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000000000ff, 0x3}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x1, 0x4, {0xa, 0x4e24, 0x0, @remote}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001d0081054e81f783db4cb9040a09000000000000e8fc55a10a0015000600142613600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES8=r2, @ANYRESOCT=r2, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r4}) 15.915748899s ago: executing program 2 (id=922): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x112107, 0xc8, 0x2, 0x9, 0x0, 0x10001, 0xe, 0x0, 0x800}, 0x0, 0x201, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8100073a00fe08000e40000220875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) (fail_nth: 2) 15.871470281s ago: executing program 2 (id=923): perf_event_open(&(0x7f0000000140)={0x3, 0xa1, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x1810, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x112107, 0xc8, 0x2, 0x9, 0x0, 0x10001, 0xe, 0x0, 0x800}, 0x0, 0x201, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000000001500"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x23) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r1, @ANYBLOB="00009b28f0000000000000b7080000000000807b5af8ff00000000bfa2000007020000f8ffffffb703000008000000b704000000000000850000001e0000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x80000041}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x21, &(0x7f0000000200), 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40014160) close(0x3) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022"], 0xcfa4) 1.288170649s ago: executing program 32 (id=920): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800f90000000000080000002cfeffff050000000d00000001000085000000800e00000005000000fa00000000001d75d2c78c2e42ab9a95fec995b93325b801ca64dfc8fbe2a9d862e5599db0"], 0x0, 0x35, 0x0, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000007002100001e00000071000054bbe9d2e465f7386b4ecbc1cf53180323101f350bd75849bb2a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x38}, 0x40000002) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4080, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r3}) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.138452974s ago: executing program 33 (id=918): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="109ba5d0a437d4f023982cfda7ff0400"/42], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18f8ff00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r3, @ANYRES8=r3], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x3f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 70.214128ms ago: executing program 34 (id=921): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000000000ff, 0x3}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x1, 0x4, {0xa, 0x4e24, 0x0, @remote}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001d0081054e81f783db4cb9040a09000000000000e8fc55a10a0015000600142613600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES8=r2, @ANYRESOCT=r2, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r4}) 0s ago: executing program 35 (id=923): perf_event_open(&(0x7f0000000140)={0x3, 0xa1, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x1810, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x112107, 0xc8, 0x2, 0x9, 0x0, 0x10001, 0xe, 0x0, 0x800}, 0x0, 0x201, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000000001500"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x23) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r1, @ANYBLOB="00009b28f0000000000000b7080000000000807b5af8ff00000000bfa2000007020000f8ffffffb703000008000000b704000000000000850000001e0000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x80000041}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x21, &(0x7f0000000200), 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40014160) close(0x3) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022"], 0xcfa4) kernel console output (not intermixed with test programs): ng as an active interface with an up link [ 80.824825][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.832018][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.840477][ T5774] bridge_slave_0: entered allmulticast mode [ 80.847763][ T5774] bridge_slave_0: entered promiscuous mode [ 80.856898][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.864161][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.871563][ T5774] bridge_slave_1: entered allmulticast mode [ 80.878770][ T5774] bridge_slave_1: entered promiscuous mode [ 80.894358][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.901488][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.908958][ T5776] bridge_slave_0: entered allmulticast mode [ 80.916057][ T5776] bridge_slave_0: entered promiscuous mode [ 80.926934][ T5775] team0: Port device team_slave_0 added [ 80.933128][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.940437][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.948041][ T5776] bridge_slave_1: entered allmulticast mode [ 80.955211][ T5776] bridge_slave_1: entered promiscuous mode [ 80.982309][ T5775] team0: Port device team_slave_1 added [ 81.031994][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.054663][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.066388][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.079078][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.090931][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.104203][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.114645][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.121612][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.150446][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.188779][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.196261][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.222561][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.255697][ T5777] team0: Port device team_slave_0 added [ 81.298230][ T5776] team0: Port device team_slave_0 added [ 81.306600][ T5777] team0: Port device team_slave_1 added [ 81.315746][ T5774] team0: Port device team_slave_0 added [ 81.334911][ T5776] team0: Port device team_slave_1 added [ 81.352775][ T5774] team0: Port device team_slave_1 added [ 81.363520][ T5775] hsr_slave_0: entered promiscuous mode [ 81.369976][ T5775] hsr_slave_1: entered promiscuous mode [ 81.418041][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.427538][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.453743][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.484863][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.491872][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.520663][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.532728][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.540025][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.566553][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.601678][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.608826][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.637481][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.649465][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.656752][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.682999][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.727355][ T5776] hsr_slave_0: entered promiscuous mode [ 81.733807][ T5776] hsr_slave_1: entered promiscuous mode [ 81.740729][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.749112][ T5776] Cannot create hsr debugfs directory [ 81.768636][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.778044][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.804359][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.865215][ T5774] hsr_slave_0: entered promiscuous mode [ 81.872225][ T5774] hsr_slave_1: entered promiscuous mode [ 81.878992][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.887100][ T51] Bluetooth: hci0: command tx timeout [ 81.887199][ T5774] Cannot create hsr debugfs directory [ 81.892725][ T51] Bluetooth: hci1: command tx timeout [ 81.898214][ T5786] Bluetooth: hci3: command tx timeout [ 81.964410][ T5786] Bluetooth: hci2: command tx timeout [ 81.975519][ T5777] hsr_slave_0: entered promiscuous mode [ 81.981933][ T5777] hsr_slave_1: entered promiscuous mode [ 81.989495][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.997204][ T5777] Cannot create hsr debugfs directory [ 82.323122][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.356256][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.372564][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.383760][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.447634][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.476737][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.487296][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.499339][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.612488][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.623513][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.653151][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.663728][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.740075][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.753728][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.792549][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.799973][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.813113][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.826544][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.890542][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.903850][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.924286][ T4155] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.931720][ T4155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.963045][ T4155] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.970403][ T4155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.984586][ T4155] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.991711][ T4155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.006536][ T4155] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.013736][ T4155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.111140][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.195994][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.212483][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.219684][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.256761][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.263997][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.369194][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.439214][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.482574][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.489785][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.553795][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.561021][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.733601][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.852544][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.917817][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.962405][ T5775] veth0_vlan: entered promiscuous mode [ 83.968581][ T5786] Bluetooth: hci1: command tx timeout [ 83.974317][ T51] Bluetooth: hci3: command tx timeout [ 83.974363][ T51] Bluetooth: hci0: command tx timeout [ 83.987088][ T5775] veth1_vlan: entered promiscuous mode [ 84.046187][ T51] Bluetooth: hci2: command tx timeout [ 84.082846][ T5774] veth0_vlan: entered promiscuous mode [ 84.111302][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.132912][ T5774] veth1_vlan: entered promiscuous mode [ 84.160304][ T5777] veth0_vlan: entered promiscuous mode [ 84.171894][ T5775] veth0_macvtap: entered promiscuous mode [ 84.191593][ T5777] veth1_vlan: entered promiscuous mode [ 84.202780][ T5775] veth1_macvtap: entered promiscuous mode [ 84.242038][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.266296][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.291972][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.302037][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.311622][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.320783][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.342853][ T5774] veth0_macvtap: entered promiscuous mode [ 84.362697][ T5777] veth0_macvtap: entered promiscuous mode [ 84.393360][ T5776] veth0_vlan: entered promiscuous mode [ 84.402644][ T5777] veth1_macvtap: entered promiscuous mode [ 84.426346][ T5774] veth1_macvtap: entered promiscuous mode [ 84.480078][ T5776] veth1_vlan: entered promiscuous mode [ 84.520008][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.531436][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.546288][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.562983][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.574107][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.584969][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.595526][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.616790][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.634793][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.645730][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.657784][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.668359][ T4155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.682285][ T4155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.682858][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.705590][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.715740][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.726670][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.739470][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.750876][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.762916][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.772365][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.781917][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.801205][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.810043][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.819336][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.828128][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.849030][ T5776] veth0_macvtap: entered promiscuous mode [ 84.878968][ T5776] veth1_macvtap: entered promiscuous mode [ 84.970045][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.989902][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.993017][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.009125][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.021960][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.032766][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.042787][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.053465][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.069347][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.101623][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.106740][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.121707][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.134838][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.135532][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.153062][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.163045][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.174617][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.186408][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.200979][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.212473][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.222056][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.231182][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.320968][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.333303][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.399019][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.424717][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.537537][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.547938][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.679255][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.745899][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.795179][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.795663][ T5835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4'. [ 85.825468][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.903899][ C1] hrtimer: interrupt took 51927 ns [ 86.045360][ T51] Bluetooth: hci1: command tx timeout [ 86.045449][ T5780] Bluetooth: hci0: command tx timeout [ 86.056813][ T5786] Bluetooth: hci3: command tx timeout [ 86.125510][ T5786] Bluetooth: hci2: command tx timeout [ 86.232315][ T5844] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 86.261626][ T5844] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 88.124657][ T5786] Bluetooth: hci1: command tx timeout [ 88.130207][ T5780] Bluetooth: hci3: command tx timeout [ 88.130695][ T51] Bluetooth: hci0: command tx timeout [ 88.204607][ T51] Bluetooth: hci2: command tx timeout [ 89.142472][ T5862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9'. [ 89.188800][ T5865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10'. [ 89.265085][ T5868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11'. [ 89.299691][ T5870] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.12'. [ 89.319209][ T5870] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.12'. [ 89.355074][ T5870] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12'. [ 90.177393][ T5873] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 90.235029][ T5873] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 90.759314][ T5889] warning: `syz.2.