last executing test programs: 25m42.429509089s ago: executing program 2 (id=6134): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) (async) close(0x3) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x9000000, [{0xd, 0xfffffffa}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6}}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x49}, 0x28) 25m42.266225303s ago: executing program 2 (id=6136): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1, &(0x7f0000001540)=""/247, 0xf7}, 0x0) 25m42.016248199s ago: executing program 2 (id=6138): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, 0x0}, 0x448c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000c700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x2, &(0x7f0000000200)={0x3, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 25m39.839952582s ago: executing program 2 (id=6140): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000451000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000000940)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000a00)=""/195}, 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b00)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000b40)='\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000020000000d8f00edfad47ef2e37128d5e288e09299b2772706277a20da9f1962898eef194334c79bc5810a1bccde7820b29731b2cec33f77de62d4af1ce6b00973e67e15d", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r2], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f0000000c40), 0x161) sendmsg$inet(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x7}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)='GPL\x00', 0x5, 0x252, &(0x7f0000001700)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff8001}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open$cgroup(&(0x7f0000001800)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001900)=ANY=[@ANYBLOB="1400000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af36504000100381c1500", 0x28}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) close(r3) perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001c00)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x0, 0x0, 0x9, 0x80000000001, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x16, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000002000)='GPL\x00', 0x5, 0xc3, &(0x7f0000002040)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000021c0)="1400000032000b07d25a806f090094", 0xf}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 25m39.349376625s ago: executing program 2 (id=6146): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000feffff7fbfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001480), 0xfffffedf, 0x10, &(0x7f00000014c0), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r1, 0x0, 0xe, 0x0, &(0x7f0000001580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 25m36.018654316s ago: executing program 2 (id=6156): r0 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x48c7}, 0x0, 0x100000000, 0xffffffffffffffff, 0x1) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x3, &(0x7f0000004400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000004cc0)='GPL\x00', 0x5, 0x252, &(0x7f0000004d00)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x5, &(0x7f0000000140)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x7, 0x1, 0x1, 0x5, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0xfffffe00, 0x1000, &(0x7f0000000d40)=""/4096, 0x41000, 0x40, '\x00', r2, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d40)={0x0, 0xd, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001d80)=[r1, r1], &(0x7f0000001dc0)=[{0x4, 0x2, 0xe, 0x6}], 0x10, 0x4}, 0x94) r5 = perf_event_open(&(0x7f0000000c40)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r4, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000cc0)={0x5, 0x80, 0x9, 0x6, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x4}, 0x1400, 0x0, 0x0, 0x3, 0xfffffffffffffffe}) 25m20.793521339s ago: executing program 32 (id=6156): r0 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x48c7}, 0x0, 0x100000000, 0xffffffffffffffff, 0x1) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x3, &(0x7f0000004400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000004cc0)='GPL\x00', 0x5, 0x252, &(0x7f0000004d00)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x5, &(0x7f0000000140)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x7, 0x1, 0x1, 0x5, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0xfffffe00, 0x1000, &(0x7f0000000d40)=""/4096, 0x41000, 0x40, '\x00', r2, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d40)={0x0, 0xd, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001d80)=[r1, r1], &(0x7f0000001dc0)=[{0x4, 0x2, 0xe, 0x6}], 0x10, 0x4}, 0x94) r5 = perf_event_open(&(0x7f0000000c40)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r4, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000cc0)={0x5, 0x80, 0x9, 0x6, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x4}, 0x1400, 0x0, 0x0, 0x3, 0xfffffffffffffffe}) 5.677088921s ago: executing program 1 (id=11712): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x1020, 0x0, 0x1000000000000000, 0x2, 0xffff, 0x0, 0x80000, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000680)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x10, 0x38, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.131611755s ago: executing program 1 (id=11718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000100), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xc9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="3c62f031f6196d7be77f63b062c5", 0xe}], 0x1, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x50}, 0x80) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 4.180177718s ago: executing program 1 (id=11721): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x9fa0, &(0x7f0000000040)=[{&(0x7f0000000100)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001040400060404fe9bbc7a46e3988285dcdf12f213e6f768fec601955fd80009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000001080)={'wlan1\x00', @random="000500000020"}) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1e001200050000000000fcff0101390549870000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000050000000a00"/28], 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a80008000800114003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, &(0x7f0000000380), 0x98) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000480)={r3}) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="1b2388a84b"], 0xffdd) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000400)={'wlan1\x00', @random="020000000300"}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fff, 0xfffffffffffffff0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000700000095"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000980)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x5, 0x0) 3.430635966s ago: executing program 0 (id=11727): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x611, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014210d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 3.072223555s ago: executing program 5 (id=11728): openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3af8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x6, &(0x7f00000007c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000800)='GPL\x00', 0x5, 0x29e, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x700, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) socketpair(0x22, 0x2, 0x22, 0x0) 3.056728075s ago: executing program 3 (id=11729): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x82000000}]}, @enum]}}, &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x82000000}]}, @enum]}}, &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xe2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00'}, 0x94) unlink(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="8fedcb7910109800f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="8fedcb7910109800f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r2, 0x5, 0xb68, 0x4, &(0x7f0000001800)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_int(r1, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) 3.055016925s ago: executing program 4 (id=11730): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000000540)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000600)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000005c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000003c0), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x1, 0x5d}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x10, 0x16, &(0x7f0000001280)=ANY=[@ANYBLOB="61122800000000006113380000000000bf3000000000000025000200091bfeff85200000d69c02008701000000000000bc26000000000000bf674d0000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 3.017538706s ago: executing program 1 (id=11731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000030000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) 2.923938699s ago: executing program 0 (id=11732): socketpair(0x10, 0x3, 0xe, &(0x7f0000000000)) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x3c}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000280)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r2, &(0x7f0000000540)}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000033000b12d25a80648c2594f90124fc60100c034002410000", 0x1c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002c80)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040) 2.486395309s ago: executing program 1 (id=11733): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000580)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000032c0)='syzkaller\x00'}, 0x3c) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003300)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000003380)="b9ff0b078059268cb89e14f086dd2de0ffff20200000ff02000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.393705692s ago: executing program 3 (id=11734): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4006aed38e0a1b0ad342cbac2488aa0cdbcd4455ae60010672a9ab4105b893c98909c9c8c291fed6617b7862125236e4f2435631754207120c75c6886c497bcf42b90beb0d54194262439dfb483d67b0906a64a0e39b6eec9f0f22b079e543bd7394c3ea0645d552e6e436329e851a27b19fcb9ac1f5d8604a4f7eba46a00a4040032c5ed8f8c8f9d2d6a8e"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xb9, &(0x7f0000000300)=""/185, 0x0, 0x0, '\x00', 0x0, @netfilter}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x4}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x8000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, 0x4040000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="cbfc1b807f6fd5ef080053000000000094"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003cba67b3e48dbce906000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52, 0x21, 0xfffffffe, 0x604b52eb}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000600", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x13, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe86, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000b00)={0x3, 0x80, 0x4, 0x6, 0x4, 0x7, 0x0, 0x100000, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x5993, 0x8}, 0x80, 0x7, 0x7, 0x9, 0x3, 0xffffffff, 0x8000, 0x0, 0x5, 0x0, 0x9}, r3, 0xc, r3, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406020000f8ff0e002900", 0x24}, {&(0x7f0000000c40)="e46c0000", 0x4}, {&(0x7f0000000c80)="22903ecc2c1c", 0x6}], 0x3}, 0x40042) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000d00)={'wlan1\x00', @random="0100008d8dff"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000dc0)={'wlan1\x00', @random="0100"}) perf_event_open(&(0x7f0000000e00)={0x2, 0xfffffffffffffd43, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000e80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.232355685s ago: executing program 5 (id=11735): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x17, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.024940161s ago: executing program 4 (id=11736): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6da557e1}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xa1, &(0x7f0000000080)=""/161, 0x20000000}, 0x90) 2.018179901s ago: executing program 5 (id=11737): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e00130010000000ba80010060005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.696925349s ago: executing program 5 (id=11738): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000004900)={&(0x7f0000003780)=@can, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003800)=""/162, 0xa2}], 0x1, &(0x7f0000003900)=""/4096, 0x1000}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x5, 0xc, &(0x7f0000003400)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003480)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000034c0)={0x11, 0x14, &(0x7f0000003580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003600)={0x11, 0x14, &(0x7f00000036c0)=ANY=[], &(0x7f0000003700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000003740)={r3}, 0xc) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000100), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffedb, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038002e001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r5, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000000000000a6, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4) sendmsg$sock(r1, &(0x7f0000004b00)={&(0x7f0000004940)=@phonet={0x23, 0x4, 0x40}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000049c0)="e6e934909a83a002588f4bf477eaa262e7e4e3d9ce2fcf496b2e379c7563e81844ffaeb141819d226de7", 0x2a}], 0x1, &(0x7f0000004a40)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1be4}}, @txtime={{0x18, 0x1, 0x3d, 0x12000000000}}], 0xa8}, 0x4000800) recvmsg$kcm(r1, &(0x7f0000003300)={&(0x7f0000000cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000003200)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/142, 0x8e}, {&(0x7f0000001e00)=""/232, 0xe8}, {&(0x7f0000001f00)=""/108, 0x6c}, {&(0x7f0000001f80)=""/60, 0x3c}, {&(0x7f0000001fc0)=""/2, 0x2}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/199, 0xc7}, {&(0x7f0000003100)=""/28, 0x1c}, {&(0x7f0000003140)=""/179, 0xb3}], 0xa, &(0x7f00000032c0)=""/11, 0xb}, 0x12103) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0xfffffe01, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r5}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x4}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xb5, 0x60, &(0x7f0000000300)=""/96, 0x40f00, 0x24, '\x00', r6, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0x6, 0x8, 0x5}, 0x10, r8, 0x0, 0x2, &(0x7f0000000b80)=[r9, r4, r4, r10], &(0x7f0000000bc0)=[{0x4, 0x2, 0xd, 0x7}, {0x2, 0x3, 0xa, 0xc}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 1.696437339s ago: executing program 4 (id=11739): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2101, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x7, 0xe3fb, 0x4800000, 0x200, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x203b, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000a80), 0x0) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000d00)='GPL\x00'}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000d80), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000dc0)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e00)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r4 = openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000580)={0x4, 0x80, 0x60, 0x6, 0x3, 0x1, 0x0, 0x98, 0xc1, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1, 0x2}, 0x4000, 0x200000000000000, 0x9, 0x1, 0x2c2f, 0x1772, 0x8, 0x0, 0x3, 0x0, 0x100000001}, r4, 0x9, r0, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0xe40, 0xe40, &(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000540)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000100000000f3ffffffffff840000002300002095000000000000b7b375510111edba935dc88500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000006400000084000020a0"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x4000081) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) recvmsg$kcm(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63ec903feb28466489d31746c4c9", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe}, 0x50) 1.309240948s ago: executing program 5 (id=11740): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000011000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.277841809s ago: executing program 0 (id=11741): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0xffffffffffffffd2}, 0x48) 1.23520497s ago: executing program 1 (id=11742): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2b, 0x1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r1, 0x7, 0x18}, 0xc) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x35, &(0x7f0000000040), 0x13) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffff0001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000380)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000005c0)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2c, &(0x7f0000000640), 0x4) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}, [@call]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r6, 0x0, 0x0}, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) (async) syz_clone(0x48120000, &(0x7f0000000180)="324d94539a893152f81dfec805802392eba92c2a10c9a72f8b94d3ea8c187a140db30fddc5a8b1a6b6ec124418fedc1fd4a838ab3d52e2aa5eb6359b8ae64dfc9d6aa3165efb1bcbaaa9be078bcf692ef9b782f37a8e77a1ee01a6fe26fd21b1e66dbea45fd637c31f015b881c658711744ab1c40bf45a0d2997bb0e6328949683fd74c572673f378f10281590e1a3029e6b2b8047e3fac5c940e738a6a7ebec", 0xa0, 0x0, &(0x7f0000000280), 0x0) 1.180053142s ago: executing program 3 (id=11743): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)=@in6={0xa, 0x4e1b, 0x3, @local, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="f5", 0x1}], 0x1}, 0x4c810) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000", 0x17}, {&(0x7f0000000f40)="b61df421b57d3b32189a0fdc1d1c14d3b2f59d2cd059e8", 0x17}], 0x2}, 0x80840) perf_event_open$cgroup(&(0x7f0000001140)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.115964683s ago: executing program 4 (id=11744): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)=@in6={0xa, 0x4e1b, 0x3, @local, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="f5", 0x1}], 0x1}, 0x4c810) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000", 0x17}, {&(0x7f0000000f40)="b61df421b57d3b32189a0fdc1d1c14d3b2f59d2cd059e8", 0x17}], 0x2}, 0x80840) perf_event_open$cgroup(&(0x7f0000001140)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 1.012936445s ago: executing program 5 (id=11745): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030010000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x441}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000012c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000006c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000700)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xad}, 0x4400, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x7, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000faffffff180000000dd4d1c103d518a19db2fd0347b7987a803287e49f54ac7445bb5cc9aff8674d4532c99683cfb889d5b2e9908abe746085327f1d55970b649db30ea744d91ee7ec7ccfe8310ae09d6f278e1cad2ea6bb6d317a420d3e611ccee89d31e745aa340577cd71aefbee05bcbbaf2d245013900b9219cd9974b999141febab2ebfa4ef100c14eed0d69fb1861b0d19dbf9556beeac9853fc3374857f70bd469ce802cd70b9adf54db6d3e1a514160d1c218c35eb74d2f5ceb765158149ec270245de65c8876c1f278235a96eaca1fc5d0af0c1b3c322f969d7c0483a234d48c83b9ca2d39c0322a670064cfcad30a29d297c6f15e6d1f5380d", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000001000000000000000000000095000000000000009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0x4, 0xee, &(0x7f0000000a80)=""/238, 0x41000}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x11, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e00)="1408000000000000b89e08dc88a8", 0x0, 0xffffff02, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r2, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001100)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001240)="140000002200356bd25a806f8c6394f91524fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x14, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={0x0, 0x0, 0x3c}, 0x28) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100180000009500000000000000b702000004000000632af8ff00000000b50900001a000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffa40900000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f6ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7910109800f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 908.152878ms ago: executing program 0 (id=11746): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)=@in6={0xa, 0x4e1b, 0x6, @local, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="f5", 0x1}], 0x1}, 0x4c810) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x10006}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="e03f020033000b35d25a806c8c6f94f90f24fc601000070003000300053582c137153e37000c", 0x26}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="33fe000031"], 0xfe33) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002440)={r1, 0x0, 0x1000, 0xf5, &(0x7f00000011c0)="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", &(0x7f00000021c0)=""/245, 0x4, 0x0, 0x4c, 0xdb, &(0x7f00000022c0)="ea2ef14f4c810916f49408df1b574d52b744ddf8d6aec93f018d9424ac567dba49bb07500c381ac5d1d823589ee5c88b1335343f640dc74c01a5b7cb6eb051b3908320eaa7ec7a8d4c869980", &(0x7f0000002340)="e498959d4ef9b0cbe9e545353084643ef9c973fda510b1dfc3625608066a686058f99efc13e2463eac0531e64e2383a96e0e34bf38cf8369c0fcd9533e8fc51f511fe43faf949e9102822988f920c05d9acdcda26d51f2c3679fa9d8a56c695cb75831c9712e20a5ec39e60b554c9864d20575ea3275f40d4645446f0e299da05f086da0a812dd2cc25140bbfa5cc716cf0cac9cd6ee28128abdbf549b92adbaca4eb438799b5f7d241b8ffd20d535c3d3a790053fe1236e6048ef8af3a8e13bc480509d519d7e63c742bf03d8f5baff7cc442ece62ceed9db5658", 0xe, 0x0, 0x702}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000", 0x17}, {&(0x7f0000000f40)="b61df421b57d3b32189a0fdc1d1c14d3b2f59d2cd059e8", 0x17}], 0x2}, 0x80840) perf_event_open$cgroup(&(0x7f0000001140)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 809.43476ms ago: executing program 3 (id=11747): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x17, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 506.618668ms ago: executing program 4 (id=11748): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000f00", @ANYRESDEC], &(0x7f0000000540)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000600)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000005c0)=r0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)=r2, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 332.191592ms ago: executing program 0 (id=11749): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100140e1208150f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, 0x0, 0x40000000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) 314.029903ms ago: executing program 3 (id=11750): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x4000, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x300, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000}, 0x94) 183.803566ms ago: executing program 4 (id=11751): socketpair(0x10, 0x3, 0xe, &(0x7f0000000000)) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x3c}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000280)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r2, &(0x7f0000000540)}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000033000b12d25a80648c2594f90124fc60100c034002410000", 0x1c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002c80)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040) 4.08159ms ago: executing program 3 (id=11752): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000580)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000032c0)='syzkaller\x00'}, 0x3c) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003300)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000003380)="b9ff0b078059268cb89e14f086dd2de0ffff20200000ff02000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=11762): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x6}, 0x1080, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x50, 0x24040000}, 0x4008020) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000001000), 0x4}, 0x12, 0x0, 0x0, 0x7, 0x1, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x800004}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x13, 0x21, 0x0, 0x0, 0x5, 0xbf, &(0x7f0000001300)=""/191, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000026c0)={0x3, 0xc, 0x5, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x28, 0x0, 0x2, 0x2, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x22) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212", 0x37}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000011c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b15c84e21008bf32c19020000f80200000044000200edb556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0xe8001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000a40)={'syzkaller1\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000a80)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x5, 0xfffffffffffffbff}, 0x40, 0x0, 0x0, 0x7, 0x8, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x9, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000001850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000001b00)='GPL\x00', 0x5, 0x252, &(0x7f0000001b40)=""/195}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ? proc_fault_inject_write+0x310/0x310 [ 1866.289962][T31198] ? fsnotify_perm+0x248/0x550 [ 1866.294784][T31198] ? proc_fault_inject_write+0x310/0x310 [ 1866.300495][T31198] vfs_read+0x2db/0x960 [ 1866.304716][T31198] ? kernel_read+0x1e0/0x1e0 [ 1866.309368][T31198] ? __fget_files+0x28/0x460 [ 1866.314022][T31198] ? __fget_files+0x3fc/0x460 [ 1866.318788][T31198] ? __fdget_pos+0x2ae/0x360 [ 1866.323435][T31198] ? ksys_read+0x70/0x260 [ 1866.327820][T31198] ksys_read+0x14d/0x260 [ 1866.332122][T31198] ? vfs_write+0x9a0/0x9a0 [ 1866.336596][T31198] ? lockdep_hardirqs_on+0x94/0x140 [ 1866.341862][T31198] do_syscall_64+0x4c/0xa0 [ 1866.346326][T31198] ? clear_bhb_loop+0x60/0xb0 [ 1866.351058][T31198] ? clear_bhb_loop+0x60/0xb0 [ 1866.355795][T31198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1866.361741][T31198] RIP: 0033:0x7f792a55ed8e [ 1866.366195][T31198] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1866.385871][T31198] RSP: 002b:00007f79287b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1866.394376][T31198] RAX: ffffffffffffffda RBX: 00007f79287b46c0 RCX: 00007f792a55ed8e [ 1866.402424][T31198] RDX: 000000000000000f RSI: 00007f79287b40a0 RDI: 0000000000000006 [ 1866.410473][T31198] RBP: 00007f79287b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.418503][T31198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.426527][T31198] R13: 00007f792a826218 R14: 00007f792a826180 R15: 00007ffe7639bdf8 [ 1866.434563][T31198] [ 1866.513241][T31200] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7986'. [ 1869.400056][T31195] device syzkaller0 entered promiscuous mode [ 1869.423037][T31215] netlink: 'syz.4.7987': attribute type 10 has an invalid length. [ 1874.270499][T31219] netlink: 'syz.1.7988': attribute type 19 has an invalid length. [ 1874.278741][T31219] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7988'. [ 1874.291523][T31253] netlink: 'syz.3.7997': attribute type 10 has an invalid length. [ 1874.302288][T31253] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.318360][T31253] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.331170][T31253] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.344023][T31253] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.509782][T31258] device syzkaller0 entered promiscuous mode [ 1879.959605][T31266] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.8003'. [ 1879.970113][T31269] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.8003'. [ 1879.994969][T31293] netlink: 'syz.4.8001': attribute type 10 has an invalid length. [ 1880.932591][T31331] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1881.837977][T31339] device syzkaller0 entered promiscuous mode [ 1884.663464][T31379] FAULT_INJECTION: forcing a failure. [ 1884.663464][T31379] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.687246][T31379] CPU: 1 PID: 31379 Comm: syz.1.8035 Not tainted syzkaller #0 [ 1884.694857][T31379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1884.704961][T31379] Call