last executing test programs: 6.788307133s ago: executing program 4 (id=9883): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240)) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000500), 0x0}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) close(r7) 5.549542364s ago: executing program 4 (id=9891): r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x1}, 0x8080, 0x0, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000d76d261800000000ffffffff9500000000000000182b0000", @ANYRES32, @ANYBLOB="0000000005000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0069e5986069faeb2d6e47e5027a62ab40236a1d818979a9196599af333c7cd536191b432d0222"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x1a0a51d48f904dc4, 0x0) setsockopt$sock_attach_bpf(r3, 0x11, 0x68, &(0x7f0000000100), 0x120) close(r3) socket$kcm(0x25, 0x5, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x1c, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40a, 0x0, 0x0, 0x0, 0xfffff988}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x52e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0xc, 0x0, 0x1, 0x10, 0x8000000000000012}]}, &(0x7f0000000680)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41080, 0x25, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x10000002, 0x1, 0x7, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x0, 0x3, 0x7, 0xb}, {0x0, 0x1000001, 0x7, 0xc}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000800000040000000030000004100", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000540)=""/112) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000940)="8198e2b50b08a6c740f9596a297d776d6eac21e40c7542653d2d2cad02d196d45767fd0a2d5e0b6710c773c92dd4f80847c842116a9db1ee625f4975524fc94276658c465010ba1618ceb8cd70a808d364a934d44b11be18d049fd8f0519ebe2d6fa756abbf5888c64b0095820f2ac2bf30983", 0x0, r7}, 0x38) socket$kcm(0x11, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)=r8}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, r6, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 5.31470466s ago: executing program 0 (id=9894): r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x8, 0x2, 0x10, 0x0, 0x0, 0x401, 0x818, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x10}, 0x1098a0, 0x7fffffff, 0x4, 0x8, 0x5, 0x3, 0x200, 0x0, 0x7a}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x2, 0x40, 0x0, 0x100, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb3b, 0x4, @perf_bp={&(0x7f00000002c0), 0x4}, 0xa0, 0x2, 0x4, 0x6, 0xffffffffffffffff, 0xe17, 0x7, 0x0, 0x4ccf, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc202, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0084e956b900203715be370c040180100045000000", 0x2e}, {&(0x7f0000000a40)}], 0x2}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) (fail_nth: 2) 4.301450975s ago: executing program 0 (id=9906): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01341090005000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(r0, &(0x7f0000001300)={&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000100)="1516fcdf278a1ff4d557b36d80931be4612b9c7bb2221c5d8508a28aba2e267c6732bb2afa7bf51da7b28c872774d617ea6d985af21c588a3c337c8e16544d270099e63975a0386a79305a72969bdf58ea74ef38d5729bdb369d1035b58b7589972dc2e5eaeb79e7e2a99f69e0fa2f8a11fee2694547ebcaf2c9a3461f3e8b5f7827dea7b6ee155b1ac61769c608ab33b062ee0dc32913220a57af9d0e64fa5e7daf795df33d9598", 0xa8}, {&(0x7f00000001c0)="3ac0168e20aeb8ff6c5360add2b049ad3df675ee7d8f14d473b3de37bb51a818f6528672604962222f11a8a613ddf79230c9a397839b4c76edd65264f8894af61776d710fc1976dbf1b53cf0ff82f718b15646f784d1ae94ff5be0e2dcf0f145cad9cf2b73", 0x65}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="0a254573724eeafbe3f17e1800949b81a60a84faa044af5931fc02e5a69360eb2d46e3873b3b91a7912339050deea949d85b9ebf666bf2bd60a3bf7561b4524a18040fad7d9f7ff35483f820bd9c11bd71a38980fe9ba6c575adb50ddfe3a14c1a918852fd127880ebc89b1682066b56fa3e34045cbd06e0d1", 0x79}], 0x4}, 0x40000) 3.870446105s ago: executing program 4 (id=9898): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x300}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.793380917s ago: executing program 3 (id=9900): r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x8, 0x2, 0x10, 0x0, 0x0, 0x401, 0x818, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x10}, 0x1098a0, 0x7fffffff, 0x4, 0x8, 0x5, 0x3, 0x200, 0x0, 0x7a}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x2, 0x40, 0x0, 0x100, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb3c, 0x4, @perf_bp={&(0x7f00000001c0), 0x5}, 0xa0, 0x2, 0x4, 0x6, 0x0, 0xe17, 0x7, 0x0, 0x4ccf, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r2 = getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000000, 0xfffffffffffffeba, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe4, 0x1, 0xd, 0xc, 0x0, 0xfffffffffffffffe, 0xc4001, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0x5, 0xb}, 0x0, 0x1, 0x3, 0x0, 0x81, 0x5, 0x9, 0x0, 0x1, 0x0, 0xcf}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r3], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000600)={&(0x7f0000000440)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/233, 0xe9}, 0x2000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x9, 0x8, 0xb, 0x0, 0x0, 0x3c, 0xc202, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000003c0)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000140)=r1) socketpair(0x21, 0x3, 0x9, &(0x7f0000000200)) perf_event_open(0x0, r2, 0x3, r0, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0084e956b900203715be370c040180100045000000", 0x2e}, {&(0x7f0000000a40)}], 0x2}, 0x0) 3.485427865s ago: executing program 4 (id=9902): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000003000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 3.094010554s ago: executing program 2 (id=9904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000007377030a89079f03b18000071c1c0300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.685134264s ago: executing program 3 (id=9905): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x94}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000004c0)=""/141}, 0x80) 2.617474795s ago: executing program 3 (id=9907): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.401479321s ago: executing program 2 (id=9908): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="3000000019007f089ea6690ca4dc04f11c672274119dd27d616f7efd9a0a2ff3b91a90dfc950244cfea8d0898789b61c", 0x30}], 