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.225383][ T786] cfg80211: failed to load regulatory.db [ 92.625276][ T5891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19'. [ 92.721628][ T5899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21'. [ 93.551353][ T5907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25'. [ 93.906690][ T5913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.27'. [ 96.924889][ T5935] sctp: [Deprecated]: syz.1.31 (pid 5935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.924889][ T5935] Use struct sctp_sack_info instead [ 98.734612][ T5931] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 98.741661][ T5931] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 99.477697][ T5955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.35'. [ 99.519516][ T5956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36'. [ 101.124384][ T5982] sctp: [Deprecated]: syz.0.42 (pid 5982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.124384][ T5982] Use struct sctp_sack_info instead [ 103.100688][ T5977] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 103.108671][ T5977] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 103.152840][ T5984] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 103.166684][ T5984] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 103.445607][ T5995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.46'. [ 103.576259][ T6002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.50'. [ 106.406725][ T6034] sctp: [Deprecated]: syz.2.57 (pid 6034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.406725][ T6034] Use struct sctp_sack_info instead [ 109.624293][ T6042] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.61'. [ 109.653590][ T6036] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 109.672565][ T6036] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 109.693533][ T6042] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.61'. [ 109.729255][ T6042] netlink: 9 bytes leftover after parsing attributes in process `syz.1.61'. [ 110.474472][ T6063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.69'. [ 111.461276][ T6079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.73'. [ 111.819594][ T6078] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 111.839772][ T6078] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 111.899847][ T6080] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 111.921605][ T6080] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 112.170693][ T6092] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.541867][ T6108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.84'. [ 114.707909][ T6113] netlink: 132 bytes leftover after parsing attributes in process `syz.1.85'. [ 125.322788][ T6132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.89'. [ 126.043518][ T6137] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 126.051518][ T6137] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 126.131495][ T6136] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 126.149285][ T6136] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 126.239945][ T6138] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 126.289183][ T6138] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 126.370441][ T6141] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 126.397503][ T6141] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 126.665108][ T6148] netlink: 'syz.2.98': attribute type 9 has an invalid length. [ 126.677797][ T6148] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.98'. [ 128.795200][ T6148] syz.2.98 (6148) used greatest stack depth: 19368 bytes left [ 128.960560][ T6156] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 128.968688][ T6156] team0: Device hsr0 is up. Set it down before adding it as a team port [ 129.106598][ T6150] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 129.155426][ T6150] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 129.208027][ T6162] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 129.217731][ T6162] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 129.228906][ T6159] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.103'. [ 129.581162][ T6174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.104'. [ 130.470727][ T6177] Zero length message leads to an empty skb [ 130.624070][ T6179] netlink: 'syz.0.108': attribute type 9 has an invalid length. [ 130.645403][ T6179] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.108'. [ 132.173373][ T6193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.111'. [ 132.264439][ T6196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.112'. [ 133.114612][ T6210] netlink: 132 bytes leftover after parsing attributes in process `syz.3.117'. [ 133.168156][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.175123][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.191008][ T6213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.125'. [ 134.179775][ T6217] netlink: 'syz.3.120': attribute type 9 has an invalid length. [ 134.255049][ T6217] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.120'. [ 134.567656][ T6219] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 134.590619][ T6219] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 134.968989][ T6226] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 134.993198][ T6226] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 137.470953][ T6244] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.600708][ T6249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.130'. [ 138.796696][ T6258] netlink: 144 bytes leftover after parsing attributes in process `syz.2.134'. [ 138.882959][ T6259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.141'. [ 139.191637][ T6261] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 139.205725][ T6261] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 139.244367][ T6263] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 139.251592][ T6263] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 139.733664][ T6269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.133'. [ 142.333599][ T6286] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.145'. [ 142.367229][ T6286] tc_dump_action: action bad kind [ 142.502267][ T6295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.147'. [ 142.989376][ T6305] syzkaller0: entered promiscuous mode [ 143.007393][ T6305] syzkaller0: entered allmulticast mode [ 143.057898][ T6305] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.150'. [ 143.947816][ T6316] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 143.957030][ T6316] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 143.983246][ T6323] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 143.994101][ T6323] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 145.866884][ T6328] netlink: 'syz.2.156': attribute type 29 has an invalid length. [ 146.811611][ T6328] netlink: 'syz.2.156': attribute type 29 has an invalid length. [ 146.843102][ T6329] netlink: 'syz.2.156': attribute type 29 has an invalid length. [ 147.200850][ T6346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.159'. [ 147.354664][ T6348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.160'. [ 148.816304][ T6368] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 148.823112][ T6368] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 149.076371][ T6369] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 149.104209][ T6369] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 151.823485][ T6374] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 151.838459][ T6374] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 151.896803][ T6382] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 151.904074][ T6382] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 154.712910][ T6386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.173'. [ 154.990330][ T6396] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.177'. [ 155.017831][ T6396] tc_dump_action: action bad kind [ 155.023198][ T6397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.174'. [ 155.062529][ T6392] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 155.084770][ T6392] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 155.290763][ T6402] tipc: Failed do clone local mcast rcv buffer [ 155.338824][ T6399] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 155.400796][ T6399] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 155.961236][ T6410] syzkaller0: entered promiscuous mode [ 155.967160][ T6410] syzkaller0: entered allmulticast mode [ 156.051201][ T6410] netlink: 'syz.0.181': attribute type 27 has an invalid length. [ 156.070542][ T6410] netlink: 'syz.0.181': attribute type 25 has an invalid length. [ 156.098129][ T6413] netlink: 'syz.2.182': attribute type 10 has an invalid length. [ 156.123949][ T6413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.182'. [ 156.133383][ T6413] veth0_vlan: entered allmulticast mode [ 156.145386][ T6413] bridge0: port 3(veth0_vlan) entered blocking state [ 156.158576][ T6413] bridge0: port 3(veth0_vlan) entered disabled state [ 156.170565][ T6413] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 159.502133][ T6437] FAULT_INJECTION: forcing a failure. [ 159.502133][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 159.515082][ T6437] CPU: 1 PID: 6437 Comm: syz.1.189 Not tainted syzkaller #0 [ 159.522490][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.532664][ T6437] Call Trace: [ 159.535976][ T6437] [ 159.538936][ T6437] dump_stack_lvl+0x18c/0x250 [ 159.543693][ T6437] ? show_regs_print_info+0x20/0x20 [ 159.548966][ T6437] ? load_image+0x420/0x420 [ 159.553532][ T6437] ? skb_network_protocol+0x529/0x780 [ 159.558972][ T6437] should_fail_ex+0x39d/0x4d0 [ 159.563724][ T6437] should_failslab+0x9/0x20 [ 159.568278][ T6437] slab_pre_alloc_hook+0x59/0x310 [ 159.573533][ T6437] kmem_cache_alloc+0x5a/0x2d0 [ 159.578349][ T6437] ? skb_clone+0x1eb/0x370 [ 159.582905][ T6437] skb_clone+0x1eb/0x370 [ 159.587196][ T6437] ? dev_queue_xmit_nit+0x212/0xbb0 [ 159.592470][ T6437] dev_queue_xmit_nit+0x24d/0xbb0 [ 159.597565][ T6437] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 159.602730][ T6437] ? validate_xmit_skb+0x949/0xf60 [ 159.607921][ T6437] dev_hard_start_xmit+0x148/0x740 [ 159.613115][ T6437] __dev_queue_xmit+0x19a3/0x3660 [ 159.618215][ T6437] ? __dev_queue_xmit+0x265/0x3660 [ 159.623471][ T6437] ? netdev_core_pick_tx+0x340/0x340 [ 159.628816][ T6437] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 159.634835][ T6437] ? lock_chain_count+0x20/0x20 [ 159.639811][ T6437] ? __alloc_skb+0x138/0x2c0 [ 159.644434][ T6437] ? ip_finish_output2+0xb04/0x11e0 [ 159.649670][ T6437] ? ip_finish_output2+0x457/0x11e0 [ 159.654897][ T6437] ip_finish_output2+0xcec/0x11e0 [ 159.659957][ T6437] ? ip_finish_output2+0x457/0x11e0 [ 159.665221][ T6437] ? ip_fragment+0x210/0x210 [ 159.669857][ T6437] ip_do_fragment+0x877/0x1760 [ 159.674675][ T6437] ? __ip_local_out+0x5f0/0x5f0 [ 159.679651][ T6437] ? ip_fragment+0x210/0x210 [ 159.684307][ T6437] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 159.689505][ T6437] ip_output+0x2a1/0x3b0 [ 159.693780][ T6437] ? ip_output+0x60/0x3b0 [ 159.698238][ T6437] iptunnel_xmit+0x4f0/0x920 [ 159.702885][ T6437] ip_tunnel_xmit+0x1cbc/0x2410 [ 159.707815][ T6437] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 159.713062][ T6437] ? gre_build_header+0x25b/0x990 [ 159.718222][ T6437] ipgre_xmit+0x7a6/0xb20 [ 159.722600][ T6437] dev_hard_start_xmit+0x246/0x740 [ 159.727775][ T6437] __dev_queue_xmit+0x19a3/0x3660 [ 159.732881][ T6437] ? __dev_queue_xmit+0x265/0x3660 [ 159.738038][ T6437] ? __kmem_cache_alloc_node+0x13a/0x250 [ 159.743753][ T6437] ? netdev_core_pick_tx+0x340/0x340 [ 159.749084][ T6437] ? skb_release_data+0x1d1/0x7b0 [ 159.754179][ T6437] __bpf_tx_skb+0x189/0x250 [ 159.758720][ T6437] bpf_clone_redirect+0x30f/0x4a0 [ 159.764239][ T6437] bpf_prog_208b094576c80b22+0x5e/0x63 [ 159.769737][ T6437] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 159.775763][ T6437] ? preempt_schedule+0xc0/0xd0 [ 159.780646][ T6437] ? bpf_test_run+0x174/0x870 [ 159.785361][ T6437] ? preempt_schedule_common+0x82/0xc0 [ 159.790858][ T6437] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 159.796883][ T6437] ? lockdep_softirqs_on+0x580/0x580 [ 159.802217][ T6437] ? lock_chain_count+0x20/0x20 [ 159.807207][ T6437] ? __local_bh_disable_ip+0x108/0x1a0 [ 159.812716][ T6437] ? __cant_sleep+0x220/0x220 [ 159.817523][ T6437] ? __local_bh_enable_ip+0x13a/0x1c0 [ 159.822933][ T6437] ? _local_bh_enable+0xa0/0xa0 [ 159.827820][ T6437] ? bpf_test_timer_continue+0x135/0x380 [ 159.833500][ T6437] ? bpf_test_run+0x174/0x870 [ 159.838225][ T6437] bpf_test_run+0x2df/0x870 [ 159.842783][ T6437] ? bpf_test_run+0x174/0x870 [ 159.847503][ T6437] ? dst_hold+0x70/0x70 [ 159.851869][ T6437] ? eth_get_headlen+0x210/0x210 [ 159.856868][ T6437] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 159.862305][ T6437] ? cpu_online+0x60/0x60 [ 159.866868][ T6437] bpf_prog_test_run+0x321/0x390 [ 159.871861][ T6437] __sys_bpf+0x49d/0x890 [ 159.876165][ T6437] ? bpf_link_show_fdinfo+0x390/0x390 [ 159.881604][ T6437] ? lock_chain_count+0x20/0x20 [ 159.886503][ T6437] __x64_sys_bpf+0x7c/0x90 [ 159.890956][ T6437] do_syscall_64+0x55/0xb0 [ 159.895422][ T6437] ? clear_bhb_loop+0x40/0x90 [ 159.900159][ T6437] ? clear_bhb_loop+0x40/0x90 [ 159.904867][ T6437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.910793][ T6437] RIP: 0033:0x7fb23239ce59 [ 159.915246][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.934890][ T6437] RSP: 002b:00007fb2331ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.943339][ T6437] RAX: ffffffffffffffda RBX: 00007fb232615fa0 RCX: 00007fb23239ce59 [ 159.951340][ T6437] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 159.959338][ T6437] RBP: 00007fb2331ee090 R08: 0000000000000000 R09: 0000000000000000 [ 159.967946][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.975944][ T6437] R13: 00007fb232616038 R14: 00007fb232615fa0 R15: 00007ffee5ff6538 [ 159.983969][ T6437] [ 163.667384][ T6422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.187'. [ 163.692748][ T6455] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 163.721880][ T6455] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 163.758276][ T6457] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 163.788530][ T6457] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 163.931858][ T6463] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.197'. [ 164.039018][ T6463] netlink: 'syz.1.197': attribute type 10 has an invalid length. [ 164.281548][ T6468] netlink: 'syz.3.199': attribute type 29 has an invalid length. [ 164.666671][ T6463] veth0_macvtap: left promiscuous mode [ 164.840667][ T6468] netlink: 'syz.3.199': attribute type 29 has an invalid length. [ 164.869571][ T6470] netlink: 'syz.3.199': attribute type 29 has an invalid length. [ 164.965260][ T6471] netlink: 'syz.3.199': attribute type 29 has an invalid length. [ 165.186372][ T6487] netlink: 'syz.1.203': attribute type 16 has an invalid length. [ 165.261426][ T6487] netlink: 'syz.1.203': attribute type 3 has an invalid length. [ 165.282798][ T6487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.203'. [ 165.454411][ T6491] netlink: 132 bytes leftover after parsing attributes in process `syz.0.204'. [ 165.739915][ T6497] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 165.749391][ T6497] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 165.795482][ T6502] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 165.802725][ T6502] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 166.488931][ T6521] -1: renamed from syzkaller0 [ 166.844454][ T6533] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 166.864905][ T6533] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 166.934608][ T6538] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 166.950582][ T6538] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 167.155925][ T6548] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.228'. [ 167.173533][ T6548] netlink: 'syz.1.228': attribute type 10 has an invalid length. [ 167.182281][ T6548] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 167.381623][ T6555] netlink: 60 bytes leftover after parsing attributes in process `syz.3.231'. [ 167.405039][ T6555] netlink: 60 bytes leftover after parsing attributes in process `syz.3.231'. [ 167.451699][ T6558] sctp: [Deprecated]: syz.0.232 (pid 6558) Use of int in max_burst socket option deprecated. [ 167.451699][ T6558] Use struct sctp_assoc_value instead [ 167.455927][ T6555] netlink: 60 bytes leftover after parsing attributes in process `syz.3.231'. [ 167.534416][ T6555] netlink: 'syz.3.231': attribute type 3 has an invalid length. [ 167.545509][ T6555] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.231'. [ 167.891625][ T6570] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 167.899552][ T6570] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 167.923750][ T6567] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 167.931958][ T6567] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 169.469911][ T6600] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 169.500207][ T6600] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 169.588780][ T6599] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 169.624446][ T6599] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 170.144576][ T6611] netlink: 'syz.2.252': attribute type 10 has an invalid length. [ 170.196316][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.205329][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.228115][ T6615] FAULT_INJECTION: forcing a failure. [ 170.228115][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 170.232631][ T6589] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 170.241142][ T6615] CPU: 1 PID: 6615 Comm: syz.0.253 Not tainted syzkaller #0 [ 170.241191][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.241202][ T6615] Call Trace: [ 170.241213][ T6615] [ 170.241222][ T6615] dump_stack_lvl+0x18c/0x250 [ 170.241273][ T6615] ? show_regs_print_info+0x20/0x20 [ 170.241296][ T6615] ? load_image+0x420/0x420 [ 170.241331][ T6615] should_fail_ex+0x39d/0x4d0 [ 170.241365][ T6615] should_failslab+0x9/0x20 [ 170.241391][ T6615] slab_pre_alloc_hook+0x59/0x310 [ 170.241424][ T6615] kmem_cache_alloc+0x5a/0x2d0 [ 170.241450][ T6615] ? dst_alloc+0x105/0x170 [ 170.241481][ T6615] dst_alloc+0x105/0x170 [ 170.241512][ T6615] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 170.241543][ T6615] ? ip_route_output_key_hash_rcu+0x1321/0x2370 [ 170.241579][ T6615] ? ip_route_output_key_hash+0x13d/0x330 [ 170.241607][ T6615] ip_route_output_key_hash+0x1f3/0x330 [ 170.241639][ T6615] ? ip_route_input_rcu+0x30f0/0x30f0 [ 170.241665][ T6615] ? mark_lock+0x94/0x320 [ 170.241705][ T6615] tcp_v4_connect+0x6ec/0x18e0 [ 170.241746][ T6615] ? tcp_twsk_unique+0x990/0x990 [ 170.241764][ T6615] ? mptcp_token_new_connect+0x4c7/0x630 [ 170.241805][ T6615] mptcp_connect+0x449/0x640 [ 170.241836][ T6615] __inet_stream_connect+0x254/0xdc0 [ 170.241878][ T6615] ? inet_dgram_connect+0x360/0x360 [ 170.241930][ T6615] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 170.241958][ T6615] mptcp_sendmsg_fastopen+0x138/0x4d0 [ 170.241993][ T6615] mptcp_sendmsg+0x14b2/0x16d0 [ 170.242022][ T6615] ? __lock_acquire+0x1273/0x7d40 [ 170.242044][ T6615] ? verify_lock_unused+0x140/0x140 [ 170.242071][ T6615] ? aa_sk_perm+0x83c/0x970 [ 170.242100][ T6615] ? aa_af_perm+0x330/0x330 [ 170.242116][ T6615] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 170.242140][ T6615] ? mptcp_shutdown+0x80/0x80 [ 170.242166][ T6615] ? sock_rps_record_flow+0x19/0x3f0 [ 170.242195][ T6615] ? inet_sendmsg+0xe9/0x2f0 [ 170.242221][ T6615] ? inet_send_prepare+0x260/0x260 [ 170.242258][ T6615] ____sys_sendmsg+0x5ba/0x960 [ 170.242281][ T6615] ? __lock_acquire+0x7d40/0x7d40 [ 170.242308][ T6615] ? __asan_memset+0x22/0x40 [ 170.242333][ T6615] ? __sys_sendmsg_sock+0x30/0x30 [ 170.242353][ T6615] ? __import_iovec+0x3fa/0x850 [ 170.242383][ T6615] ? import_iovec+0x73/0xa0 [ 170.242407][ T6615] ___sys_sendmsg+0x2a6/0x360 [ 170.242429][ T6615] ? get_pid_task+0x20/0x1e0 [ 170.242459][ T6615] ? __sys_sendmsg+0x2a0/0x2a0 [ 170.242506][ T6615] ? __lock_acquire+0x7d40/0x7d40 [ 170.242558][ T6615] __se_sys_sendmsg+0x1c2/0x2b0 [ 170.242585][ T6615] ? __x64_sys_sendmsg+0x80/0x80 [ 170.242627][ T6615] ? lockdep_hardirqs_on+0x98/0x150 [ 170.242658][ T6615] do_syscall_64+0x55/0xb0 [ 170.242678][ T6615] ? clear_bhb_loop+0x40/0x90 [ 170.242695][ T6615] ? clear_bhb_loop+0x40/0x90 [ 170.242714][ T6615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.242741][ T6615] RIP: 0033:0x7feff559ce59 [ 170.242761][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.242777][ T6615] RSP: 002b:00007feff641e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.242801][ T6615] RAX: ffffffffffffffda RBX: 00007feff5815fa0 RCX: 00007feff559ce59 [ 170.242815][ T6615] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000003 [ 170.242828][ T6615] RBP: 00007feff641e090 R08: 0000000000000000 R09: 0000000000000000 [ 170.242841][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.242853][ T6615] R13: 00007feff5816038 R14: 00007feff5815fa0 R15: 00007ffd4514d478 [ 170.242884][ T6615] [ 170.268082][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.474267][ T6620] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 170.474941][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.628124][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.635393][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.692070][ T6611] team0: Port device bridge0 added [ 170.702676][ T6589] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 170.718680][ T6620] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 170.729990][ T6614] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 170.903516][ T6586] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 170.956441][ T6623] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 172.119610][ T6651] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 172.157014][ T6651] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 172.180635][ T6652] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 172.188095][ T6652] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 172.635970][ T6663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.263'. [ 173.020928][ T6673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.269'. [ 173.578005][ T6678] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 173.600458][ T6678] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 173.667741][ T6684] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 173.709258][ T6684] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 174.558468][ T6708] syz.3.279 uses obsolete (PF_INET,SOCK_PACKET) [ 174.637427][ T6707] raw_sendmsg: syz.3.279 forgot to set AF_INET. Fix it! [ 177.179299][ T6717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.281'. [ 177.530853][ T6720] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 177.540028][ T6720] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 177.567632][ T6723] delete_channel: no stack [ 177.592381][ T6726] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 177.606255][ T6726] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 178.253138][ T6739] FAULT_INJECTION: forcing a failure. [ 178.253138][ T6739] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 178.272721][ T6739] CPU: 0 PID: 6739 Comm: syz.3.290 Not tainted syzkaller #0 [ 178.280063][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.290150][ T6739] Call Trace: [ 178.293487][ T6739] [ 178.296457][ T6739] dump_stack_lvl+0x18c/0x250 [ 178.301174][ T6739] ? show_regs_print_info+0x20/0x20 [ 178.306399][ T6739] ? load_image+0x420/0x420 [ 178.310951][ T6739] ? __lock_acquire+0x7d40/0x7d40 [ 178.316023][ T6739] should_fail_ex+0x39d/0x4d0 [ 178.320742][ T6739] prepare_alloc_pages+0x1e2/0x5f0 [ 178.325981][ T6739] __alloc_pages+0x134/0x460 [ 178.330609][ T6739] ? zone_statistics+0x170/0x170 [ 178.335602][ T6739] __folio_alloc+0x10/0x20 [ 178.340044][ T6739] vma_alloc_folio+0x47a/0x8f0 [ 178.344839][ T6739] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 178.350680][ T6739] shmem_alloc_folio+0x1a9/0x2a0 [ 178.355663][ T6739] ? folio_put+0xd0/0xd0 [ 178.359961][ T6739] ? __vm_enough_memory+0x11b/0x370 [ 178.365286][ T6739] ? shmem_inode_acct_block+0x35e/0x460 [ 178.370870][ T6739] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 178.376628][ T6739] ? put_swap_device+0x230/0x230 [ 178.381602][ T6739] ? xas_load+0x12b/0x140 [ 178.385970][ T6739] ? filemap_get_entry+0xce/0x3f0 [ 178.391025][ T6739] ? filemap_get_entry+0xce/0x3f0 [ 178.396083][ T6739] ? filemap_get_entry+0x379/0x3f0 [ 178.401226][ T6739] ? page_cache_prev_miss+0x390/0x390 [ 178.406635][ T6739] ? mark_lock+0x94/0x320 [ 178.411003][ T6739] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 178.417044][ T6739] ? lock_chain_count+0x20/0x20 [ 178.421957][ T6739] shmem_get_folio_gfp+0xcde/0x2aa0 [ 178.427238][ T6739] shmem_write_begin+0xf2/0x420 [ 178.432136][ T6739] generic_perform_write+0x2fe/0x5c0 [ 178.437563][ T6739] ? generic_file_direct_write+0x3e0/0x3e0 [ 178.443398][ T6739] ? down_write+0x16e/0x200 [ 178.447957][ T6739] ? file_update_time+0x98/0x1a0 [ 178.452936][ T6739] shmem_file_write_iter+0xfb/0x120 [ 178.458185][ T6739] vfs_write+0x46c/0x990 [ 178.462490][ T6739] ? file_end_write+0x250/0x250 [ 178.467478][ T6739] ? __fget_files+0x43d/0x4b0 [ 178.472205][ T6739] ? __fdget_pos+0x2a3/0x330 [ 178.476924][ T6739] ? ksys_write+0x75/0x260 [ 178.481387][ T6739] ksys_write+0x150/0x260 [ 178.485864][ T6739] ? __ia32_sys_read+0x90/0x90 [ 178.490667][ T6739] ? lockdep_hardirqs_on+0x98/0x150 [ 178.495906][ T6739] do_syscall_64+0x55/0xb0 [ 178.500389][ T6739] ? clear_bhb_loop+0x40/0x90 [ 178.505098][ T6739] ? clear_bhb_loop+0x40/0x90 [ 178.509812][ T6739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.515743][ T6739] RIP: 0033:0x7f0b1979ce59 [ 178.520276][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.540110][ T6739] RSP: 002b:00007f0b1a66b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.548733][ T6739] RAX: ffffffffffffffda RBX: 00007f0b19a15fa0 RCX: 00007f0b1979ce59 [ 178.556734][ T6739] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000005 [ 178.564734][ T6739] RBP: 00007f0b1a66b090 R08: 0000000000000000 R09: 0000000000000000 [ 178.572733][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.580747][ T6739] R13: 00007f0b19a16038 R14: 00007f0b19a15fa0 R15: 00007ffd58ea8728 [ 178.589128][ T6739] [ 178.961100][ T6741] mac80211_hwsim hwsim6 ..