Trace: [ 1884.708704][T31379] [ 1884.711695][T31379] dump_stack_lvl+0x188/0x24e [ 1884.716415][T31379] ? show_regs_print_info+0x12/0x12 [ 1884.721655][T31379] ? load_image+0x410/0x410 [ 1884.726224][T31379] ? __might_sleep+0xd0/0xd0 [ 1884.730848][T31379] ? __lock_acquire+0x7ea0/0x7ea0 [ 1884.735915][T31379] should_fail_ex+0x390/0x4c0 [ 1884.740644][T31379] should_failslab+0x5/0x20 [ 1884.745179][T31379] slab_pre_alloc_hook+0x59/0x300 [ 1884.750239][T31379] ? allocate_cgrp_cset_links+0xaa/0x320 [ 1884.755909][T31379] __kmem_cache_alloc_node+0x4f/0x270 [ 1884.761322][T31379] ? allocate_cgrp_cset_links+0xaa/0x320 [ 1884.767075][T31379] kmalloc_trace+0x26/0xe0 [ 1884.771531][T31379] allocate_cgrp_cset_links+0xaa/0x320 [ 1884.777029][T31379] find_css_set+0xa0e/0x15c0 [ 1884.781682][T31379] ? cgroup_migrate_prepare_dst+0x610/0x610 [ 1884.787625][T31379] ? mark_lock+0x94/0x320 [ 1884.792011][T31379] cgroup_migrate_prepare_dst+0x114/0x610 [ 1884.797778][T31379] cgroup_attach_task+0x546/0x870 [ 1884.802836][T31379] ? cgroup_attach_task+0x20f/0x870 [ 1884.808072][T31379] ? cgroup_migrate_execute+0xf20/0xf20 [ 1884.813667][T31379] ? get_task_cred+0x1f/0x370 [ 1884.818382][T31379] ? get_task_cred+0x2f0/0x370 [ 1884.823174][T31379] ? get_task_cred+0x1f/0x370 [ 1884.827884][T31379] __cgroup1_procs_write+0x2f2/0x3f0 [ 1884.833210][T31379] ? cgroup_pidlist_destroy_work_fn+0x1f0/0x1f0 [ 1884.839511][T31379] ? cgroup_pidlist_stop+0xf0/0xf0 [ 1884.844660][T31379] cgroup_file_write+0x2c9/0x6a0 [ 1884.849631][T31379] ? kernfs_fop_write_iter+0x1d8/0x520 [ 1884.855135][T31379] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1884.860300][T31379] ? __virt_addr_valid+0x188/0x540 [ 1884.865456][T31379] ? __virt_addr_valid+0x188/0x540 [ 1884.870655][T31379] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1884.875807][T31379] kernfs_fop_write_iter+0x3a0/0x520 [ 1884.881136][T31379] vfs_write+0x482/0x9a0 [ 1884.885427][T31379] ? file_end_write+0x250/0x250 [ 1884.890331][T31379] ? __fget_files+0x3fc/0x460 [ 1884.895057][T31379] ? __fdget_pos+0x2ae/0x360 [ 1884.899684][T31379] ? ksys_write+0x70/0x260 [ 1884.904146][T31379] ksys_write+0x14d/0x260 [ 1884.908519][T31379] ? __ia32_sys_read+0x80/0x80 [ 1884.913330][T31379] ? lockdep_hardirqs_on+0x94/0x140 [ 1884.918586][T31379] do_syscall_64+0x4c/0xa0 [ 1884.923037][T31379] ? clear_bhb_loop+0x60/0xb0 [ 1884.927750][T31379] ? clear_bhb_loop+0x60/0xb0 [ 1884.932466][T31379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1884.938404][T31379] RIP: 0033:0x7fa5b479e559 [ 1884.942848][T31379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1884.962482][T31379] RSP: 002b:00007fa5b563f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1884.970934][T31379] RAX: ffffffffffffffda RBX: 00007fa5b4a26180 RCX: 00007fa5b479e559 [ 1884.978938][T31379] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000009 [ 1884.986937][T31379] RBP: 00007fa5b563f090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.994933][T31379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.002931][T31379] R13: 00007fa5b4a26218 R14: 00007fa5b4a26180 R15: 00007fffe6458f68 [ 1885.010947][T31379] [ 1886.253269][T31353] netlink: 'syz.5.8025': attribute type 10 has an invalid length. [ 1887.128078][T31395] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.8039'. [ 1887.974919][T31420] device syzkaller0 entered promiscuous mode [ 1890.062198][T31480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8060'. [ 1892.202754][T31431] netlink: 'syz.4.8046': attribute type 10 has an invalid length. [ 1894.340150][T31522] device syzkaller0 entered promiscuous mode [ 1898.747760][T31521] netlink: 'syz.5.8072': attribute type 10 has an invalid length. [ 1898.881922][T31550] device syzkaller0 entered promiscuous mode [ 1903.613908][T31557] netlink: 'syz.4.8082': attribute type 19 has an invalid length. [ 1903.623630][T31557] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8082'. [ 1903.644519][T31561] netlink: 'syz.5.8081': attribute type 30 has an invalid length. [ 1903.680700][T31598] netlink: 'syz.0.8091': attribute type 10 has an invalid length. [ 1903.767884][T31599] device syzkaller0 entered promiscuous mode [ 1906.910998][T31610] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8095'. [ 1907.415944][T31642] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.8103'. [ 1907.513707][T31643] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.8103'. [ 1908.132880][T31653] netlink: 'syz.5.8105': attribute type 10 has an invalid length. [ 1908.323219][T31665] netlink: 'syz.4.8099': attribute type 23 has an invalid length. [ 1908.357803][T31665] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8099'. [ 1908.505202][T31667] device syzkaller0 entered promiscuous mode [ 1909.021984][T31689] netlink: 'syz.3.8118': attribute type 28 has an invalid length. [ 1909.066246][T31690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1909.114125][T31689] netlink: 'syz.3.8118': attribute type 29 has an invalid length. [ 1909.134678][T31689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1913.219873][T31690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1913.229389][T31693] netlink: 'syz.3.8118': attribute type 21 has an invalid length. [ 1913.238913][T31693] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1913.249128][T31693] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1913.284540][T31697] netlink: 'syz.5.8114': attribute type 10 has an invalid length. [ 1913.292550][T31705] netlink: 'syz.1.8121': attribute type 10 has an invalid length. [ 1914.118097][T31734] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8130'. [ 1914.508734][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.515203][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.898903][T31739] device syzkaller0 entered promiscuous mode [ 1920.546556][T31756] netlink: 'syz.4.8135': attribute type 10 has an invalid length. [ 1921.788038][T31796] device syzkaller0 entered promiscuous mode [ 1922.563552][T31811] device syzkaller0 entered promiscuous mode [ 1926.176627][T31828] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8159'. [ 1932.269003][T31818] netlink: 'syz.5.8155': attribute type 10 has an invalid length. [ 1932.290953][T31824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1932.304713][T31824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1932.324972][T31824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1932.332717][T31824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1932.530819][T31842] device syzkaller0 entered promiscuous mode [ 1937.759022][T31847] netlink: 'syz.0.8165': attribute type 19 has an invalid length. [ 1937.767267][T31847] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8165'. [ 1937.780211][T31863] netlink: 'syz.3.8169': attribute type 10 has an invalid length. [ 1937.799259][T31863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8169'. [ 1938.133726][T31869] device syzkaller0 entered promiscuous mode [ 1942.011325][T31882] netlink: 'syz.5.8172': attribute type 10 has an invalid length. [ 1942.023838][T31891] netlink: 'syz.4.8179': attribute type 10 has an invalid length. [ 1942.476427][T31912] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8187'. [ 1942.486949][T31912] netlink: zone id is out of range [ 1942.507702][T31912] netlink: del zone limit has 4 unknown bytes [ 1942.546354][T31912] netlink: 'syz.0.8187': attribute type 2 has an invalid length. [ 1942.558352][T31912] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8187'. [ 1942.854592][T31924] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8191'. [ 1942.895089][T31929] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8191'. [ 1942.927456][T31920] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8189'. [ 1943.009839][T31920] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1943.063267][T31920] CPU: 1 PID: 31920 Comm: syz.3.8189 Not tainted syzkaller #0 [ 1943.070821][T31920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1943.080931][T31920] Call Trace: [ 1943.084262][T31920] [ 1943.087244][T31920] dump_stack_lvl+0x188/0x24e [ 1943.091992][T31920] ? show_regs_print_info+0x12/0x12 [ 1943.097259][T31920] ? load_image+0x410/0x410 [ 1943.101831][T31920] sysfs_warn_dup+0x8a/0xa0 [ 1943.106433][T31920] sysfs_do_create_link_sd+0xc0/0x110 [ 1943.111865][T31920] device_add+0x83b/0x1050 [ 1943.116349][T31920] wiphy_register+0x1d8b/0x2aa0 [ 1943.121283][T31920] ? cfg80211_event_work+0x40/0x40 [ 1943.126457][T31920] ? minstrel_ht_alloc+0x894/0xa20 [ 1943.131653][T31920] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1943.137790][T31920] ieee80211_register_hw+0x2e33/0x3b00 [ 1943.143315][T31920] ? ieee80211_register_hw+0xf31/0x3b00 [ 1943.148921][T31920] ? ieee80211_register_hw+0xf31/0x3b00 [ 1943.154546][T31920] ? ieee80211_tasklet_handler+0x20/0x20 [ 1943.160240][T31920] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1943.166200][T31920] ? __debug_object_init+0xed/0x440 [ 1943.171460][T31920] ? memset+0x1e/0x40 [ 1943.175499][T31920] ? __hrtimer_init+0x189/0x270 [ 1943.180457][T31920] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1943.186267][T31920] ? memcpy+0x3c/0x60 [ 1943.190309][T31920] hwsim_new_radio_nl+0xab7/0xc90 [ 1943.195401][T31920] genl_family_rcv_msg_doit+0x22f/0x350 [ 1943.201019][T31920] ? end_current_label_crit_section+0x170/0x170 [ 1943.207341][T31920] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1943.213319][T31920] ? bpf_lsm_capable+0x5/0x10 [ 1943.218057][T31920] ? security_capable+0x85/0xb0 [ 1943.222974][T31920] genl_rcv_msg+0x601/0x790 [ 1943.227562][T31920] ? genl_bind+0x360/0x360 [ 1943.232037][T31920] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1943.238462][T31920] netlink_rcv_skb+0x1ef/0x440 [ 1943.243288][T31920] ? genl_bind+0x360/0x360 [ 1943.247769][T31920] ? netlink_ack+0x1160/0x1160 [ 1943.252612][T31920] ? down_read+0x1a8/0x2d0 [ 1943.257096][T31920] genl_rcv+0x24/0x40 [ 1943.261177][T31920] netlink_unicast+0x7ad/0x920 [ 1943.266018][T31920] netlink_sendmsg+0x8ad/0xbd0 [ 1943.270849][T31920] ? netlink_getsockopt+0x550/0x550 [ 1943.276154][T31920] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1943.281767][T31920] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1943.287110][T31920] ? security_socket_sendmsg+0x7c/0xa0 [ 1943.292634][T31920] ? netlink_getsockopt+0x550/0x550 [ 1943.297897][T31920] ____sys_sendmsg+0x5ed/0x9a0 [ 1943.302760][T31920] ? __sys_sendmsg_sock+0x30/0x30 [ 1943.307896][T31920] ? __import_iovec+0x306/0x510 [ 1943.312844][T31920] ? import_iovec+0x6f/0xa0 [ 1943.317433][T31920] ___sys_sendmsg+0x2a2/0x360 [ 1943.322210][T31920] ? __sys_sendmsg+0x2a0/0x2a0 [ 1943.327116][T31920] __se_sys_sendmsg+0x1c3/0x2b0 [ 1943.332050][T31920] ? __x64_sys_sendmsg+0x80/0x80 [ 1943.337084][T31920] ? lockdep_hardirqs_on+0x94/0x140 [ 1943.342384][T31920] do_syscall_64+0x4c/0xa0 [ 1943.346867][T31920] ? clear_bhb_loop+0x60/0xb0 [ 1943.351610][T31920] ? clear_bhb_loop+0x60/0xb0 [ 1943.356357][T31920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1943.362317][T31920] RIP: 0033:0x7f5ee819e559 [ 1943.366790][T31920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.386461][T31920] RSP: 002b:00007f5ee905b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1943.394942][T31920] RAX: ffffffffffffffda RBX: 00007f5ee8426270 RCX: 00007f5ee819e559 [ 1943.403039][T31920] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000000000ab [ 1943.411503][T31920] RBP: 00007f5ee82358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1943.419552][T31920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1943.427577][T31920] R13: 00007f5ee8426308 R14: 00007f5ee8426270 R15: 00007fffb5041c08 [ 1943.435632][T31920] [ 1944.204175][T31947] netlink: 'syz.0.8192': attribute type 10 has an invalid length. [ 1944.785480][T31963] netlink: 'syz.1.8198': attribute type 29 has an invalid length. [ 1944.793798][T31963] netlink: 'syz.1.8198': attribute type 29 has an invalid length. [ 1944.914667][T31964] netlink: 'syz.1.8198': attribute type 29 has an invalid length. [ 1944.976890][T31963] netlink: 'syz.1.8198': attribute type 29 has an invalid length. [ 1945.112521][T31964] netlink: 'syz.1.8198': attribute type 29 has an invalid length. [ 1945.258897][T31967] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.8199'. [ 1947.945279][T32008] device syzkaller0 entered promiscuous mode [ 1949.130813][T32039] netlink: 'syz.0.8219': attribute type 11 has an invalid length. [ 1949.149179][T32039] netlink: 191156 bytes leftover after parsing attributes in process `syz.0.8219'. [ 1949.175743][T32039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1951.905895][T32017] netlink: 'syz.4.8212': attribute type 10 has an invalid length. [ 1952.296297][T32056] FAULT_INJECTION: forcing a failure. [ 1952.296297][T32056] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.309537][T32056] CPU: 0 PID: 32056 Comm: syz.1.8226 Not tainted syzkaller #0 [ 1952.317054][T32056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1952.327139][T32056] Call Trace: [ 1952.330447][T32056] [ 1952.333590][T32056] dump_stack_lvl+0x188/0x24e [ 1952.338316][T32056] ? show_regs_print_info+0x12/0x12 [ 1952.343541][T32056] ? load_image+0x410/0x410 [ 1952.348085][T32056] ? __kasan_slab_alloc+0x6b/0x80 [ 1952.353156][T32056] should_fail_ex+0x390/0x4c0 [ 1952.357910][T32056] should_failslab+0x5/0x20 [ 1952.362459][T32056] slab_pre_alloc_hook+0x59/0x300 [ 1952.367522][T32056] kmem_cache_alloc+0x56/0x2f0 [ 1952.372310][T32056] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1952.377714][T32056] radix_tree_node_alloc+0x7e/0x3a0 [ 1952.382945][T32056] idr_get_free+0x28b/0xa10 [ 1952.387484][T32056] idr_alloc_cyclic+0x286/0x610 [ 1952.392451][T32056] ? idr_alloc+0x2e0/0x2e0 [ 1952.396900][T32056] ? do_raw_spin_lock+0x128/0x2f0 [ 1952.401951][T32056] ? __radix_tree_preload+0x82/0x880 [ 1952.407267][T32056] ? btf_alloc_id+0x30/0x2d0 [ 1952.411887][T32056] btf_alloc_id+0x4f/0x2d0 [ 1952.416335][T32056] btf_new_fd+0x597/0x760 [ 1952.420705][T32056] __sys_bpf+0x612/0x780 [ 1952.424984][T32056] ? bpf_link_show_fdinfo+0x380/0x380 [ 1952.430400][T32056] ? lock_chain_count+0x20/0x20 [ 1952.435286][T32056] __x64_sys_bpf+0x78/0x90 [ 1952.439736][T32056] do_syscall_64+0x4c/0xa0 [ 1952.444190][T32056] ? clear_bhb_loop+0x60/0xb0 [ 1952.448908][T32056] ? clear_bhb_loop+0x60/0xb0 [ 1952.453612][T32056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1952.459636][T32056] RIP: 0033:0x7fa5b479e559 [ 1952.464102][T32056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1952.483754][T32056] RSP: 002b:00007fa5b5681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1952.492204][T32056] RAX: ffffffffffffffda RBX: 00007fa5b4a25fa0 RCX: 00007fa5b479e559 [ 1952.500211][T32056] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000012 [ 1952.508217][T32056] RBP: 00007fa5b5681090 R08: 0000000000000000 R09: 0000000000000000 [ 1952.516220][T32056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1952.524223][T32056] R13: 00007fa5b4a26038 R14: 00007fa5b4a25fa0 R15: 00007fffe6458f68 [ 1952.532235][T32056] [ 1953.737719][T32079] device syzkaller0 entered promiscuous mode [ 1959.997998][T32087] netlink: 'syz.0.8233': attribute type 10 has an invalid length. [ 1960.014623][T32101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1960.021880][T32101] IPv6: NLM_F_CREATE should be set when creating new route [ 1960.029205][T32101] IPv6: NLM_F_CREATE should be set when creating new route [ 1960.036601][T32101] IPv6: NLM_F_CREATE should be set when creating new route [ 1961.072054][T32127] netlink: 'syz.0.8248': attribute type 19 has an invalid length. [ 1961.081949][T32127] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8248'. [ 1961.229210][T32130] netlink: 'syz.5.8249': attribute type 10 has an invalid length. [ 1961.245952][T32130] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8249'. [ 1961.616020][T32131] device syzkaller0 entered promiscuous mode [ 1963.994579][T32160] netlink: 'syz.1.8258': attribute type 3 has an invalid length. [ 1964.022901][T32160] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.8258'. [ 1964.670733][T32167] raw_sendmsg: syz.1.8261 forgot to set AF_INET. Fix it! [ 1966.150531][T32151] netlink: 'syz.4.8252': attribute type 10 has an invalid length. [ 1967.428529][T32200] netlink: 'syz.4.8265': attribute type 10 has an invalid length. [ 1967.707986][T32205] netlink: 'syz.0.8271': attribute type 29 has an invalid length. [ 1967.748525][T32204] netlink: 'syz.0.8271': attribute type 1 has an invalid length. [ 1967.784355][T32204] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1968.003347][T32205] netlink: 'syz.0.8271': attribute type 29 has an invalid length. [ 1968.796962][T32223] device wlan1 entered promiscuous mode [ 1968.901235][T32228] device syzkaller0 entered promiscuous mode [ 1968.949899][T32237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8279'. [ 1972.052758][T32232] netlink: 'syz.5.8280': attribute type 10 has an invalid length. [ 1972.123810][T32232] team0 (unregistering): Port device team_slave_0 removed [ 1972.153704][T32232] team0 (unregistering): Port device team_slave_1 removed [ 1972.172414][T32232] team0 (unregistering): Port device geneve1 removed [ 1973.243255][T32274] netlink: 'syz.3.8285': attribute type 10 has an invalid length. [ 1973.921604][T32281] device syzkaller0 entered promiscuous mode [ 1975.948951][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.955455][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.333373][T32304] rxe_eth0 speed is unknown, defaulting to 1000 [ 1977.697647][T32316] netlink: 'syz.0.8302': attribute type 10 has an invalid length. [ 1977.737002][T32316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8302'. [ 1977.788231][T32316] bridge0: port 4(dummy0) entered blocking state [ 1977.818647][T32316] bridge0: port 4(dummy0) entered disabled state [ 1977.855884][T32316] device dummy0 entered promiscuous mode [ 1979.510670][T32347] netlink: 'syz.4.8306': attribute type 10 has an invalid length. [ 1981.639674][T32385] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.8327'. [ 1981.673358][T32385] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1982.245974][T32391] device syzkaller0 entered promiscuous mode [ 1982.984507][T32407] netlink: 'syz.1.8333': attribute type 10 has an invalid length. [ 1986.991452][T32409] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8334'. [ 1987.482244][T32443] netlink: 'syz.1.8346': attribute type 29 has an invalid length. [ 1987.511057][T32443] netlink: 'syz.1.8346': attribute type 29 has an invalid length. [ 1987.544102][T32444] netlink: 'syz.1.8346': attribute type 29 has an invalid length. [ 1987.598226][T32445] netlink: 'syz.1.8346': attribute type 29 has an invalid length. [ 1987.618787][T32446] netlink: 'syz.1.8346': attribute type 29 has an invalid length. [ 1987.980785][T32451] netlink: 'syz.5.8348': attribute type 10 has an invalid length. [ 1988.252469][T32461] device syzkaller0 entered promiscuous mode [ 1990.101462][T32485] FAULT_INJECTION: forcing a failure. [ 1990.101462][T32485] name failslab, interval 1, probability 0, space 0, times 0 [ 1990.120095][T32485] CPU: 0 PID: 32485 Comm: syz.3.8358 Not tainted syzkaller #0 [ 1990.127657][T32485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1990.137854][T32485] Call Trace: [ 1990.141190][T32485] [ 1990.144174][T32485] dump_stack_lvl+0x188/0x24e [ 1990.148923][T32485] ? show_regs_print_info+0x12/0x12 [ 1990.154194][T32485] ? load_image+0x410/0x410 [ 1990.158774][T32485] ? __might_sleep+0xd0/0xd0 [ 1990.163406][T32485] ? __lock_acquire+0x7ea0/0x7ea0 [ 1990.168514][T32485] should_fail_ex+0x390/0x4c0 [ 1990.173249][T32485] should_failslab+0x5/0x20 [ 1990.177791][T32485] slab_pre_alloc_hook+0x59/0x300 [ 1990.182858][T32485] kmem_cache_alloc+0x56/0x2f0 [ 1990.187660][T32485] ? __alloc_file+0x25/0x230 [ 1990.192335][T32485] __alloc_file+0x25/0x230 [ 1990.196814][T32485] alloc_empty_file+0x90/0x180 [ 1990.201639][T32485] alloc_file+0x5b/0x5f0 [ 1990.205944][T32485] alloc_file_pseudo+0x180/0x200 [ 1990.210947][T32485] ? alloc_empty_file_noaccount+0x80/0x80 [ 1990.216726][T32485] ? alloc_fd+0x590/0x640 [ 1990.221129][T32485] anon_inode_getfd+0xc6/0x1b0 [ 1990.226050][T32485] btf_new_fd+0x5d3/0x760 [ 1990.230465][T32485] __sys_bpf+0x612/0x780 [ 1990.234781][T32485] ? bpf_link_show_fdinfo+0x380/0x380 [ 1990.240239][T32485] ? lock_chain_count+0x20/0x20 [ 1990.245170][T32485] __x64_sys_bpf+0x78/0x90 [ 1990.249694][T32485] do_syscall_64+0x4c/0xa0 [ 1990.254179][T32485] ? clear_bhb_loop+0x60/0xb0 [ 1990.258902][T32485] ? clear_bhb_loop+0x60/0xb0 [ 1990.263609][T32485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1990.269533][T32485] RIP: 0033:0x7f5ee819e559 [ 1990.273965][T32485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1990.293632][T32485] RSP: 002b:00007f5ee90be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1990.302118][T32485] RAX: ffffffffffffffda RBX: 00007f5ee8425fa0 RCX: 00007f5ee819e559 [ 1990.310119][T32485] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000012 [ 1990.318123][T32485] RBP: 00007f5ee90be090 R08: 0000000000000000 R09: 0000000000000000 [ 1990.326134][T32485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1990.334121][T32485] R13: 00007f5ee8426038 R14: 00007f5ee8425fa0 R15: 00007fffb5041c08 [ 1990.342154][T32485] [ 1992.598676][T32488] netlink: 'syz.0.8360': attribute type 4 has an invalid length. [ 1992.606837][T32488] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8360'. [ 1992.640451][T32488] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1992.717652][T32490] device syzkaller0 entered promiscuous mode [ 1993.082812][T32503] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.8364'. [ 1993.095454][T32503] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1998.549748][T32515] netlink: 'syz.0.8376': attribute type 10 has an invalid length. [ 1998.905454][T32531] device syzkaller0 entered promiscuous mode [ 1999.691436][T32549] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.8377'. [ 1999.701193][T32549] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2004.402648][T32590] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.8390'. [ 2004.559468][T32590] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2006.270997][T32604] netlink: 'syz.1.8394': attribute type 10 has an invalid length. [ 2006.758749][T32614] device syzkaller0 entered promiscuous mode [ 2006.842562][T32622] netlink: 'syz.3.8384': attribute type 10 has an invalid length. [ 2007.926721][T32652] netlink: 'syz.4.8405': attribute type 29 has an invalid length. [ 2009.786138][T32639] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8402'. [ 2009.808863][T32652] netlink: 'syz.4.8405': attribute type 29 has an invalid length. [ 2009.828333][T32657] tun0: tun_chr_ioctl cmd 21731 [ 2010.773520][T32675] netlink: 'syz.0.8411': attribute type 10 has an invalid length. [ 2014.059530][T32698] device syzkaller0 entered promiscuous mode [ 2017.971610][T32748] FAULT_INJECTION: forcing a failure. [ 2017.971610][T32748] name failslab, interval 1, probability 0, space 0, times 0 [ 2018.064431][T32748] CPU: 1 PID: 32748 Comm: syz.4.8432 Not tainted syzkaller #0 [ 2018.071988][T32748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2018.082110][T32748] Call Trace: [ 2018.085433][T32748] [ 2018.088397][T32748] dump_stack_lvl+0x188/0x24e [ 2018.093139][T32748] ? show_regs_print_info+0x12/0x12 [ 2018.098418][T32748] ? load_image+0x410/0x410 [ 2018.102965][T32748] ? __might_sleep+0xd0/0xd0 [ 2018.107610][T32748] ? __lock_acquire+0x7ea0/0x7ea0 [ 2018.112690][T32748] should_fail_ex+0x390/0x4c0 [ 2018.117427][T32748] should_failslab+0x5/0x20 [ 2018.121975][T32748] slab_pre_alloc_hook+0x59/0x300 [ 2018.127087][T32748] kmem_cache_alloc+0x56/0x2f0 [ 2018.131900][T32748] ? security_file_alloc+0x30/0x110 [ 2018.137155][T32748] security_file_alloc+0x30/0x110 [ 2018.142236][T32748] __alloc_file+0xc2/0x230 [ 2018.146702][T32748] alloc_empty_file+0x90/0x180 [ 2018.151523][T32748] alloc_file+0x5b/0x5f0 [ 2018.155856][T32748] alloc_file_pseudo+0x180/0x200 [ 2018.160849][T32748] ? alloc_empty_file_noaccount+0x80/0x80 [ 2018.166620][T32748] ? alloc_fd+0x590/0x640 [ 2018.171024][T32748] anon_inode_getfd+0xc6/0x1b0 [ 2018.175851][T32748] btf_new_fd+0x5d3/0x760 [ 2018.180231][T32748] __sys_bpf+0x612/0x780 [ 2018.184530][T32748] ? bpf_link_show_fdinfo+0x380/0x380 [ 2018.189984][T32748] ? lock_chain_count+0x20/0x20 [ 2018.194910][T32748] __x64_sys_bpf+0x78/0x90 [ 2018.199405][T32748] do_syscall_64+0x4c/0xa0 [ 2018.203889][T32748] ? clear_bhb_loop+0x60/0xb0 [ 2018.208623][T32748] ? clear_bhb_loop+0x60/0xb0 [ 2018.213354][T32748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2018.219299][T32748] RIP: 0033:0x7f67a679e559 [ 2018.223755][T32748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2018.243412][T32748] RSP: 002b:00007f67a7602028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2018.251876][T32748] RAX: ffffffffffffffda RBX: 00007f67a6a25fa0 RCX: 00007f67a679e559 [ 2018.259896][T32748] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000012 [ 2018.267937][T32748] RBP: 00007f67a7602090 R08: 0000000000000000 R09: 0000000000000000 [ 2018.275960][T32748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2018.283973][T32748] R13: 00007f67a6a26038 R14: 00007f67a6a25fa0 R15: 00007ffd3c5bcdd8 [ 2018.292032][T32748] [ 2019.708009][ T301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8439'. [ 2019.845030][ T300] device syzkaller0 entered promiscuous mode [ 2019.885793][ T304] netlink: 'syz.5.8440': attribute type 10 has an invalid length. [ 2019.893696][ T304] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8440'. [ 2019.958164][ T304] bridge0: port 2(dummy0) entered blocking state [ 2019.964737][ T304] bridge0: port 2(dummy0) entered forwarding state [ 2025.271502][ T347] netlink: 'syz.1.8454': attribute type 10 has an invalid length. [ 2025.318453][ T347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8454'. [ 2025.711268][ T356] netlink: 'syz.5.8452': attribute type 10 has an invalid length. [ 2026.219185][ T363] device syzkaller0 entered promiscuous mode [ 2026.576637][ T387] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.8470'. [ 2026.592559][ T388] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.8470'. [ 2028.647646][ T394] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8470'. [ 2028.657233][ T395] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8470'. [ 2028.884136][ T412] netlink: 'syz.4.8478': attribute type 11 has an invalid length. [ 2028.926243][ T412] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.8478'. [ 2028.942290][ T408] netlink: 'syz.4.8478': attribute type 11 has an invalid length. [ 2028.961032][ T408] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.8478'. [ 2029.175031][ T423] netlink: 'syz.3.8481': attribute type 19 has an invalid length. [ 2029.206120][ T423] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8481'. [ 2030.365363][ T442] device syzkaller0 entered promiscuous mode [ 2032.389621][ T479] netlink: 'syz.0.8500': attribute type 2 has an invalid length. [ 2032.399107][ T479] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.8500'. [ 2034.361432][ T455] netlink: 'syz.1.8493': attribute type 21 has an invalid length. [ 2034.370476][ T455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8493'. [ 2034.414526][ T470] netlink: 'syz.4.8494': attribute type 10 has an invalid length. [ 2034.422591][ T485] netlink: 'syz.0.8502': attribute type 10 has an invalid length. [ 2034.709695][ T493] netlink: 'syz.4.8506': attribute type 10 has an invalid length. [ 2034.845158][ T495] device syzkaller0 entered promiscuous mode [ 2037.389734][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.401578][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.514801][ T532] netlink: 'syz.5.8515': attribute type 10 has an invalid length. [ 2038.771447][ T550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8522'. [ 2039.015901][ T554] netlink: 'syz.3.8518': attribute type 39 has an invalid length. [ 2039.342156][ T557] netlink: 763 bytes leftover after parsing attributes in process `syz.4.8523'. [ 2039.709643][ T570] delete_channel: no stack [ 2039.733359][ T577] device syzkaller0 entered promiscuous mode [ 2039.994689][ T581] netlink: 'syz.3.8530': attribute type 27 has an invalid length. [ 2040.014084][ T581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8530'. [ 2042.821239][ T595] netlink: 'syz.1.8531': attribute type 10 has an invalid length. [ 2043.136004][ T610] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8535'. [ 2043.272911][ T616] netlink: 'syz.4.8541': attribute type 10 has an invalid length. [ 2043.349892][ T616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8541'. [ 2044.537853][ T642] device syzkaller0 entered promiscuous mode [ 2047.900312][ T654] netlink: 'syz.3.8545': attribute type 10 has an invalid length. [ 2047.965333][ T647] device syzkaller0 entered promiscuous mode [ 2051.546791][ T679] netlink: 'syz.5.8564': attribute type 10 has an invalid length. [ 2052.196084][ T705] device syzkaller0 entered promiscuous mode [ 2052.214809][ T703] netlink: 'syz.5.8566': attribute type 39 has an invalid length. [ 2056.009762][ T732] netlink: 'syz.5.8575': attribute type 19 has an invalid length. [ 2056.019925][ T732] netlink: 55 bytes leftover after parsing attributes in process `syz.5.8575'. [ 2056.676012][ T753] netlink: 'syz.1.8582': attribute type 39 has an invalid length. [ 2057.612530][ T760] netlink: 'syz.5.8581': attribute type 10 has an invalid length. [ 2057.634942][ T765] netlink: 'syz.0.8584': attribute type 10 has an invalid length. [ 2058.289364][ T765] wlan1: mtu less than device minimum [ 2058.373281][ T765] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 2058.705267][ T775] netlink: 'syz.1.8587': attribute type 10 has an invalid length. [ 2059.086780][ T785] device syzkaller0 entered promiscuous mode [ 2063.099564][ T784] netlink: 'syz.4.8589': attribute type 10 has an invalid length. [ 2063.108414][ T784] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.128171][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 2063.135448][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2063.157092][ T784] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2063.189375][ T804] netlink: 'syz.3.8603': attribute type 10 has an invalid length. [ 2064.461361][ T834] device syzkaller0 entered promiscuous mode [ 2064.821919][ T836] netlink: 'syz.1.8607': attribute type 1 has an invalid length. [ 2067.362352][ T848] netlink: 'syz.4.8602': attribute type 10 has an invalid length. [ 2067.752608][ T875] netlink: 'syz.3.8617': attribute type 39 has an invalid length. [ 2067.950718][ T882] netlink: 'syz.0.8620': attribute type 9 has an invalid length. [ 2068.004542][ T882] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8620'. [ 2070.747144][ T927] netlink: 'syz.3.8625': attribute type 10 has an invalid length. [ 2071.790252][ T929] device syzkaller0 entered promiscuous mode [ 2075.795732][ T935] netlink: 'syz.0.8627': attribute type 10 has an invalid length. [ 2076.125387][ T959] netlink: 'syz.3.8636': attribute type 10 has an invalid length. [ 2076.228980][ T953] netlink: 'syz.1.8634': attribute type 10 has an invalid length. [ 2076.932226][ T953] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2076.955514][ T965] netlink: 'syz.5.8639': attribute type 10 has an invalid length. [ 2077.260420][ T970] device syzkaller0 entered promiscuous mode [ 2080.853501][ T986] netlink: 'syz.4.8642': attribute type 10 has an invalid length. [ 2080.867798][ T990] netlink: 'syz.0.8645': attribute type 10 has an invalid length. [ 2081.317834][ T1018] netlink: 'syz.3.8654': attribute type 10 has an invalid length. [ 2081.548638][ T1018] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2081.970163][ T1043] netlink: 'syz.3.8661': attribute type 19 has an invalid length. [ 2081.985264][ T1043] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8661'. [ 2082.306501][ T1046] netlink: 'syz.1.8663': attribute type 10 has an invalid length. [ 2082.489051][ T1056] device syzkaller0 entered promiscuous mode [ 2085.647968][ T1076] netlink: 'syz.0.8666': attribute type 10 has an invalid length. [ 2085.668796][ T1079] rxe_eth0 speed is unknown, defaulting to 1000 [ 2086.145287][ T1085] netlink: 'syz.4.8672': attribute type 10 has an invalid length. [ 2086.254825][ T1085] device wlan1 left promiscuous mode [ 2086.400568][ T1085] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2087.112546][ T1103] netlink: 'syz.0.8683': attribute type 10 has an invalid length. [ 2088.023909][ T1118] device syzkaller0 entered promiscuous mode [ 2091.765251][ T1130] netlink: 'syz.4.8690': attribute type 10 has an invalid length. [ 2091.773378][ T1141] netlink: 'syz.5.8689': attribute type 10 has an invalid length. [ 2091.784898][ T1145] netlink: 'syz.0.8695': attribute type 10 has an invalid length. [ 2091.792873][ T1145] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8695'. [ 2091.804590][ T1145] device hsr0 entered promiscuous mode [ 2091.810322][ T1145] bridge0: port 5(hsr0) entered blocking state [ 2091.834673][ T1145] bridge0: port 5(hsr0) entered disabled state [ 2092.674848][ T1170] netlink: 'syz.1.8698': attribute type 10 has an invalid length. [ 2093.493478][ T1183] device syzkaller0 entered promiscuous mode [ 2097.955628][ T1189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8710'. [ 2097.965366][ T1217] netlink: 'syz.3.8717': attribute type 10 has an invalid length. [ 2098.092990][ T1219] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8718'. [ 2098.809324][ T1242] netlink: 'syz.5.8730': attribute type 10 has an invalid length. [ 2098.827008][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.833429][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.682067][ T1256] netlink: 'syz.1.8731': attribute type 10 has an invalid length. [ 2100.361469][ T1266] rxe_eth0 speed is unknown, defaulting to 1000 [ 2100.679195][ T1279] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8741'. [ 2101.293980][ T1293] netlink: 'syz.1.8745': attribute type 13 has an invalid length. [ 2101.366057][ T1293] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.8745'. [ 2103.174903][ T1330] netlink: 'syz.5.8752': attribute type 10 has an invalid length. [ 2104.272715][ T1358] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8769'. [ 2105.245732][ T1389] netlink: 'syz.1.8781': attribute type 10 has an invalid length. [ 2105.935698][ T1397] netlink: 'syz.5.8783': attribute type 10 has an invalid length. [ 2106.529079][ T1400] netlink: 'syz.4.8780': attribute type 10 has an invalid length. [ 2111.598701][ T1432] netlink: 'syz.1.8793': attribute type 2 has an invalid length. [ 2113.151614][ T1446] netlink: 'syz.4.8795': attribute type 10 has an invalid length. [ 2113.596903][ T1447] device syzkaller0 entered promiscuous mode [ 2114.169908][ T1455] netlink: 'syz.3.8798': attribute type 1 has an invalid length. [ 2114.228133][ T1459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8801'. [ 2118.781357][ T1464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8802'. [ 2118.801139][ T1455] rxe_eth0 speed is unknown, defaulting to 1000 [ 2118.920516][ T1466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8803'. [ 2118.949159][ T1466] bridge0: port 3(dummy0) entered blocking state [ 2118.955728][ T1466] bridge0: port 3(dummy0) entered forwarding state [ 2119.758604][ T1485] device syzkaller0 entered promiscuous mode [ 2124.146482][ T1511] netlink: 'syz.0.8811': attribute type 10 has an invalid length. [ 2124.162615][ T1527] rxe_eth0 speed is unknown, defaulting to 1000 [ 2124.184553][ T1528] netlink: 4735 bytes leftover after parsing attributes in process `syz.4.8822'. [ 2124.388177][ T1532] netlink: 'syz.0.8823': attribute type 1 has an invalid length. [ 2124.574730][ T1536] netlink: 'syz.5.8826': attribute type 2 has an invalid length. [ 2124.686807][ T1536] device 0 entered promiscuous mode [ 2125.118316][ T1546] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8830'. [ 2125.297476][ T1532] rxe_eth0 speed is unknown, defaulting to 1000 [ 2125.668437][ T1558] netlink: 'syz.1.8834': attribute type 10 has an invalid length. [ 2125.718173][ T1558] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2125.734580][ T1558] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 2125.886634][ T1558] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 2126.387420][ T1571] netlink: 'syz.3.8833': attribute type 10 has an invalid length. [ 2126.698668][ T1573] device syzkaller0 entered promiscuous mode [ 2126.814992][ T1564] device syzkaller0 entered promiscuous mode [ 2132.135139][ T1603] device syzkaller0 entered promiscuous mode [ 2135.054232][ T1625] netlink: 'syz.4.8849': attribute type 10 has an invalid length. [ 2135.062394][ T1627] netlink: 'syz.5.8853': attribute type 19 has an invalid length. [ 2135.074473][ T1627] netlink: 55 bytes leftover after parsing attributes in process `syz.5.8853'. [ 2136.243572][ T1649] device syzkaller0 entered promiscuous mode [ 2136.303353][ T1652] device syzkaller0 entered promiscuous mode [ 2136.638269][ T1668] delete_channel: no stack [ 2141.692485][ T1683] netlink: 'syz.1.8865': attribute type 10 has an invalid length. [ 2142.301451][ T1705] device syzkaller0 entered promiscuous mode [ 2145.188096][ T1729] netlink: 'syz.4.8867': attribute type 22 has an invalid length. [ 2145.204771][ T1729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8867'. [ 2145.239436][ T1730] rxe_eth0 speed is unknown, defaulting to 1000 [ 2145.427281][ T1743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8881'. [ 2145.486310][ T1743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8881'. [ 2145.546081][ T1743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8881'. [ 2145.634464][ T1744] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8881'. [ 2145.647623][ T1743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8881'. [ 2146.129348][ T1754] netlink: 'syz.1.8880': attribute type 10 has an invalid length. [ 2147.213049][ T1769] device syzkaller0 entered promiscuous mode [ 2153.652410][ T1795] netlink: 'syz.0.8897': attribute type 10 has an invalid length. [ 2153.674325][ T1833] netlink: 'syz.4.8912': attribute type 10 has an invalid length. [ 2154.048490][ T1845] netlink: 'syz.1.8919': attribute type 19 has an invalid length. [ 2154.074344][ T1845] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8919'. [ 2154.798548][ T1865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8926'. [ 2154.834804][ T1865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8926'. [ 2154.888704][ T1863] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8926'. [ 2154.948850][ T1865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8926'. [ 2155.357366][ T1868] device syzkaller0 entered promiscuous mode [ 2155.415604][ T1871] netlink: 'syz.0.8924': attribute type 10 has an invalid length. [ 2155.454609][ T1865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8926'. [ 2155.482199][ T1865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8926'. [ 2158.445462][ T1907] device veth1_macvtap left promiscuous mode [ 2158.646924][ T1913] netlink: 'syz.5.8940': attribute type 10 has an invalid length. [ 2158.683868][ T1916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8941'. [ 2158.722126][ T1920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8943'. [ 2158.742991][ T1918] netlink: 'syz.0.8942': attribute type 39 has an invalid length. [ 2159.126742][ T1932] bridge0: port 3(dummy0) entered disabled state [ 2159.133423][ T1932] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.140731][ T1932] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.248228][ T1932] bridge0: port 3(dummy0) entered disabled state [ 2159.313318][ T1932] device bridge_slave_1 left promiscuous mode [ 2159.357271][ T1932] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.400095][ T1932] device bridge_slave_0 left promiscuous mode [ 2159.436959][ T1932] bridge0: port 1(bridge_slave_0) entered disabled state [ 2160.199984][ T1947] device syzkaller0 entered promiscuous mode [ 2160.267549][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.274017][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2164.492548][ T1973] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8959'. [ 2164.516952][ T2021] netlink: 'syz.4.8969': attribute type 17 has an invalid length. [ 2164.535953][ T2021] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8969'. [ 2164.554514][ T2021] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2164.592426][ T2021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2164.614509][ T2019] netlink: 'syz.4.8969': attribute type 17 has an invalid length. [ 2164.629969][ T2019] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8969'. [ 2165.031494][ T2059] FAULT_INJECTION: forcing a failure. [ 2165.031494][ T2059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2165.162186][ T2059] CPU: 0 PID: 2059 Comm: syz.3.8980 Not tainted syzkaller #0 [ 2165.169739][ T2059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2165.179875][ T2059] Call Trace: [ 2165.183222][ T2059] [ 2165.186236][ T2059] dump_stack_lvl+0x188/0x24e [ 2165.191003][ T2059] ? show_regs_print_info+0x12/0x12 [ 2165.196291][ T2059] ? load_image+0x410/0x410 [ 2165.200897][ T2059] ? __lock_acquire+0x7ea0/0x7ea0 [ 2165.206037][ T2059] should_fail_ex+0x390/0x4c0 [ 2165.210816][ T2059] _copy_from_iter+0x1c0/0x1130 [ 2165.215753][ T2059] ? __lock_acquire+0x7ea0/0x7ea0 [ 2165.220862][ T2059] ? mark_lock+0x94/0x320 [ 2165.225317][ T2059] ? copyout_mc+0x110/0x110 [ 2165.229877][ T2059] ? __virt_addr_valid+0x188/0x540 [ 2165.235057][ T2059] ? __virt_addr_valid+0x188/0x540 [ 2165.240255][ T2059] ? __virt_addr_valid+0x467/0x540 [ 2165.245434][ T2059] ? __check_object_size+0x4f6/0xa70 [ 2165.250779][ T2059] skb_copy_datagram_from_iter+0xee/0x6b0 [ 2165.256553][ T2059] ? napi_get_frags+0x1c/0x140 [ 2165.261465][ T2059] ? napi_get_frags+0xb7/0x140 [ 2165.266293][ T2059] tun_get_user+0x1526/0x3be0 [ 2165.271164][ T2059] ? rcu_read_unlock+0xa0/0xa0 [ 2165.276019][ T2059] ? tun_get+0x1c/0x2e0 [ 2165.280243][ T2059] ? __lock_acquire+0x7ea0/0x7ea0 [ 2165.285363][ T2059] ? tun_get+0x1c/0x2e0 [ 2165.289615][ T2059] tun_chr_write_iter+0x112/0x1f0 [ 2165.294726][ T2059] vfs_write+0x482/0x9a0 [ 2165.299043][ T2059] ? file_end_write+0x250/0x250 [ 2165.303967][ T2059] ? __fget_files+0x3fc/0x460 [ 2165.308732][ T2059] ? __fdget_pos+0x1d4/0x360 [ 2165.313370][ T2059] ? ksys_write+0x70/0x260 [ 2165.317853][ T2059] ksys_write+0x14d/0x260 [ 2165.322259][ T2059] ? __ia32_sys_read+0x80/0x80 [ 2165.327099][ T2059] ? lockdep_hardirqs_on+0x94/0x140 [ 2165.332371][ T2059] do_syscall_64+0x4c/0xa0 [ 2165.336836][ T2059] ? clear_bhb_loop+0x60/0xb0 [ 2165.341557][ T2059] ? clear_bhb_loop+0x60/0xb0 [ 2165.346294][ T2059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2165.352239][ T2059] RIP: 0033:0x7f5ee819e559 [ 2165.356705][ T2059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2165.376359][ T2059] RSP: 002b:00007f5ee909d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2165.384825][ T2059] RAX: ffffffffffffffda RBX: 00007f5ee8426090 RCX: 00007f5ee819e559 [ 2165.392849][ T2059] RDX: 0000000000000012 RSI: 0000200000000440 RDI: 0000000000000003 [ 2165.400861][ T2059] RBP: 00007f5ee909d090 R08: 0000000000000000 R09: 0000000000000000 [ 2165.408872][ T2059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2165.416885][ T2059] R13: 00007f5ee8426128 R14: 00007f5ee8426090 R15: 00007fffb5041c08 [ 2165.424944][ T2059] [ 2165.748728][ T2053] device syzkaller0 entered promiscuous mode [ 2165.787060][ T2062] netlink: 'syz.4.8982': attribute type 27 has an invalid length. [ 2165.945143][ T2062] bond0: (slave bond_slave_0): Releasing backup interface [ 2170.115523][ T2100] netlink: 'syz.0.8995': attribute type 19 has an invalid length. [ 2170.123412][ T2100] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8995'. [ 2170.661826][ T2137] device syzkaller0 entered promiscuous mode [ 2173.124643][ T2178] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9016'. [ 2174.718736][ T2150] netlink: 'syz.3.9006': attribute type 10 has an invalid length. [ 2174.748016][ T2170] dvmrp1: tun_chr_ioctl cmd 35636 [ 2174.762249][ T2178] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9016'. [ 2175.189159][ T2188] device syzkaller0 entered promiscuous mode [ 2175.763830][T23604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2175.773638][T23604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2175.781700][T23604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2175.793698][T23604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2175.812139][T23604] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2175.819774][T23604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2177.877377][T23604] Bluetooth: hci1: command 0x0409 tx timeout [ 2178.024845][ T2234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9037'. [ 2179.485581][ T2195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9025'. [ 2179.497215][ T2198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9025'. [ 2179.566552][T23603] device syz_tun left promiscuous mode [ 2179.578164][T23603] bridge0: port 3(syz_tun) entered disabled state [ 2179.648151][ T2241] netlink: 'syz.3.9040': attribute type 10 has an invalid length. [ 2179.944523][T23604] Bluetooth: hci1: command 0x041b tx timeout [ 2180.022588][ T2241] team0: Device gre0 is of different type [ 2180.117251][ T2249] netlink: 'syz.3.9040': attribute type 10 has an invalid length. [ 2180.238732][ T2249] team0: Device gre0 is of different type [ 2181.047099][ T2275] device syzkaller0 entered promiscuous mode [ 2181.102059][T31946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.117297][ T2267] rxe_eth0 speed is unknown, defaulting to 1000 [ 2182.028058][T23604] Bluetooth: hci1: command 0x040f tx timeout [ 2183.060710][ T2282] device syzkaller0 entered promiscuous mode [ 2183.074568][ T2206] rxe_eth0 speed is unknown, defaulting to 1000 [ 2184.116753][T23604] Bluetooth: hci1: command 0x0419 tx timeout [ 2185.244710][T31946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.371805][T31946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.480888][T31946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.804039][ T2206] chnl_net:caif_netlink_parms(): no params data found [ 2185.940648][T31946] device .*! left promiscuous mode [ 2186.321262][ T2206] bridge0: port 1(bridge_slave_0) entered blocking state [ 2186.332757][ T2206] bridge0: port 1(bridge_slave_0) entered disabled state [ 2186.370699][ T2206] device bridge_slave_0 entered promiscuous mode [ 2186.393344][ T2206] bridge0: port 2(bridge_slave_1) entered blocking state [ 2186.425507][ T2206] bridge0: port 2(bridge_slave_1) entered disabled state [ 2186.436534][ T2206] device bridge_slave_1 entered promiscuous mode [ 2186.626905][ T2206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2186.673637][ T2206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2186.765799][ T2336] netlink: 'syz.5.9065': attribute type 19 has an invalid length. [ 2186.781940][ T2336] netlink: 55 bytes leftover after parsing attributes in process `syz.5.9065'. [ 2186.912336][ T2323] device syzkaller0 entered promiscuous mode [ 2187.622739][ T2362] FAULT_INJECTION: forcing a failure. [ 2187.622739][ T2362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2187.656426][ T2362] CPU: 1 PID: 2362 Comm: syz.4.9069 Not tainted syzkaller #0 [ 2187.663921][ T2362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2187.674059][ T2362] Call Trace: [ 2187.677411][ T2362] [ 2187.680412][ T2362] dump_stack_lvl+0x188/0x24e [ 2187.685200][ T2362] ? show_regs_print_info+0x12/0x12 [ 2187.690487][ T2362] ? load_image+0x410/0x410 [ 2187.695086][ T2362] ? __lock_acquire+0x7ea0/0x7ea0 [ 2187.700241][ T2362] should_fail_ex+0x390/0x4c0 [ 2187.705028][ T2362] _copy_from_user+0x2c/0x170 [ 2187.709790][ T2362] kstrtouint_from_user+0xda/0x170 [ 2187.714981][ T2362] ? kstrtol_from_user+0x190/0x190 [ 2187.720200][ T2362] proc_fail_nth_write+0x8b/0x200 [ 2187.725279][ T2362] ? proc_fail_nth_read+0x220/0x220 [ 2187.730529][ T2362] ? common_file_perm+0x171/0x1c0 [ 2187.735629][ T2362] ? proc_fail_nth_read+0x220/0x220 [ 2187.740894][ T2362] vfs_write+0x2dc/0x9a0 [ 2187.745231][ T2362] ? file_end_write+0x250/0x250 [ 2187.750155][ T2362] ? __fget_files+0x28/0x460 [ 2187.754810][ T2362] ? __fget_files+0x3fc/0x460 [ 2187.759576][ T2362] ? __fdget_pos+0x2ae/0x360 [ 2187.764215][ T2362] ? ksys_write+0x70/0x260 [ 2187.768714][ T2362] ksys_write+0x14d/0x260 [ 2187.773125][ T2362] ? __ia32_sys_read+0x80/0x80 [ 2187.777962][ T2362] ? lockdep_hardirqs_on+0x94/0x140 [ 2187.783237][ T2362] do_syscall_64+0x4c/0xa0 [ 2187.787701][ T2362] ? clear_bhb_loop+0x60/0xb0 [ 2187.792468][ T2362] ? clear_bhb_loop+0x60/0xb0 [ 2187.797203][ T2362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2187.803148][ T2362] RIP: 0033:0x7f67a675ed8e [ 2187.807612][ T2362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2187.827277][ T2362] RSP: 002b:00007f67a759efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2187.835745][ T2362] RAX: ffffffffffffffda RBX: 00007f67a759f6c0 RCX: 00007f67a675ed8e [ 2187.843764][ T2362] RDX: 0000000000000001 RSI: 00007f67a759f0a0 RDI: 0000000000000009 [ 2187.851780][ T2362] RBP: 00007f67a759f090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.859795][ T2362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.867814][ T2362] R13: 00007f67a6a26308 R14: 00007f67a6a26270 R15: 00007ffd3c5bcdd8 [ 2187.875890][ T2362] [ 2190.303868][ T2206] team0: Port device team_slave_0 added [ 2190.562898][ T2360] device syzkaller0 entered promiscuous mode [ 2190.602097][ T2206] team0: Port device team_slave_1 added [ 2190.859614][ T2376] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9071'. [ 2191.157970][ T2393] FAULT_INJECTION: forcing a failure. [ 2191.157970][ T2393] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.188980][ T2393] CPU: 1 PID: 2393 Comm: syz.5.9073 Not tainted syzkaller #0 [ 2191.196453][ T2393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2191.206563][ T2393] Call Trace: [ 2191.209872][ T2393] [ 2191.212828][ T2393] dump_stack_lvl+0x188/0x24e [ 2191.217572][ T2393] ? show_regs_print_info+0x12/0x12 [ 2191.222802][ T2393] ? load_image+0x410/0x410 [ 2191.227346][ T2393] ? __might_sleep+0xd0/0xd0 [ 2191.231970][ T2393] ? __lock_acquire+0x7ea0/0x7ea0 [ 2191.237032][ T2393] should_fail_ex+0x390/0x4c0 [ 2191.241750][ T2393] should_failslab+0x5/0x20 [ 2191.246282][ T2393] slab_pre_alloc_hook+0x59/0x300 [ 2191.251342][ T2393] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2191.257108][ T2393] __kmem_cache_alloc_node+0x4f/0x270 [ 2191.262516][ T2393] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2191.268270][ T2393] __kmalloc+0xa3/0x240 [ 2191.272480][ T2393] tomoyo_realpath_from_path+0xe2/0x5c0 [ 2191.278063][ T2393] ? tomoyo_domain+0xd2/0x120 [ 2191.282773][ T2393] ? tomoyo_path_number_perm+0x205/0x650 [ 2191.288437][ T2393] tomoyo_path_number_perm+0x22f/0x650 [ 2191.293934][ T2393] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2191.299427][ T2393] ? ksys_write+0x1ce/0x260 [ 2191.303968][ T2393] ? common_file_perm+0x171/0x1c0 [ 2191.309057][ T2393] ? __fget_files+0x28/0x460 [ 2191.313694][ T2393] security_file_ioctl+0x6c/0xa0 [ 2191.318669][ T2393] __se_sys_ioctl+0x48/0x170 [ 2191.323293][ T2393] do_syscall_64+0x4c/0xa0 [ 2191.327761][ T2393] ? clear_bhb_loop+0x60/0xb0 [ 2191.332479][ T2393] ? clear_bhb_loop+0x60/0xb0 [ 2191.337188][ T2393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2191.343197][ T2393] RIP: 0033:0x7f38df39e559 [ 2191.347645][ T2393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2191.367280][ T2393] RSP: 002b:00007f38dd5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2191.375727][ T2393] RAX: ffffffffffffffda RBX: 00007f38df626270 RCX: 00007f38df39e559 [ 2191.383728][ T2393] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000004 [ 2191.391726][ T2393] RBP: 00007f38dd5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2191.399898][ T2393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2191.407891][ T2393] R13: 00007f38df626308 R14: 00007f38df626270 R15: 00007fffd9312518 [ 2191.415919][ T2393] [ 2191.511071][ T2393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2193.277953][ T2206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2193.285272][ T2206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2193.311860][ T2206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2193.369463][ T2390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2193.383127][ T2390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2193.396109][ T2390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2193.403999][ T2390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2193.475011][ T2206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2193.491117][ T2206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2193.536010][ T2206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2193.957462][ T2206] device hsr_slave_0 entered promiscuous mode [ 2193.988224][ T2206] device hsr_slave_1 entered promiscuous mode [ 2194.741272][ T2425] device syzkaller0 entered promiscuous mode [ 2198.082096][T31946] device hsr_slave_0 left promiscuous mode [ 2198.090172][T31946] device hsr_slave_1 left promiscuous mode [ 2198.097270][T31946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2198.105024][T31946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2198.112949][T31946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2198.126229][T31946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2198.137871][T31946] bridge0: port 5(hsr0) entered disabled state [ 2198.146881][T31946] device dummy0 left promiscuous mode [ 2198.152470][T31946] bridge0: port 4(dummy0) entered disabled state [ 2198.162773][T31946] device bridge_slave_1 left promiscuous mode [ 2198.169148][T31946] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.178645][T31946] device bridge_slave_0 left promiscuous mode [ 2198.185160][T31946] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.212360][T31946] device veth1_macvtap left promiscuous mode [ 2198.222410][T31946] device veth0_macvtap left promiscuous mode [ 2198.229770][T31946] device veth1_vlan left promiscuous mode [ 2198.497794][T31946] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2199.216348][T31946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2199.284560][T31946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2199.637824][T31946] bond0 (unregistering): Released all slaves [ 2200.448419][ T2515] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.9101'. [ 2200.730195][ T2206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2200.798253][ T2206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2200.850369][ T2206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2200.875280][ T2206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2201.119630][ T2206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2201.148584][ T2532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.182110][ T2532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.212928][ T2532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.234501][ T2532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.340989][ T2536] device syzkaller0 entered promiscuous mode [ 2201.393046][ T2206] 8021q: adding VLAN 0 to HW filter on device team0 [ 2201.419808][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2201.437721][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2203.574640][ T2568] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9111'. [ 2203.619602][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2203.628810][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2203.649933][T31468] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.657145][T31468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2203.709027][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2203.721741][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2203.736373][T31468] bridge0: port 2(bridge_slave_1) entered blocking state [ 2203.743602][T31468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2203.756264][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2203.778924][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2203.789848][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2203.803156][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2203.818751][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2203.834970][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2203.852152][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2203.871115][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2203.894360][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2203.911010][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2204.002621][ T2578] netlink: 'syz.4.9115': attribute type 19 has an invalid length. [ 2204.021545][ T2578] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9115'. [ 2204.066613][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2204.083404][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2204.122657][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2204.656595][ T2579] device syzkaller0 entered promiscuous mode [ 2204.934193][ T2596] netlink: 'syz.1.9117': attribute type 10 has an invalid length. [ 2204.953120][ T2596] bridge0: port 3(dummy0) entered disabled