0x1}, 0x4040004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES64=0x0, @ANYBLOB="7cec8b55a9c2c9d2327c60f2a6e4727c4a9a8866cf60092e188a2d572563080d8e18e1477a88a91fcf74cc9b69ef02a2123a1547839cfc9981107ca4182329998d4e4cc0ee66d206dd29eb9aa92b95bd4752b16566da853e3d4f6323c7def5560070d93bcca0ef7c2bf0ab18b6c6b34af4a8e6c0a06b456f0c727f9e1a16e0f0a36d459469ac9f6d0d248740ecf5a00e9f", @ANYRESHEX=r1, @ANYBLOB="73c3d6a7bc5b822a14ae3dc0ee3b9281569df229c177929058010f9d210ebc404420e446960a150939a8cce690864e66fec059591b35e6c90504a95b53e319154de22c1b0a94642569a2986ad713a713bb948f0dbe20", @ANYRES64=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x3, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1114dc49d68ae72c}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12000) recvmsg$kcm(r6, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/55, 0x7d8}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b3cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9411a36324ea1790e834c", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r12 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r12, 0x0, 0x0}, 0x20) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.992367511s ago: executing program 3 (id=9909): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81", 0xa}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.722159778s ago: executing program 2 (id=9910): r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x1}, 0x8080, 0x0, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000d76d261800000000ffffffff9500000000000000182b0000", @ANYRES32, @ANYBLOB="0000000005000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0069e5986069faeb2d6e47e5027a62ab40236a1d818979a9196599af333c7cd536191b432d0222"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x1a0a51d48f904dc4, 0x0) setsockopt$sock_attach_bpf(r3, 0x11, 0x68, &(0x7f0000000100), 0x120) close(r3) socket$kcm(0x25, 0x5, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x1c, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40a, 0x0, 0x0, 0x0, 0xfffff988}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x52e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0xc, 0x0, 0x1, 0x10, 0x8000000000000012}]}, &(0x7f0000000680)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41080, 0x25, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x10000002, 0x1, 0x7, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x0, 0x3, 0x7, 0xb}, {0x0, 0x1000001, 0x7, 0xc}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000800000040000000030000004100", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000540)=""/112) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000940)="8198e2b50b08a6c740f9596a297d776d6eac21e40c7542653d2d2cad02d196d45767fd0a2d5e0b6710c773c92dd4f80847c842116a9db1ee625f4975524fc94276658c465010ba1618ceb8cd70a808d364a934d44b11be18d049fd8f0519ebe2d6fa756abbf5888c64b0095820f2ac2bf30983", 0x0, r7}, 0x38) socket$kcm(0x11, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)=r8}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, r6, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 1.592437211s ago: executing program 4 (id=9911): socket$kcm(0xa, 0x7, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae, 0x2, @perf_config_ext={0x0, 0x8}, 0x10d51d, 0xb6a0, 0x0, 0x0, 0x4, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES8=r3], 0x9a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x40000000) close(r5) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000026000b3b1de8db26fc15000000000000", 0x14}], 0x1}, 0x4080) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="186b0000040000000000000007000000185900000e000000000000000000000018000000f8ffffff00000000ff0f000018390000050000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="000000000000d0968b5100000800000085000000a5000000"], &(0x7f00000008c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0x10, 0x2, 0x598}, 0x10, 0x28915, 0xffffffffffffffff, 0x6, &(0x7f0000000d80)=[r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, r0, r2], &(0x7f0000000dc0)=[{0x4, 0x5, 0x10, 0xa}, {0x1, 0x3, 0x7, 0xc}, {0x3, 0x2, 0xf, 0x7}, {0x1, 0x5, 0x10, 0x1}, {0x2, 0x1, 0x0, 0x1}, {0x1, 0x3, 0x10, 0x2}], 0x10, 0x12000000}, 0x94) close(0xffffffffffffffff) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0xb701, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r7, r7, 0x4, r7}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r9, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000081000000010300000000000000880000", @ANYRESOCT, @ANYBLOB="0600"/20, @ANYRES32=r7, @ANYRES64=r10, @ANYBLOB="00000000010000000100"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50) 1.560629252s ago: executing program 0 (id=9912): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) 1.319603847s ago: executing program 0 (id=9913): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x1, 0xfffff01c}, {0x6, 0x0, 0x6e, 0x2}]}) 1.028697485s ago: executing program 1 (id=9914): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 1.027822875s ago: executing program 3 (id=9915): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 998.426625ms ago: executing program 2 (id=9916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x30, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 940.378147ms ago: executing program 0 (id=9917): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00'], 0x48) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000, 0x0, 0x1b, &(0x7f0000000040), &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dc", 0x0, 0x3}, 0x50) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000befd5022dffffffff9506a902d3", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f00000002c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4020, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c810000000000002020207b1af8ff00000000bfa100"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, r1}, 0xfc9d) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40002000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="060000000400c900020000000700008d174ddb48", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003400000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480), 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x6, 0xfffffffe}, {0x20}, {0xd34, 0x0, 0x1, 0x7}, {0xe, 0xfc, 0x28, 0x8001}, {0xffff, 0xfc, 0x5, 0xffffffff}]}) 914.347667ms ago: executing program 1 (id=9918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000007377030a89079f03b18000071c1c0300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 827.07354ms ago: executing program 2 (id=9919): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 601.832955ms ago: executing program 1 (id=9920): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x3f, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x24, 0x8, 0x0, 0x0, 0xb001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe966}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x94) 497.984978ms ago: executing program 4 (id=9921): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="3000000019007f089ea6690ca4dc04f11c672274119dd27d616f7efd9a0a2ff3b91a90dfc950244cfea8d0898789b61c", 0x30}], 0x1}, 0x4040004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES64=0x0, @ANYBLOB="7cec8b55a9c2c9d2327c60f2a6e4727c4a9a8866cf60092e188a2d572563080d8e18e1477a88a91fcf74cc9b69ef02a2123a1547839cfc9981107ca4182329998d4e4cc0ee66d206dd29eb9aa92b95bd4752b16566da853e3d4f6323c7def5560070d93bcca0ef7c2bf0ab18b6c6b34af4a8e6c0a06b456f0c727f9e1a16e0f0a36d459469ac9f6d0d248740ecf5a00e9f", @ANYRESHEX=r1, @ANYBLOB="73c3d6a7bc5b822a14ae3dc0ee3b9281569df229c177929058010f9d210ebc404420e446960a150939a8cce690864e66fec059591b35e6c90504a95b53e319154de22c1b0a94642569a2986ad713a713bb948f0dbe20", @ANYRES64=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x3, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1114dc49d68ae72c}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12000) recvmsg$kcm(r6, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/55, 0x7d8}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b3cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9411a36324ea1790e834c", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r12 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r12, 0x0, 0x0}, 0x20) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 496.838858ms ago: executing program 2 (id=9931): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, 0x4040000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020004006c834e829ca2ded20100000000243c44dc99a29a51296f9d0e2f04c56c5916be20d0d06301b64fdcd6c83a61b1c58439cd531ff90706236f5f506440752110260cfe9b2fb9606f7995acf70dc65f5c26e01ec20a506c", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x13, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe86, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x4, 0x6, 0x4, 0x7, 0x0, 0x100000, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x5993, 0x8}, 0x80, 0x7, 0x7, 0x9, 0x3, 0xffffffff, 0x8000, 0x0, 0x5, 0x0, 0x9}, r1, 0xc, r1, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406020000f8ff0e002900", 0x24}, {&(0x7f0000000080)="e46c0000", 0x4}, {&(0x7f0000000380)="22903ecc2c1c", 0x6}], 0x3}, 0x40042) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xe, 0x0, 0x4a) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 453.856949ms ago: executing program 1 (id=9922): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f00000000c0)=@xdp={0x2c, 0x8, 0x0, 0x6}, 0x80, 0x0}, 0x4000000) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b0035402800090002efff2037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 252.353464ms ago: executing program 1 (id=9923): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) 108.898177ms ago: executing program 0 (id=9924): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x420, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8002, 0x4}, 0x10002a, 0xb, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d00"/56], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) (rerun: 32) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, r0, 0x8) (async) close(0xffffffffffffffff) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000b80)='syz0\x00', 0x1ff) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) (async, rerun: 64) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10e0c2, 0x0, 0x40000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) r3 = socket$kcm(0x11, 0x2, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 55.534318ms ago: executing program 1 (id=9925): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002"], 0x0, 0x26}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) 0s ago: executing program 3 (id=9926): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81", 0xa}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): ler #0 [ 1367.484879][T32129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1367.495001][T32129] Call Trace: [ 1367.498532][T32129] [ 1367.501606][T32129] dump_stack_lvl+0x188/0x24e [ 1367.506349][T32129] ? sctp_sendmsg+0x1686/0x2940 [ 1367.511433][T32129] ? ___sys_sendmsg+0x2a2/0x360 [ 1367.516340][T32129] ? show_regs_print_info+0x12/0x12 [ 1367.521596][T32129] ? load_image+0x410/0x410 [ 1367.526214][T32129] should_fail_ex+0x390/0x4c0 [ 1367.530949][T32129] should_failslab+0x5/0x20 [ 1367.535502][T32129] slab_pre_alloc_hook+0x59/0x300 [ 1367.540581][T32129] ? sctp_add_bind_addr+0x89/0x350 [ 1367.545769][T32129] __kmem_cache_alloc_node+0x4f/0x270 [ 1367.551195][T32129] ? sctp_add_bind_addr+0x89/0x350 [ 1367.556357][T32129] kmalloc_trace+0x26/0xe0 [ 1367.560817][T32129] sctp_add_bind_addr+0x89/0x350 [ 1367.565805][T32129] sctp_copy_local_addr_list+0x317/0x4d0 [ 1367.571513][T32129] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1367.577302][T32129] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1367.583417][T32129] ? sctp_v4_is_any+0x31/0x50 [ 1367.588136][T32129] ? sctp_copy_one_addr+0x93/0x660 [ 1367.593302][T32129] sctp_bind_addr_copy+0xaf/0x3c0 [ 1367.598375][T32129] ? sctp_association_new+0x16a6/0x2520 [ 1367.604153][T32129] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1367.610538][T32129] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1367.615885][T32129] ? __sctp_connect+0xd80/0xd80 [ 1367.620935][T32129] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1367.626525][T32129] ? security_sctp_bind_connect+0x85/0xb0 [ 1367.632315][T32129] sctp_sendmsg+0x1686/0x2940 [ 1367.637057][T32129] ? sctp_getsockopt+0x8a0/0x8a0 [ 1367.642045][T32129] ? __might_fault+0xa6/0x120 [ 1367.646769][T32129] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1367.653242][T32129] ? aa_sock_msg_perm+0x94/0x150 [ 1367.658269][T32129] ? inet_sendmsg+0xca/0x2a0 [ 1367.662903][T32129] ? inet_send_prepare+0x250/0x250 [ 1367.668065][T32129] ____sys_sendmsg+0x5ed/0x9a0 [ 1367.672883][T32129] ? __sys_sendmsg_sock+0x30/0x30 [ 1367.677945][T32129] ? __import_iovec+0x306/0x510 [ 1367.682853][T32129] ? import_iovec+0x6f/0xa0 [ 1367.687413][T32129] ___sys_sendmsg+0x2a2/0x360 [ 1367.692169][T32129] ? __sys_sendmsg+0x2a0/0x2a0 [ 1367.697003][T32129] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1367.702823][T32129] __se_sys_sendmsg+0x1c3/0x2b0 [ 1367.707723][T32129] ? __x64_sys_sendmsg+0x80/0x80 [ 1367.712726][T32129] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1367.718683][T32129] do_syscall_64+0x4c/0xa0 [ 1367.723148][T32129] ? clear_bhb_loop+0x60/0xb0 [ 1367.727871][T32129] ? clear_bhb_loop+0x60/0xb0 [ 1367.732603][T32129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1367.738541][T32129] RIP: 0033:0x7f42f9b9e199 [ 1367.742999][T32129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.762644][T32129] RSP: 002b:00007f42faa7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1367.771108][T32129] RAX: ffffffffffffffda RBX: 00007f42f9e25fa0 RCX: 00007f42f9b9e199 [ 1367.779124][T32129] RDX: 00000000000003e8 RSI: 0000200000001900 RDI: 0000000000000006 [ 1367.787134][T32129] RBP: 00007f42faa7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.795168][T32129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.803187][T32129] R13: 00007f42f9e26038 R14: 00007f42f9e25fa0 R15: 00007ffe89a565b8 [ 1367.811226][T32129] [ 1368.090264][T32142] FAULT_INJECTION: forcing a failure. [ 1368.090264][T32142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.133769][T32142] CPU: 1 PID: 32142 Comm: syz.2.8940 Not tainted syzkaller #0 [ 1368.141325][T32142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1368.151429][T32142] Call Trace: [ 1368.154747][T32142] [ 1368.157718][T32142] dump_stack_lvl+0x188/0x24e [ 1368.162455][T32142] ? show_regs_print_info+0x12/0x12 [ 1368.167706][T32142] ? load_image+0x410/0x410 [ 1368.172270][T32142] ? __lock_acquire+0x7ea0/0x7ea0 [ 1368.177359][T32142] should_fail_ex+0x390/0x4c0 [ 1368.182103][T32142] strncpy_from_user+0x32/0x340 [ 1368.187107][T32142] bpf_prog_load+0x200/0x1530 [ 1368.191855][T32142] ? lock_chain_count+0x20/0x20 [ 1368.196934][T32142] ? map_freeze+0x390/0x390 [ 1368.201525][T32142] ? __sys_bpf+0x360/0x780 [ 1368.206000][T32142] ? __sanitizer_cov_trace_switch+0x61/0xe0 [ 1368.212017][T32142] __sys_bpf+0x5b8/0x780 [ 1368.216325][T32142] ? bpf_link_show_fdinfo+0x380/0x380 [ 1368.221764][T32142] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1368.227999][T32142] __x64_sys_bpf+0x78/0x90 [ 1368.232477][T32142] do_syscall_64+0x4c/0xa0 [ 1368.236946][T32142] ? clear_bhb_loop+0x60/0xb0 [ 1368.241674][T32142] ? clear_bhb_loop+0x60/0xb0 [ 1368.246600][T32142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1368.252994][T32142] RIP: 0033:0x7f4c6af9e199 [ 1368.257738][T32142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.277669][T32142] RSP: 002b:00007f4c6beff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1368.286117][T32142] RAX: ffffffffffffffda RBX: 00007f4c6b225fa0 RCX: 00007f4c6af9e199 [ 1368.294152][T32142] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1368.302155][T32142] RBP: 00007f4c6beff090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.310182][T32142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.318206][T32142] R13: 00007f4c6b226038 R14: 00007f4c6b225fa0 R15: 00007ffcc8e5eb38 [ 1368.326221][T32142] [ 1368.347148][T32144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8939'. [ 1368.407398][T32148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8941'. [ 1368.729340][T32150] netlink: 'syz.0.8939': attribute type 28 has an invalid length. [ 1368.739160][T32150] netlink: 'syz.0.8939': attribute type 3 has an invalid length. [ 1368.748522][T32150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8939'. [ 1369.013309][T32154] device veth0_vlan left promiscuous mode [ 1369.028306][T32154] device veth0_vlan entered promiscuous mode [ 1369.069421][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1369.091506][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1369.116242][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1369.158039][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 1369.221786][T32163] device syzkaller0 entered promiscuous mode [ 1369.247770][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1369.261172][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1370.027947][T32185] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1370.435098][T32198] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1370.470250][T32198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1370.515097][T32197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8956'. [ 1370.762512][T32208] netlink: 'syz.4.8956': attribute type 28 has an invalid length. [ 1370.775225][T32208] netlink: 'syz.4.8956': attribute type 3 has an invalid length. [ 1370.805372][T32208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8956'. [ 1372.201619][T32260] FAULT_INJECTION: forcing a failure. [ 1372.201619][T32260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.321640][T32260] CPU: 0 PID: 32260 Comm: syz.0.8980 Not tainted syzkaller #0 [ 1372.329242][T32260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1372.339373][T32260] Call Trace: [ 1372.342701][T32260] [ 1372.345665][T32260] dump_stack_lvl+0x188/0x24e [ 1372.350370][T32260] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1372.356588][T32260] ? show_regs_print_info+0x12/0x12 [ 1372.361843][T32260] ? load_image+0x410/0x410 [ 1372.366452][T32260] ? should_fail_ex+0x33d/0x4c0 [ 1372.371366][T32260] should_fail_ex+0x390/0x4c0 [ 1372.376110][T32260] copyout+0x1b/0x120 [ 1372.380151][T32260] _copy_to_iter+0x482/0x1050 [ 1372.384895][T32260] ? iov_iter_init+0x1f0/0x1f0 [ 1372.389740][T32260] ? __virt_addr_valid+0x188/0x540 [ 1372.394918][T32260] ? __virt_addr_valid+0x467/0x540 [ 1372.400089][T32260] ? __phys_addr_symbol+0x2b/0x70 [ 1372.405179][T32260] __skb_datagram_iter+0xde/0x740 [ 1372.410268][T32260] ? skb_copy_datagram_iter+0x290/0x290 [ 1372.418924][T32260] skb_copy_datagram_iter+0xd7/0x290 [ 1372.424276][T32260] tipc_recvstream+0x72c/0xe90 [ 1372.429192][T32260] ? tipc_sendstream+0x70/0x70 [ 1372.434007][T32260] ____sys_recvmsg+0x2c8/0x5b0 [ 1372.438835][T32260] ? __sys_recvmsg_sock+0x40/0x40 [ 1372.443924][T32260] ? import_iovec+0x6f/0xa0 [ 1372.448491][T32260] ___sys_recvmsg+0x210/0x590 [ 1372.453220][T32260] ? __sys_recvmsg+0x2a0/0x2a0 [ 1372.458063][T32260] ? __fget_files+0x3fc/0x460 [ 1372.462820][T32260] __x64_sys_recvmsg+0x20d/0x2e0 [ 1372.467812][T32260] ? ___sys_recvmsg+0x590/0x590 [ 1372.472731][T32260] do_syscall_64+0x4c/0xa0 [ 1372.477200][T32260] ? clear_bhb_loop+0x60/0xb0 [ 1372.481924][T32260] ? clear_bhb_loop+0x60/0xb0 [ 1372.486681][T32260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.492621][T32260] RIP: 0033:0x7f253a19e199 [ 1372.497080][T32260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.516830][T32260] RSP: 002b:00007f253b0d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1372.525317][T32260] RAX: ffffffffffffffda RBX: 00007f253a425fa0 RCX: 00007f253a19e199 [ 1372.533351][T32260] RDX: 0000000040000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 1372.541368][T32260] RBP: 00007f253b0d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.549381][T32260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.557395][T32260] R13: 00007f253a426038 R14: 00007f253a425fa0 R15: 00007ffe96ece5a8 [ 1372.565425][T32260] [ 1373.123485][T32281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8987'. [ 1373.421823][T32290] netlink: 'syz.4.8991': attribute type 10 has an invalid length. [ 1373.431440][T32288] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1373.440822][T32290] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8991'. [ 1373.869276][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1373.880222][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1373.896265][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1373.905214][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1373.915114][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1373.922656][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1374.029234][ T4281] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1374.424538][T32310] netlink: 'syz.4.8993': attribute type 21 has an invalid length. [ 1374.486734][T32310] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8993'. [ 1374.546623][T32310] netlink: 'syz.4.8993': attribute type 4 has an invalid length. [ 1374.594968][T32310] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8993'. [ 1374.893632][T32296] chnl_net:caif_netlink_parms(): no params data found [ 1375.118810][ T4878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.435014][ T4878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.754373][ T4878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.776575][T32296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.783835][T32296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.831840][T32296] device bridge_slave_0 entered promiscuous mode [ 1375.869905][T32296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.892563][T32296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.913987][T32296] device bridge_slave_1 entered promiscuous mode [ 1375.946634][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 1376.029128][ T4878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.037996][T32344] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9007'. [ 1376.133336][T32296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.188830][T32296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.399620][T32296] team0: Port device team_slave_0 added [ 1376.442502][T32296] team0: Port device team_slave_1 added [ 1376.566944][ T4878] device .*! left promiscuous mode [ 1376.647512][T32296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.674707][T32296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.802255][T32296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.002282][T32296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.018979][T32296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.137604][T32376] netlink: 'syz.4.9016': attribute type 9 has an invalid length. [ 1377.140044][T32296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.196436][T32376] netlink: 'syz.4.9016': attribute type 8 has an invalid length. [ 1377.241623][T32376] netlink: 355 bytes leftover after parsing attributes in process `syz.4.9016'. [ 1378.026511][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 1378.151835][T32383] netlink: 'syz.0.9017': attribute type 13 has an invalid length. [ 1378.167855][T32383] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.9017'. [ 1378.227606][T32296] device hsr_slave_0 entered promiscuous mode [ 1378.267041][T32296] device hsr_slave_1 entered promiscuous mode [ 1378.334051][T32296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1378.383814][T32296] Cannot create hsr debugfs directory [ 1379.371923][T32407] netlink: 'syz.4.9023': attribute type 11 has an invalid length. [ 1379.396249][T32407] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9023'. [ 1379.437942][T32406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1379.666420][T32420] netlink: 'syz.0.9026': attribute type 10 has an invalid length. [ 1380.106502][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 1380.823050][ T4878] device team0 left promiscuous mode [ 1380.847676][ T4878] device team_slave_0 left promiscuous mode [ 1380.877597][ T4878] device team_slave_1 left promiscuous mode [ 1380.903727][ T4878] ¥: port 1(team0) entered disabled state [ 1380.975156][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.030914][ T4878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1381.048677][ T4878] bridge0: port 4(dummy0) entered disabled state [ 1381.072537][ T4878] device bridge_slave_1 left promiscuous mode [ 1381.088454][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.115694][ T4878] device bridge_slave_0 left promiscuous mode [ 1381.135047][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.186588][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 1386.793723][T32519] netlink: 'syz.4.9053': attribute type 28 has an invalid length. [ 1386.803384][T32519] netlink: 'syz.4.9053': attribute type 3 has an invalid length. [ 1386.811780][T32519] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9053'. [ 1387.478212][ T4878] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1387.529358][ T4878] team0 (unregistering): Port device team_slave_1 removed [ 1387.576044][ T4878] team0 (unregistering): Port device team_slave_0 removed [ 1387.624710][ T4878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1387.672253][ T4878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1387.974971][ T4878] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1387.984986][ T4878] bond0 (unregistering): Released all slaves [ 1388.042915][T32464] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9038'. [ 1388.052235][T32464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1388.079803][T32464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1388.097625][T32500] netlink: 'syz.1.9045': attribute type 21 has an invalid length. [ 1388.115759][T32500] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9045'. [ 1388.125721][T32500] netlink: 'syz.1.9045': attribute type 4 has an invalid length. [ 1388.141667][T32500] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9045'. [ 1388.159146][T32516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9053'. [ 1388.296550][T32521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9054'. [ 1388.506206][T32296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1388.596012][T32296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1388.683934][T32535] netlink: 'syz.3.9054': attribute type 28 has an invalid length. [ 1388.695805][T32296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1388.719821][T32535] netlink: 'syz.3.9054': attribute type 3 has an invalid length. [ 1388.751792][T32296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1388.806244][T32535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9054'. [ 1389.149188][T32296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.235857][T32296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.246059][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1389.277694][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1389.363742][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1389.393429][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1389.421399][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.428655][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.469515][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1389.488226][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1389.519712][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1389.551246][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.558551][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.587108][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1389.638415][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1389.657621][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1389.691793][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1389.773601][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1389.804903][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1389.884994][T32296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1389.979819][T32296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1390.037238][T32563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9065'. [ 1390.137986][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1390.146911][T32563] netlink: 'syz.0.9065': attribute type 28 has an invalid length. [ 1390.166229][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1390.174378][T32563] netlink: 'syz.0.9065': attribute type 3 has an invalid length. [ 1390.183849][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1390.218349][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1390.227215][T32563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9065'. [ 1390.277265][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1390.304202][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1390.846980][T32589] netlink: 'syz.3.9066': attribute type 21 has an invalid length. [ 1390.854907][T32589] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9066'. [ 1391.022157][T32589] netlink: 'syz.3.9066': attribute type 4 has an invalid length. [ 1391.489498][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1391.522332][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1391.558297][T32296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.644837][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1391.662868][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1391.725459][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1391.748447][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1391.777841][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1391.806691][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1391.830850][T32296] device veth0_vlan entered promiscuous mode [ 1391.869718][T32296] device veth1_vlan entered promiscuous mode [ 1391.968173][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1391.977500][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1391.996828][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1392.017036][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1392.042380][T32296] device veth0_macvtap entered promiscuous mode [ 1392.101932][T32296] device veth1_macvtap entered promiscuous mode [ 1392.165536][T32296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.186903][T32296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.208558][T32296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.216463][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1392.235251][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1392.244761][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1392.265655][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1392.293761][T32296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.317255][T32296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.354287][T32296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.395378][T32296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.416963][T32296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.436366][T32296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.467918][T32296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1392.476259][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1392.498270][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1392.554102][T32296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.582832][T32296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.605625][T32296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.636991][T32296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.943678][ T5983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1393.609649][T32630] netlink: 'syz.1.9076': attribute type 27 has an invalid length. [ 1393.657029][T32630] __nla_validate_parse: 1 callbacks suppressed [ 1393.657068][T32630] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9076'. [ 