ãc¤±: renamed from wlan1 (while UP) [ 179.166823][ T6745] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 179.202203][ T6745] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 179.266875][ T6747] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 179.301535][ T6747] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 180.457376][ T6778] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 180.489798][ T6778] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 180.529094][ T6780] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 180.540431][ T6780] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 181.161172][ T6800] syzkaller0: entered promiscuous mode [ 181.168827][ T6800] syzkaller0: entered allmulticast mode [ 181.188150][ T6804] netlink: 132 bytes leftover after parsing attributes in process `syz.2.313'. [ 181.241598][ T6800] netlink: 'syz.1.312': attribute type 4 has an invalid length. [ 181.262806][ T6800] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.312'. [ 184.500261][ T6815] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 184.507936][ T6815] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 184.525231][ T6819] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 184.532356][ T6819] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 184.873109][ T6842] netlink: 132 bytes leftover after parsing attributes in process `syz.3.324'. [ 184.929166][ T6836] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 184.954185][ T6836] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 185.006495][ T6848] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 185.044316][ T6848] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 185.209500][ T6850] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.327'. [ 185.243358][ T6850] tc_dump_action: action bad kind [ 185.649982][ T6856] netlink: 'syz.0.329': attribute type 29 has an invalid length. [ 185.700487][ T6856] netlink: 'syz.0.329': attribute type 29 has an invalid length. [ 185.713760][ T6858] netlink: 'syz.0.329': attribute type 29 has an invalid length. [ 185.764597][ T6856] netlink: 'syz.0.329': attribute type 29 has an invalid length. [ 187.446344][ T6866] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 187.464232][ T6866] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 187.514418][ T6871] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 187.553985][ T6871] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 188.654877][ T6868] netlink: 'syz.3.333': attribute type 11 has an invalid length. [ 188.951772][ T6887] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.338'. [ 188.979131][ T6887] tc_dump_action: action bad kind [ 189.037143][ T6889] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 189.168553][ T6889] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 189.734952][ T6902] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 189.742470][ T6902] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 189.828224][ T6902] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 189.853162][ T6902] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 189.906161][ T6906] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.342'. [ 189.952148][ T6906] tc_dump_action: action bad kind [ 190.109721][ T6912] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 190.127684][ T6912] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 190.167777][ T6919] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 190.184838][ T6919] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 191.356866][ T6926] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 191.415023][ T6933] netlink: 14 bytes leftover after parsing attributes in process `syz.2.351'. [ 191.613498][ T6933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.633436][ T6933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.650133][ T6933] bond0 (unregistering): Released all slaves [ 192.177560][ T6956] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 192.195972][ T6956] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 192.239396][ T6958] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 192.259462][ T6958] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 192.290180][ T6955] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 192.327929][ T6955] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 192.382589][ T6966] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 192.424021][ T6966] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 192.458111][ T6967] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.361'. [ 192.495178][ T6967] tc_dump_action: action bad kind [ 194.116831][ T6996] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 194.143984][ T6996] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 194.205837][ T6990] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 194.220987][ T6990] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 194.650407][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.664174][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.381605][ T7024] netlink: 'syz.1.380': attribute type 4 has an invalid length. [ 195.399527][ T7024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.380'. [ 195.638869][ T7024] .`: renamed from bond0 (while UP) [ 196.046342][ T7043] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 196.061720][ T7043] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 196.111103][ T7049] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 196.173200][ T7049] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 197.587466][ T7088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.394'. [ 198.120480][ T7097] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 198.128862][ T7097] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 198.175953][ T7102] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 198.188573][ T7102] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 199.585008][ T7113] netlink: 'syz.3.404': attribute type 4 has an invalid length. [ 199.614241][ T7113] netlink: 152 bytes leftover after parsing attributes in process `syz.3.404'. [ 199.800077][ T7113] .`: renamed from bond0 (while UP) [ 201.645703][ T7142] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.415'. [ 201.696493][ T7142] tc_dump_action: action bad kind [ 202.380058][ T7147] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 202.414408][ T7147] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 202.479698][ T7148] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 202.487669][ T7148] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 202.625076][ T7154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.417'. [ 203.562874][ T7162] FAULT_INJECTION: forcing a failure. [ 203.562874][ T7162] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 203.563876][ T7160] netlink: 'syz.2.420': attribute type 4 has an invalid length. [ 203.586415][ T7160] netlink: 152 bytes leftover after parsing attributes in process `syz.2.420'. [ 203.614035][ T7162] CPU: 0 PID: 7162 Comm: syz.1.428 Not tainted syzkaller #0 [ 203.621412][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.632124][ T7162] Call Trace: [ 203.635438][ T7162] [ 203.638419][ T7162] dump_stack_lvl+0x18c/0x250 [ 203.643149][ T7162] ? show_regs_print_info+0x20/0x20 [ 203.648402][ T7162] ? load_image+0x420/0x420 [ 203.653012][ T7162] ? __lock_acquire+0x7d40/0x7d40 [ 203.658175][ T7162] ? snprintf+0xe9/0x140 [ 203.662477][ T7162] should_fail_ex+0x39d/0x4d0 [ 203.667217][ T7162] _copy_to_user+0x2f/0xa0 [ 203.671691][ T7162] simple_read_from_buffer+0xe7/0x150 [ 203.677225][ T7162] proc_fail_nth_read+0x1e8/0x260 [ 203.682327][ T7162] ? proc_fault_inject_write+0x360/0x360 [ 203.688022][ T7162] ? fsnotify_perm+0x271/0x5e0 [ 203.692828][ T7162] ? proc_fault_inject_write+0x360/0x360 [ 203.698600][ T7162] vfs_read+0x28b/0x970 [ 203.702811][ T7162] ? kernel_read+0x1e0/0x1e0 [ 203.707454][ T7162] ? __fget_files+0x28/0x4b0 [ 203.712093][ T7162] ? __fget_files+0x28/0x4b0 [ 203.716735][ T7162] ? __fget_files+0x43d/0x4b0 [ 203.721525][ T7162] ? __fdget_pos+0x2a3/0x330 [ 203.726167][ T7162] ? ksys_read+0x75/0x260 [ 203.730544][ T7162] ksys_read+0x150/0x260 [ 203.734855][ T7162] ? vfs_write+0x990/0x990 [ 203.739339][ T7162] ? lockdep_hardirqs_on+0x98/0x150 [ 203.744598][ T7162] do_syscall_64+0x55/0xb0 [ 203.749066][ T7162] ? clear_bhb_loop+0x40/0x90 [ 203.753788][ T7162] ? clear_bhb_loop+0x40/0x90 [ 203.758509][ T7162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.764631][ T7162] RIP: 0033:0x7fb23235d68e [ 203.769092][ T7162] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.788752][ T7162] RSP: 002b:00007fb2331ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.797267][ T7162] RAX: ffffffffffffffda RBX: 00007fb2331cd6c0 RCX: 00007fb23235d68e [ 203.805286][ T7162] RDX: 000000000000000f RSI: 00007fb2331cd0a0 RDI: 0000000000000007 [ 203.813375][ T7162] RBP: 00007fb2331cd090 R08: 0000000000000000 R09: 0000000000000000 [ 203.821369][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.829445][ T7162] R13: 00007fb232616128 R14: 00007fb232616090 R15: 00007ffee5ff6538 [ 203.837447][ T7162] [ 203.946999][ T7166] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.422'. [ 204.963542][ T7178] €Â0: renamed from batadv_slave_1 (while UP) [ 205.113283][ T7183] netlink: 'syz.3.425': attribute type 3 has an invalid length. [ 205.171334][ T7183] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 205.258387][ T7183] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.425'. [ 205.906773][ T7193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.429'. [ 206.172790][ T7191] netlink: 'syz.1.430': attribute type 3 has an invalid length. [ 206.211717][ T7191] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.430'. [ 206.460396][ T7203] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 206.468498][ T7203] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 206.511196][ T7206] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 206.518864][ T7206] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 206.927932][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 206.928339][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 206.935214][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 206.940071][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 208.830017][ T7191] syz.1.430 (7191) used greatest stack depth: 19080 bytes left [ 209.693042][ T7215] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.439'. [ 209.724760][ T7215] tc_dump_action: action bad kind [ 210.057316][ T7227] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.445'. [ 210.871662][ T7239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.879409][ T7239] IPv6: NLM_F_CREATE should be set when creating new route [ 210.886781][ T7239] IPv6: NLM_F_CREATE should be set when creating new route [ 210.894087][ T7239] IPv6: NLM_F_CREATE should be set when creating new route [ 211.583680][ T7245] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.450'. [ 211.788899][ T7245] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.450'. [ 211.834907][ T7255] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.450'. [ 211.884106][ T7241] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.450'. [ 211.972612][ T7264] netlink: 'syz.1.454': attribute type 10 has an invalid length. [ 213.051553][ T7279] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.460'. [ 213.580938][ T7289] sctp: [Deprecated]: syz.1.463 (pid 7289) Use of int in maxseg socket option. [ 213.580938][ T7289] Use struct sctp_assoc_value instead [ 213.655758][ T7295] sctp: [Deprecated]: syz.1.463 (pid 7295) Use of int in maxseg socket option. [ 213.655758][ T7295] Use struct sctp_assoc_value instead [ 213.716762][ T5781] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 213.870945][ T7303] netlink: 'syz.0.467': attribute type 10 has an invalid length. [ 214.023087][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.469'. [ 214.558459][ T7312] netlink: 'syz.0.471': attribute type 3 has an invalid length. [ 214.582125][ T7312] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.471'. [ 214.605415][ T7318] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 214.637206][ T7318] team0: Device vxcan1 is of different type [ 214.804897][ T7324] sctp: [Deprecated]: syz.2.474 (pid 7324) Use of int in maxseg socket option. [ 214.804897][ T7324] Use struct sctp_assoc_value instead [ 215.301861][ T7332] netlink: 1059 bytes leftover after parsing attributes in process `syz.0.485'. [ 215.556636][ T7341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.480'. [ 216.477365][ T7368] netlink: 60 bytes leftover after parsing attributes in process `syz.0.491'. [ 216.690595][ T7377] FAULT_INJECTION: forcing a failure. [ 216.690595][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 216.709525][ T7377] CPU: 0 PID: 7377 Comm: syz.2.494 Not tainted syzkaller #0 [ 216.716978][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.727163][ T7377] Call Trace: [ 216.730570][ T7377] [ 216.733534][ T7377] dump_stack_lvl+0x18c/0x250 [ 216.738263][ T7377] ? show_regs_print_info+0x20/0x20 [ 216.743507][ T7377] ? load_image+0x420/0x420 [ 216.748071][ T7377] ? __might_sleep+0xe0/0xe0 [ 216.752705][ T7377] ? __lock_acquire+0x7d40/0x7d40 [ 216.757779][ T7377] should_fail_ex+0x39d/0x4d0 [ 216.762528][ T7377] should_failslab+0x9/0x20 [ 216.767083][ T7377] slab_pre_alloc_hook+0x59/0x310 [ 216.772171][ T7377] kmem_cache_alloc_node+0x60/0x320 [ 216.777419][ T7377] ? __alloc_skb+0x103/0x2c0 [ 216.782079][ T7377] __alloc_skb+0x103/0x2c0 [ 216.786548][ T7377] alloc_skb_with_frags+0xca/0x7b0 [ 216.791711][ T7377] ? mark_lock+0x94/0x320 [ 216.796356][ T7377] sock_alloc_send_pskb+0x883/0x9a0 [ 216.801628][ T7377] ? sock_kzfree_s+0x50/0x50 [ 216.806286][ T7377] tun_get_user+0x82c/0x3ca0 [ 216.810945][ T7377] ? aa_file_perm+0x11b/0xee0 [ 216.815686][ T7377] ? rcu_read_unlock+0xa0/0xa0 [ 216.820520][ T7377] ? tun_get+0x1c/0x2e0 [ 216.824730][ T7377] ? __lock_acquire+0x7d40/0x7d40 [ 216.829791][ T7377] ? tun_get+0x1c/0x2e0 [ 216.834003][ T7377] tun_chr_write_iter+0x119/0x200 [ 216.839036][ T7377] vfs_write+0x46c/0x990 [ 216.843287][ T7377] ? file_end_write+0x250/0x250 [ 216.848143][ T7377] ? __fget_files+0x43d/0x4b0 [ 216.852858][ T7377] ? __fdget_pos+0x1d8/0x330 [ 216.857548][ T7377] ? ksys_write+0x75/0x260 [ 216.861987][ T7377] ksys_write+0x150/0x260 [ 216.866331][ T7377] ? __ia32_sys_read+0x90/0x90 [ 216.871108][ T7377] ? lockdep_hardirqs_on+0x98/0x150 [ 216.876339][ T7377] do_syscall_64+0x55/0xb0 [ 216.880932][ T7377] ? clear_bhb_loop+0x40/0x90 [ 216.885623][ T7377] ? clear_bhb_loop+0x40/0x90 [ 216.890399][ T7377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.896323][ T7377] RIP: 0033:0x7f9de499ce59 [ 216.900758][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.920397][ T7377] RSP: 002b:00007f9de57ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.928840][ T7377] RAX: ffffffffffffffda RBX: 00007f9de4c15fa0 RCX: 00007f9de499ce59 [ 216.936915][ T7377] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 216.944901][ T7377] RBP: 00007f9de57ac090 R08: 0000000000000000 R09: 0000000000000000 [ 216.952935][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.960996][ T7377] R13: 00007f9de4c16038 R14: 00007f9de4c15fa0 R15: 00007ffc4821bc28 [ 216.969002][ T7377] [ 217.768738][ T7390] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.500'. [ 218.524680][ T7402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.504'. [ 218.655484][ T7400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.503'. [ 220.996825][ T7441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.520'. [ 223.528510][ T7445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.521'. [ 223.711709][ T7453] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.523'. [ 223.726250][ T7453] tc_dump_action: action bad kind [ 223.846013][ T7459] FAULT_INJECTION: forcing a failure. [ 223.846013][ T7459] name failslab, interval 1, probability 0, space 0, times 0 [ 223.895726][ T7459] CPU: 1 PID: 7459 Comm: syz.2.526 Not tainted syzkaller #0 [ 223.903086][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 223.913236][ T7459] Call Trace: [ 223.916529][ T7459] [ 223.919473][ T7459] dump_stack_lvl+0x18c/0x250 [ 223.924181][ T7459] ? show_regs_print_info+0x20/0x20 [ 223.929416][ T7459] ? load_image+0x420/0x420 [ 223.933943][ T7459] should_fail_ex+0x39d/0x4d0 [ 223.938695][ T7459] should_failslab+0x9/0x20 [ 223.943213][ T7459] slab_pre_alloc_hook+0x59/0x310 [ 223.948258][ T7459] ? sk_prot_alloc+0xe7/0x210 [ 223.952986][ T7459] ? sk_prot_alloc+0xe7/0x210 [ 223.957864][ T7459] __kmem_cache_alloc_node+0x53/0x250 [ 223.963266][ T7459] ? sk_prot_alloc+0xe7/0x210 [ 223.967963][ T7459] __kmalloc+0xa4/0x230 [ 223.972226][ T7459] sk_prot_alloc+0xe7/0x210 [ 223.976773][ T7459] ? sk_alloc+0x24/0x360 [ 223.981123][ T7459] sk_alloc+0x3a/0x360 [ 223.985208][ T7459] ? can_get_proto+0x234/0x280 [ 223.989986][ T7459] can_create+0x1cc/0x4d0 [ 223.994331][ T7459] __sock_create+0x4a6/0x940 [ 223.998945][ T7459] __sys_socketpair+0x1c1/0x550 [ 224.003817][ T7459] __x64_sys_socketpair+0x9b/0xb0 [ 224.008862][ T7459] do_syscall_64+0x55/0xb0 [ 224.013296][ T7459] ? clear_bhb_loop+0x40/0x90 [ 224.018178][ T7459] ? clear_bhb_loop+0x40/0x90 [ 224.022873][ T7459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.028792][ T7459] RIP: 0033:0x7f9de499ce59 [ 224.033220][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.052875][ T7459] RSP: 002b:00007f9de57ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 224.061835][ T7459] RAX: ffffffffffffffda RBX: 00007f9de4c15fa0 RCX: 00007f9de499ce59 [ 224.069824][ T7459] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 224.077807][ T7459] RBP: 00007f9de57ac090 R08: 0000000000000000 R09: 0000000000000000 [ 224.085789][ T7459] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001 [ 224.093861][ T7459] R13: 00007f9de4c16038 R14: 00007f9de4c15fa0 R15: 00007ffc4821bc28 [ 224.101867][ T7459] [ 225.168715][ T7476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.532'. [ 226.860108][ T7502] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.542'. [ 226.879668][ T7502] tc_dump_action: action bad kind [ 226.927915][ T7503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.541'. [ 227.826979][ T7508] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 227.838530][ T7508] syzkaller1: linktype set to 769 [ 228.543037][ T7538] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.554'. [ 228.574213][ T7538] tc_dump_action: action bad kind [ 228.699737][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.553'. [ 229.920973][ T7560] netlink: 763 bytes leftover after parsing attributes in process `syz.1.561'. [ 230.164797][ T7571] netlink: 48 bytes leftover after parsing attributes in process `syz.0.564'. [ 233.022413][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.042647][ T7576] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.564'. [ 233.055908][ T7579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.567'. [ 233.071083][ T7583] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.568'. [ 233.112430][ T7583] tc_dump_action: action bad kind [ 233.452368][ T7600] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 233.469579][ T7600] netlink: 'syz.0.572': attribute type 8 has an invalid length. [ 233.488466][ T7600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.572'. [ 233.726074][ T7609] FAULT_INJECTION: forcing a failure. [ 233.726074][ T7609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.783603][ T7609] CPU: 0 PID: 7609 Comm: syz.1.577 Not tainted syzkaller #0 [ 233.790971][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.801077][ T7609] Call Trace: [ 233.804397][ T7609] [ 233.807373][ T7609] dump_stack_lvl+0x18c/0x250 [ 233.812198][ T7609] ? show_regs_print_info+0x20/0x20 [ 233.817577][ T7609] ? load_image+0x420/0x420 [ 233.822116][ T7609] ? __lock_acquire+0x7d40/0x7d40 [ 233.827185][ T7609] should_fail_ex+0x39d/0x4d0 [ 233.831921][ T7609] _copy_from_user+0x2f/0xe0 [ 233.836546][ T7609] __copy_msghdr+0x3bb/0x580 [ 233.841179][ T7609] ___sys_sendmsg+0x214/0x360 [ 233.845908][ T7609] ? get_pid_task+0x20/0x1e0 [ 233.850555][ T7609] ? __sys_sendmsg+0x2a0/0x2a0 [ 233.855404][ T7609] ? __lock_acquire+0x7d40/0x7d40 [ 233.860592][ T7609] __se_sys_sendmsg+0x1c2/0x2b0 [ 233.865500][ T7609] ? __x64_sys_sendmsg+0x80/0x80 [ 233.870489][ T7609] ? lockdep_hardirqs_on+0x98/0x150 [ 233.875738][ T7609] do_syscall_64+0x55/0xb0 [ 233.880373][ T7609] ? clear_bhb_loop+0x40/0x90 [ 233.885084][ T7609] ? clear_bhb_loop+0x40/0x90 [ 233.889885][ T7609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.895824][ T7609] RIP: 0033:0x7fb23239ce59 [ 233.900799][ T7609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.920530][ T7609] RSP: 002b:00007fb2331ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.929014][ T7609] RAX: ffffffffffffffda RBX: 00007fb232615fa0 RCX: 00007fb23239ce59 [ 233.937048][ T7609] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000005 [ 233.945065][ T7609] RBP: 00007fb2331ee090 R08: 0000000000000000 R09: 0000000000000000 [ 233.953085][ T7609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.961192][ T7609] R13: 00007fb232616038 R14: 00007fb232615fa0 R15: 00007ffee5ff6538 [ 233.969230][ T7609] [ 234.027895][ T7615] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.579'. [ 234.037789][ T7615] tc_dump_action: action bad kind [ 234.171027][ T7612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.578'. [ 237.850074][ T7642] syzkaller0: entered promiscuous mode [ 237.863982][ T7642] syzkaller0: entered allmulticast mode [ 238.517916][ T7660] netlink: 'syz.3.593': attribute type 9 has an invalid length. [ 238.527534][ T7660] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.593'. [ 240.033246][ T7653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.591'. [ 241.206325][ T7677] FAULT_INJECTION: forcing a failure. [ 241.206325][ T7677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 241.336575][ T7677] CPU: 1 PID: 7677 Comm: syz.0.600 Not tainted syzkaller #0 [ 241.343975][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 241.354099][ T7677] Call Trace: [ 241.357471][ T7677] [ 241.360452][ T7677] dump_stack_lvl+0x18c/0x250 [ 241.365196][ T7677] ? show_regs_print_info+0x20/0x20 [ 241.370510][ T7677] ? load_image+0x420/0x420 [ 241.375083][ T7677] ? __lock_acquire+0x7d40/0x7d40 [ 241.380227][ T7677] should_fail_ex+0x39d/0x4d0 [ 241.385070][ T7677] prepare_alloc_pages+0x1e2/0x5f0 [ 241.390269][ T7677] __alloc_pages+0x134/0x460 [ 241.394932][ T7677] ? zone_statistics+0x170/0x170 [ 241.399956][ T7677] ? alloc_pages+0x4dc/0x740 [ 241.404690][ T7677] ? do_raw_spin_unlock+0x121/0x230 [ 241.409956][ T7677] __get_free_pages+0xc/0x30 [ 241.414675][ T7677] kasan_populate_vmalloc_pte+0x35/0x100 [ 241.420356][ T7677] __apply_to_page_range+0x860/0xdd0 [ 241.425688][ T7677] ? kasan_populate_vmalloc+0x70/0x70 [ 241.431081][ T7677] ? apply_to_page_range+0x50/0x50 [ 241.436324][ T7677] ? do_raw_spin_unlock+0x121/0x230 [ 241.441575][ T7677] alloc_vmap_area+0x1d0c/0x1e30 [ 241.446556][ T7677] ? vm_map_ram+0xcb0/0xcb0 [ 241.451074][ T7677] ? rcu_is_watching+0x15/0xb0 [ 241.455968][ T7677] __get_vm_area_node+0x162/0x370 [ 241.461049][ T7677] __vmalloc_node_range+0x36e/0x1330 [ 241.466350][ T7677] ? array_map_alloc+0x280/0x6f0 [ 241.471418][ T7677] ? verify_lock_unused+0x140/0x140 [ 241.476742][ T7677] ? end_current_label_crit_section+0x170/0x170 [ 241.483053][ T7677] ? free_vm_area+0x50/0x50 [ 241.487609][ T7677] ? bpf_lsm_capable+0x9/0x10 [ 241.492319][ T7677] bpf_map_area_alloc+0xf1/0x110 [ 241.497295][ T7677] ? array_map_alloc+0x280/0x6f0 [ 241.502279][ T7677] array_map_alloc+0x280/0x6f0 [ 241.507083][ T7677] map_create+0x877/0x12f0 [ 241.511567][ T7677] ? bpf_lsm_bpf+0x9/0x10 [ 241.515956][ T7677] __sys_bpf+0x651/0x890 [ 241.520248][ T7677] ? bpf_link_show_fdinfo+0x390/0x390 [ 241.525736][ T7677] ? lock_chain_count+0x20/0x20 [ 241.530688][ T7677] __x64_sys_bpf+0x7c/0x90 [ 241.535235][ T7677] do_syscall_64+0x55/0xb0 [ 241.539709][ T7677] ? clear_bhb_loop+0x40/0x90 [ 241.544425][ T7677] ? clear_bhb_loop+0x40/0x90 [ 241.549219][ T7677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.555174][ T7677] RIP: 0033:0x7feff559ce59 [ 241.560259][ T7677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.579972][ T7677] RSP: 002b:00007feff641e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.588416][ T7677] RAX: ffffffffffffffda RBX: 00007feff5815fa0 RCX: 00007feff559ce59 [ 241.596700][ T7677] RDX: 0000000000000050 RSI: 0000200000004440 RDI: e4ffffff00000000 [ 241.604722][ T7677] RBP: 00007feff641e090 R08: 0000000000000000 R09: 0000000000000000 [ 241.612714][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.620728][ T7677] R13: 00007feff5816038 R14: 00007feff5815fa0 R15: 00007ffd4514d478 [ 241.628833][ T7677] [ 242.216239][ T7683] netlink: 132 bytes leftover after parsing attributes in process `syz.3.602'. [ 243.206318][ T7710] batman_adv: batadv0: adding TT local entry ba:00:2f:e1:ff:ff to non-existent VLAN 815 [ 243.218239][ T7710] batman_adv: batadv0: adding TT local entry ba:00:2f:e1:ff:ff to non-existent VLAN 815 [ 243.233237][ T7710] batman_adv: batadv0: adding TT local entry ba:00:2f:e1:ff:ff to non-existent VLAN 815 [ 243.256380][ T7710] batman_adv: batadv0: adding TT local entry ba:00:2f:e1:ff:ff to non-existent VLAN 815 [ 243.267768][ T7710] batman_adv: batadv0: adding TT local entry ba:00:2f:e1:ff:ff to non-existent VLAN 815 [ 243.278161][ T7710] batman_adv: batadv0: adding TT local entry ba:00:2f:e1:ff:ff to non-existent VLAN 815 [ 243.288164][ T7710] batman_adv: batadv0: adding TT local entry ba:00:2f:e1:ff:ff to non-existent VLAN 815 [ 243.797845][ T7732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.619'. [ 243.862509][ T7733] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.620'. [ 243.877860][ T7733] tc_dump_action: action bad kind [ 244.013634][ T7735] FAULT_INJECTION: forcing a failure. [ 244.013634][ T7735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.031616][ T7735] CPU: 1 PID: 7735 Comm: syz.0.621 Not tainted syzkaller #0 [ 244.038959][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.049043][ T7735] Call Trace: [ 244.052355][ T7735] [ 244.055319][ T7735] dump_stack_lvl+0x18c/0x250 [ 244.060216][ T7735] ? show_regs_print_info+0x20/0x20 [ 244.065477][ T7735] ? load_image+0x420/0x420 [ 244.070027][ T7735] ? __might_fault+0xaa/0x120 [ 244.074744][ T7735] ? __lock_acquire+0x7d40/0x7d40 [ 244.079985][ T7735] should_fail_ex+0x39d/0x4d0 [ 244.084885][ T7735] _copy_to_user+0x2f/0xa0 [ 244.089341][ T7735] bpf_obj_get_info_by_fd+0x192e/0x3080 [ 244.094943][ T7735] ? bpf_map_get_fd_by_id+0x310/0x310 [ 244.100368][ T7735] ? get_pid_task+0x20/0x1e0 [ 244.105034][ T7735] ? file_end_write+0x159/0x250 [ 244.109930][ T7735] ? __might_fault+0xaa/0x120 [ 244.114675][ T7735] ? __might_fault+0xc6/0x120 [ 244.119377][ T7735] ? __might_fault+0xaa/0x120 [ 244.124084][ T7735] ? bpf_lsm_bpf+0x9/0x10 [ 244.128452][ T7735] ? security_bpf+0x7e/0xa0 [ 244.132998][ T7735] __sys_bpf+0x7eb/0x890 [ 244.137291][ T7735] ? bpf_link_show_fdinfo+0x390/0x390 [ 244.142711][ T7735] ? lock_chain_count+0x20/0x20 [ 244.147608][ T7735] __x64_sys_bpf+0x7c/0x90 [ 244.152056][ T7735] do_syscall_64+0x55/0xb0 [ 244.156508][ T7735] ? clear_bhb_loop+0x40/0x90 [ 244.161218][ T7735] ? clear_bhb_loop+0x40/0x90 [ 244.165942][ T7735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.171871][ T7735] RIP: 0033:0x7feff559ce59 [ 244.176318][ T7735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.196050][ T7735] RSP: 002b:00007feff641e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.204521][ T7735] RAX: ffffffffffffffda RBX: 00007feff5815fa0 RCX: 00007feff559ce59 [ 244.212627][ T7735] RDX: 0000000000000010 RSI: 0000200000001440 RDI: 000000000000000f [ 244.220634][ T7735] RBP: 00007feff641e090 R08: 0000000000000000 R09: 0000000000000000 [ 244.228699][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.236712][ T7735] R13: 00007feff5816038 R14: 00007feff5815fa0 R15: 00007ffd4514d478 [ 244.244746][ T7735] [ 244.912483][ T7744] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0xfe ref_ctr_offset(new): 0x0 [ 246.653293][ T7738] C: renamed from team_slave_0 (while UP) [ 246.674112][ T7738] netlink: 'syz.0.622': attribute type 2 has an invalid length. [ 246.681902][ T7738] netlink: 128 bytes leftover after parsing attributes in process `syz.0.622'. [ 246.697393][ T7738] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 247.014868][ T7751] cgroup: fork rejected by pids controller in /syz0 [ 248.150206][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.631'. [ 248.937468][ T7891] FAULT_INJECTION: forcing a failure. [ 248.937468][ T7891] name failslab, interval 1, probability 0, space 0, times 0 [ 248.988839][ T7891] CPU: 1 PID: 7891 Comm: syz.3.641 Not tainted syzkaller #0 [ 248.996484][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.006588][ T7891] Call Trace: [ 249.009910][ T7891] [ 249.012884][ T7891] dump_stack_lvl+0x18c/0x250 [ 249.017640][ T7891] ? show_regs_print_info+0x20/0x20 [ 249.022976][ T7891] ? load_image+0x420/0x420 [ 249.027531][ T7891] ? __lock_acquire+0x7d40/0x7d40 [ 249.032603][ T7891] ? trace_contention_end+0x39/0xe0 [ 249.037946][ T7891] ? __mutex_lock+0x315/0xcc0 [ 249.042694][ T7891] should_fail_ex+0x39d/0x4d0 [ 249.047459][ T7891] should_failslab+0x9/0x20 [ 249.052023][ T7891] slab_pre_alloc_hook+0x59/0x310 [ 249.057104][ T7891] ? mutex_lock_nested+0x20/0x20 [ 249.062184][ T7891] kmem_cache_alloc+0x5a/0x2d0 [ 249.067001][ T7891] ? fasync_helper+0x3a/0xb0 [ 249.071650][ T7891] fasync_helper+0x3a/0xb0 [ 249.076160][ T7891] pipe_fasync+0x108/0x1f0 [ 249.080643][ T7891] ? pipe_release+0x330/0x330 [ 249.085408][ T7891] do_vfs_ioctl+0x1284/0x1cc0 [ 249.090156][ T7891] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 249.095845][ T7891] ? tomoyo_path_number_perm+0x217/0x620 [ 249.101523][ T7891] ? __lock_acquire+0x7d40/0x7d40 [ 249.106595][ T7891] ? slab_free_freelist_hook+0x130/0x1a0 [ 249.112303][ T7891] ? tomoyo_path_number_perm+0x500/0x620 [ 249.118071][ T7891] ? __kmem_cache_free+0xba/0x1e0 [ 249.123158][ T7891] ? tomoyo_path_number_perm+0x5b4/0x620 [ 249.128847][ T7891] ? tomoyo_path_number_perm+0x217/0x620 [ 249.134548][ T7891] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 249.140101][ T7891] ? __fget_files+0x28/0x4b0 [ 249.144838][ T7891] ? __fget_files+0x28/0x4b0 [ 249.149500][ T7891] ? bpf_lsm_file_ioctl+0x9/0x10 [ 249.154569][ T7891] ? security_file_ioctl+0x80/0xa0 [ 249.159737][ T7891] __se_sys_ioctl+0x83/0x170 [ 249.164379][ T7891] do_syscall_64+0x55/0xb0 [ 249.168925][ T7891] ? clear_bhb_loop+0x40/0x90 [ 249.173638][ T7891] ? clear_bhb_loop+0x40/0x90 [ 249.178358][ T7891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.184304][ T7891] RIP: 0033:0x7f0b1979ce59 [ 249.188805][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.208458][ T7891] RSP: 002b:00007f0b1a64a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.216939][ T7891] RAX: ffffffffffffffda RBX: 00007f0b19a16090 RCX: 00007f0b1979ce59 [ 249.224956][ T7891] RDX: 00002000000006c0 RSI: 0000000000005452 RDI: 0000000000000000 [ 249.232972][ T7891] RBP: 00007f0b1a64a090 R08: 0000000000000000 R09: 0000000000000000 [ 249.240983][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.248972][ T7891] R13: 00007f0b19a16128 R14: 00007f0b19a16090 R15: 00007ffd58ea8728 [ 249.256998][ T7891] [ 249.259330][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.269524][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.281248][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.290759][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.301065][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 249.309896][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.194371][ T7896] netlink: 'syz.2.643': attribute type 2 has an invalid length. [ 250.202577][ T7896] netlink: 'syz.2.643': attribute type 8 has an invalid length. [ 250.334378][ T7896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.643'. [ 250.394101][ T7906] netlink: 132 bytes leftover after parsing attributes in process `syz.3.644'. [ 250.596272][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.683082][ T7893] chnl_net:caif_netlink_parms(): no params data found [ 250.776563][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.904613][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.052100][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.084005][ T7926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.648'. [ 251.126380][ T7893] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.134410][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.144331][ T7893] bridge_slave_0: entered