state [ 2204.959823][ T2596] bridge0: port 2(bridge_slave_1) entered disabled state [ 2204.967235][ T2596] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.021175][ T2596] bridge0: port 3(dummy0) entered blocking state [ 2205.027782][ T2596] bridge0: port 3(dummy0) entered forwarding state [ 2205.034693][ T2596] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.041916][ T2596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2205.049474][ T2596] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.056749][ T2596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2205.130263][ T2596] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2207.265158][ T2597] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.274432][ T2597] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.283195][ T2597] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.292092][ T2597] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.439468][ T2626] device syzkaller0 entered promiscuous mode [ 2209.462348][ T2643] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9125'. [ 2209.525850][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2209.538923][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2209.630894][ T2206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2209.687283][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2209.717179][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2209.751674][ T2655] netlink: 'syz.5.9126': attribute type 3 has an invalid length. [ 2209.763581][ T2655] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9126'. [ 2209.831244][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2209.845825][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2209.859241][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2209.885029][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2210.072557][ T2661] device syzkaller0 entered promiscuous mode [ 2210.105201][ T2206] device veth0_vlan entered promiscuous mode [ 2210.165618][ T2206] device veth1_vlan entered promiscuous mode [ 2210.307344][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2210.322385][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2210.352338][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2210.387147][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2210.443320][ T2206] device veth0_macvtap entered promiscuous mode [ 2210.499358][ T2206] device veth1_macvtap entered promiscuous mode [ 2210.622655][T31469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2210.631563][T31469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2210.952755][ T2692] netlink: 'syz.5.9135': attribute type 1 has an invalid length. [ 2210.980490][ T2692] netlink: 'syz.5.9135': attribute type 3 has an invalid length. [ 2211.002526][ T2692] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9135'. [ 2213.651940][ T2709] netlink: 'syz.3.9136': attribute type 10 has an invalid length. [ 2213.678337][ T2709] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.696723][ T2709] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.724418][ T2709] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.737495][ T2709] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.829081][ T2705] device syzkaller0 entered promiscuous mode [ 2213.847388][ T2206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2213.864408][ T2206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2213.882431][ T2206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2213.898654][ T2206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2213.911530][ T2206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2215.777310][ T2712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9138'. [ 2215.790656][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2215.822089][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2215.853420][ T2206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2215.865221][ T2206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2215.876267][ T2206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2215.890600][ T2206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2215.906282][ T2206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2215.913652][ T2715] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9139'. [ 2215.982946][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2215.988588][ T2730] netlink: 'syz.4.9141': attribute type 2 has an invalid length. [ 2216.003842][ T2730] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9141'. [ 2216.019403][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2216.047720][ T2206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.086241][ T2206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.118274][ T2206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.158008][ T2206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.303826][ T2737] device syzkaller0 entered promiscuous mode [ 2216.391401][ T2747] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9146'. [ 2216.404864][T31464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2216.412792][T31464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2216.473648][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2216.497152][ T2745] netlink: 'syz.4.9146': attribute type 25 has an invalid length. [ 2216.514762][ T2745] netlink: 'syz.4.9146': attribute type 29 has an invalid length. [ 2216.551158][ T2746] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9146'. [ 2216.584042][T31465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2216.593550][T31465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2216.602975][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2219.360226][ T2750] netlink: 'syz.1.9147': attribute type 10 has an invalid length. [ 2219.456036][ T2783] device syzkaller0 entered promiscuous mode [ 2221.712473][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.719080][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.640266][ T2849] netlink: 'syz.0.9164': attribute type 10 has an invalid length. [ 2223.662821][ T2849] team0: Port device geneve1 added [ 2223.689007][ T2866] netlink: 'syz.5.9165': attribute type 10 has an invalid length. [ 2223.710251][ T2866] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.734416][ T2866] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.743377][ T2866] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.774313][ T2866] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.880843][ T2862] device syzkaller0 entered promiscuous mode [ 2227.338746][ T2895] netlink: 'syz.4.9172': attribute type 10 has an invalid length. [ 2227.855936][ T2915] device syzkaller0 entered promiscuous mode [ 2230.865420][ T2932] netlink: 'syz.5.9178': attribute type 10 has an invalid length. [ 2230.900581][ T2953] netlink: 'syz.4.9189': attribute type 23 has an invalid length. [ 2231.974990][ T2986] netlink: 'syz.0.9201': attribute type 2 has an invalid length. [ 2232.058422][ T2986] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9201'. [ 2232.183260][ T2981] device syzkaller0 entered promiscuous mode [ 2232.268358][ T2984] netlink: 'syz.5.9192': attribute type 10 has an invalid length. [ 2233.322458][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2233.333646][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2233.355371][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2233.376521][ T2208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2233.384972][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2233.393401][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2235.012056][ T2996] netlink: 'syz.0.9202': attribute type 10 has an invalid length. [ 2235.044278][ T3005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9206'. [ 2235.223117][ T3007] rxe_eth0 speed is unknown, defaulting to 1000 [ 2235.464495][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 2236.113162][T31461] bond0: (slave netdevsim0): Releasing backup interface [ 2236.178587][ T3046] device syzkaller0 entered promiscuous mode [ 2237.554613][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 2238.619335][ T3051] netlink: 64019 bytes leftover after parsing attributes in process `syz.4.9220'. [ 2238.817055][T31461] device 0 left promiscuous mode [ 2238.894729][T31461] device 0 left promiscuous mode [ 2238.926365][ T3076] netlink: 'syz.1.9228': attribute type 19 has an invalid length. [ 2238.947934][ T3076] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9228'. [ 2239.006037][ T3007] chnl_net:caif_netlink_parms(): no params data found [ 2239.634420][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 2239.850663][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2239.868185][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2239.893129][ T3007] device bridge_slave_0 entered promiscuous mode [ 2239.979140][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 2239.992095][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.010186][ T3007] device bridge_slave_1 entered promiscuous mode [ 2240.058989][ T3124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9240'. [ 2240.107881][ T3124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9240'. [ 2240.220035][ T3120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9240'. [ 2240.279411][ T3007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2240.404937][ T3007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2240.471647][ T3114] device syzkaller0 entered promiscuous mode [ 2241.714408][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 2242.872729][ T3152] netlink: 'syz.3.9246': attribute type 10 has an invalid length. [ 2242.931062][ T3007] team0: Port device team_slave_0 added [ 2243.021583][ T3007] team0: Port device team_slave_1 added [ 2243.330693][ T3007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2243.350195][ T3007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2243.402409][ T3007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2243.416645][ T3007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2243.429839][ T3007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2243.486530][ T3007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2243.883325][ T3007] device hsr_slave_0 entered promiscuous mode [ 2243.918209][ T3007] device hsr_slave_1 entered promiscuous mode [ 2243.954962][ T3007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2243.972996][ T3007] Cannot create hsr debugfs directory [ 2244.211127][T31461] device hsr_slave_0 left promiscuous mode [ 2244.285070][T31461] device hsr_slave_1 left promiscuous mode [ 2244.340461][T31461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2244.351369][T31461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2244.363761][T31461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2244.454350][T31461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2244.486332][T31461] bridge0: port 2(dummy0) entered disabled state [ 2244.512260][T31461] device bridge_slave_0 left promiscuous mode [ 2244.540564][T31461] bridge0: port 1(bridge_slave_0) entered disabled state [ 2244.744966][T31461] device veth0_macvtap left promiscuous mode [ 2244.787718][T31461] device veth1_vlan left promiscuous mode [ 2244.843720][T31461] device veth0_vlan left promiscuous mode [ 2245.782759][T31461] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2246.395063][T31461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2246.443668][T31461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2246.489100][T31461] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2246.685897][T31461] bond0 (unregistering): Released all slaves [ 2246.768674][ T3216] device syzkaller0 entered promiscuous mode [ 2246.793059][ T3231] netlink: 'syz.4.9258': attribute type 10 has an invalid length. [ 2249.090559][ T3249] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.9266'. [ 2249.111076][ T3249] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.9266'. [ 2249.123975][ T3249] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9266'. [ 2249.700595][ T3279] netlink: 'syz.1.9272': attribute type 29 has an invalid length. [ 2250.537141][ T3007] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2250.599132][ T3007] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2250.657811][ T3291] netlink: 8281 bytes leftover after parsing attributes in process `syz.4.9276'. [ 2250.726392][ T3007] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2250.769329][ T3007] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2250.810782][ T3309] netlink: 'syz.3.9279': attribute type 2 has an invalid length. [ 2250.839095][ T3303] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.9279'. [ 2250.884379][ T3309] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.9279'. [ 2250.955287][ T3294] netlink: 8221 bytes leftover after parsing attributes in process `syz.4.9276'. [ 2251.390766][ T3007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2251.492312][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2251.507714][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2251.541996][ T3007] 8021q: adding VLAN 0 to HW filter on device team0 [ 2251.632574][ T3306] device syzkaller0 entered promiscuous mode [ 2254.948529][ T3331] netlink: 'syz.3.9286': attribute type 10 has an invalid length. [ 2254.964006][ T3331] team0: Port device virt_wifi0 added [ 2254.970512][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2254.993767][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2255.015073][T31461] bridge0: port 1(bridge_slave_0) entered blocking state [ 2255.022307][T31461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2255.045625][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2255.068527][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2255.085000][T31461] bridge0: port 2(bridge_slave_1) entered blocking state [ 2255.092128][T31461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2255.104692][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2255.121291][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2255.131190][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2255.140868][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2255.155464][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2255.170026][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2255.187456][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2255.219075][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2255.255893][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2255.285079][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2255.310666][ T3007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2255.336352][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2255.351312][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2255.375892][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2255.569090][ T3344] device syzkaller0 entered promiscuous mode [ 2258.795524][ T3389] device syzkaller0 entered promiscuous mode [ 2258.863285][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2258.873093][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2258.902152][ T3007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2259.027424][ T3406] device syzkaller0 entered promiscuous mode [ 2260.156880][ T3424] netlink: 'syz.0.9307': attribute type 8 has an invalid length. [ 2260.165282][ T3424] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9307'. [ 2264.414039][ T3428] device syzkaller0 entered promiscuous mode [ 2267.451156][ T3448] device syzkaller0 entered promiscuous mode [ 2270.013712][ T3489] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9313'. [ 2270.055826][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2270.100815][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2270.130246][ T3007] device veth0_vlan entered promiscuous mode [ 2270.181871][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2270.232895][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2270.261191][ T3007] device veth1_vlan entered promiscuous mode [ 2270.278144][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2270.295522][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2270.313748][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2270.368562][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2270.377613][ T3532] netlink: 108384 bytes leftover after parsing attributes in process `syz.0.9320'. [ 2270.392205][ T3533] netlink: 108384 bytes leftover after parsing attributes in process `syz.0.9320'. [ 2270.398367][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2270.431558][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2270.455472][ T3007] device veth0_macvtap entered promiscuous mode [ 2270.477013][ T3007] device veth1_macvtap entered promiscuous mode [ 2270.525917][ T3007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.556394][ T3007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.573328][ T3007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.630501][ T3007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.655506][ T3007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2270.669066][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2270.745371][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2270.758935][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2270.772042][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2270.814504][ T3007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2270.835902][ T3007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.849069][ T3007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2270.869173][ T3007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.887093][ T3007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2270.903528][ T3545] netlink: 'syz.3.9325': attribute type 21 has an invalid length. [ 2270.944527][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2270.962420][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2271.001004][ T3007] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.018043][ T3007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.029028][ T3007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.041506][ T3007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.255951][T22723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2271.285589][T22723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2271.339769][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2271.384410][T31468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2271.399374][T31468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2271.419255][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2271.721948][ T3565] FAULT_INJECTION: forcing a failure. [ 2271.721948][ T3565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2271.796114][ T3565] CPU: 0 PID: 3565 Comm: syz.1.9328 Not tainted syzkaller #0 [ 2271.803578][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2271.813688][ T3565] Call Trace: [ 2271.817082][ T3565] [ 2271.820061][ T3565] dump_stack_lvl+0x188/0x24e [ 2271.824806][ T3565] ? show_regs_print_info+0x12/0x12 [ 2271.830103][ T3565] ? load_image+0x410/0x410 [ 2271.834686][ T3565] ? __lock_acquire+0x7ea0/0x7ea0 [ 2271.839781][ T3565] should_fail_ex+0x390/0x4c0 [ 2271.844532][ T3565] _copy_from_user+0x2c/0x170 [ 2271.849272][ T3565] ___sys_sendmsg+0x1c3/0x360 [ 2271.854009][ T3565] ? __sys_sendmsg+0x2a0/0x2a0 [ 2271.858849][ T3565] ? ktime_get+0x7b/0x270 [ 2271.863411][ T3565] __se_sys_sendmsg+0x1c3/0x2b0 [ 2271.868322][ T3565] ? __x64_sys_sendmsg+0x80/0x80 [ 2271.873328][ T3565] ? lockdep_hardirqs_on+0x94/0x140 [ 2271.878576][ T3565] do_syscall_64+0x4c/0xa0 [ 2271.883030][ T3565] ? clear_bhb_loop+0x60/0xb0 [ 2271.887752][ T3565] ? clear_bhb_loop+0x60/0xb0 [ 2271.892471][ T3565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2271.898398][ T3565] RIP: 0033:0x7fa5b479e559 [ 2271.902862][ T3565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2271.922509][ T3565] RSP: 002b:00007fa5b5681028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2271.930965][ T3565] RAX: ffffffffffffffda RBX: 00007fa5b4a25fa0 RCX: 00007fa5b479e559 [ 2271.938982][ T3565] RDX: 000000000000c000 RSI: 0000200000000640 RDI: 0000000000000007 [ 2271.946989][ T3565] RBP: 00007fa5b5681090 R08: 0000000000000000 R09: 0000000000000000 [ 2271.955076][ T3565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2271.963079][ T3565] R13: 00007fa5b4a26038 R14: 00007fa5b4a25fa0 R15: 00007fffe6458f68 [ 2271.971103][ T3565] [ 2272.717652][T23604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2272.789535][T23604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2272.798089][T23604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2272.815226][T23604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2272.826925][T23604] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2272.834696][T23604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2273.104093][ T3581] rxe_eth0 speed is unknown, defaulting to 1000 [ 2273.532284][ T3591] netlink: 'syz.1.9334': attribute type 25 has an invalid length. [ 2273.566902][ T3591] netlink: 'syz.1.9334': attribute type 29 has an invalid length. [ 2273.642701][ T3605] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9341'. [ 2273.695071][ T3599] netlink: 'syz.0.9339': attribute type 10 has an invalid length. [ 2273.742968][ T3599] team0: Device vxcan1 is of different type [ 2273.799100][ T3605] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9341'. [ 2273.915399][ T3608] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9341'. [ 2274.044374][ T3605] netlink: 'syz.5.9341': attribute type 10 has an invalid length. [ 2274.219748][ T3605] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2274.280968][ T3610] rxe_eth0 speed is unknown, defaulting to 1000 [ 2274.722116][T31465] device 0 left promiscuous mode [ 2274.759532][ T3581] chnl_net:caif_netlink_parms(): no params data found [ 2274.904472][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 2275.219188][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.234512][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.256648][ T3581] device bridge_slave_0 entered promiscuous mode [ 2275.402714][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.494352][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.512812][ T3581] device bridge_slave_1 entered promiscuous mode [ 2276.010471][ T3656] netlink: 'syz.1.9351': attribute type 21 has an invalid length. [ 2276.057010][ T3656] IPv6: NLM_F_CREATE should be specified when creating new route [ 2276.100984][ T3656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2276.109616][ T3656] IPv6: NLM_F_CREATE should be set when creating new route [ 2276.120060][ T3656] IPv6: NLM_F_CREATE should be set when creating new route [ 2276.127846][ T3656] IPv6: NLM_F_CREATE should be set when creating new route [ 2276.442312][ T3581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2276.732519][ T3581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2277.001834][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 2277.373151][ T3689] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9356'. [ 2277.528048][ T3581] team0: Port device team_slave_0 added [ 2277.689559][ T3581] team0: Port device team_slave_1 added [ 2277.989152][ T3581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2278.034693][ T3581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2278.140497][ T3581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2278.286542][ T3581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2278.306369][ T3581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2278.414817][ T3581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2278.757452][ T3581] device hsr_slave_0 entered promiscuous mode [ 2278.903435][ T3581] device hsr_slave_1 entered promiscuous mode [ 2278.948265][ T3581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2279.005514][ T3581] Cannot create hsr debugfs directory [ 2279.064581][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 2279.232850][ T3715] netlink: 'syz.0.9359': attribute type 10 has an invalid length. [ 2280.316070][T31465] bond0: (slave wlan1): Releasing backup interface [ 2280.625716][T31464] bridge0: port 2(bridge_slave_1) entered disabled state [ 2281.164338][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 2281.838808][T31465] device hsr_slave_0 left promiscuous mode [ 2281.849227][T31465] device hsr_slave_1 left promiscuous mode [ 2281.917919][T31465] device veth1_macvtap left promiscuous mode [ 2281.925670][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9369'. [ 2281.964986][T31465] device veth0_macvtap left promiscuous mode [ 2281.971277][T31465] device veth1_vlan left promiscuous mode [ 2282.010854][T31465] device veth0_vlan left promiscuous mode [ 2282.455951][T31465] team0 (unregistering): Port device geneve1 removed [ 2282.548698][T31465] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2282.807085][T31465] team0 (unregistering): Port device macvlan0 removed [ 2283.057490][T31465] team0 (unregistering): Port device virt_wifi0 removed [ 2283.162991][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.169408][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.529674][T31465] team0 (unregistering): Port device team_slave_1 removed [ 2283.579538][T31465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2283.628629][T31465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2283.924894][T31465] bond0 (unregistering): Released all slaves [ 2283.996226][ T3764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9371'. [ 2284.005845][ T3764] device dummy0 entered promiscuous mode [ 2285.319389][ T3781] device syzkaller0 entered promiscuous mode [ 2291.149160][ T3800] device syzkaller0 entered promiscuous mode [ 2293.331059][ T3581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2293.363710][ T3581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2293.397595][ T3581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2293.452227][ T3581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2293.731313][ T3581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2293.825266][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2293.840360][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2294.008886][ T3581] 8021q: adding VLAN 0 to HW filter on device team0 [ 2294.132572][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2294.262514][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2294.320477][T22723] bridge0: port 1(bridge_slave_0) entered blocking state [ 2294.327717][T22723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2294.420445][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2294.523025][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2294.549048][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2294.588002][T22723] bridge0: port 2(bridge_slave_1) entered blocking state [ 2294.595266][T22723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2294.665572][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2294.678919][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2294.718590][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2294.743180][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2294.808025][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2294.835853][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2294.858823][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2295.241492][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2295.260888][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2295.296415][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2295.325996][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2295.355508][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2295.919202][ T3887] device wg2 entered promiscuous mode [ 2297.027672][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2297.047176][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2297.083185][ T3918] rxe_eth0 speed is unknown, defaulting to 1000 [ 2297.123128][ T3581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2297.222631][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2297.280965][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2297.341275][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2297.375508][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2297.421716][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2297.505393][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2297.517819][ T3581] device veth0_vlan entered promiscuous mode [ 2297.634990][ T3581] device veth1_vlan entered promiscuous mode [ 2297.791723][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2297.825268][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2297.871904][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2297.909586][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2297.936508][ T3581] device veth0_macvtap entered promiscuous mode [ 2297.970874][ T3581] device veth1_macvtap entered promiscuous mode [ 2298.011971][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.044018][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.071447][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.115715][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.135482][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.176486][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.209319][ T3581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2298.228859][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2298.248595][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2298.279142][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2298.292987][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2298.362670][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.404239][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.440751][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.456338][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.476502][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.500414][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.546691][ T3581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2298.590481][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2298.625806][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2298.930881][ T3581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.963497][ T3581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.994376][ T3581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2299.023526][ T3581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2299.576586][ T3978] netlink: 'syz.0.9419': attribute type 11 has an invalid length. [ 2299.619811][T31946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2299.637699][T31946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2299.656858][ T3978] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9419'. [ 2299.719187][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2299.842168][ T3982] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9421'. [ 2299.988560][T22723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2300.001191][T22723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2300.038400][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2300.594492][T23604] Bluetooth: hci1: command 0x0406 tx timeout [ 2300.863523][ T4018] netlink: 'syz.1.9430': attribute type 21 has an invalid length. [ 2300.897924][ T4018] netlink: 'syz.1.9430': attribute type 6 has an invalid length. [ 2300.924509][ T4018] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9430'. [ 2301.255000][ T4018] device syzkaller0 entered promiscuous mode [ 2301.303833][ T4018] device syzkaller0 left promiscuous mode [ 2301.604407][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2301.619864][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2301.628582][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2301.638191][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2301.657962][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2301.665170][ T4036] netlink: 'syz.3.9434': attribute type 13 has an invalid length. [ 2301.673062][ T4036] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.9434'. [ 2301.682751][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2301.804409][ T4037] netlink: 'syz.3.9434': attribute type 13 has an invalid length. [ 2301.874456][ T4037] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.9434'. [ 2302.618642][ T4067] FAULT_INJECTION: forcing a failure. [ 2302.618642][ T4067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2302.700721][ T4067] CPU: 0 PID: 4067 Comm: syz.5.9439 Not tainted syzkaller #0 [ 2302.708218][ T4067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2302.718352][ T4067] Call Trace: [ 2302.721699][ T4067] [ 2302.724691][ T4067] dump_stack_lvl+0x188/0x24e [ 2302.729464][ T4067] ? show_regs_print_info+0x12/0x12 [ 2302.734741][ T4067] ? load_image+0x410/0x410 [ 2302.739356][ T4067] ? __lock_acquire+0x7ea0/0x7ea0 [ 2302.744496][ T4067] should_fail_ex+0x390/0x4c0 [ 2302.749287][ T4067] _copy_from_user+0x2c/0x170 [ 2302.754054][ T4067] kstrtouint_from_user+0xda/0x170 [ 2302.759258][ T4067] ? kstrtol_from_user+0x190/0x190 [ 2302.764509][ T4067] proc_fail_nth_write+0x8b/0x200 [ 2302.769613][ T4067] ? proc_fail_nth_read+0x220/0x220 [ 2302.774897][ T4067] ? common_file_perm+0x171/0x1c0 [ 2302.780044][ T4067] ? proc_fail_nth_read+0x220/0x220 [ 2302.785321][ T4067] vfs_write+0x2dc/0x9a0 [ 2302.789674][ T4067] ? file_end_write+0x250/0x250 [ 2302.794618][ T4067] ? __fget_files+0x28/0x460 [ 2302.799298][ T4067] ? __fget_files+0x3fc/0x460 [ 2302.804094][ T4067] ? __fdget_pos+0x2ae/0x360 [ 2302.808757][ T4067] ? ksys_write+0x70/0x260 [ 2302.813274][ T4067] ksys_write+0x14d/0x260 [ 2302.817705][ T4067] ? __ia32_sys_read+0x80/0x80 [ 2302.822599][ T4067] ? lockdep_hardirqs_on+0x94/0x140 [ 2302.827911][ T4067] do_syscall_64+0x4c/0xa0 [ 2302.832416][ T4067] ? clear_bhb_loop+0x60/0xb0 [ 2302.837169][ T4067] ? clear_bhb_loop+0x60/0xb0 [ 2302.841935][ T4067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2302.847903][ T4067] RIP: 0033:0x7f770fb5ed8e [ 2302.852408][ T4067] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2302.872121][ T4067] RSP: 002b:00007f7710989fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2302.880629][ T4067] RAX: ffffffffffffffda RBX: 00007f771098a6c0 RCX: 00007f770fb5ed8e [ 2302.888675][ T4067] RDX: 0000000000000001 RSI: 00007f771098a0a0 RDI: 0000000000000008 [ 2302.896715][ T4067] RBP: 00007f771098a090 R08: 0000000000000000 R09: 0000000000000000 [ 2302.904755][ T4067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2302.912801][ T4067] R13: 00007f770fe26218 R14: 00007f770fe26180 R15: 00007fff47163568 [ 2302.920914][ T4067] [ 2303.714647][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 2305.790769][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 2307.149427][ T4062] device syzkaller0 entered promiscuous mode [ 2307.320450][T31946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.429682][ T4033] rxe_eth0 speed is unknown, defaulting to 1000 [ 2307.443342][ T4075] netlink: 'syz.0.9442': attribute type 19 has an invalid length. [ 2307.462305][ T4075] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9442'. [ 2307.568618][T31946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.864541][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 2309.954315][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 2310.330077][T31946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.477804][T31946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2311.398624][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 2312.310796][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 2312.323771][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 2312.349290][ T4033] device bridge_slave_0 entered promiscuous mode [ 2312.444607][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 2312.451773][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 2312.480716][ T4033] device bridge_slave_1 entered promiscuous mode [ 2312.703947][ T4162] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9463'. [ 2312.770862][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2312.837911][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2312.871080][ T4170] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.9466'. [ 2313.088978][ T4033] team0: Port device team_slave_0 added [ 2313.206047][ T4033] team0: Port device team_slave_1 added [ 2313.293055][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2313.326898][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2313.426765][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2313.554147][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2313.561206][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2313.723295][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2314.621615][T31946] bond0: (slave wlan1): Releasing backup interface [ 2314.718848][ T4033] device hsr_slave_0 entered promiscuous mode [ 2314.771463][ T4033] device hsr_slave_1 entered promiscuous mode [ 2314.808242][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2314.820896][ T4033] Cannot create hsr debugfs directory [ 2315.628457][T31946] device hsr_slave_0 left promiscuous mode [ 2315.645508][T31946] device hsr_slave_1 left promiscuous mode [ 2315.664438][T31946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2315.672612][T31946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2315.727114][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9485'. [ 2315.743253][T31946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2315.754256][T31946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2315.873050][T31946] bridge0: port 3(dummy0) entered disabled state [ 2316.049307][T31946] device bridge_slave_1 left promiscuous mode [ 2316.059320][T31946] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.100888][T31946] device bridge_slave_0 left promiscuous mode [ 2316.124874][T31946] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.194910][T31946] device veth1_macvtap left promiscuous mode [ 2316.224427][T31946] device veth0_macvtap left promiscuous mode [ 2316.230648][T31946] device veth1_vlan left promiscuous mode [ 2316.262129][T31946] device veth0_vlan left promiscuous mode [ 2316.722487][T31946] team0 (unregistering): Port device geneve1 removed [ 2316.782091][T31946] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2317.784981][T31946] team0 (unregistering): Port device team_slave_1 removed [ 2317.841975][T31946] team0 (unregistering): Port device team_slave_0 removed [ 2317.893630][T31946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2318.332865][T31946] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2318.341883][T31946] bond0 (unregistering): Released all slaves [ 2318.508781][ T4239] device syzkaller0 entered promiscuous mode [ 2320.879365][ T4270] netlink: 'syz.0.9491': attribute type 10 has an invalid length. [ 2320.894018][ T4270] device geneve0 entered promiscuous mode [ 2320.946383][ T4270] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2321.048578][ T4271] device syzkaller0 entered promiscuous mode [ 2324.829652][ T4328] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9508'. [ 2325.178970][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2326.423760][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2326.655275][ T4328] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2326.877425][ T4328] bond0 (unregistering): Released all slaves [ 2327.154467][ T4334] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9508'. [ 2327.343873][ T4334] team0: Port device team_slave_0 removed [ 2327.778966][ T4033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2327.823644][ T4033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2327.863843][ T4033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2327.899216][ T4033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2328.214743][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2328.316778][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2328.337300][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2328.457777][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 2328.785335][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2328.836417][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2328.873378][T31477] bridge0: port 1(bridge_slave_0) entered blocking state [ 2328.880652][T31477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2329.001585][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2329.023225][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2329.043371][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2329.086238][T31477] bridge0: port 2(bridge_slave_1) entered blocking state [ 2329.093463][T31477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2329.116648][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2329.144845][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2329.165585][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2329.201076][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2329.268339][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2329.302130][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2329.327318][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2329.347928][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2329.379805][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2329.456857][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2329.475531][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2329.568235][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2331.045087][ T4450] device syzkaller0 entered promiscuous mode [ 2331.577733][ T4458] netlink: 'syz.1.9538': attribute type 19 has an invalid length. [ 2331.598631][ T4458] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9538'. [ 2332.094670][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9540'. [ 2336.502447][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2336.514415][ T4476] netlink: 'syz.0.9533': attribute type 10 has an invalid length. [ 2336.617195][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2336.635173][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2337.073842][ T4504] device syzkaller0 entered promiscuous mode [ 2340.358860][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2340.403115][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2340.441967][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2340.453061][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2340.463289][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2340.493026][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2340.519727][ T4033] device veth0_vlan entered promiscuous mode [ 2340.551262][ T4033] device veth1_vlan entered promiscuous mode [ 2340.630022][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2340.643408][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2340.669419][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2340.692222][ T4578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9556'. [ 2340.703338][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2340.726150][ T4033] device veth0_macvtap entered promiscuous mode [ 2340.766003][T31469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2340.790845][ T4033] device veth1_macvtap entered promiscuous mode [ 2340.879348][ T4582] device sit0 entered promiscuous mode [ 2341.632730][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2341.655401][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2341.669659][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2341.681235][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2341.691554][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2341.702569][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2341.729219][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2341.764973][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2341.785113][T31465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2341.820011][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2341.844270][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2341.890851][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2341.922442][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2341.939885][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2341.951161][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2341.988863][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2342.019616][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2342.052805][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2342.122023][ T4033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.154077][ T4033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.193913][ T4033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.236098][ T4033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.838638][T31946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2342.873476][T31946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2342.924787][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2343.026534][T22723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2343.058433][T22723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2343.105655][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2343.230031][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9567'. [ 2343.270520][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9567'. [ 2343.294674][ T4619] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9567'. [ 2343.405011][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9567'. [ 2343.439196][ T4619] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9567'. [ 2343.511772][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9567'. [ 2343.622477][ T4619] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9567'. [ 2343.927989][ T4630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9428'. [ 2343.937901][ T4630] device dummy0 entered promiscuous mode [ 2344.587426][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.593790][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.564976][T23604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2345.624645][T23604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2345.633457][T23604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2345.645266][T23604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2345.654052][T23604] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2345.661637][T23604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2345.860312][ T4665] netlink: 'syz.5.9575': attribute type 10 has an invalid length. [ 2346.116614][ T4665] team0: Port device geneve1 added [ 2346.205068][ T4675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9582'. [ 2346.539097][T31477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.783727][ T4676] device sit0 entered promiscuous mode [ 2347.202555][T31477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2347.274896][ T4668] rxe_eth0 speed is unknown, defaulting to 1000 [ 2347.368580][T31477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2347.543044][T31477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2347.705167][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 2348.367344][ T4668] chnl_net:caif_netlink_parms(): no params data found [ 2349.143790][ T4724] netlink: 'syz.4.9594': attribute type 10 has an invalid length. [ 2349.250283][ T4724] team0: Port device geneve1 added [ 2349.794700][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 2350.616153][ T4746] device syzkaller0 entered promiscuous mode [ 2350.658967][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 2350.685711][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 2350.705622][ T4668] device bridge_slave_0 entered promiscuous mode [ 2351.869572][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 2353.596109][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 2353.603242][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 2353.611920][ T4668] device bridge_slave_1 entered promiscuous mode [ 2353.682530][ T4774] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9604'. [ 2353.833435][ T4668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2353.886683][ T4668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2353.944327][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 2354.036247][ T4668] team0: Port device team_slave_0 added [ 2354.057379][ T4791] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9607'. [ 2354.231754][ T4668] team0: Port device team_slave_1 added [ 2354.326023][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2354.333039][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2354.425991][ T4668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2354.472240][ T4797] netlink: 'syz.3.9610': attribute type 10 has an invalid length. [ 2354.627571][ T4797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2354.663406][ T4797] team0: Port device batadv0 added [ 2354.744574][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2354.753450][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2354.800172][ T4668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2355.075032][T31477] bond0: (slave wlan1): Releasing backup interface [ 2355.240349][ T4668] device hsr_slave_0 entered promiscuous mode [ 2355.266934][ T4668] device hsr_slave_1 entered promiscuous mode [ 2355.289144][ T4668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2355.313491][ T4668] Cannot create hsr debugfs directory [ 2355.372571][ T4826] netlink: 'syz.0.9617': attribute type 1 has an invalid length. [ 2355.986615][T31477] device dummy0 left promiscuous mode [ 2356.034734][T31477] bridge0: port 3(dummy0) entered disabled state [ 2356.049397][T31477] device bridge_slave_1 left promiscuous mode [ 2356.071589][T31477] bridge0: port 2(bridge_slave_1) entered disabled state [ 2356.103877][T31477] device bridge_slave_0 left promiscuous mode [ 2356.142566][T31477] bridge0: port 1(bridge_slave_0) entered disabled state [ 2356.249478][T31477] device veth1_macvtap left promiscuous mode [ 2356.261767][T31477] device veth0_macvtap left promiscuous mode [ 2356.276277][T31477] device veth1_vlan left promiscuous mode [ 2356.282118][T31477] device veth0_vlan left promiscuous mode [ 2356.649981][T31477] team0 (unregistering): Port device geneve1 removed [ 2356.910357][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 2357.345298][T31477] team0 (unregistering): Port device team_slave_1 removed [ 2357.422518][T31477] team0 (unregistering): Port device team_slave_0 removed [ 2357.470227][T31477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2357.518554][T31477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2357.777517][T31477] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2357.787402][T31477] bond0 (unregistering): Released all slaves [ 2357.865237][ T4844] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9619'. [ 2357.879965][ T4856] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9624'. [ 2357.894491][ T4855] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9624'. [ 2357.929794][ T4863] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9626'. [ 2359.128986][ T4668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2359.175535][ T4668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2359.215430][ T4668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2359.249084][ T4668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2359.450429][ T4927] netlink: 'syz.4.9649': attribute type 10 has an invalid length. [ 2359.487692][ T4927] device dummy0 left promiscuous mode [ 2359.529604][ T4927] team0: Port device dummy0 added [ 2359.633266][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2359.676077][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2359.703022][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2359.737824][ T4668] 8021q: adding VLAN 0 to HW filter on device team0 [ 2359.815987][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2359.856383][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2359.895154][T31464] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.902372][T31464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2360.011937][T31464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2360.085724][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2360.143946][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2360.195188][T22723] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.202422][T22723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2360.301450][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2360.358807][T22723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2360.464485][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2360.552076][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2360.623956][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2360.691628][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2360.753688][ T4947] netlink: 'syz.0.9652': attribute type 10 has an invalid length. [ 2361.125931][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2361.147604][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2361.199086][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2361.268413][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2361.304066][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2361.357795][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2361.385532][ T4970] netlink: 'syz.4.9661': attribute type 19 has an invalid length. [ 2361.423458][ T4970] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9661'. [ 2361.976607][ T4990] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9666'. [ 2362.018330][ T4994] FAULT_INJECTION: forcing a failure. [ 2362.018330][ T4994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2362.073811][ T4994] CPU: 0 PID: 4994 Comm: syz.5.9668 Not tainted syzkaller #0 [ 2362.081276][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2362.091379][ T4994] Call Trace: [ 2362.094718][ T4994] [ 2362.097709][ T4994] dump_stack_lvl+0x188/0x24e [ 2362.102450][ T4994] ? show_regs_print_info+0x12/0x12 [ 2362.107707][ T4994] ? load_image+0x410/0x410 [ 2362.112253][ T4994] ? __lock_acquire+0x7ea0/0x7ea0 [ 2362.117350][ T4994] should_fail_ex+0x390/0x4c0 [ 2362.122144][ T4994] strncpy_from_user+0x32/0x340 [ 2362.127090][ T4994] bpf_prog_load+0x200/0x1530 [ 2362.131845][ T4994] ? map_freeze+0x390/0x390 [ 2362.136410][ T4994] ? __might_fault+0xa6/0x120 [ 2362.141148][ T4994] ? __might_fault+0xa6/0x120 [ 2362.145875][ T4994] ? __might_fault+0xc2/0x120 [ 2362.150601][ T4994] ? __might_fault+0xa6/0x120 [ 2362.155340][ T4994] ? bpf_lsm_bpf+0x5/0x10 [ 2362.159723][ T4994] ? security_bpf+0x7a/0xa0 [ 2362.164277][ T4994] __sys_bpf+0x5b8/0x780 [ 2362.168578][ T4994] ? bpf_link_show_fdinfo+0x380/0x380 [ 2362.174015][ T4994] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2362.180235][ T4994] __x64_sys_bpf+0x78/0x90 [ 2362.184708][ T4994] do_syscall_64+0x4c/0xa0 [ 2362.189178][ T4994] ? clear_bhb_loop+0x60/0xb0 [ 2362.193904][ T4994] ? clear_bhb_loop+0x60/0xb0 [ 2362.198635][ T4994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2362.204691][ T4994] RIP: 0033:0x7f770fb9e559 [ 2362.209156][ T4994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2362.229083][ T4994] RSP: 002b:00007f77109cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2362.237553][ T4994] RAX: ffffffffffffffda RBX: 00007f770fe25fa0 RCX: 00007f770fb9e559 [ 2362.245574][ T4994] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 2362.253599][ T4994] RBP: 00007f77109cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2362.261635][ T4994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2362.269658][ T4994] R13: 00007f770fe26038 R14: 00007f770fe25fa0 R15: 00007fff47163568 [ 2362.277734][ T4994] [ 2362.785344][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2362.792941][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2362.838632][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2362.937747][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2362.962613][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2363.043439][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9674'. [ 2363.091076][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2363.151804][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2363.177923][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2363.220856][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2363.269294][ T4668] device veth0_vlan entered promiscuous mode [ 2363.906449][ T4668] device veth1_vlan entered promiscuous mode [ 2363.930512][ T5025] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9673'. [ 2364.050146][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2364.064853][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2364.095657][ T4668] device veth0_macvtap entered promiscuous mode [ 2364.127584][ T4668] device veth1_macvtap entered promiscuous mode [ 2364.206002][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.271009][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.338443][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.460144][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.460775][ T5049] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9679'. [ 2364.534794][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.589728][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.662689][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.744991][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.839656][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2365.008534][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2365.049713][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2365.072343][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2365.160070][T31946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2365.216235][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.257570][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.308697][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.354255][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.414220][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.444824][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.504749][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.524263][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.565777][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2365.611443][ T4668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2365.642435][ T4668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2365.673352][ T4668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2365.691380][ T4668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2365.732554][ T5057] netlink: 'syz.3.9676': attribute type 10 has an invalid length. [ 2365.835508][ T5057] team0: Port device geneve1 added [ 2365.909564][ T5047] device syzkaller0 entered promiscuous mode [ 2369.547005][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2369.556151][T31461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2369.581793][ T5079] netlink: 'syz.3.9684': attribute type 10 has an invalid length. [ 2369.642590][ T5092] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9687'. [ 2369.853215][T22723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2369.873202][T22723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2369.979383][T31468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2370.092567][T31468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2370.105535][T31468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2370.121594][T31477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2370.496192][ T5134] bridge0: port 3(team0) entered blocking state [ 2370.557155][ T5134] bridge0: port 3(team0) entered disabled state [ 2370.801335][ T5134] device team0 entered promiscuous mode [ 2370.935997][ T5134] device team_slave_0 entered promiscuous mode [ 2371.035531][ T5134] device team_slave_1 entered promiscuous mode [ 2371.105588][ T5134] device geneve1 entered promiscuous mode [ 2371.186885][ T5134] device dummy0 entered promiscuous mode [ 2371.383665][ T5134] bridge0: port 3(team0) entered blocking state [ 2371.390123][ T5134] bridge0: port 3(team0) entered forwarding state [ 2371.738836][ T5156] netlink: 'syz.5.9694': attribute type 10 has an invalid length. [ 2373.546443][ T5176] device syzkaller0 entered promiscuous mode [ 2373.571130][ T5182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9705'. [ 2373.585301][ T5182] device dummy0 entered promiscuous mode [ 2375.458336][ T5243] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.9719'. [ 2377.152170][ T5249] netlink: 'syz.0.9721': attribute type 10 has an invalid length. [ 2377.167707][ T5249] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.191274][ T5249] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.219824][ T5249] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.252422][ T5249] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.364117][ T5254] netlink: 'syz.4.9723': attribute type 19 has an invalid length. [ 2377.372302][ T5254] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9723'. [ 2377.445902][ T5259] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9722'. [ 2378.232025][ T5279] netlink: 'syz.1.9733': attribute type 3 has an invalid length. [ 2378.271963][ T5279] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9733'. [ 2378.800442][ T5288] netlink: 'syz.0.9737': attribute type 1 has an invalid length. [ 2378.840315][ T5288] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9737'. [ 2379.208868][ T5296] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.9740'. [ 2379.357368][ T5296] netlink: 'syz.1.9740': attribute type 4 has an invalid length. [ 2379.390896][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9740'. [ 2379.414031][ T5298] netlink: 'syz.1.9740': attribute type 4 has an invalid length. [ 2379.438831][ T5298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9740'. [ 2382.145520][ T5320] netlink: 'syz.1.9748': attribute type 3 has an invalid length. [ 2382.153346][ T5320] netlink: 'syz.1.9748': attribute type 1 has an invalid length. [ 2382.379205][ T5320] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.9748'. [ 2382.846324][ T5329] netlink: 'syz.3.9745': attribute type 10 has an invalid length. [ 2382.934753][ T5332] netlink: 'syz.1.9752': attribute type 21 has an invalid length. [ 2383.550534][ T5341] netlink: 'syz.1.9755': attribute type 7 has an invalid length. [ 2383.563674][ T5341] netlink: 'syz.1.9755': attribute type 6 has an invalid length. [ 2386.075647][ T5368] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9765'. [ 2386.116378][ T5362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2386.140096][ T5362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2386.150973][ T5362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2386.168941][ T5362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2386.178872][ T5366] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.9764'. [ 2386.233136][ T5366] netlink: zone id is out of range [ 2386.260885][ T5366] netlink: zone id is out of range [ 2386.270969][ T5366] netlink: zone id is out of range [ 2386.291264][ T5366] netlink: zone id is out of range [ 2386.311196][ T5366] netlink: zone id is out of range [ 2386.331083][ T5366] netlink: zone id is out of range [ 2386.363112][ T5366] netlink: zone id is out of range [ 2386.379045][ T5366] netlink: zone id is out of range [ 2386.399388][ T5366] netlink: zone id is out of range [ 2386.419762][ T5366] netlink: zone id is out of range [ 2386.659241][ T5384] FAULT_INJECTION: forcing a failure. [ 2386.659241][ T5384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2386.729988][ T5384] CPU: 0 PID: 5384 Comm: syz.3.9770 Not tainted syzkaller #0 [ 2386.737533][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2386.747658][ T5384] Call Trace: [ 2386.750984][ T5384] [ 2386.753962][ T5384] dump_stack_lvl+0x188/0x24e [ 2386.758699][ T5384] ? show_regs_print_info+0x12/0x12 [ 2386.763956][ T5384] ? load_image+0x410/0x410 [ 2386.768537][ T5384] ? __lock_acquire+0x7ea0/0x7ea0 [ 2386.773639][ T5384] should_fail_ex+0x390/0x4c0 [ 2386.778494][ T5384] _copy_from_user+0x2c/0x170 [ 2386.783231][ T5384] iovec_from_user+0x143/0x360 [ 2386.788068][ T5384] __import_iovec+0x6c/0x510 [ 2386.792742][ T5384] import_iovec+0x6f/0xa0 [ 2386.797194][ T5384] ___sys_sendmsg+0x252/0x360 [ 2386.801952][ T5384] ? __sys_sendmsg+0x2a0/0x2a0 [ 2386.806836][ T5384] __se_sys_sendmsg+0x1c3/0x2b0 [ 2386.811777][ T5384] ? __x64_sys_sendmsg+0x80/0x80 [ 2386.816791][ T5384] do_syscall_64+0x4c/0xa0 [ 2386.821260][ T5384] ? clear_bhb_loop+0x60/0xb0 [ 2386.825986][ T5384] ? clear_bhb_loop+0x60/0xb0 [ 2386.830724][ T5384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2386.836681][ T5384] RIP: 0033:0x7f84da39e559 [ 2386.841141][ T5384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2386.860792][ T5384] RSP: 002b:00007f84db29e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2386.869262][ T5384] RAX: ffffffffffffffda RBX: 00007f84da625fa0 RCX: 00007f84da39e559 [ 2386.877281][ T5384] RDX: 0000000020040040 RSI: 0000200000002c00 RDI: 0000000000000004 [ 2386.885293][ T5384] RBP: 00007f84db29e090 R08: 0000000000000000 R09: 0000000000000000 [ 2386.893313][ T5384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2386.901340][ T5384] R13: 00007f84da626038 R14: 00007f84da625fa0 R15: 00007ffc8f41dab8 [ 2386.909385][ T5384] [ 2388.053449][ T5405] device syzkaller0 entered promiscuous mode [ 2388.261954][ T5415] netlink: 'syz.4.9784': attribute type 10 has an invalid length. [ 2388.284488][ T5415] device geneve0 entered promiscuous mode [ 2388.326484][ T5415] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2390.310477][ T5430] netlink: 'syz.0.9787': attribute type 19 has an invalid length. [ 2390.319961][ T5430] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9787'. [ 2392.081414][ T5472] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.9800'. [ 2393.083413][ T5486] netlink: 'syz.1.9807': attribute type 10 has an invalid length. [ 2393.170655][ T5486] team0: Port device wlan1 added [ 2393.185747][ T5486] netlink: 'syz.1.9807': attribute type 10 has an invalid length. [ 2393.211520][ T5494] netlink: 'syz.4.9808': attribute type 19 has an invalid length. [ 2393.283484][ T5498] netlink: 'syz.4.9808': attribute type 19 has an invalid length. [ 2393.369016][ T5502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9820'. [ 2393.434459][ T5502] device dummy0 entered promiscuous mode [ 2393.978600][ T5505] device syzkaller0 entered promiscuous mode [ 2397.864384][T23604] Bluetooth: hci5: command 0x0406 tx timeout [ 2399.149986][ T5576] netlink: 'syz.1.9830': attribute type 10 has an invalid length. [ 2399.198306][ T5576] device geneve0 entered promiscuous mode [ 2399.313897][ T5578] netlink: 146340 bytes leftover after parsing attributes in process `syz.5.9831'. [ 2399.328015][ T5576] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2399.368046][ T5579] netlink: 'syz.5.9831': attribute type 39 has an invalid length. [ 2399.414362][ T5578] net_ratelimit: 37 callbacks suppressed [ 2399.414382][ T5578] openvswitch: netlink: Key type 386 is out of range max 32 [ 2400.077660][ T5612] netlink: 'syz.5.9837': attribute type 29 has an invalid length. [ 2400.099852][ T5612] netlink: 'syz.5.9837': attribute type 29 has an invalid length. [ 2400.134633][ T5615] netlink: 'syz.3.9841': attribute type 19 has an invalid length. [ 2400.142724][ T5615] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9841'. [ 2400.319923][ T5616] device syzkaller0 entered promiscuous mode [ 2402.900353][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9857'. [ 2403.776350][ T5650] netlink: 'syz.3.9852': attribute type 2 has an invalid length. [ 2403.793140][ T5650] netlink: 'syz.3.9852': attribute type 8 has an invalid length. [ 2403.804368][ T5650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9852'. [ 2405.466253][ T5713] netlink: 'syz.0.9872': attribute type 1 has an invalid length. [ 2405.494520][ T5713] netlink: 'syz.0.9872': attribute type 1 has an invalid length. [ 2405.502737][ T5713] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.9872'. [ 2405.841251][ T5713] device syzkaller0 entered promiscuous mode [ 2406.027261][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.033658][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.090154][ T5721] netlink: 'syz.5.9875': attribute type 25 has an invalid length. [ 2406.167676][ T5721] netlink: 'syz.5.9875': attribute type 5 has an invalid length. [ 2406.221108][ T5721] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9875'. [ 2410.083411][ T5752] netlink: 'syz.3.9883': attribute type 30 has an invalid length. [ 2410.278344][ T5757] netlink: 'syz.3.9886': attribute type 9 has an invalid length. [ 2410.319679][ T5759] netlink: 'syz.3.9886': attribute type 1 has an invalid length. [ 2410.342697][ T5757] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.9886'. [ 2410.373733][ T5761] netlink: 'syz.0.9887': attribute type 10 has an invalid length. [ 2410.711957][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9899'. [ 2410.757225][ T5773] netlink: 'syz.0.9889': attribute type 10 has an invalid length. [ 2411.415385][ T5773] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2413.375678][ T5836] netlink: 'syz.0.9908': attribute type 28 has an invalid length. [ 2413.439775][ T5836] netlink: 'syz.0.9908': attribute type 4 has an invalid length. [ 2413.528254][ T5836] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9908'. [ 2413.602756][ T5847] netlink: 'syz.0.9908': attribute type 28 has an invalid length. [ 2413.777964][ T5847] netlink: 'syz.0.9908': attribute type 4 has an invalid length. [ 2413.824036][ T5847] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9908'. [ 2413.909162][ T5861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9916'. [ 2414.666533][ T5878] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.9922'. [ 2415.993419][ T5918] FAULT_INJECTION: forcing a failure. [ 2415.993419][ T5918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2416.044671][ T5918] CPU: 1 PID: 5918 Comm: syz.4.9936 Not tainted syzkaller #0 [ 2416.052134][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2416.062353][ T5918] Call Trace: [ 2416.065692][ T5918] [ 2416.068786][ T5918] dump_stack_lvl+0x188/0x24e [ 2416.073524][ T5918] ? show_regs_print_info+0x12/0x12 [ 2416.078781][ T5918] ? load_image+0x410/0x410 [ 2416.083341][ T5918] ? __might_fault+0xa6/0x120 [ 2416.088084][ T5918] should_fail_ex+0x390/0x4c0 [ 2416.092832][ T5918] copyin+0x1b/0x120 [ 2416.096841][ T5918] _copy_from_iter+0x447/0x1130 [ 2416.101759][ T5918] ? copyout_mc+0x110/0x110 [ 2416.106331][ T5918] ? __virt_addr_valid+0x188/0x540 [ 2416.111609][ T5918] ? __virt_addr_valid+0x188/0x540 [ 2416.116781][ T5918] ? __virt_addr_valid+0x467/0x540 [ 2416.121978][ T5918] ? __phys_addr_symbol+0x2b/0x70 [ 2416.127062][ T5918] ? __check_object_size+0x4f6/0xa70 [ 2416.132410][ T5918] netlink_sendmsg+0x755/0xbd0 [ 2416.137244][ T5918] ? netlink_getsockopt+0x550/0x550 [ 2416.142532][ T5918] ? apparmor_socket_sendmsg+0x16c/0x330 [ 2416.148244][ T5918] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2416.153585][ T5918] ? security_socket_sendmsg+0x7c/0xa0 [ 2416.159104][ T5918] ? netlink_getsockopt+0x550/0x550 [ 2416.164363][ T5918] ____sys_sendmsg+0x5ed/0x9a0 [ 2416.169199][ T5918] ? __sys_sendmsg_sock+0x30/0x30 [ 2416.174283][ T5918] ? __import_iovec+0x306/0x510 [ 2416.179237][ T5918] ? import_iovec+0x6f/0xa0 [ 2416.183842][ T5918] ___sys_sendmsg+0x2a2/0x360 [ 2416.188585][ T5918] ? __sys_sendmsg+0x2a0/0x2a0 [ 2416.193434][ T5918] ? trace_call_bpf+0xbf/0x6b0 [ 2416.198287][ T5918] __se_sys_sendmsg+0x1c3/0x2b0 [ 2416.203185][ T5918] ? ct_nmi_exit+0x145/0x1c0 [ 2416.207852][ T5918] ? __x64_sys_sendmsg+0x80/0x80 [ 2416.212860][ T5918] ? lockdep_hardirqs_on+0x94/0x140 [ 2416.218126][ T5918] do_syscall_64+0x4c/0xa0 [ 2416.222634][ T5918] ? clear_bhb_loop+0x60/0xb0 [ 2416.227367][ T5918] ? clear_bhb_loop+0x60/0xb0 [ 2416.232103][ T5918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2416.238047][ T5918] RIP: 0033:0x7fd31159e559 [ 2416.242549][ T5918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2416.262220][ T5918] RSP: 002b:00007fd31246c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2416.270694][ T5918] RAX: ffffffffffffffda RBX: 00007fd311825fa0 RCX: 00007fd31159e559 [ 2416.278724][ T5918] RDX: 0000000020040040 RSI: 0000200000002c00 RDI: 0000000000000004 [ 2416.286772][ T5918] RBP: 00007fd31246c090 R08: 0000000000000000 R09: 0000000000000000 [ 2416.294787][ T5918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2416.302798][ T5918] R13: 00007fd311826038 R14: 00007fd311825fa0 R15: 00007fffd923b1e8 [ 2416.310845][ T5918] [ 2416.380807][ T5920] netlink: 'syz.3.9937': attribute type 29 has an invalid length. [ 2416.850668][ T5920] netlink: 'syz.3.9937': attribute type 29 has an invalid length. [ 2416.895599][ T5924] netlink: 'syz.3.9937': attribute type 29 has an invalid length. [ 2417.268548][ T5914] rxe_eth0 speed is unknown, defaulting to 1000 [ 2417.431794][ T5932] netlink: 'syz.5.9940': attribute type 10 has an invalid length. [ 2417.767610][ T5935] netlink: 'syz.0.9928': attribute type 10 has an invalid length. [ 2418.094667][ T5935] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.403428][ T5935] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.472765][ T5935] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.616623][ T5935] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.585750][ T5956] netlink: 'syz.5.9945': attribute type 10 has an invalid length. [ 2419.635541][ T5956] device veth1_macvtap left promiscuous mode [ 2420.033512][ T5964] netlink: 'syz.3.9947': attribute type 10 has an invalid length. [ 2420.109380][ T5964] team0: Device hsr_slave_0 failed to register rx_handler [ 2420.901959][ T5977] device syzkaller0 entered promiscuous mode [ 2420.921801][ T5979] Q±6ã×\b‹¡Y­4: renamed from lo [ 2427.165720][ T5999] netlink: 'syz.1.9956': attribute type 10 has an invalid length. [ 2427.191494][ T5999] team0: Port device geneve1 added [ 2427.340472][ T6005] netlink: 'syz.4.9957': attribute type 10 has an invalid length. [ 2427.455962][ T6005] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2427.509438][ T6003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.529114][ T6003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.568701][ T6003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.614646][ T6003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.187108][ T6010] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2428.331187][ T6022] netlink: 'syz.0.9962': attribute type 10 has an invalid length. [ 2428.444770][ T6022] team0: Device hsr_slave_0 failed to register rx_handler [ 2428.566348][ T6027] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.9964'. [ 2428.584312][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 2429.416401][ T6042] device syzkaller0 entered promiscuous mode [ 2429.506402][ T6043] netlink: 184 bytes leftover after parsing attributes in process `syz.5.9971'. [ 2434.989008][ T6050] netlink: 'syz.4.9969': attribute type 10 has an invalid length. [ 2435.025631][ T6079] netlink: 'syz.1.9981': attribute type 10 has an invalid length. [ 2435.054870][ T6079] team0: Device hsr_slave_0 failed to register rx_handler [ 2435.580080][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9990'. [ 2437.815530][ T6139] netlink: 'syz.0.9998': attribute type 1 has an invalid length. [ 2439.142615][ T6158] device syzkaller0 entered promiscuous mode [ 2442.318285][ T6187] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2444.018901][ T6243] netlink: 'syz.5.10030': attribute type 19 has an invalid length. [ 2444.026466][ T6236] FAULT_INJECTION: forcing a failure. [ 2444.026466][ T6236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2444.027056][ T6236] CPU: 1 PID: 6236 Comm: syz.3.10029 Not tainted syzkaller #0 [ 2444.027085][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2444.027099][ T6236] Call Trace: [ 2444.027107][ T6236] [ 2444.027116][ T6236] dump_stack_lvl+0x188/0x24e [ 2444.027153][ T6236] ? show_regs_print_info+0x12/0x12 [ 2444.027181][ T6236] ? load_image+0x410/0x410 [ 2444.027218][ T6236] ? __lock_acquire+0x7ea0/0x7ea0 [ 2444.027250][ T6236] ? snprintf+0xe5/0x140 [ 2444.027287][ T6236] should_fail_ex+0x390/0x4c0 [ 2444.027326][ T6236] _copy_to_user+0x2c/0x130 [ 2444.027355][ T6236] simple_read_from_buffer+0xe3/0x150 [ 2444.027390][ T6236] proc_fail_nth_read+0x1a6/0x220 [ 2444.027421][ T6236] ? proc_fault_inject_write+0x310/0x310 [ 2444.075153][ T6243] netlink: 55 bytes leftover after parsing attributes in process `syz.5.10030'. [ 2444.078696][ T6236] ? fsnotify_perm+0x248/0x550 [ 2444.078733][ T6236] ? proc_fault_inject_write+0x310/0x310 [ 2444.078760][ T6236] vfs_read+0x2db/0x960 [ 2444.078798][ T6236] ? kernel_read+0x1e0/0x1e0 [ 2444.078832][ T6236] ? __fget_files+0x28/0x460 [ 2444.078866][ T6236] ? __fget_files+0x3fc/0x460 [ 2444.078906][ T6236] ? __fdget_pos+0x2ae/0x360 [ 2444.078937][ T6236] ? ksys_read+0x70/0x260 [ 2444.078973][ T6236] ksys_read+0x14d/0x260 [ 2444.079016][ T6236] ? vfs_write+0x9a0/0x9a0 [ 2444.079055][ T6236] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2444.079094][ T6236] do_syscall_64+0x4c/0xa0 [ 2444.079120][ T6236] ? clear_bhb_loop+0x60/0xb0 [ 2444.079146][ T6236] ? clear_bhb_loop+0x60/0xb0 [ 2444.079175][ T6236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2444.194484][ T6236] RIP: 0033:0x7f84da35ed8e [ 2444.198926][ T6236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2444.218559][ T6236] RSP: 002b:00007f84db29dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2444.227004][ T6236] RAX: ffffffffffffffda RBX: 00007f84db29e6c0 RCX: 00007f84da35ed8e [ 2444.235010][ T6236] RDX: 000000000000000f RSI: 00007f84db29e0a0 RDI: 0000000000000007 [ 2444.243006][ T6236] RBP: 00007f84db29e090 R08: 0000000000000000 R09: 0000000000000000 [ 2444.251005][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2444.259013][ T6236] R13: 00007f84da626038 R14: 00007f84da625fa0 R15: 00007ffc8f41dab8 [ 2444.267039][ T6236] [ 2447.405819][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10052'. [ 2447.692434][ T6312] netlink: 'syz.3.10055': attribute type 41 has an invalid length. [ 2448.184487][ T6325] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.10058'. [ 2449.529504][ T6345] device syzkaller0 entered promiscuous mode [ 2456.464402][ T6394] netlink: 168 bytes leftover after parsing attributes in process `syz.5.10077'. [ 2456.689154][ T6404] FAULT_INJECTION: forcing a failure. [ 2456.689154][ T6404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2456.744598][ T6404] CPU: 0 PID: 6404 Comm: syz.0.10080 Not tainted syzkaller #0 [ 2456.752144][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2456.762244][ T6404] Call Trace: [ 2456.765564][ T6404] [ 2456.768539][ T6404] dump_stack_lvl+0x188/0x24e [ 2456.773294][ T6404] ? show_regs_print_info+0x12/0x12 [ 2456.778550][ T6404] ? load_image+0x410/0x410 [ 2456.783108][ T6404] ? __lock_acquire+0x7ea0/0x7ea0 [ 2456.788192][ T6404] should_fail_ex+0x390/0x4c0 [ 2456.792935][ T6404] _copy_from_user+0x2c/0x170 [ 2456.797682][ T6404] __tun_chr_ioctl+0x222/0x1ed0 [ 2456.802588][ T6404] ? tun_flow_create+0x310/0x310 [ 2456.807626][ T6404] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2456.812633][ T6404] ? security_file_ioctl+0x7c/0xa0 [ 2456.817819][ T6404] ? tun_chr_poll+0x630/0x630 [ 2456.822545][ T6404] __se_sys_ioctl+0xfa/0x170 [ 2456.827182][ T6404] do_syscall_64+0x4c/0xa0 [ 2456.831630][ T6404] ? clear_bhb_loop+0x60/0xb0 [ 2456.836344][ T6404] ? clear_bhb_loop+0x60/0xb0 [ 2456.841061][ T6404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2456.846991][ T6404] RIP: 0033:0x7fd8f779e559 [ 2456.851451][ T6404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2456.871093][ T6404] RSP: 002b:00007fd8f8672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.879541][ T6404] RAX: ffffffffffffffda RBX: 00007fd8f7a25fa0 RCX: 00007fd8f779e559 [ 2456.887549][ T6404] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000004 [ 2456.895591][ T6404] RBP: 00007fd8f8672090 R08: 0000000000000000 R09: 0000000000000000 [ 2456.903603][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2456.911605][ T6404] R13: 00007fd8f7a26038 R14: 00007fd8f7a25fa0 R15: 00007ffdd86b9cf8 [ 2456.919622][ T6404] [ 2460.074863][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2460.104963][ T6476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2460.157453][ T6482] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.10107'. [ 2460.235630][ T6481] netlink: 'syz.1.10103': attribute type 10 has an invalid length. [ 2462.105844][ T6515] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.10118'. [ 2462.230902][ T6509] device syzkaller0 entered promiscuous mode [ 2466.847921][ T6578] netlink: 'syz.5.10138': attribute type 19 has an invalid length. [ 2466.896807][ T6578] netlink: 55 bytes leftover after parsing attributes in process `syz.5.10138'. [ 2467.136525][ T6584] FAULT_INJECTION: forcing a failure. [ 2467.136525][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.179644][ T6584] CPU: 0 PID: 6584 Comm: syz.5.10141 Not tainted syzkaller #0 [ 2467.187191][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2467.197300][ T6584] Call Trace: [ 2467.200636][ T6584] [ 2467.203616][ T6584] dump_stack_lvl+0x188/0x24e [ 2467.208364][ T6584] ? show_regs_print_info+0x12/0x12 [ 2467.213625][ T6584] ? load_image+0x410/0x410 [ 2467.218188][ T6584] ? __might_sleep+0xd0/0xd0 [ 2467.222844][ T6584] ? __lock_acquire+0x7ea0/0x7ea0 [ 2467.228077][ T6584] should_fail_ex+0x390/0x4c0 [ 2467.232826][ T6584] should_failslab+0x5/0x20 [ 2467.237378][ T6584] slab_pre_alloc_hook+0x59/0x300 [ 2467.242472][ T6584] ? mark_lock+0x94/0x320 [ 2467.246839][ T6584] ? __get_vm_area_node+0x122/0x330 [ 2467.252077][ T6584] __kmem_cache_alloc_node+0x4f/0x270 [ 2467.257485][ T6584] ? __lock_acquire+0x142d/0x7ea0 [ 2467.262547][ T6584] ? __get_vm_area_node+0x122/0x330 [ 2467.267783][ T6584] kmalloc_node_trace+0x22/0xe0 [ 2467.272671][ T6584] __get_vm_area_node+0x122/0x330 [ 2467.277736][ T6584] __vmalloc_node_range+0x357/0x1380 [ 2467.283055][ T6584] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2467.288651][ T6584] ? mark_lock+0x94/0x320 [ 2467.293031][ T6584] ? free_vm_area+0x50/0x50 [ 2467.297590][ T6584] ? mark_lock+0x94/0x320 [ 2467.302044][ T6584] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2467.307677][ T6584] __vmalloc+0x76/0x80 [ 2467.311801][ T6584] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2467.317392][ T6584] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2467.322824][ T6584] ? bpf_prog_alloc+0x13/0x1b0 [ 2467.327653][ T6584] bpf_prog_alloc+0x1c/0x1b0 [ 2467.332292][ T6584] __get_filter+0xf2/0x400 [ 2467.336927][ T6584] ? _local_bh_enable+0xa0/0xa0 [ 2467.341840][ T6584] sk_attach_filter+0x20/0x140 [ 2467.346682][ T6584] tun_attach+0x3d5/0x1540 [ 2467.351143][ T6584] ? __lock_acquire+0x7ea0/0x7ea0 [ 2467.356453][ T6584] ? full_name_hash+0xac/0xe0 [ 2467.361312][ T6584] ? tun_not_capable+0x14d/0x1f0 [ 2467.366396][ T6584] tun_set_iff+0x474/0xea0 [ 2467.370892][ T6584] __tun_chr_ioctl+0x770/0x1ed0 [ 2467.375806][ T6584] ? tun_flow_create+0x310/0x310 [ 2467.380823][ T6584] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2467.385836][ T6584] ? security_file_ioctl+0x7c/0xa0 [ 2467.391014][ T6584] ? tun_chr_poll+0x630/0x630 [ 2467.395759][ T6584] __se_sys_ioctl+0xfa/0x170 [ 2467.400413][ T6584] do_syscall_64+0x4c/0xa0 [ 2467.404881][ T6584] ? clear_bhb_loop+0x60/0xb0 [ 2467.409606][ T6584] ? clear_bhb_loop+0x60/0xb0 [ 2467.414330][ T6584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2467.420288][ T6584] RIP: 0033:0x7f770fb9e559 [ 2467.424767][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2467.444466][ T6584] RSP: 002b:00007f77109cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2467.452945][ T6584] RAX: ffffffffffffffda RBX: 00007f770fe25fa0 RCX: 00007f770fb9e559 [ 2467.460977][ T6584] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000004 [ 2467.468988][ T6584] RBP: 00007f77109cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2467.477022][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2467.485082][ T6584] R13: 00007f770fe26038 R14: 00007f770fe25fa0 R15: 00007fff47163568 [ 2467.493118][ T6584] [ 2467.500238][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.506631][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.554438][ T6584] syz.5.10141: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 2467.571433][ T6584] CPU: 1 PID: 6584 Comm: syz.5.10141 Not tainted syzkaller #0 [ 2467.578950][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2467.589062][ T6584] Call Trace: [ 2467.592388][ T6584] [ 2467.595366][ T6584] dump_stack_lvl+0x188/0x24e [ 2467.600099][ T6584] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2467.606567][ T6584] ? show_regs_print_info+0x12/0x12 [ 2467.611834][ T6584] ? load_image+0x410/0x410 [ 2467.616405][ T6584] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2467.622991][ T6584] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2467.629554][ T6584] warn_alloc+0x242/0x330 [ 2467.633966][ T6584] ? __get_vm_area_node+0x122/0x330 [ 2467.639223][ T6584] ? zone_watermark_ok_safe+0x270/0x270 [ 2467.644836][ T6584] ? rcu_is_watching+0x11/0xa0 [ 2467.649674][ T6584] ? __get_vm_area_node+0x318/0x330 [ 2467.654938][ T6584] __vmalloc_node_range+0x37c/0x1380 [ 2467.660290][ T6584] ? mark_lock+0x94/0x320 [ 2467.664699][ T6584] ? free_vm_area+0x50/0x50 [ 2467.669254][ T6584] ? mark_lock+0x94/0x320 [ 2467.673647][ T6584] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2467.679243][ T6584] __vmalloc+0x76/0x80 [ 2467.683367][ T6584] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2467.688967][ T6584] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2467.694434][ T6584] ? bpf_prog_alloc+0x13/0x1b0 [ 2467.699284][ T6584] bpf_prog_alloc+0x1c/0x1b0 [ 2467.703939][ T6584] __get_filter+0xf2/0x400 [ 2467.708404][ T6584] ? _local_bh_enable+0xa0/0xa0 [ 2467.713298][ T6584] sk_attach_filter+0x20/0x140 [ 2467.718127][ T6584] tun_attach+0x3d5/0x1540 [ 2467.722640][ T6584] ? __lock_acquire+0x7ea0/0x7ea0 [ 2467.727720][ T6584] ? full_name_hash+0xac/0xe0 [ 2467.732447][ T6584] ? tun_not_capable+0x14d/0x1f0 [ 2467.737432][ T6584] tun_set_iff+0x474/0xea0 [ 2467.741906][ T6584] __tun_chr_ioctl+0x770/0x1ed0 [ 2467.746819][ T6584] ? tun_flow_create+0x310/0x310 [ 2467.751829][ T6584] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2467.756853][ T6584] ? security_file_ioctl+0x7c/0xa0 [ 2467.762018][ T6584] ? tun_chr_poll+0x630/0x630 [ 2467.766753][ T6584] __se_sys_ioctl+0xfa/0x170 [ 2467.771404][ T6584] do_syscall_64+0x4c/0xa0 [ 2467.775868][ T6584] ? clear_bhb_loop+0x60/0xb0 [ 2467.780620][ T6584] ? clear_bhb_loop+0x60/0xb0 [ 2467.785365][ T6584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2467.791304][ T6584] RIP: 0033:0x7f770fb9e559 [ 2467.795766][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2467.808854][ T6586] delete_channel: no stack [ 2467.815406][ T6584] RSP: 002b:00007f77109cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2467.815489][ T6584] RAX: ffffffffffffffda RBX: 00007f770fe25fa0 RCX: 00007f770fb9e559 [ 2467.815507][ T6584] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000004 [ 2467.815523][ T6584] RBP: 00007f77109cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2467.815538][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2467.815552][ T6584] R13: 00007f770fe26038 R14: 00007f770fe25fa0 R15: 00007fff47163568 [ 2467.815589][ T6584] [ 2467.971989][ T6584] Mem-Info: [ 2467.975745][ T6584] active_anon:10082 inactive_anon:0 isolated_anon:0 [ 2467.975745][ T6584] active_file:23642 inactive_file:40878 isolated_file:0 [ 2467.975745][ T6584] unevictable:768 dirty:122 writeback:0 [ 2467.975745][ T6584] slab_reclaimable:21768 slab_unreclaimable:98666 [ 2467.975745][ T6584] mapped:30018 shmem:1376 pagetables:660 [ 2467.975745][ T6584] sec_pagetables:0 bounce:0 [ 2467.975745][ T6584] kernel_misc_reclaimable:0 [ 2467.975745][ T6584] free:1306275 free_pcp:11638 free_cma:0 [ 2468.037983][ T6584] Node 0 active_anon:40328kB inactive_anon:0kB active_file:94568kB inactive_file:163312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120072kB dirty:488kB writeback:0kB shmem:3968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10828kB pagetables:2640kB sec_pagetables:0kB all_unreclaimable? no [ 2468.184241][ T6584] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2468.228971][ T6584] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2468.309491][ T6584] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 2468.319637][ T6584] Node 0 DMA32 free:1312880kB boost:0kB min:34556kB low:43192kB high:51828kB reserved_highatomic:0KB active_anon:40428kB inactive_anon:0kB active_file:94568kB inactive_file:163312kB unevictable:1536kB writepending:488kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:27328kB local_pcp:19608kB free_cma:0kB [ 2468.353274][ T6584] lowmem_reserve[]: 0 0 1 1 1 [ 2468.365856][ T6584] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 2468.401380][ T6584] lowmem_reserve[]: 0 0 0 0 0 [ 2468.406820][ T6584] Node 1 Normal free:3896840kB boost:0kB min:55324kB low:69152kB high:82980kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18948kB local_pcp:10144kB free_cma:0kB [ 2468.444378][ T6584] lowmem_reserve[]: 0 0 0 0 0 [ 2468.451327][ T6584] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2468.470558][ T6584] Node 0 DMA32: 1948*4kB (UM) 2842*8kB (UME) 1879*16kB (UME) 1036*32kB (UME) 339*64kB (UME) 369*128kB (UM) 217*256kB (UME) 92*512kB (UME) 51*1024kB (UM) 18*2048kB (UM) 234*4096kB (UM) = 1312880kB [ 2468.500006][ T6584] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2468.518733][ T6584] Node 1 Normal: 236*4kB (UE) 63*8kB (UME) 40*16kB (UME) 27*32kB (UE) 28*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896840kB [ 2468.542837][ T6584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2468.561473][ T6584] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2468.571200][ T6584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2468.588504][ T6584] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2468.602538][ T6584] 65896 total pagecache pages [ 2468.611871][ T6584] 0 pages in swap cache [ 2468.618632][ T6584] Free swap = 124996kB [ 2468.622964][ T6584] Total swap = 124996kB [ 2468.631378][ T6584] 2097051 pages RAM [ 2468.638584][ T6584] 0 pages HighMem/MovableOnly [ 2468.643948][ T6584] 419192 pages reserved [ 2468.651983][ T6584] 0 pages cma reserved [ 2469.437101][ T6636] netlink: 'syz.5.10162': attribute type 16 has an invalid length. [ 2469.534436][ T6636] netlink: 156 bytes leftover after parsing attributes in process `syz.5.10162'. [ 2469.556561][T23604] Bluetooth: hci0: command 0x0406 tx timeout [ 2470.241104][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10170'. [ 2470.561172][ T6656] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10168'. [ 2472.053782][ T6682] netlink: 'syz.5.10175': attribute type 10 has an invalid length. [ 2472.427589][ T6698] netlink: 'syz.0.10181': attribute type 1 has an invalid length. [ 2473.206495][ T6713] netlink: 'syz.5.10185': attribute type 27 has an invalid length. [ 2473.251366][ T6713] netlink: 'syz.5.10185': attribute type 4 has an invalid length. [ 2473.355129][ T6713] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10185'. [ 2474.153456][ T6730] netlink: 'syz.3.10190': attribute type 13 has an invalid length. [ 2475.308732][ T6756] netlink: 'syz.3.10202': attribute type 19 has an invalid length. [ 2475.317411][ T6756] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10202'. [ 2475.522277][ T6763] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10203'. [ 2476.214309][ T6763] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10203'. [ 2478.250137][ T6815] device syzkaller0 entered promiscuous mode [ 2478.381877][ T6816] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10216'. [ 2479.431844][ T6847] netlink: 'syz.3.10226': attribute type 1 has an invalid length. [ 2481.743716][ T6840] IPv6: NLM_F_CREATE should be specified when creating new route [ 2482.904188][ T6882] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10239'. [ 2482.969547][ T6886] netlink: 'syz.1.10240': attribute type 27 has an invalid length. [ 2482.994541][ T6886] netlink: 'syz.1.10240': attribute type 4 has an invalid length. [ 2483.003069][ T6886] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10240'. [ 2483.785339][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10244'. [ 2483.904703][ T6900] netlink: 'syz.4.10243': attribute type 1 has an invalid length. [ 2484.215036][ T6918] netlink: 'syz.0.10248': attribute type 10 has an invalid length. [ 2484.241010][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10248'. [ 2484.262513][ T6918] bridge0: port 3(dummy0) entered blocking state [ 2484.284928][ T6918] bridge0: port 3(dummy0) entered disabled state [ 2484.321281][ T6918] bridge0: port 3(dummy0) entered blocking state [ 2484.327842][ T6918] bridge0: port 3(dummy0) entered forwarding state [ 2484.418318][ T6925] netlink: 'syz.1.10251': attribute type 2 has an invalid length. [ 2484.428215][ T6921] rxe_eth0 speed is unknown, defaulting to 1000 [ 2484.444283][ T6925] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.10251'. [ 2484.529443][ T6925] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10251'. [ 2484.554949][ T6925] openvswitch: netlink: Message has 6 unknown bytes. [ 2485.680425][ T6940] netlink: 'syz.4.10257': attribute type 27 has an invalid length. [ 2485.734700][ T6940] netlink: 'syz.4.10257': attribute type 4 has an invalid length. [ 2485.871949][ T6940] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10257'. [ 2486.504657][ T6956] rxe_eth0 speed is unknown, defaulting to 1000 [ 2486.650939][ T6960] netlink: 'syz.5.10265': attribute type 10 has an invalid length. [ 2488.101984][ T7004] netlink: 'syz.4.10281': attribute type 46 has an invalid length. [ 2488.148495][ T7004] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10281'. [ 2488.191668][ T7006] netlink: 'syz.3.10280': attribute type 27 has an invalid length. [ 2488.214847][ T7006] netlink: 'syz.3.10280': attribute type 4 has an invalid length. [ 2488.270354][ T7006] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10280'. [ 2488.505545][ T7009] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10282'. [ 2488.766703][ T7016] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10286'. [ 2489.508758][ T7026] device syzkaller0 entered promiscuous mode [ 2490.469151][ T7039] netlink: 'syz.5.10293': attribute type 2 has an invalid length. [ 2490.495445][ T7039] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.10293'. [ 2494.651746][ T7043] netlink: 'syz.0.10287': attribute type 10 has an invalid length. [ 2494.660588][ T7043] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.670583][ T7043] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.680098][ T7043] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.689375][ T7043] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.275690][ T7087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.312933][ T7087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.340885][ T7087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.372667][ T7087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.742411][ T7098] device syzkaller0 entered promiscuous mode [ 2496.014358][ T7115] netlink: 'syz.5.10317': attribute type 29 has an invalid length. [ 2496.058153][ T7115] netlink: 'syz.5.10317': attribute type 29 has an invalid length. [ 2496.093465][ T7095] rxe_eth0 speed is unknown, defaulting to 1000 [ 2496.144403][ T7116] netlink: 'syz.5.10317': attribute type 29 has an invalid length. [ 2496.234987][ T7115] netlink: 'syz.5.10317': attribute type 29 has an invalid length. [ 2499.091253][ T7117] netlink: 'syz.5.10317': attribute type 29 has an invalid length. [ 2499.104420][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10319'. [ 2499.113966][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10319'. [ 2501.449498][ T7203] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.10348'. [ 2502.349473][ T7216] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10343'. [ 2502.480002][ T7224] netlink: 'syz.4.10346': attribute type 19 has an invalid length. [ 2502.514194][ T7224] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10346'. [ 2503.506547][ T7236] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.10353'. [ 2503.601075][ T7240] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10352'. [ 2505.512020][ T7299] netlink: 'syz.3.10376': attribute type 19 has an invalid length. [ 2505.950534][ T7311] netlink: 'syz.3.10379': attribute type 10 has an invalid length. [ 2506.108244][ T7311] 8021q: adding VLAN 0 to HW filter on device team0 [ 2506.176733][ T7311] bond0: (slave team0): Enslaving as an active interface with an up link [ 2506.327446][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10382'. [ 2508.800312][ T7347] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10394'. [ 2509.033670][ T7347] ksmbd: Unknown IPC event: 10, ignore. [ 2510.334774][ T7391] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.10410'. [ 2510.642047][ T7399] device syzkaller0 entered promiscuous mode [ 2510.844799][ T7399] netlink: 'syz.1.10413': attribute type 41 has an invalid length. [ 2513.066420][ T7444] netlink: 'syz.4.10429': attribute type 11 has an invalid length. [ 2513.085119][ T7444] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10429'. [ 2514.656336][ T7423] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10422'. [ 2516.693973][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10447'. [ 2517.735234][ T7511] netlink: 'syz.4.10453': attribute type 29 has an invalid length. [ 2518.177248][ T7511] netlink: 'syz.4.10453': attribute type 29 has an invalid length. [ 2518.283610][ T7498] netlink: 'syz.0.10449': attribute type 10 has an invalid length. [ 2518.340793][ T7498] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2518.375983][ T7498] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2518.508013][ T7498] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2518.584417][ T7498] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2518.930547][ T7515] netlink: 'syz.4.10453': attribute type 29 has an invalid length. [ 2518.972784][ T7518] netlink: 'syz.4.10453': attribute type 29 has an invalid length. [ 2520.088391][ T7542] netlink: 'syz.3.10458': attribute type 10 has an invalid length. [ 2520.180477][ T7545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10466'. [ 2520.219413][ T7547] netlink: 'syz.4.10465': attribute type 10 has an invalid length. [ 2520.267457][ T7547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10465'. [ 2520.440351][ T7547] bridge0: port 4(veth0_vlan) entered blocking state [ 2520.483814][ T7547] bridge0: port 4(veth0_vlan) entered disabled state [ 2520.687407][ T7547] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2520.782298][ T7545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10466'. [ 2520.811929][ T7549] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10466'. [ 2521.211060][ T7557] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.10469'. [ 2521.378111][ T7578] delete_channel: no stack [ 2521.571558][T23604] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 2521.580347][T23604] Bluetooth: hci5: Invalid handle: 0xffff > 0x0eff [ 2521.935830][ T7591] netlink: 'syz.5.10479': attribute type 1 has an invalid length. [ 2522.879421][ T7614] netlink: 'syz.5.10485': attribute type 10 has an invalid length. [ 2523.524787][ T7618] netlink: 'syz.0.10480': attribute type 10 has an invalid length. [ 2523.654989][ T7625] netlink: 'syz.1.10488': attribute type 10 has an invalid length. [ 2523.892672][ T7625] team0: Device vxcan1 is of different type [ 2524.134980][ T7635] netlink: 'syz.3.10492': attribute type 3 has an invalid length. [ 2524.163279][ T7635] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10492'. [ 2524.187490][ T7639] netlink: 'syz.3.10492': attribute type 3 has an invalid length. [ 2524.206586][ T7639] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10492'. [ 2524.463895][ T7649] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10498'. [ 2525.405717][ T7662] device syzkaller0 entered promiscuous mode [ 2525.826789][ T7656] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.10510'. [ 2528.282907][ T7695] netlink: 'syz.4.10513': attribute type 10 has an invalid length. [ 2528.291884][ T7695] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2528.306184][ T7699] netlink: 'syz.0.10512': attribute type 10 has an invalid length. [ 2528.324169][ T7699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10512'. [ 2528.333922][ T7699] bridge0: port 4(veth0_vlan) entered blocking state [ 2528.341227][ T7699] bridge0: port 4(veth0_vlan) entered disabled state [ 2528.350262][ T7699] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2528.908982][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.915431][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.457951][ T7725] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.10521'. [ 2529.564737][ T7737] netlink: 'syz.0.10524': attribute type 3 has an invalid length. [ 2529.574179][ T7737] netlink: 'syz.0.10524': attribute type 1 has an invalid length. [ 2529.584854][ T7737] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.10524'. [ 2531.842089][ T7801] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10542'. [ 2532.163355][ T7795] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.10541'. [ 2533.023228][ T7824] netlink: 'syz.0.10551': attribute type 10 has an invalid length. [ 2533.245822][ T7824] team0: Device vxcan1 is of different type [ 2533.488680][ T7825] netlink: 'syz.4.10545': attribute type 10 has an invalid length. [ 2535.680932][ T7861] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.10566'. [ 2536.891182][ T7908] netlink: 'syz.0.10581': attribute type 29 has an invalid length. [ 2536.971083][ T7908] netlink: 'syz.0.10581': attribute type 29 has an invalid length. [ 2537.089203][ T7908] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.10581'. [ 2537.157521][ T7911] netlink: 'syz.0.10581': attribute type 29 has an invalid length. [ 2537.227690][ T7900] netlink: 'syz.3.10576': attribute type 10 has an invalid length. [ 2537.478260][ T7911] netlink: 'syz.0.10581': attribute type 29 has an invalid length. [ 2537.880287][ T7923] : port 1(syz_tun) entered blocking state [ 2537.897812][ T7923] : port 1(syz_tun) entered disabled state [ 2537.934469][ T7923] device syz_tun entered promiscuous mode [ 2539.036017][ T7934] device syzkaller0 entered promiscuous mode [ 2539.312162][ T7950] netlink: 'syz.3.10596': attribute type 19 has an invalid length. [ 2539.324306][ T7950] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10596'. [ 2543.536521][ T7948] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2543.546452][ T7948] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2543.556524][ T7948] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2543.631215][ T7962] device syzkaller0 entered promiscuous mode [ 2543.655264][ T7970] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10599'. [ 2543.777520][ T7970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2543.855160][ T7970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2543.906765][ T7970] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2543.915831][ T7970] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2543.933049][ T7970] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2543.948210][ T7970] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2543.958489][ T7970] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2543.989495][ T7970] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2544.021699][ T7970] bond0 (unregistering): Released all slaves [ 2544.188626][ T7990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10605'. [ 2544.599866][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10609'. [ 2546.963190][ T7990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10605'. [ 2546.972671][ T7993] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.10605'. [ 2547.459566][ T8030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10620'. [ 2547.506662][ T8030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10620'. [ 2547.539832][ T8033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10620'. [ 2549.097733][ T8068] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2549.159942][ T8068] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2549.264622][ T8068] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2549.284415][ T8068] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2550.365671][ T8088] netlink: 'syz.0.10634': attribute type 10 has an invalid length. [ 2550.608590][ T8100] netlink: 'syz.4.10641': attribute type 11 has an invalid length. [ 2550.644389][ T8100] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10641'. [ 2550.715503][ T8099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2552.483147][ T8153] netlink: 'syz.3.10659': attribute type 21 has an invalid length. [ 2552.534376][ T8153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10659'. [ 2552.722228][ T8159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.744496][ T8159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.753464][ T8159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.787800][ T8159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2553.034631][ T8163] device syzkaller0 entered promiscuous mode [ 2553.058925][ T8153] netlink: 'syz.3.10659': attribute type 10 has an invalid length. [ 2553.068711][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10666'. [ 2553.079220][ T8153] device veth0_macvtap left promiscuous mode [ 2553.442441][ T8173] netlink: 'syz.0.10665': attribute type 16 has an invalid length. [ 2553.488213][ T8173] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10665'. [ 2558.131437][ T8170] device syzkaller0 entered promiscuous mode [ 2558.581710][ T8218] can: request_module (can-proto-0) failed. [ 2562.105636][ T8278] netlink: 'syz.5.10700': attribute type 10 has an invalid length. [ 2562.402422][ T8278] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.454751][ T8278] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.544431][ T8278] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.566650][ T8278] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.638677][ T8292] netlink: 'syz.4.10709': attribute type 46 has an invalid length. [ 2562.750014][ T8292] netlink: 'syz.4.10709': attribute type 46 has an invalid length. [ 2563.844657][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10720'. [ 2565.968452][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10732'. [ 2566.555856][ T8419] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10734'. [ 2567.552795][ T8453] netlink: 'syz.0.10743': attribute type 10 has an invalid length. [ 2567.604979][ T8453] netlink: 55 bytes leftover after parsing attributes in process `syz.0.10743'. [ 2568.579221][ T8481] device syzkaller0 entered promiscuous mode [ 2572.576633][ T8503] netlink: 'syz.3.10757': attribute type 1 has an invalid length. [ 2572.592355][ T8518] netlink: 'syz.5.10759': attribute type 10 has an invalid length. [ 2572.732804][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10762'. [ 2573.126623][ T8542] netlink: 'syz.4.10771': attribute type 21 has an invalid length. [ 2573.180803][ T8542] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10771'. [ 2573.285173][ T8542] netlink: 'syz.4.10771': attribute type 5 has an invalid length. [ 2574.015001][ T8568] device syzkaller0 entered promiscuous mode [ 2574.110633][ T8570] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2574.163039][ T8570] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2574.175898][ T8570] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2574.193457][ T8570] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2574.611300][ T8586] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.10785'. [ 2578.769418][ T8641] netlink: 'syz.1.10801': attribute type 10 has an invalid length. [ 2580.449280][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10821'. [ 2583.920502][ T8776] device syzkaller0 entered promiscuous mode [ 2588.321609][ T8792] netlink: 'syz.3.10845': attribute type 10 has an invalid length. [ 2588.354136][ T8796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10852'. [ 2590.348471][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.354901][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.404401][ T8889] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 2590.410559][ T8889] syzkaller1: group set to 778 [ 2590.449949][ T8890] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 2590.464148][ T8890] syzkaller1: group set to 778 [ 2590.469249][ T8888] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 2590.499347][ T8889] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 2591.368447][ T8911] rxe_eth0 speed is unknown, defaulting to 1000 [ 2591.509851][ T8918] netlink: 'syz.5.10893': attribute type 39 has an invalid length. [ 2591.836063][ T8936] netlink: 'syz.0.10892': attribute type 10 has an invalid length. [ 2591.932115][ T8936] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2591.960794][ T8936] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2592.015210][ T8936] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2592.074406][ T8936] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2592.466912][ T8945] device hsr0 entered promiscuous mode [ 2593.141424][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10909'. [ 2593.613575][ T8969] netlink: 'syz.1.10911': attribute type 39 has an invalid length. [ 2595.582798][ T9005] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.10926'. [ 2597.173295][ T9059] netlink: 'syz.0.10947': attribute type 10 has an invalid length. [ 2597.216410][ T9059] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10947'. [ 2597.533241][ T9055] device syzkaller0 entered promiscuous mode [ 2601.290211][ T9074] netlink: 'syz.3.10944': attribute type 10 has an invalid length. [ 2602.637982][ T9120] netlink: 'syz.5.10963': attribute type 19 has an invalid length. [ 2602.684802][ T9120] netlink: 55 bytes leftover after parsing attributes in process `syz.5.10963'. [ 2604.518285][ T9177] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10982'. [ 2607.280417][ T9254] netlink: 'syz.1.11006': attribute type 10 has an invalid length. [ 2607.348472][ T9254] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11006'. [ 2609.475950][ T9296] netlink: 'syz.0.11016': attribute type 10 has an invalid length. [ 2609.673813][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11023'. [ 2610.292620][ T9324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2610.308257][ T9324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2610.336572][ T9324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2610.362364][ T9324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2614.608973][ T9412] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11063'. [ 2615.209606][ T9419] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11067'. [ 2615.521485][ T9432] netlink: 'syz.1.11072': attribute type 28 has an invalid length. [ 2617.471040][ T9481] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.11087'. [ 2617.538499][ T9481] netlink: 'syz.5.11087': attribute type 10 has an invalid length. [ 2618.217456][ T9481] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2618.254214][ T9481] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2618.277967][ T9481] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2618.295693][ T9481] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2618.458892][ T9502] netlink: 'syz.1.11093': attribute type 19 has an invalid length. [ 2618.509496][ T9502] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11093'. [ 2618.623143][ T9501] netlink: 'syz.0.11094': attribute type 21 has an invalid length. [ 2618.634917][ T9501] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11094'. [ 2618.674812][ T9501] netlink: 'syz.0.11094': attribute type 4 has an invalid length. [ 2618.682830][ T9501] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11094'. [ 2618.721528][ T9503] netlink: 'syz.0.11094': attribute type 10 has an invalid length. [ 2618.733093][ T9503] device veth1_macvtap left promiscuous mode [ 2620.761840][ T9535] rxe_eth0 speed is unknown, defaulting to 1000 [ 2624.040008][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11149'. [ 2624.424816][ T9668] netlink: 'syz.0.11145': attribute type 10 has an invalid length. [ 2624.473706][ T9668] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2624.602168][ T9668] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2624.644453][ T9668] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2624.728008][ T9668] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2625.017030][ T9677] netlink: 'syz.1.11152': attribute type 39 has an invalid length. [ 2626.033876][ T9703] netlink: 'syz.5.11160': attribute type 10 has an invalid length. [ 2626.074309][ T9703] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11160'. [ 2628.782045][ T9775] netlink: 'syz.3.11181': attribute type 10 has an invalid length. [ 2628.842605][ T9775] device dummy0 left promiscuous mode [ 2628.870404][ T9775] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2629.102700][ T9785] netlink: 'syz.0.11186': attribute type 29 has an invalid length. [ 2629.174459][ T9781] netlink: 'syz.3.11181': attribute type 10 has an invalid length. [ 2629.884257][ T9795] IPv6: NLM_F_CREATE should be specified when creating new route [ 2629.912722][ T9795] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11187'. [ 2631.151115][ T9823] device syzkaller0 entered promiscuous mode [ 2634.607669][ T9831] netlink: 'syz.5.11202': attribute type 19 has an invalid length. [ 2634.616032][ T9831] netlink: 55 bytes leftover after parsing attributes in process `syz.5.11202'. [ 2634.629787][ T9837] rxe_eth0 speed is unknown, defaulting to 1000 [ 2634.641785][ T9843] netlink: 'syz.0.11204': attribute type 10 has an invalid length. [ 2636.841275][ T9886] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.884454][ T9886] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.895792][ T9886] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.929745][ T9886] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.963107][ T9899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.985632][ T9899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2637.009519][ T9899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2637.036191][ T9899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2637.079027][ T9903] FAULT_INJECTION: forcing