allmulticast mode [ 251.152055][ T7893] bridge_slave_0: entered promiscuous mode [ 251.179122][ T7893] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.209115][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.228195][ T7893] bridge_slave_1: entered allmulticast mode [ 251.239086][ T7893] bridge_slave_1: entered promiscuous mode [ 251.315745][ T7893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.320438][ T7926] netlink: 'syz.3.648': attribute type 5 has an invalid length. [ 251.331467][ T5780] Bluetooth: hci0: command tx timeout [ 251.346263][ T7893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.371090][ T7926] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 251.406359][ T7926] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.648'. [ 251.425768][ T7893] team0: Port device team_slave_0 added [ 251.441338][ T7893] team0: Port device team_slave_1 added [ 251.555698][ T7893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.562756][ T7893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.641268][ T7893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.663038][ T7893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.694005][ T7893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.731288][ T7893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.157842][ T7893] hsr_slave_0: entered promiscuous mode [ 252.236431][ T7893] hsr_slave_1: entered promiscuous mode [ 252.271181][ T7893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.304187][ T7893] Cannot create hsr debugfs directory [ 252.576026][ T7944] syzkaller0: entered promiscuous mode [ 252.599880][ T7944] syzkaller0: entered allmulticast mode [ 253.404165][ T5780] Bluetooth: hci0: command tx timeout [ 255.493997][ T5780] Bluetooth: hci0: command tx timeout [ 255.604534][ T7966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.654'. [ 256.048045][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.057089][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.050055][ T7989] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.658'. [ 257.115532][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 257.574225][ T5780] Bluetooth: hci0: command tx timeout [ 257.614017][ T7997] FAULT_INJECTION: forcing a failure. [ 257.614017][ T7997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.689525][ T7997] CPU: 1 PID: 7997 Comm: syz.1.659 Not tainted syzkaller #0 [ 257.696919][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.707030][ T7997] Call Trace: [ 257.710361][ T7997] [ 257.713337][ T7997] dump_stack_lvl+0x18c/0x250 [ 257.718068][ T7997] ? show_regs_print_info+0x20/0x20 [ 257.723389][ T7997] ? load_image+0x420/0x420 [ 257.727931][ T7997] ? __lock_acquire+0x7d40/0x7d40 [ 257.733003][ T7997] ? snprintf+0xe9/0x140 [ 257.737281][ T7997] should_fail_ex+0x39d/0x4d0 [ 257.741999][ T7997] _copy_to_user+0x2f/0xa0 [ 257.746452][ T7997] simple_read_from_buffer+0xe7/0x150 [ 257.751962][ T7997] proc_fail_nth_read+0x1e8/0x260 [ 257.757118][ T7997] ? proc_fault_inject_write+0x360/0x360 [ 257.762799][ T7997] ? fsnotify_perm+0x271/0x5e0 [ 257.767594][ T7997] ? proc_fault_inject_write+0x360/0x360 [ 257.773256][ T7997] vfs_read+0x28b/0x970 [ 257.777460][ T7997] ? kernel_read+0x1e0/0x1e0 [ 257.782180][ T7997] ? __fget_files+0x28/0x4b0 [ 257.786851][ T7997] ? __fget_files+0x28/0x4b0 [ 257.791482][ T7997] ? __fget_files+0x43d/0x4b0 [ 257.796204][ T7997] ? __fdget_pos+0x2a3/0x330 [ 257.800831][ T7997] ? ksys_read+0x75/0x260 [ 257.805236][ T7997] ksys_read+0x150/0x260 [ 257.809516][ T7997] ? vfs_write+0x990/0x990 [ 257.813972][ T7997] ? lockdep_hardirqs_on+0x98/0x150 [ 257.819231][ T7997] do_syscall_64+0x55/0xb0 [ 257.823671][ T7997] ? clear_bhb_loop+0x40/0x90 [ 257.828381][ T7997] ? clear_bhb_loop+0x40/0x90 [ 257.833079][ T7997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.839002][ T7997] RIP: 0033:0x7fb23235d68e [ 257.843447][ T7997] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 257.863164][ T7997] RSP: 002b:00007fb2331edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.871720][ T7997] RAX: ffffffffffffffda RBX: 00007fb2331ee6c0 RCX: 00007fb23235d68e [ 257.880008][ T7997] RDX: 000000000000000f RSI: 00007fb2331ee0a0 RDI: 0000000000000005 [ 257.888007][ T7997] RBP: 00007fb2331ee090 R08: 0000000000000000 R09: 0000000000000000 [ 257.896004][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.904001][ T7997] R13: 00007fb232616038 R14: 00007fb232615fa0 R15: 00007ffee5ff6538 [ 257.912038][ T7997] [ 258.365641][ T37] hsr_slave_0: left promiscuous mode [ 258.389333][ T37] hsr_slave_1: left promiscuous mode [ 258.449118][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.458082][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.496053][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.503539][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.524718][ T37] bridge_slave_1: left allmulticast mode [ 258.530577][ T37] bridge_slave_1: left promiscuous mode [ 258.546805][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.570443][ T37] bridge_slave_0: left allmulticast mode [ 258.588964][ T37] bridge_slave_0: left promiscuous mode [ 258.604172][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.342885][ T37] veth1_macvtap: left promiscuous mode [ 259.352908][ T37] veth0_macvtap: left promiscuous mode [ 259.359978][ T37] veth1_vlan: left promiscuous mode [ 259.367084][ T37] veth0_vlan: left promiscuous mode [ 260.655257][ T37] team0 (unregistering): Port device team_slave_1 removed [ 260.698717][ T37] team0 (unregistering): Port device C removed [ 260.746617][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.798059][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.141979][ T37] bond0 (unregistering): Released all slaves [ 261.253565][ T8012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.663'. [ 261.281854][ T7893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.303273][ T8011] netlink: 'syz.3.665': attribute type 2 has an invalid length. [ 261.322203][ T8011] netlink: 'syz.3.665': attribute type 8 has an invalid length. [ 261.370544][ T8011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.665'. [ 261.410838][ T8022] netlink: 'syz.1.667': attribute type 10 has an invalid length. [ 261.437437][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.446041][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.487687][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.495247][ T8022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.503630][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.510905][ T8022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.567053][ T8022] team0: Port device bridge0 added [ 261.581904][ T7893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.640860][ T7893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.677070][ T7893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.727022][ T8027] bridge_slave_1: left allmulticast mode [ 261.733201][ T8027] bridge_slave_1: left promiscuous mode [ 261.802872][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.922567][ T8027] bridge_slave_0: left allmulticast mode [ 261.966122][ T8027] bridge_slave_0: left promiscuous mode [ 261.981866][ T8027] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.538837][ T7893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.619101][ T7893] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.639768][ T8055] netlink: 'syz.1.675': attribute type 17 has an invalid length. [ 262.674083][ T8055] netlink: 'syz.1.675': attribute type 16 has an invalid length. [ 262.698762][ T8055] netlink: 152 bytes leftover after parsing attributes in process `syz.1.675'. [ 262.852069][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.859343][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.908985][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.916245][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.992879][ T8060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.674'. [ 263.120720][ T7893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.174772][ T8069] netlink: 132 bytes leftover after parsing attributes in process `syz.2.676'. [ 263.426830][ T8077] netlink: 'syz.1.677': attribute type 39 has an invalid length. [ 263.625290][ T8077] hsr_slave_1 (unregistering): left promiscuous mode [ 264.026456][ T7893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.179962][ T7893] veth0_vlan: entered promiscuous mode [ 264.228709][ T7893] veth1_vlan: entered promiscuous mode [ 264.284118][ T8098] bridge_slave_1: left allmulticast mode [ 264.322460][ T8098] bridge_slave_1: left promiscuous mode [ 264.353376][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.857823][ T8098] bridge_slave_0: left allmulticast mode [ 264.876372][ T8098] bridge_slave_0: left promiscuous mode [ 264.927884][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.207573][ T8098] team0: Port device bridge0 removed [ 265.343071][ T7893] veth0_macvtap: entered promiscuous mode [ 265.381033][ T7893] veth1_macvtap: entered promiscuous mode [ 265.472245][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.524072][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.543918][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.574048][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.590324][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.632575][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.649236][ T7893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.685634][ T8124] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.686'. [ 265.732764][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 265.767050][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.791478][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.823906][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.855131][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.876008][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.932455][ T7893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.982894][ T8124] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 266.022795][ T7893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.038403][ T7893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.051824][ T7893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.066491][ T7893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.274730][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.282628][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.362513][ T8144] netlink: 'syz.2.691': attribute type 16 has an invalid length. [ 266.376984][ T8144] netlink: 'syz.2.691': attribute type 3 has an invalid length. [ 266.403303][ T8144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.691'. [ 266.403670][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.450103][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.097294][ T8159] bridge_slave_1: left allmulticast mode [ 267.103693][ T8159] bridge_slave_1: left promiscuous mode [ 267.127115][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.391124][ T8159] bridge_slave_0: left allmulticast mode [ 267.482039][ T8159] bridge_slave_0: left promiscuous mode [ 267.511571][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.284942][ T8190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.708'. [ 268.818880][ T8196] netlink: 'syz.3.711': attribute type 12 has an invalid length. [ 268.854147][ T8196] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.711'. [ 269.827200][ T8224] netlink: 132 bytes leftover after parsing attributes in process `syz.1.721'. [ 270.641465][ T8245] netlink: 'syz.1.727': attribute type 33 has an invalid length. [ 270.670198][ T8245] netlink: 152 bytes leftover after parsing attributes in process `syz.1.727'. [ 270.961629][ T8249] netlink: 'syz.3.729': attribute type 3 has an invalid length. [ 271.038002][ T8249] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.729'. [ 271.129037][ T8248] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 271.199005][ T8248] team0: Device vxcan1 is of different type [ 271.265610][ T8252] netlink: 128 bytes leftover after parsing attributes in process `syz.2.730'. [ 271.287038][ T8252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.350321][ T8258] netlink: 'syz.0.731': attribute type 10 has an invalid length. [ 271.682423][ T8271] netlink: 132 bytes leftover after parsing attributes in process `syz.2.735'. [ 272.138416][ T8282] C: renamed from team_slave_0 (while UP) [ 272.519528][ T8282] netlink: 164 bytes leftover after parsing attributes in process `syz.3.738'. [ 273.602632][ T8299] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.745'. [ 274.070644][ T8314] netlink: 128 bytes leftover after parsing attributes in process `syz.1.750'. [ 274.149852][ T8314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.235199][ T8313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.748'. [ 275.391356][ T8336] netlink: 'syz.3.757': attribute type 3 has an invalid length. [ 275.434039][ T8336] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.757'. [ 275.498867][ T8337] netlink: 132 bytes leftover after parsing attributes in process `syz.0.762'. [ 278.584642][ T8350] netlink: 'syz.3.761': attribute type 10 has an invalid length. [ 279.601386][ T8376] netlink: 'syz.0.766': attribute type 29 has an invalid length. [ 279.650959][ T8376] netlink: 'syz.0.766': attribute type 29 has an invalid length. [ 279.981476][ T8362] netlink: 'syz.0.766': attribute type 29 has an invalid length. [ 280.267040][ T8386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.771'. [ 280.476528][ T8390] FAULT_INJECTION: forcing a failure. [ 280.476528][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 280.496836][ T8390] CPU: 1 PID: 8390 Comm: syz.0.774 Not tainted syzkaller #0 [ 280.504186][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.514275][ T8390] Call Trace: [ 280.517585][ T8390] [ 280.520552][ T8390] dump_stack_lvl+0x18c/0x250 [ 280.525281][ T8390] ? sctp_sendmsg+0x15d2/0x2910 [ 280.530184][ T8390] ? ___sys_sendmsg+0x2a6/0x360 [ 280.535078][ T8390] ? show_regs_print_info+0x20/0x20 [ 280.540324][ T8390] ? load_image+0x420/0x420 [ 280.544885][ T8390] should_fail_ex+0x39d/0x4d0 [ 280.549627][ T8390] should_failslab+0x9/0x20 [ 280.554172][ T8390] slab_pre_alloc_hook+0x59/0x310 [ 280.559249][ T8390] ? sctp_add_bind_addr+0x8c/0x360 [ 280.564406][ T8390] __kmem_cache_alloc_node+0x53/0x250 [ 280.569827][ T8390] ? sctp_add_bind_addr+0x8c/0x360 [ 280.574976][ T8390] kmalloc_trace+0x2a/0xe0 [ 280.579437][ T8390] sctp_add_bind_addr+0x8c/0x360 [ 280.584420][ T8390] sctp_copy_local_addr_list+0x315/0x4f0 [ 280.590095][ T8390] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 280.595857][ T8390] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 280.601977][ T8390] ? sctp_v4_is_any+0x35/0x60 [ 280.606691][ T8390] ? sctp_copy_one_addr+0x8c/0x350 [ 280.611844][ T8390] sctp_bind_addr_copy+0xb3/0x3c0 [ 280.616914][ T8390] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 280.623291][ T8390] sctp_connect_new_asoc+0x2f9/0x6a0 [ 280.628635][ T8390] ? __sctp_connect+0xd80/0xd80 [ 280.633517][ T8390] ? __local_bh_enable_ip+0x13a/0x1c0 [ 280.638940][ T8390] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 280.644537][ T8390] ? security_sctp_bind_connect+0x89/0xb0 [ 280.650308][ T8390] sctp_sendmsg+0x15d2/0x2910 [ 280.655043][ T8390] ? sctp_getsockopt+0xb60/0xb60 [ 280.660019][ T8390] ? aa_sk_perm+0x83c/0x970 [ 280.664568][ T8390] ? aa_af_perm+0x330/0x330 [ 280.669111][ T8390] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 280.675574][ T8390] ? sock_rps_record_flow+0x19/0x3f0 [ 280.680908][ T8390] ? inet_sendmsg+0xe9/0x2f0 [ 280.685554][ T8390] ? inet_send_prepare+0x260/0x260 [ 280.690720][ T8390] ____sys_sendmsg+0x5ba/0x960 [ 280.695529][ T8390] ? __lock_acquire+0x7d40/0x7d40 [ 280.700597][ T8390] ? __asan_memset+0x22/0x40 [ 280.705238][ T8390] ? __sys_sendmsg_sock+0x30/0x30 [ 280.710308][ T8390] ? __import_iovec+0x5f2/0x850 [ 280.715206][ T8390] ? import_iovec+0x73/0xa0 [ 280.719747][ T8390] ___sys_sendmsg+0x2a6/0x360 [ 280.724566][ T8390] ? __sys_sendmsg+0x2a0/0x2a0 [ 280.729678][ T8390] ? trace_call_bpf+0xc3/0x6c0 [ 280.734534][ T8390] __se_sys_sendmsg+0x1c2/0x2b0 [ 280.739434][ T8390] ? __x64_sys_sendmsg+0x80/0x80 [ 280.744442][ T8390] ? lockdep_hardirqs_on+0x98/0x150 [ 280.749696][ T8390] do_syscall_64+0x55/0xb0 [ 280.754157][ T8390] ? clear_bhb_loop+0x40/0x90 [ 280.758869][ T8390] ? clear_bhb_loop+0x40/0x90 [ 280.763588][ T8390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.769532][ T8390] RIP: 0033:0x7fb1c8b9ce59 [ 280.773986][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.793644][ T8390] RSP: 002b:00007fb1c9ab5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.802108][ T8390] RAX: ffffffffffffffda RBX: 00007fb1c8e15fa0 RCX: 00007fb1c8b9ce59 [ 280.810126][ T8390] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000003 [ 280.818154][ T8390] RBP: 00007fb1c9ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 280.826174][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.834186][ T8390] R13: 00007fb1c8e16038 R14: 00007fb1c8e15fa0 R15: 00007ffd02eaa748 [ 280.842224][ T8390] [ 281.110924][ T8397] netlink: 'syz.2.776': attribute type 2 has an invalid length. [ 281.121501][ T8397] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.776'. [ 281.705021][ T8415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.783'. [ 281.719727][ T8415] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.783'. [ 282.286946][ T8411] Driver unsupported XDP return value 0 on prog (id 630) dev N/A, expect packet loss! [ 282.603345][ T8420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.785'. [ 282.925230][ T8437] netlink: 'syz.3.791': attribute type 4 has an invalid length. [ 282.933387][ T8437] netlink: 152 bytes leftover after parsing attributes in process `syz.3.791'. [ 283.123162][ T8439] netlink: 'syz.0.792': attribute type 10 has an invalid length. [ 283.141527][ T8439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.792'. [ 285.294481][ T8439] batman_adv: batadv0: Adding interface: virt_wifi0 [ 285.301258][ T8439] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.328109][ T8439] batman_adv: batadv0: Interface activated: virt_wifi0 [ 285.863440][ T8480] netlink: 'syz.2.802': attribute type 17 has an invalid length. [ 285.888143][ T8480] netlink: 160 bytes leftover after parsing attributes in process `syz.2.802'. [ 285.986608][ T8484] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 286.573041][ T8499] netlink: 'syz.3.804': attribute type 3 has an invalid length. [ 286.612574][ T8499] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.804'. [ 286.637646][ T8488] netlink: 132 bytes leftover after parsing attributes in process `syz.1.803'. [ 286.706630][ T8492] tap0: tun_chr_ioctl cmd 1074025677 [ 286.712359][ T8492] tap0: linktype set to 778 [ 286.724577][ T8496] tap0: tun_chr_ioctl cmd 2147767511 [ 286.957952][ T8502] netlink: 'syz.2.807': attribute type 10 has an invalid length. [ 286.976113][ T8502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.807'. [ 287.153335][ T8502] batman_adv: batadv0: Adding interface: virt_wifi0 [ 287.162054][ T8502] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.196900][ T8502] batman_adv: batadv0: Interface activated: virt_wifi0 [ 287.426641][ T8515] FAULT_INJECTION: forcing a failure. [ 287.426641][ T8515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.464145][ T8515] CPU: 0 PID: 8515 Comm: syz.1.808 Not tainted syzkaller #0 [ 287.471530][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.481802][ T8515] Call Trace: [ 287.485104][ T8515] [ 287.488157][ T8515] dump_stack_lvl+0x18c/0x250 [ 287.492899][ T8515] ? show_regs_print_info+0x20/0x20 [ 287.498156][ T8515] ? load_image+0x420/0x420 [ 287.502717][ T8515] ? __might_fault+0xaa/0x120 [ 287.507442][ T8515] ? __lock_acquire+0x7d40/0x7d40 [ 287.512517][ T8515] should_fail_ex+0x39d/0x4d0 [ 287.517258][ T8515] _copy_from_user+0x2f/0xe0 [ 287.521898][ T8515] __sys_bpf+0x23e/0x890 [ 287.526187][ T8515] ? bpf_link_show_fdinfo+0x390/0x390 [ 287.531632][ T8515] ? lock_chain_count+0x20/0x20 [ 287.536560][ T8515] __x64_sys_bpf+0x7c/0x90 [ 287.541015][ T8515] do_syscall_64+0x55/0xb0 [ 287.545464][ T8515] ? clear_bhb_loop+0x40/0x90 [ 287.550159][ T8515] ? clear_bhb_loop+0x40/0x90 [ 287.554914][ T8515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.560862][ T8515] RIP: 0033:0x7fb23239ce59 [ 287.565316][ T8515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.585051][ T8515] RSP: 002b:00007fb2331cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.593664][ T8515] RAX: ffffffffffffffda RBX: 00007fb232616090 RCX: 00007fb23239ce59 [ 287.601653][ T8515] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 287.609641][ T8515] RBP: 00007fb2331cd090 R08: 0000000000000000 R09: 0000000000000000 [ 287.617630][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.625705][ T8515] R13: 00007fb232616128 R14: 00007fb232616090 R15: 00007ffee5ff6538 [ 287.633714][ T8515] [ 287.828884][ T8526] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 287.836944][ T8526] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.813'. [ 288.463382][ T8539] netlink: 76 bytes leftover after parsing attributes in process `syz.0.817'. [ 288.478284][ T8537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 288.546450][ T8539] netlink: 132 bytes leftover after parsing attributes in process `syz.0.817'. [ 288.934505][ T8548] netlink: 'syz.3.821': attribute type 10 has an invalid length. [ 288.954125][ T8548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.821'. [ 289.084835][ T8548] batman_adv: batadv0: Adding interface: virt_wifi0 [ 289.092791][ T8548] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.153629][ T8548] batman_adv: batadv0: Interface activated: virt_wifi0 [ 289.400526][ T8557] sctp: [Deprecated]: syz.2.822 (pid 8557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.400526][ T8557] Use struct sctp_sack_info instead [ 289.676367][ T8564] netlink: 'syz.1.825': attribute type 9 has an invalid length. [ 289.687363][ T8564] netlink: 399 bytes leftover after parsing attributes in process `syz.1.825'. [ 291.161960][ T8594] syzkaller0: entered promiscuous mode [ 291.172358][ T8594] syzkaller0: entered allmulticast mode [ 293.440416][ T8620] @ÿ: renamed from bond_slave_0 (while UP) [ 293.921966][ T8628] __nla_validate_parse: 1 callbacks suppressed [ 293.922189][ T8628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.846'. [ 294.083702][ T8638] netlink: 'syz.1.849': attribute type 3 has an invalid length. [ 294.132547][ T8638] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.849'. [ 295.091255][ T8643] netlink: 'syz.3.850': attribute type 2 has an invalid length. [ 295.222340][ T8643] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.850'. [ 295.481722][ T8647] FAULT_INJECTION: forcing a failure. [ 295.481722][ T8647] name failslab, interval 1, probability 0, space 0, times 0 [ 295.500748][ T8647] CPU: 0 PID: 8647 Comm: syz.0.852 Not tainted syzkaller #0 [ 295.508120][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.518229][ T8647] Call Trace: [ 295.521544][ T8647] [ 295.524506][ T8647] dump_stack_lvl+0x18c/0x250 [ 295.529234][ T8647] ? show_regs_print_info+0x20/0x20 [ 295.534477][ T8647] ? load_image+0x420/0x420 [ 295.539021][ T8647] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.545311][ T8647] should_fail_ex+0x39d/0x4d0 [ 295.550028][ T8647] should_failslab+0x9/0x20 [ 295.554565][ T8647] slab_pre_alloc_hook+0x59/0x310 [ 295.559633][ T8647] ? lockdep_hardirqs_on+0x98/0x150 [ 295.564865][ T8647] ? kernfs_fop_write_iter+0x159/0x520 [ 295.570330][ T8647] ? kernfs_fop_write_iter+0x159/0x520 [ 295.575897][ T8647] __kmem_cache_alloc_node+0x53/0x250 [ 295.581337][ T8647] ? kernfs_fop_write_iter+0x159/0x520 [ 295.586815][ T8647] __kmalloc+0xa4/0x230 [ 295.591001][ T8647] ? audit_tree_destroy_watch+0x20/0x20 [ 295.596579][ T8647] kernfs_fop_write_iter+0x159/0x520 [ 295.601949][ T8647] vfs_write+0x46c/0x990 [ 295.606268][ T8647] ? file_end_write+0x250/0x250 [ 295.611159][ T8647] ? __fget_files+0x43d/0x4b0 [ 295.615878][ T8647] ? __fdget_pos+0x2a3/0x330 [ 295.620580][ T8647] ? ksys_write+0x75/0x260 [ 295.625022][ T8647] ksys_write+0x150/0x260 [ 295.629374][ T8647] ? __ia32_sys_read+0x90/0x90 [ 295.634179][ T8647] ? syscall_enter_from_user_mode+0x2e/0x80 [ 295.640206][ T8647] do_syscall_64+0x55/0xb0 [ 295.644651][ T8647] ? clear_bhb_loop+0x40/0x90 [ 295.649347][ T8647] ? clear_bhb_loop+0x40/0x90 [ 295.654039][ T8647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.659949][ T8647] RIP: 0033:0x7fb1c8b9ce59 [ 295.664376][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.684015][ T8647] RSP: 002b:00007fb1c9ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.692493][ T8647] RAX: ffffffffffffffda RBX: 00007fb1c8e15fa0 RCX: 00007fb1c8b9ce59 [ 295.700578][ T8647] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 0000000000000008 [ 295.708566][ T8647] RBP: 00007fb1c9ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 295.716550][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.724530][ T8647] R13: 00007fb1c8e16038 R14: 00007fb1c8e15fa0 R15: 00007ffd02eaa748 [ 295.732534][ T8647] [ 295.847882][ T8647] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 295.893011][ T8647] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 298.551483][ T8652] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 298.562287][ T8652] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 298.581307][ T8653] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 298.601505][ T8653] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 298.915405][ T8670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.859'. [ 299.203330][ T8673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.860'. [ 299.655792][ T8676] netlink: 'syz.1.861': attribute type 10 has an invalid length. [ 299.748557][ T8678] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.862'. [ 299.758187][ T8678] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 299.768355][ T8678] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 300.010323][ T8686] netlink: 'syz.0.864': attribute type 2 has an invalid length. [ 300.036663][ T8686] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.864'. [ 300.152509][ T8694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.868'. [ 300.168383][ T8694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.868'. [ 300.204786][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.868'. [ 300.538565][ T8708] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.873'. [ 300.604544][ T8710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.872'. [ 300.949676][ T8718] netlink: 60 bytes leftover after parsing attributes in process `syz.0.876'. [ 300.962874][ T8718] netlink: 60 bytes leftover after parsing attributes in process `syz.0.876'. [ 300.978254][ T8718] FAULT_INJECTION: forcing a failure. [ 300.978254][ T8718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.993023][ T8718] CPU: 1 PID: 8718 Comm: syz.0.876 Not tainted syzkaller #0 [ 301.000355][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.010439][ T8718] Call Trace: [ 301.013750][ T8718] [ 301.016706][ T8718] dump_stack_lvl+0x18c/0x250 [ 301.021457][ T8718] ? show_regs_print_info+0x20/0x20 [ 301.026693][ T8718] ? load_image+0x420/0x420 [ 301.031234][ T8718] ? __might_fault+0xaa/0x120 [ 301.035947][ T8718] should_fail_ex+0x39d/0x4d0 [ 301.040680][ T8718] copyout+0x1a/0x90 [ 301.044613][ T8718] _copy_to_iter+0x432/0x1120 [ 301.049344][ T8718] ? iov_iter_init+0x1e0/0x1e0 [ 301.054145][ T8718] ? __virt_addr_valid+0x18c/0x540 [ 301.059292][ T8718] ? __virt_addr_valid+0x469/0x540 [ 301.064438][ T8718] ? __phys_addr_symbol+0x2f/0x70 [ 301.069506][ T8718] __skb_datagram_iter+0xdb/0x780 [ 301.074566][ T8718] ? skb_copy_datagram_iter+0x200/0x200 [ 301.080151][ T8718] skb_copy_datagram_iter+0xb1/0x200 [ 301.085467][ T8718] netlink_recvmsg+0x2d4/0xe60 [ 301.090275][ T8718] ? netlink_sendmsg+0xbf0/0xbf0 [ 301.095253][ T8718] ? aa_af_perm+0x330/0x330 [ 301.099788][ T8718] ? __lock_acquire+0x1273/0x7d40 [ 301.104847][ T8718] ? verify_lock_unused+0x140/0x140 [ 301.110082][ T8718] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 301.115400][ T8718] ? security_socket_recvmsg+0x89/0xb0 [ 301.120891][ T8718] ? netlink_sendmsg+0xbf0/0xbf0 [ 301.125876][ T8718] ____sys_recvmsg+0x2ce/0x5e0 [ 301.130700][ T8718] ? __sys_recvmsg_sock+0x50/0x50 [ 301.135774][ T8718] ? import_iovec+0x73/0xa0 [ 301.140329][ T8718] ___sys_recvmsg+0x216/0x590 [ 301.145044][ T8718] ? __sys_recvmsg+0x2a0/0x2a0 [ 301.149860][ T8718] ? ksys_write+0x1c4/0x260 [ 301.154416][ T8718] ? __fget_files+0x43d/0x4b0 [ 301.159141][ T8718] __x64_sys_recvmsg+0x20c/0x2e0 [ 301.164115][ T8718] ? ___sys_recvmsg+0x590/0x590 [ 301.169023][ T8718] ? lockdep_hardirqs_on+0x98/0x150 [ 301.174266][ T8718] do_syscall_64+0x55/0xb0 [ 301.178713][ T8718] ? clear_bhb_loop+0x40/0x90 [ 301.183421][ T8718] ? clear_bhb_loop+0x40/0x90 [ 301.188126][ T8718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.194067][ T8718] RIP: 0033:0x7fb1c8b9ce59 [ 301.198515][ T8718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.218152][ T8718] RSP: 002b:00007fb1c9ab5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 301.226602][ T8718] RAX: ffffffffffffffda RBX: 00007fb1c8e15fa0 RCX: 00007fb1c8b9ce59 [ 301.234603][ T8718] RDX: 0000000040010020 RSI: 0000200000000040 RDI: 0000000000000003 [ 301.242777][ T8718] RBP: 00007fb1c9ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 301.250780][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.258781][ T8718] R13: 00007fb1c8e16038 R14: 00007fb1c8e15fa0 R15: 00007ffd02eaa748 [ 301.266905][ T8718] [ 301.746844][ T8722] netlink: 'syz.2.878': attribute type 2 has an invalid length. [ 303.807353][ T8775] FAULT_INJECTION: forcing a failure. [ 303.807353][ T8775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.840001][ T8775] CPU: 1 PID: 8775 Comm: syz.1.894 Not tainted syzkaller #0 [ 303.847346][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.857611][ T8775] Call Trace: [ 303.860936][ T8775] [ 303.863915][ T8775] dump_stack_lvl+0x18c/0x250 [ 303.868653][ T8775] ? show_regs_print_info+0x20/0x20 [ 303.873913][ T8775] ? load_image+0x420/0x420 [ 303.878477][ T8775] ? __might_fault+0xaa/0x120 [ 303.883166][ T8775] ? __lock_acquire+0x7d40/0x7d40 [ 303.888216][ T8775] should_fail_ex+0x39d/0x4d0 [ 303.892938][ T8775] _copy_from_user+0x2f/0xe0 [ 303.897537][ T8775] ___sys_sendmsg+0x1c7/0x360 [ 303.902234][ T8775] ? get_pid_task+0x20/0x1e0 [ 303.906867][ T8775] ? __sys_sendmsg+0x2a0/0x2a0 [ 303.911686][ T8775] ? __lock_acquire+0x7d40/0x7d40 [ 303.916751][ T8775] __se_sys_sendmsg+0x1c2/0x2b0 [ 303.921636][ T8775] ? __x64_sys_sendmsg+0x80/0x80 [ 303.926609][ T8775] ? lockdep_hardirqs_on+0x98/0x150 [ 303.931859][ T8775] do_syscall_64+0x55/0xb0 [ 303.936298][ T8775] ? clear_bhb_loop+0x40/0x90 [ 303.940983][ T8775] ? clear_bhb_loop+0x40/0x90 [ 303.945670][ T8775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.951581][ T8775] RIP: 0033:0x7fb23239ce59 [ 303.956010][ T8775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.975646][ T8775] RSP: 002b:00007fb2331ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.984073][ T8775] RAX: ffffffffffffffda RBX: 00007fb232615fa0 RCX: 00007fb23239ce59 [ 303.992072][ T8775] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003 [ 304.000071][ T8775] RBP: 00007fb2331ee090 R08: 0000000000000000 R09: 0000000000000000 [ 304.008068][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.016053][ T8775] R13: 00007fb232616038 R14: 00007fb232615fa0 R15: 00007ffee5ff6538 [ 304.024079][ T8775] [ 304.220861][ T8779] sctp: [Deprecated]: syz.1.896 (pid 8779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.220861][ T8779] Use struct sctp_sack_info instead [ 306.892617][ T5780] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 307.475252][ T8798] sctp: [Deprecated]: syz.1.901 (pid 8798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.475252][ T8798] Use struct sctp_sack_info instead [ 308.560019][ T8803] __nla_validate_parse: 7 callbacks suppressed [ 308.560056][ T8803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.903'. [ 308.924609][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 309.026485][ T8828] netlink: 'syz.3.913': attribute type 9 has an invalid length. [ 309.035710][ T8828] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.913'. [ 309.271056][ T8829] netlink: 128 bytes leftover after parsing attributes in process `syz.3.913'. [ 309.332929][ T8829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.384975][ T8836] netlink: 'syz.3.913': attribute type 9 has an invalid length. [ 309.393169][ T8836] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.913'. [ 317.500062][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.506713][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.808336][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.819454][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.827899][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.836175][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.844155][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.851511][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.944836][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.959866][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.968421][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.977227][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.985454][ T5781] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 325.992980][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.931172][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.941075][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.954686][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.963057][ T5780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.971772][ T5780] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 326.979849][ T5780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.051161][ T5781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.061722][ T5781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.074027][ T5781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.082431][ T5781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.102185][ T5781] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 327.110930][ T5781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.894157][ T5780] Bluetooth: hci4: command tx timeout [ 328.044215][ T5780] Bluetooth: hci5: command tx timeout [ 329.023920][ T5780] Bluetooth: hci6: command tx timeout [ 329.164126][ T5780] Bluetooth: hci7: command tx timeout [ 329.964070][ T5780] Bluetooth: hci4: command tx timeout [ 330.134556][ T5780] Bluetooth: hci5: command tx timeout [ 331.084025][ T5780] Bluetooth: hci6: command tx timeout [ 331.263835][ T5780] Bluetooth: hci7: command tx timeout [ 332.043962][ T5780] Bluetooth: hci4: command tx timeout [ 332.204582][ T5780] Bluetooth: hci5: command tx timeout [ 333.164028][ T5780] Bluetooth: hci6: command tx timeout [ 333.331434][ T5780] Bluetooth: hci7: command tx timeout [ 334.124184][ T5780] Bluetooth: hci4: command tx timeout [ 334.294205][ T5780] Bluetooth: hci5: command tx timeout [ 335.244043][ T5780] Bluetooth: hci6: command tx timeout [ 335.404216][ T5781] Bluetooth: hci7: command tx timeout [ 378.941652][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.948092][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.277347][ T5781] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 386.292197][ T5781] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 386.300755][ T5781] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 386.309262][ T5781] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 386.317527][ T5781] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 386.326050][ T5781] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 386.429641][ T5780] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 386.439244][ T5780] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 386.448182][ T5780] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 386.456528][ T5780] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 386.464683][ T5780] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 386.472812][ T5780] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 387.345726][ T5781] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 387.360460][ T5781] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 387.369466][ T5781] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 387.383414][ T5781] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 387.391327][ T5781] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 387.399688][ T5781] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 387.491619][ T5780] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 387.501092][ T5780] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 387.515429][ T5780] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 387.527616][ T5780] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 387.538493][ T5780] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 387.549208][ T5780] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 388.374127][ T5780] Bluetooth: hci8: command tx timeout [ 388.526811][ T5780] Bluetooth: hci9: command tx timeout [ 389.483974][ T5780] Bluetooth: hci10: command tx timeout [ 389.649747][ T5780] Bluetooth: hci11: command tx timeout [ 390.444126][ T5780] Bluetooth: hci8: command tx timeout [ 390.609432][ T5780] Bluetooth: hci9: command tx timeout [ 391.564134][ T5780] Bluetooth: hci10: command tx timeout [ 391.723865][ T5780] Bluetooth: hci11: command tx timeout [ 392.523962][ T5780] Bluetooth: hci8: command tx timeout [ 392.691928][ T5780] Bluetooth: hci9: command tx timeout [ 393.643915][ T5780] Bluetooth: hci10: command tx timeout [ 393.814224][ T5780] Bluetooth: hci11: command tx timeout [ 394.604170][ T5780] Bluetooth: hci8: command tx timeout [ 394.764010][ T5780] Bluetooth: hci9: command tx timeout [ 395.724251][ T5780] Bluetooth: hci10: command tx timeout [ 395.883901][ T5780] Bluetooth: hci11: command tx timeout [ 400.853831][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 415.013762][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 415.020632][ C0] rcu: 0-....: (10366 ticks this GP) idle=248c/1/0x4000000000000000 softirq=25033/25034 fqs=4614 [ 415.032374][ C0] rcu: hardirqs softirqs csw/system [ 415.038841][ C0] rcu: number: 1426210 0 0 [ 415.045261][ C0] rcu: cputime: 17560 34918 42 ==> 52480(ms) [ 415.053059][ C0] rcu: (t=10500 jiffies g=28085 q=1909 ncpus=2) [ 415.059398][ C0] CPU: 0 PID: 8848 Comm: syz.1.920 Not tainted syzkaller #0 [ 415.066842][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.076921][ C0] RIP: 0010:kasan_save_alloc_info+0xb/0x30 [ 415.082845][ C0] Code: 08 5b 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 66 0f 1f 00 31 f6 e9 35 ff ff ff 0f 1f 44 00 00 66 0f 1f 00 48 63 87 bc 00 00 00 <48> 85 c0 0f 94 c1 48 01 c6 0f 94 c0 08 c8 74 01 c3 48 89 f7 89 d6 [ 415.102475][ C0] RSP: 0018:ffffc90000006f18 EFLAGS: 00000246 [ 415.108578][ C0] RAX: 00000000000002c0 RBX: ffff88805efda080 RCX: 0000000000000000 [ 415.116545][ C0] RDX: 0000000000082820 RSI: ffff88805efda080 RDI: ffff88801de7f8c0 [ 415.124778][ C0] RBP: 0000000000082820 R08: ffffc90000006fc8 R09: 0000000000000000 [ 415.133181][ C0] R10: ffffed100bdfb410 R11: fffffbfff2239ab3 R12: 0000000000000001 [ 415.141163][ C0] R13: 00000000000002c0 R14: ffff88801de7f8c0 R15: 0000000000000001 [ 415.149217][ C0] FS: 00007fb2331ee6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 415.158154][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.164758][ C0] CR2: 00007fb1c99456b8 CR3: 000000004bbdd000 CR4: 00000000003506f0 [ 415.172757][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.180765][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 415.188844][ C0] Call Trace: [ 415.192269][ C0] [ 415.195223][ C0] __kasan_slab_alloc+0x6c/0x80 [ 415.200097][ C0] slab_post_alloc_hook+0x6e/0x4b0 [ 415.205258][ C0] kmem_cache_alloc_node+0x14c/0x320 [ 415.210559][ C0] ? kmalloc_reserve+0x95/0x240 [ 415.215539][ C0] kmalloc_reserve+0x95/0x240 [ 415.220220][ C0] __alloc_skb+0x138/0x2c0 [ 415.224637][ C0] arp_create+0x19f/0x9f0 [ 415.229079][ C0] ? __inet_dev_addr_type+0x155/0x490 [ 415.234503][ C0] ? arp_send_dst+0x230/0x230 [ 415.239198][ C0] ? arp_solicit+0x12c/0xe40 [ 415.243794][ C0] arp_send_dst+0xa7/0x230 [ 415.248221][ C0] arp_solicit+0xc05/0xe40 [ 415.252642][ C0] ? arp_solicit+0x12c/0xe40 [ 415.257231][ C0] ? arp_ifdown+0x20/0x20 [ 415.261557][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 415.266954][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.273317][ C0] ? arp_ifdown+0x20/0x20 [ 415.277693][ C0] __neigh_event_send+0xed1/0x1440 [ 415.283151][ C0] neigh_resolve_output+0x19b/0x730 [ 415.288431][ C0] ? ip_finish_output2+0x11e0/0x11e0 [ 415.293768][ C0] ? ip_finish_output2+0x374/0x11e0 [ 415.298992][ C0] ? ip_finish_output2+0x457/0x11e0 [ 415.304214][ C0] ip_finish_output2+0xd3a/0x11e0 [ 415.309292][ C0] ? nf_hook+0xa2/0x390 [ 415.313461][ C0] ? __ip_local_out+0x5f0/0x5f0 [ 415.318311][ C0] ? nf_hook+0xa2/0x390 [ 415.322470][ C0] ? ip_fragment+0x210/0x210 [ 415.327240][ C0] ? ip_mc_finish_output+0x250/0x250 [ 415.332708][ C0] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 415.337652][ C0] ? ip_finish_output+0x3ef/0x4c0 [ 415.342676][ C0] ip_output+0x2a1/0x3b0 [ 415.346919][ C0] ? ip_output+0x60/0x3b0 [ 415.351259][ C0] ip_send_skb+0x12f/0x1d0 [ 415.355673][ C0] ? __icmp_send+0x216/0x1420 [ 415.360348][ C0] __icmp_send+0x10b5/0x1420 [ 415.364948][ C0] ? __icmp_send+0x216/0x1420 [ 415.369622][ C0] ? icmp_out_count+0x90/0x90 [ 415.374320][ C0] ? lapic_next_event+0x11/0x20 [ 415.379278][ C0] ? clockevents_program_event+0x230/0x310 [ 415.385136][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 415.391131][ C0] ipv4_link_failure+0x657/0xa40 [ 415.396085][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.402634][ C0] ? ipv4_negative_advice+0x1a0/0x1a0 [ 415.408033][ C0] ? ipv4_negative_advice+0x1a0/0x1a0 [ 415.413424][ C0] arp_error_report+0x112/0x160 [ 415.418352][ C0] neigh_invalidate+0x22c/0x450 [ 415.423234][ C0] neigh_timer_handler+0x914/0xff0 [ 415.428368][ C0] call_timer_fn+0x189/0x540 [ 415.432966][ C0] ? neigh_release+0x80/0x80 [ 415.437549][ C0] ? call_timer_fn+0xd2/0x540 [ 415.442239][ C0] ? __run_timers+0x800/0x800 [ 415.446948][ C0] ? neigh_release+0x80/0x80 [ 415.451570][ C0] __run_timers+0x542/0x800 [ 415.456080][ C0] ? detach_timer+0x2b0/0x2b0 [ 415.460765][ C0] run_timer_softirq+0x67/0xf0 [ 415.465549][ C0] handle_softirqs+0x280/0x820 [ 415.470436][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 415.475195][ C0] ? do_softirq+0x1a0/0x1a0 [ 415.479703][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 415.484911][ C0] __irq_exit_rcu+0xd3/0x190 [ 415.489501][ C0] ? irq_exit_rcu+0x20/0x20 [ 415.494110][ C0] irq_exit_rcu+0x9/0x20 [ 415.498345][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 415.503982][ C0] [ 415.506923][ C0] [ 415.509910][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.515904][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 415.521719][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 e0 94 34 09 e8 1b 2f 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 415.541337][ C0] RSP: 0018:ffffc90004867758 EFLAGS: 00000282 [ 415.547502][ C0] RAX: 3710aadd7fa2cf00 RBX: 0000000000000000 RCX: 3710aadd7fa2cf00 [ 415.555498][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 415.563563][ C0] RBP: ffffc900048677b0 R08: ffffffff911cd5ff R09: 1ffffffff2239abf [ 415.571529][ C0] R10: dffffc0000000000 R11: fffffbfff2239ac0 R12: ffff888079169e00 [ 415.579544][ C0] R13: dffffc0000000000 R14: ffff88807b408000 R15: ffff8880b8e3cb48 [ 415.587702][ C0] ? finish_task_switch+0x265/0x8f0 [ 415.592985][ C0] __schedule+0x155b/0x45a0 [ 415.597561][ C0] ? mark_lock+0x94/0x320 [ 415.601887][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 415.607865][ C0] ? lock_chain_count+0x20/0x20 [ 415.612714][ C0] ? asan.module_dtor+0x20/0x20 [ 415.617560][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.623722][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 415.628926][ C0] ? preempt_schedule+0xc0/0xd0 [ 415.633783][ C0] preempt_schedule_common+0x82/0xc0 [ 415.639069][ C0] preempt_schedule+0xc0/0xd0 [ 415.643753][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 415.649479][ C0] ? event_function+0x300/0x300 [ 415.654345][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 415.660072][ C0] preempt_schedule_thunk+0x1a/0x30 [ 415.665281][ C0] ? smp_call_function_single+0x488/0x5a0 [ 415.670994][ C0] smp_call_function_single+0x48d/0x5a0 [ 415.676550][ C0] ? event_function+0x300/0x300 [ 415.681395][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 415.687542][ C0] ? event_function+0x300/0x300 [ 415.692416][ C0] perf_install_in_context+0x5be/0x920 [ 415.697877][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 415.703857][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 415.709055][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 415.714247][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.720425][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 415.726164][ C0] ? clockevents_program_event+0x230/0x310 [ 415.731986][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 415.737635][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 415.743265][ C0] do_syscall_64+0x55/0xb0 [ 415.747677][ C0] ? clear_bhb_loop+0x40/0x90 [ 415.752361][ C0] ? clear_bhb_loop+0x40/0x90 [ 415.757031][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.762951][ C0] RIP: 0033:0x7fb23239ce59 [ 415.767377][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.786992][ C0] RSP: 002b:00007fb2331ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 415.795406][ C0] RAX: ffffffffffffffda RBX: 00007fb232615fa0 RCX: 00007fb23239ce59 [ 415.803509][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 415.811507][ C0] RBP: 00007fb232432d6f R08: 0000000000000002 R09: 0000000000000000 [ 415.819487][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 415.827479][ C0] R13: 00007fb232616038 R14: 00007fb232615fa0 R15: 00007ffee5ff6538 [ 415.835518][ C0]