a failure. [ 2637.079027][ T9903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2637.158140][ T9903] CPU: 0 PID: 9903 Comm: syz.4.11224 Not tainted syzkaller #0 [ 2637.165678][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2637.175786][ T9903] Call Trace: [ 2637.179104][ T9903] [ 2637.182097][ T9903] dump_stack_lvl+0x188/0x24e [ 2637.186836][ T9903] ? show_regs_print_info+0x12/0x12 [ 2637.192121][ T9903] ? load_image+0x410/0x410 [ 2637.196688][ T9903] ? __lock_acquire+0x7ea0/0x7ea0 [ 2637.201786][ T9903] ? snprintf+0xe5/0x140 [ 2637.206134][ T9903] should_fail_ex+0x390/0x4c0 [ 2637.210898][ T9903] _copy_to_user+0x2c/0x130 [ 2637.215482][ T9903] simple_read_from_buffer+0xe3/0x150 [ 2637.220922][ T9903] proc_fail_nth_read+0x1a6/0x220 [ 2637.226030][ T9903] ? proc_fault_inject_write+0x310/0x310 [ 2637.231735][ T9903] ? vfs_read+0x2c3/0x960 [ 2637.236135][ T9903] ? proc_fault_inject_write+0x310/0x310 [ 2637.241810][ T9903] vfs_read+0x2db/0x960 [ 2637.246039][ T9903] ? kernel_read+0x1e0/0x1e0 [ 2637.250693][ T9903] ? __fget_files+0x28/0x460 [ 2637.255330][ T9903] ? __fget_files+0x3fc/0x460 [ 2637.260059][ T9903] ? __fdget_pos+0x2ae/0x360 [ 2637.264731][ T9903] ? ksys_read+0x70/0x260 [ 2637.269110][ T9903] ksys_read+0x14d/0x260 [ 2637.273399][ T9903] ? vfs_write+0x9a0/0x9a0 [ 2637.277874][ T9903] ? lockdep_hardirqs_on+0x94/0x140 [ 2637.283142][ T9903] do_syscall_64+0x4c/0xa0 [ 2637.287601][ T9903] ? clear_bhb_loop+0x60/0xb0 [ 2637.292315][ T9903] ? clear_bhb_loop+0x60/0xb0 [ 2637.297055][ T9903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2637.302995][ T9903] RIP: 0033:0x7fd31155ed8e [ 2637.307448][ T9903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2637.327096][ T9903] RSP: 002b:00007fd31246bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2637.335557][ T9903] RAX: ffffffffffffffda RBX: 00007fd31246c6c0 RCX: 00007fd31155ed8e [ 2637.343569][ T9903] RDX: 000000000000000f RSI: 00007fd31246c0a0 RDI: 000000000000000b [ 2637.351576][ T9903] RBP: 00007fd31246c090 R08: 0000000000000000 R09: 0000000000000000 [ 2637.359584][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2637.367593][ T9903] R13: 00007fd311826038 R14: 00007fd311825fa0 R15: 00007fffd923b1e8 [ 2637.375625][ T9903] [ 2639.202710][ T9936] rxe_eth0 speed is unknown, defaulting to 1000 [ 2640.592066][ T9966] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.11245'. [ 2641.889930][ T9994] FAULT_INJECTION: forcing a failure. [ 2641.889930][ T9994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2641.984367][ T9994] CPU: 0 PID: 9994 Comm: syz.4.11254 Not tainted syzkaller #0 [ 2641.991920][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2642.002016][ T9994] Call Trace: [ 2642.005337][ T9994] [ 2642.008312][ T9994] dump_stack_lvl+0x188/0x24e [ 2642.013041][ T9994] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2642.019252][ T9994] ? show_regs_print_info+0x12/0x12 [ 2642.024512][ T9994] ? load_image+0x410/0x410 [ 2642.029071][ T9994] should_fail_ex+0x390/0x4c0 [ 2642.033801][ T9994] _copy_from_user+0x2c/0x170 [ 2642.038532][ T9994] ___sys_sendmsg+0x1c3/0x360 [ 2642.043252][ T9994] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2642.049039][ T9994] ? __sys_sendmsg+0x2a0/0x2a0 [ 2642.053857][ T9994] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2642.059903][ T9994] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2642.066126][ T9994] ? __fdget+0x17c/0x200 [ 2642.070424][ T9994] ? __fdget+0x197/0x200 [ 2642.074727][ T9994] __se_sys_sendmsg+0x1c3/0x2b0 [ 2642.079630][ T9994] ? __x64_sys_sendmsg+0x80/0x80 [ 2642.084633][ T9994] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2642.090584][ T9994] do_syscall_64+0x4c/0xa0 [ 2642.095053][ T9994] ? clear_bhb_loop+0x60/0xb0 [ 2642.099760][ T9994] ? clear_bhb_loop+0x60/0xb0 [ 2642.104464][ T9994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2642.110478][ T9994] RIP: 0033:0x7fd31159e559 [ 2642.114958][ T9994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2642.134589][ T9994] RSP: 002b:00007fd31246c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2642.143031][ T9994] RAX: ffffffffffffffda RBX: 00007fd311825fa0 RCX: 00007fd31159e559 [ 2642.151024][ T9994] RDX: 0000000020040040 RSI: 0000200000002c00 RDI: 0000000000000004 [ 2642.159014][ T9994] RBP: 00007fd31246c090 R08: 0000000000000000 R09: 0000000000000000 [ 2642.167004][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2642.174993][ T9994] R13: 00007fd311826038 R14: 00007fd311825fa0 R15: 00007fffd923b1e8 [ 2642.183004][ T9994] [ 2643.026260][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11261'. [ 2644.115396][T10033] netlink: 'syz.4.11266': attribute type 10 has an invalid length. [ 2645.417009][T10033] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.443263][T10033] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.459687][T10033] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.470170][T10033] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2647.045147][T10067] netlink: 'syz.3.11275': attribute type 10 has an invalid length. [ 2647.053304][T10067] netlink: 'syz.3.11275': attribute type 10 has an invalid length. [ 2647.067613][T10067] netlink: 'syz.3.11275': attribute type 10 has an invalid length. [ 2647.103443][T10067] netlink: 'syz.3.11275': attribute type 10 has an invalid length. [ 2647.155896][T10067] netlink: 'syz.3.11275': attribute type 10 has an invalid length. [ 2647.200852][T10067] netlink: 'syz.3.11275': attribute type 10 has an invalid length. [ 2649.643027][T10127] delete_channel: no stack [ 2651.790352][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.804490][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.620383][T10148] netlink: 'syz.1.11299': attribute type 10 has an invalid length. [ 2652.628534][T10148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11299'. [ 2652.637763][T10148] device dummy0 entered promiscuous mode [ 2652.644344][T10148] bridge0: port 3(dummy0) entered blocking state [ 2652.650885][T10148] bridge0: port 3(dummy0) entered disabled state [ 2652.659019][T10148] bridge0: port 3(dummy0) entered blocking state [ 2652.665632][T10148] bridge0: port 3(dummy0) entered forwarding state [ 2652.681113][T10157] rxe_eth0 speed is unknown, defaulting to 1000 [ 2653.723541][T10197] netlink: 'syz.0.11316': attribute type 19 has an invalid length. [ 2653.742046][T10197] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11316'. [ 2654.025999][T10206] netlink: 'syz.0.11320': attribute type 27 has an invalid length. [ 2654.052169][T10206] netlink: 'syz.0.11320': attribute type 25 has an invalid length. [ 2654.095447][T10212] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.11319'. [ 2655.000659][T10204] device syzkaller0 entered promiscuous mode [ 2658.903236][T10232] netlink: 'syz.4.11318': attribute type 10 has an invalid length. [ 2660.349339][T10317] netlink: 'syz.4.11349': attribute type 21 has an invalid length. [ 2660.367842][T10317] netlink: 'syz.4.11349': attribute type 3 has an invalid length. [ 2660.388374][T10317] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11349'. [ 2661.382269][T10355] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11364'. [ 2661.446299][T10355] tc_dump_action: action bad kind [ 2662.278951][T10368] netlink: 'syz.3.11369': attribute type 10 has an invalid length. [ 2662.527486][T10374] FAULT_INJECTION: forcing a failure. [ 2662.527486][T10374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2662.569294][T10374] CPU: 1 PID: 10374 Comm: syz.5.11370 Not tainted syzkaller #0 [ 2662.576924][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2662.587022][T10374] Call Trace: [ 2662.590349][T10374] [ 2662.593318][T10374] dump_stack_lvl+0x188/0x24e [ 2662.598062][T10374] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2662.604274][T10374] ? show_regs_print_info+0x12/0x12 [ 2662.609528][T10374] ? load_image+0x410/0x410 [ 2662.614094][T10374] should_fail_ex+0x390/0x4c0 [ 2662.618834][T10374] _copy_from_user+0x2c/0x170 [ 2662.623555][T10374] iovec_from_user+0x143/0x360 [ 2662.628374][T10374] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2662.634582][T10374] __import_iovec+0x6c/0x510 [ 2662.639231][T10374] ? import_iovec+0x55/0xa0 [ 2662.643799][T10374] import_iovec+0x6f/0xa0 [ 2662.648189][T10374] ___sys_sendmsg+0x252/0x360 [ 2662.652919][T10374] ? __sys_sendmsg+0x2a0/0x2a0 [ 2662.657816][T10374] __se_sys_sendmsg+0x1c3/0x2b0 [ 2662.662722][T10374] ? __x64_sys_sendmsg+0x80/0x80 [ 2662.667739][T10374] do_syscall_64+0x4c/0xa0 [ 2662.672205][T10374] ? clear_bhb_loop+0x60/0xb0 [ 2662.676927][T10374] ? clear_bhb_loop+0x60/0xb0 [ 2662.681645][T10374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2662.687588][T10374] RIP: 0033:0x7f770fb9e559 [ 2662.692044][T10374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2662.711717][T10374] RSP: 002b:00007f77109cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2662.720175][T10374] RAX: ffffffffffffffda RBX: 00007f770fe25fa0 RCX: 00007f770fb9e559 [ 2662.728190][T10374] RDX: 0000000020040040 RSI: 0000200000002c00 RDI: 0000000000000004 [ 2662.736211][T10374] RBP: 00007f77109cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2662.744236][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2662.752249][T10374] R13: 00007f770fe26038 R14: 00007f770fe25fa0 R15: 00007fff47163568 [ 2662.760625][T10374] [ 2662.870165][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11374'. [ 2664.486851][T10413] netlink: 'syz.3.11380': attribute type 10 has an invalid length. [ 2664.596470][T10416] netlink: 'syz.5.11385': attribute type 21 has an invalid length. [ 2664.658217][T10416] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11385'. [ 2664.682302][T10416] netlink: 'syz.5.11385': attribute type 5 has an invalid length. [ 2664.693171][T10416] netlink: 'syz.5.11385': attribute type 6 has an invalid length. [ 2664.704959][T10416] netlink: 3 bytes leftover after parsing attributes in process `syz.5.11385'. [ 2664.749076][T10419] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 2664.829999][T10415] syzkaller1: tun_chr_ioctl cmd 1074025688 [ 2668.024955][T10487] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.11405'. [ 2669.959269][T10529] netlink: 'syz.4.11421': attribute type 28 has an invalid length. [ 2670.430375][T10543] netlink: 'syz.0.11427': attribute type 19 has an invalid length. [ 2670.439960][T10543] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11427'. [ 2670.760521][T10554] netlink: 'syz.4.11432': attribute type 3 has an invalid length. [ 2670.808386][T10554] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11432'. [ 2672.091585][T10586] netlink: 'syz.4.11442': attribute type 6 has an invalid length. [ 2672.130375][T10586] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11442'. [ 2672.435505][T10588] netlink: 'syz.4.11442': attribute type 10 has an invalid length. [ 2673.063531][T10597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.112535][T10597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.177146][T10597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.189610][T10597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.278710][T10602] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11447'. [ 2675.527854][T10659] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.11460'. [ 2675.559386][T10660] netlink: 'syz.4.11463': attribute type 10 has an invalid length. [ 2675.612415][T10660] device vxcan1 entered promiscuous mode [ 2675.640448][T10660] team0: Device vxcan1 is of different type [ 2676.023331][T10677] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.11471'. [ 2676.095561][T10681] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2676.147047][T10677] netlink: zone id is out of range [ 2676.161441][T10677] netlink: get zone limit has 8 unknown bytes [ 2676.256941][T10685] netlink: 'syz.3.11471': attribute type 29 has an invalid length. [ 2676.359666][T10685] netlink: 'syz.3.11471': attribute type 29 has an invalid length. [ 2676.452870][T10685] netlink: 'syz.3.11471': attribute type 29 has an invalid length. [ 2676.549046][T10685] netlink: 'syz.3.11471': attribute type 29 has an invalid length. [ 2676.597657][T10685] netlink: 'syz.3.11471': attribute type 29 has an invalid length. [ 2676.652375][T10685] netlink: 'syz.3.11471': attribute type 29 has an invalid length. [ 2676.703222][T10685] netlink: 'syz.3.11471': attribute type 29 has an invalid length. [ 2676.750752][T10685] netlink: 'syz.3.11471': attribute type 29 has an invalid length. [ 2676.794930][T10685] netlink: 'syz.3.11471': attribute type 29 has an invalid length. [ 2677.400614][T10706] FAULT_INJECTION: forcing a failure. [ 2677.400614][T10706] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.454324][T10706] CPU: 0 PID: 10706 Comm: syz.0.11480 Not tainted syzkaller #0 [ 2677.461950][T10706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2677.472050][T10706] Call Trace: [ 2677.475370][T10706] [ 2677.478324][T10706] dump_stack_lvl+0x188/0x24e [ 2677.483059][T10706] ? show_regs_print_info+0x12/0x12 [ 2677.488288][T10706] ? lockdep_hardirqs_on+0x94/0x140 [ 2677.493520][T10706] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2677.499714][T10706] should_fail_ex+0x390/0x4c0 [ 2677.504515][T10706] should_failslab+0x5/0x20 [ 2677.509038][T10706] slab_pre_alloc_hook+0x59/0x300 [ 2677.514103][T10706] kmem_cache_alloc_node+0x5a/0x310 [ 2677.519334][T10706] ? __alloc_skb+0xf9/0x7d0 [ 2677.523872][T10706] __alloc_skb+0xf9/0x7d0 [ 2677.528231][T10706] netlink_sendmsg+0x654/0xbd0 [ 2677.533039][T10706] ? netlink_getsockopt+0x550/0x550 [ 2677.538267][T10706] ? apparmor_socket_sendmsg+0x16c/0x330 [ 2677.543937][T10706] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2677.549252][T10706] ? security_socket_sendmsg+0x7c/0xa0 [ 2677.554752][T10706] ? netlink_getsockopt+0x550/0x550 [ 2677.560003][T10706] ____sys_sendmsg+0x5ed/0x9a0 [ 2677.564800][T10706] ? __import_iovec+0x2d5/0x510 [ 2677.569690][T10706] ? __sys_sendmsg_sock+0x30/0x30 [ 2677.574739][T10706] ? __import_iovec+0x306/0x510 [ 2677.579625][T10706] ? import_iovec+0x6f/0xa0 [ 2677.584173][T10706] ___sys_sendmsg+0x2a2/0x360 [ 2677.588881][T10706] ? __sys_sendmsg+0x2a0/0x2a0 [ 2677.593712][T10706] __se_sys_sendmsg+0x1c3/0x2b0 [ 2677.598589][T10706] ? ct_nmi_exit+0x145/0x1c0 [ 2677.603215][T10706] ? __x64_sys_sendmsg+0x80/0x80 [ 2677.608188][T10706] ? lockdep_hardirqs_on+0x94/0x140 [ 2677.613419][T10706] do_syscall_64+0x4c/0xa0 [ 2677.617865][T10706] ? clear_bhb_loop+0x60/0xb0 [ 2677.622595][T10706] ? clear_bhb_loop+0x60/0xb0 [ 2677.627309][T10706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2677.633230][T10706] RIP: 0033:0x7fd8f779e559 [ 2677.637671][T10706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2677.657328][T10706] RSP: 002b:00007fd8f8672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2677.666206][T10706] RAX: ffffffffffffffda RBX: 00007fd8f7a25fa0 RCX: 00007fd8f779e559 [ 2677.674287][T10706] RDX: 0000000020040040 RSI: 0000200000002c00 RDI: 0000000000000004 [ 2677.682287][T10706] RBP: 00007fd8f8672090 R08: 0000000000000000 R09: 0000000000000000 [ 2677.690279][T10706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2677.698267][T10706] R13: 00007fd8f7a26038 R14: 00007fd8f7a25fa0 R15: 00007ffdd86b9cf8 [ 2677.706284][T10706] [ 2677.781960][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11481'. [ 2679.568571][T10743] device 0 entered promiscuous mode [ 2680.719567][T10755] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2680.837802][T10755] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2680.962425][T10755] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2681.044833][T10755] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2681.674950][T10782] validate_nla: 2 callbacks suppressed [ 2681.674969][T10782] netlink: 'syz.5.11507': attribute type 1 has an invalid length. [ 2681.822887][T10782] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.11507'. [ 2682.200848][T10791] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.11512'. [ 2682.402148][T10793] netlink: 'syz.1.11512': attribute type 10 has an invalid length. [ 2682.720025][T10793] team0 (unregistering): Port device team_slave_0 removed [ 2682.809429][T10793] team0 (unregistering): Port device team_slave_1 removed [ 2682.846181][T10793] team0 (unregistering): Port device wlan1 removed [ 2682.893666][T10793] team0 (unregistering): Port device geneve1 removed [ 2683.971278][T10837] netlink: 'syz.0.11529': attribute type 29 has an invalid length. [ 2684.512753][T10848] netlink: 'syz.0.11533': attribute type 19 has an invalid length. [ 2684.533760][T10848] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11533'. [ 2684.605885][T10850] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.11534'. [ 2685.392394][T10873] delete_channel: no stack [ 2689.422372][T10901] device bridge0 entered promiscuous mode [ 2690.015879][T10907] netlink: 'syz.0.11548': attribute type 10 has an invalid length. [ 2690.055998][T10907] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2690.115810][T10907] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2690.226318][T10907] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2690.279661][T10907] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2692.026256][T10957] netlink: 'syz.5.11566': attribute type 21 has an invalid length. [ 2693.000185][T10978] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11578'. [ 2693.020036][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11578'. [ 2694.612599][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11587'. [ 2697.907772][T11082] bridge0: port 4(team0) entered blocking state [ 2697.932919][T11082] bridge0: port 4(team0) entered disabled state [ 2697.985418][T11082] device team0 entered promiscuous mode [ 2697.991053][T11082] device team_slave_0 entered promiscuous mode [ 2698.085052][T11082] device team_slave_1 entered promiscuous mode [ 2698.103515][T11082] device geneve1 entered promiscuous mode [ 2698.135135][T11082] bridge0: port 4(team0) entered blocking state [ 2698.141694][T11082] bridge0: port 4(team0) entered forwarding state [ 2698.501896][T11099] netlink: 'syz.4.11611': attribute type 10 has an invalid length. [ 2698.637529][T11099] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.749486][T11106] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.11618'. [ 2698.749719][T11099] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.768839][T11106] netlink: zone id is out of range [ 2698.778838][T11106] netlink: zone id is out of range [ 2698.788982][T11106] netlink: zone id is out of range [ 2698.799354][T11106] netlink: zone id is out of range [ 2698.809290][T11106] netlink: zone id is out of range [ 2698.834174][T11106] netlink: zone id is out of range [ 2698.844264][T11106] netlink: zone id is out of range [ 2698.887564][T11106] netlink: zone id is out of range [ 2698.892908][T11106] netlink: zone id is out of range [ 2698.938278][T11106] netlink: zone id is out of range [ 2698.956072][T11099] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.014076][T11099] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2700.799610][T11144] netlink: 'syz.1.11633': attribute type 10 has an invalid length. [ 2700.833875][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11633'. [ 2701.671476][T11171] netlink: 'syz.0.11641': attribute type 19 has an invalid length. [ 2701.693222][T11171] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11641'. [ 2701.695846][T11168] netlink: 'syz.5.11639': attribute type 29 has an invalid length. [ 2701.827356][T11168] netlink: 'syz.5.11639': attribute type 29 has an invalid length. [ 2701.904563][T11173] netlink: 'syz.5.11639': attribute type 29 has an invalid length. [ 2702.395178][T11180] rxe_eth0 speed is unknown, defaulting to 1000 [ 2708.101444][T11257] netlink: 'syz.1.11664': attribute type 10 has an invalid length. [ 2708.827095][T11265] netlink: 'syz.3.11670': attribute type 28 has an invalid length. [ 2708.885671][T11265] netlink: 'syz.3.11670': attribute type 4 has an invalid length. [ 2708.914278][T11268] netlink: 'syz.3.11670': attribute type 29 has an invalid length. [ 2708.943635][T11265] netlink: 136 bytes leftover after parsing attributes in process `syz.3.11670'. [ 2709.032976][T11268] netlink: 'syz.3.11670': attribute type 29 has an invalid length. [ 2709.080737][T11274] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11673'. [ 2709.110758][T11273] netlink: 'syz.3.11670': attribute type 29 has an invalid length. [ 2709.886239][T11294] netlink: 'syz.3.11681': attribute type 3 has an invalid length. [ 2709.905179][T11294] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11681'. [ 2710.136197][T11305] netlink: 'syz.0.11685': attribute type 2 has an invalid length. [ 2710.228619][T11305] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11685'. [ 2710.269885][T11308] FAULT_INJECTION: forcing a failure. [ 2710.269885][T11308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2710.304532][T11308] CPU: 0 PID: 11308 Comm: syz.1.11686 Not tainted syzkaller #0 [ 2710.312167][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2710.322277][T11308] Call Trace: [ 2710.325608][T11308] [ 2710.328581][T11308] dump_stack_lvl+0x188/0x24e [ 2710.333336][T11308] ? show_regs_print_info+0x12/0x12 [ 2710.338607][T11308] ? load_image+0x410/0x410 [ 2710.343348][T11308] ? __might_fault+0xa6/0x120 [ 2710.348107][T11308] should_fail_ex+0x390/0x4c0 [ 2710.352861][T11308] copyin+0x1b/0x120 [ 2710.356821][T11308] _copy_from_iter+0x447/0x1130 [ 2710.361766][T11308] ? copyout_mc+0x110/0x110 [ 2710.366338][T11308] ? __check_object_size+0x4f6/0xa70 [ 2710.371687][T11308] ? _copy_from_iter+0x8/0x1130 [ 2710.376612][T11308] netlink_sendmsg+0x755/0xbd0 [ 2710.381449][T11308] ? netlink_getsockopt+0x550/0x550 [ 2710.386717][T11308] ? apparmor_socket_sendmsg+0x16c/0x330 [ 2710.392438][T11308] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2710.397783][T11308] ? security_socket_sendmsg+0x7c/0xa0 [ 2710.403324][T11308] ? netlink_getsockopt+0x550/0x550 [ 2710.408586][T11308] ____sys_sendmsg+0x5ed/0x9a0 [ 2710.413417][T11308] ? __sys_sendmsg_sock+0x30/0x30 [ 2710.418495][T11308] ? __import_iovec+0x306/0x510 [ 2710.423430][T11308] ? import_iovec+0x6f/0xa0 [ 2710.428029][T11308] ___sys_sendmsg+0x2a2/0x360 [ 2710.432782][T11308] ? __sys_sendmsg+0x2a0/0x2a0 [ 2710.437653][T11308] __se_sys_sendmsg+0x1c3/0x2b0 [ 2710.442562][T11308] ? __x64_sys_sendmsg+0x80/0x80 [ 2710.447566][T11308] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2710.453514][T11308] do_syscall_64+0x4c/0xa0 [ 2710.457975][T11308] ? clear_bhb_loop+0x60/0xb0 [ 2710.462705][T11308] ? clear_bhb_loop+0x60/0xb0 [ 2710.467520][T11308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2710.473470][T11308] RIP: 0033:0x7f4df5b9e559 [ 2710.477924][T11308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2710.497578][T11308] RSP: 002b:00007f4df69f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2710.506053][T11308] RAX: ffffffffffffffda RBX: 00007f4df5e25fa0 RCX: 00007f4df5b9e559 [ 2710.514067][T11308] RDX: 0000000020040040 RSI: 0000200000002c00 RDI: 0000000000000004 [ 2710.522078][T11308] RBP: 00007f4df69f8090 R08: 0000000000000000 R09: 0000000000000000 [ 2710.530092][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2710.538097][T11308] R13: 00007f4df5e26038 R14: 00007f4df5e25fa0 R15: 00007ffc0871c7e8 [ 2710.546110][T11308] [ 2710.610328][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11690'. [ 2710.626035][T11313] netlink: 'syz.5.11688': attribute type 21 has an invalid length. [ 2711.805010][T11351] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11700'. [ 2713.227755][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.234202][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.877164][T11397] netlink: 'syz.1.11718': attribute type 10 has an invalid length. [ 2714.931205][T11413] netlink: 'syz.0.11722': attribute type 46 has an invalid length. [ 2714.954664][T11411] netlink: 'syz.1.11721': attribute type 21 has an invalid length. [ 2715.006024][T11413] netlink: 'syz.0.11722': attribute type 46 has an invalid length. [ 2715.134580][T11416] device syzkaller0 entered promiscuous mode [ 2715.594429][T11429] netlink: 'syz.0.11727': attribute type 10 has an invalid length. [ 2715.612247][T11429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11727'. [ 2716.625863][T11451] netlink: 'syz.3.11734': attribute type 41 has an invalid length. Stopping sshd: [ 2716.880229][T11457] netlink: 'syz.5.11737': attribute type 19 has an invalid length. [ 2716.960848][T11457] netlink: 55 bytes leftover after parsing attributes in process `syz.5.11737'. stopped /usr/sbin/sshd (pid 4030) OK [ 2717.279925][T11467] netlink: 'syz.5.11738': attribute type 46 has an invalid length. [ 2717.319587][T11467] netlink: 'syz.5.11738': attribute type 46 has an invalid length. [ 2717.381679][T11469] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.11739'. Stopping crond: stopped /usr/sbin/crond (pid 4015) OK [ 2717.843293][T11490] FAULT_INJECTION: forcing a failure. [ 2717.843293][T11490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2717.919952][T11492] netlink: 'syz.5.11745': attribute type 1 has an invalid length. [ 2717.958827][T11490] CPU: 0 PID: 11490 Comm: syz.4.11744 Not tainted syzkaller #0 [ 2717.966482][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2717.976628][T11490] Call Trace: [ 2717.979988][T11490] [ 2717.982984][T11490] dump_stack_lvl+0x188/0x24e [ 2717.987751][T11490] ? show_regs_print_info+0x12/0x12 [ 2717.993045][T11490] ? load_image+0x410/0x410 [ 2717.997652][T11490] ? __lock_acquire+0x7ea0/0x7ea0 [ 2718.002761][T11490] ? __lock_acquire+0x7ea0/0x7ea0 [ 2718.007893][T11490] should_fail_ex+0x390/0x4c0 [ 2718.012661][T11490] _copy_from_user+0x2c/0x170 [ 2718.017413][T11490] perf_copy_attr+0x177/0x840 [ 2718.022225][T11490] __se_sys_perf_event_open+0xf5/0x1ec0 [ 2718.027839][T11490] ? __fget_files+0x3fc/0x460 [ 2718.032611][T11490] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2718.038384][T11490] ? lockdep_hardirqs_on+0x94/0x140 [ 2718.043639][T11490] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 2718.049349][T11490] do_syscall_64+0x4c/0xa0 [ 2718.053816][T11490] ? clear_bhb_loop+0x60/0xb0 [ 2718.058541][T11490] ? clear_bhb_loop+0x60/0xb0 [ 2718.063314][T11490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2718.069263][T11490] RIP: 0033:0x7fd31159e559 [ 2718.073752][T11490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2718.093432][T11490] RSP: 002b:00007fd31244b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2718.101930][T11490] RAX: ffffffffffffffda RBX: 00007fd311826090 RCX: 00007fd31159e559 [ 2718.109972][T11490] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000001140 [ 2718.118024][T11490] RBP: 00007fd31244b090 R08: 0000000000000000 R09: 0000000000000000 [ 2718.126057][T11490] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2718.134091][T11490] R13: 00007fd311826128 R14: 00007fd311826090 R15: 00007fffd923b1e8 [ 2718.142157][T11490] [ 2718.146861][T11492] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.11745'. [ 2718.207102][T11486] rxe_eth0 speed is unknown, defaulting to 1000 [ 2718.547739][T11505] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11749'. Stopping dhcpcd... [ 2718.909029][T11481] rxe_eth0 speed is unknown, defaulting to 1000 stopped /sbin/dhcpcd (pid 3934) Stopping network: [ 2720.037299][T11537] validate_nla: 1 callbacks suppressed [ 2720.037317][T11537] netlink: 'syz.3.11753': attribute type 46 has an invalid length. [ 2720.084600][T11536] netlink: 'syz.0.11755': attribute type 39 has an invalid length. [ 2720.119669][T11537] netlink: 'syz.3.11753': attribute type 46 has an invalid length. [ 2720.224534][T11541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.233349][T11541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.284096][T11541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.302004][T11541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.779259][T11553] netlink: 'syz.4.11760': attribute type 10 has an invalid length. [ 2720.814244][T11553] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11760'. OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3621) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 2727.232625][ T4668] device syz_tun left promiscuous mode [ 2727.240041][ T4668] : port 1(syz_tun) entered disabled state [ 2727.521050][ T8475] bond0: (slave netdevsim0): Releasing backup interface [ 2728.211474][T11607] kvm: exiting hardware virtualization [ 2728.218757][T11607] smc: removing ib device rxe0 [ 2728.234914][T11607] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2728.261297][T11607] ACPI: PM: Preparing to enter system sleep state S5 [ 2728.275598][T11607] reboot: Power down serialport: VM disconnected.