1393.873784][T32635] netlink: 'syz.0.9077': attribute type 16 has an invalid length. [ 1393.894115][T32635] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1393.982239][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.014856][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.078259][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1394.244918][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.273238][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.310366][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1394.335034][T32651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9080'. [ 1394.676382][T32666] netlink: 'syz.0.9080': attribute type 28 has an invalid length. [ 1394.771339][T32666] netlink: 'syz.0.9080': attribute type 3 has an invalid length. [ 1394.789864][T32666] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9080'. [ 1394.958997][T32654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8988'. [ 1395.127054][T32657] netlink: 'syz.3.9091': attribute type 28 has an invalid length. [ 1395.135217][T32657] netlink: 'syz.3.9091': attribute type 29 has an invalid length. [ 1395.219694][T32657] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9091'. [ 1395.326225][T32676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9084'. [ 1395.700631][T32685] netlink: 'syz.4.9084': attribute type 28 has an invalid length. [ 1395.740262][T32685] netlink: 'syz.4.9084': attribute type 3 has an invalid length. [ 1395.777329][T32686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9086'. [ 1395.814636][T32688] FAULT_INJECTION: forcing a failure. [ 1395.814636][T32688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.828125][T32685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9084'. [ 1395.879001][T32688] CPU: 0 PID: 32688 Comm: syz.1.9087 Not tainted syzkaller #0 [ 1395.886568][T32688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1395.896691][T32688] Call Trace: [ 1395.900013][T32688] [ 1395.902986][T32688] dump_stack_lvl+0x188/0x24e [ 1395.907713][T32688] ? show_regs_print_info+0x12/0x12 [ 1395.912943][T32688] ? load_image+0x410/0x410 [ 1395.917490][T32688] ? __lock_acquire+0x7ea0/0x7ea0 [ 1395.922553][T32688] ? zone_statistics+0x170/0x170 [ 1395.927551][T32688] should_fail_ex+0x390/0x4c0 [ 1395.932273][T32688] _copy_from_user+0x2c/0x170 [ 1395.936996][T32688] bpf_prog_test_run_xdp+0xc26/0xf80 [ 1395.942323][T32688] ? __lock_acquire+0x7ea0/0x7ea0 [ 1395.947396][T32688] ? dev_put+0x80/0x80 [ 1395.951527][T32688] ? dev_put+0x80/0x80 [ 1395.955633][T32688] bpf_prog_test_run+0x31c/0x390 [ 1395.960612][T32688] __sys_bpf+0x62b/0x780 [ 1395.964898][T32688] ? bpf_link_show_fdinfo+0x380/0x380 [ 1395.970347][T32688] ? lock_chain_count+0x20/0x20 [ 1395.975237][T32688] __x64_sys_bpf+0x78/0x90 [ 1395.979693][T32688] do_syscall_64+0x4c/0xa0 [ 1395.984136][T32688] ? clear_bhb_loop+0x60/0xb0 [ 1395.988840][T32688] ? clear_bhb_loop+0x60/0xb0 [ 1395.993565][T32688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1395.999493][T32688] RIP: 0033:0x7f42f9b9e199 [ 1396.003939][T32688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.023576][T32688] RSP: 002b:00007f42faa7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1396.032046][T32688] RAX: ffffffffffffffda RBX: 00007f42f9e25fa0 RCX: 00007f42f9b9e199 [ 1396.040049][T32688] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1396.048044][T32688] RBP: 00007f42faa7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1396.056216][T32688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1396.064210][T32688] R13: 00007f42f9e26038 R14: 00007f42f9e25fa0 R15: 00007ffe89a565b8 [ 1396.072224][T32688] [ 1396.267796][T32686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9086'. [ 1396.961084][T32700] netlink: 'syz.0.9092': attribute type 10 has an invalid length. [ 1397.033754][T32700] team0: Device vxcan1 is of different type [ 1397.699230][T32707] netlink: 'syz.1.9094': attribute type 28 has an invalid length. [ 1399.418735][T32741] validate_nla: 1 callbacks suppressed [ 1399.418777][T32741] netlink: 'syz.0.9105': attribute type 27 has an invalid length. [ 1399.467111][T32741] __nla_validate_parse: 4 callbacks suppressed [ 1399.467153][T32741] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9105'. [ 1399.620107][T32745] mac80211_hwsim hwsim82 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1399.831365][T32748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9108'. [ 1400.347772][T32748] netlink: 'syz.4.9108': attribute type 28 has an invalid length. [ 1400.458634][T32748] netlink: 'syz.4.9108': attribute type 3 has an invalid length. [ 1400.487654][T32748] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9108'. [ 1400.864000][T32767] netlink: 'syz.2.9113': attribute type 4 has an invalid length. [ 1401.064036][T32766] netlink: 'syz.0.9114': attribute type 10 has an invalid length. [ 1401.122915][T32766] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 1402.288105][ T319] netlink: 'syz.2.9121': attribute type 27 has an invalid length. [ 1402.415172][ T323] netlink: 'syz.4.9120': attribute type 41 has an invalid length. [ 1402.433939][ T319] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1402.660019][ T329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1403.089060][ T329] netlink: 'syz.3.9125': attribute type 28 has an invalid length. [ 1403.103711][ T329] netlink: 'syz.3.9125': attribute type 3 has an invalid length. [ 1403.125903][ T329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1403.285549][ T342] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1403.313515][ T342] netlink: zone id is out of range [ 1403.332315][ T346] netlink: 'syz.3.9141': attribute type 21 has an invalid length. [ 1403.340658][ T342] netlink: zone id is out of range [ 1403.354946][ T346] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9141'. [ 1403.365750][ T342] netlink: zone id is out of range [ 1403.380378][ T342] netlink: zone id is out of range [ 1403.420626][ T342] netlink: zone id is out of range [ 1403.518651][ T342] netlink: zone id is out of range [ 1403.613972][ T342] netlink: zone id is out of range [ 1403.723473][ T342] netlink: zone id is out of range [ 1403.855306][ T342] netlink: zone id is out of range [ 1403.940680][ T342] netlink: zone id is out of range [ 1404.976681][ T364] netlink: 'syz.3.9137': attribute type 11 has an invalid length. [ 1404.985448][ T364] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9137'. [ 1405.023934][ T361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.189314][ T373] validate_nla: 1 callbacks suppressed [ 1405.189354][ T373] netlink: 'syz.4.9140': attribute type 27 has an invalid length. [ 1405.266805][ T373] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9140'. [ 1405.529087][ T381] netlink: 68520 bytes leftover after parsing attributes in process `syz.2.9143'. [ 1405.856923][ T389] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1405.899639][ T389] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1405.950523][ T394] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1405.987382][ T389] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1406.105868][ T397] netlink: 196 bytes leftover after parsing attributes in process `syz.3.9150'. [ 1407.355551][ T433] netlink: 'syz.3.9162': attribute type 9 has an invalid length. [ 1407.447991][ T438] netlink: 'syz.4.9164': attribute type 10 has an invalid length. [ 1409.402221][ T474] netlink: 'syz.2.9178': attribute type 9 has an invalid length. [ 1410.536717][ T505] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9189'. [ 1410.607103][ T505] net_ratelimit: 479 callbacks suppressed [ 1410.607144][ T505] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1411.536060][ T531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9198'. [ 1411.557598][ T532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9197'. [ 1411.675888][ T535] netlink: 'syz.4.9196': attribute type 9 has an invalid length. [ 1411.834989][ T540] FAULT_INJECTION: forcing a failure. [ 1411.834989][ T540] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.891448][ T540] CPU: 1 PID: 540 Comm: syz.3.9202 Not tainted syzkaller #0 [ 1411.898839][ T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1411.908949][ T540] Call Trace: [ 1411.912262][ T540] [ 1411.915242][ T540] dump_stack_lvl+0x188/0x24e [ 1411.919979][ T540] ? show_regs_print_info+0x12/0x12 [ 1411.925222][ T540] ? load_image+0x410/0x410 [ 1411.929790][ T540] ? __might_sleep+0xd0/0xd0 [ 1411.934426][ T540] ? __lock_acquire+0x7ea0/0x7ea0 [ 1411.939504][ T540] ? mark_lock+0x94/0x320 [ 1411.943942][ T540] should_fail_ex+0x390/0x4c0 [ 1411.948714][ T540] should_failslab+0x5/0x20 [ 1411.953267][ T540] slab_pre_alloc_hook+0x59/0x300 [ 1411.958356][ T540] ? __get_vm_area_node+0x122/0x330 [ 1411.963604][ T540] __kmem_cache_alloc_node+0x4f/0x270 [ 1411.969029][ T540] ? __get_vm_area_node+0x122/0x330 [ 1411.974282][ T540] kmalloc_node_trace+0x22/0xe0 [ 1411.979274][ T540] __get_vm_area_node+0x122/0x330 [ 1411.984361][ T540] __vmalloc_node_range+0x357/0x1380 [ 1411.989704][ T540] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1411.995330][ T540] ? perf_trace_preemptirq_template+0x268/0x320 [ 1412.001638][ T540] ? aa_get_newest_label+0xf9/0x5b0 [ 1412.006891][ T540] ? free_vm_area+0x50/0x50 [ 1412.011443][ T540] ? end_current_label_crit_section+0x170/0x170 [ 1412.017763][ T540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1412.023984][ T540] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1412.029599][ T540] __vmalloc+0x76/0x80 [ 1412.033721][ T540] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1412.039344][ T540] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1412.044774][ T540] ? bpf_prog_alloc+0x13/0x1b0 [ 1412.049594][ T540] bpf_prog_alloc+0x1c/0x1b0 [ 1412.054245][ T540] bpf_prog_load+0x7d4/0x1530 [ 1412.058998][ T540] ? map_freeze+0x390/0x390 [ 1412.063562][ T540] ? __might_fault+0xa6/0x120 [ 1412.068302][ T540] ? __might_fault+0xa6/0x120 [ 1412.073033][ T540] ? __might_fault+0xc2/0x120 [ 1412.077764][ T540] ? __might_fault+0xa6/0x120 [ 1412.082489][ T540] ? bpf_lsm_bpf+0x5/0x10 [ 1412.086869][ T540] ? security_bpf+0x7a/0xa0 [ 1412.091431][ T540] __sys_bpf+0x5b8/0x780 [ 1412.095726][ T540] ? bpf_link_show_fdinfo+0x380/0x380 [ 1412.101145][ T540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1412.107365][ T540] __x64_sys_bpf+0x78/0x90 [ 1412.111847][ T540] do_syscall_64+0x4c/0xa0 [ 1412.116313][ T540] ? clear_bhb_loop+0x60/0xb0 [ 1412.121042][ T540] ? clear_bhb_loop+0x60/0xb0 [ 1412.125771][ T540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1412.131707][ T540] RIP: 0033:0x7f1370b9e199 [ 1412.136165][ T540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.156092][ T540] RSP: 002b:00007f1371b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1412.164570][ T540] RAX: ffffffffffffffda RBX: 00007f1370e25fa0 RCX: 00007f1370b9e199 [ 1412.172603][ T540] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1412.180627][ T540] RBP: 00007f1371b27090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.188649][ T540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.196673][ T540] R13: 00007f1370e26038 R14: 00007f1370e25fa0 R15: 00007ffc57d259b8 [ 1412.204705][ T540] [ 1412.243049][ T540] syz.3.9202: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1412.261554][ T540] CPU: 1 PID: 540 Comm: syz.3.9202 Not tainted syzkaller #0 [ 1412.268904][ T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1412.279007][ T540] Call Trace: [ 1412.282349][ T540] [ 1412.285320][ T540] dump_stack_lvl+0x188/0x24e [ 1412.290051][ T540] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1412.296516][ T540] ? show_regs_print_info+0x12/0x12 [ 1412.301774][ T540] ? load_image+0x410/0x410 [ 1412.306335][ T540] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1412.312803][ T540] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1412.319355][ T540] warn_alloc+0x242/0x330 [ 1412.323794][ T540] ? __get_vm_area_node+0x122/0x330 [ 1412.329046][ T540] ? zone_watermark_ok_safe+0x270/0x270 [ 1412.334644][ T540] ? rcu_is_watching+0x11/0xa0 [ 1412.339468][ T540] ? __get_vm_area_node+0x318/0x330 [ 1412.344726][ T540] __vmalloc_node_range+0x37c/0x1380 [ 1412.350080][ T540] ? perf_trace_preemptirq_template+0x268/0x320 [ 1412.356385][ T540] ? aa_get_newest_label+0xf9/0x5b0 [ 1412.361647][ T540] ? free_vm_area+0x50/0x50 [ 1412.366208][ T540] ? end_current_label_crit_section+0x170/0x170 [ 1412.372508][ T540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1412.378716][ T540] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1412.384325][ T540] __vmalloc+0x76/0x80 [ 1412.388450][ T540] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1412.394060][ T540] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1412.399490][ T540] ? bpf_prog_alloc+0x13/0x1b0 [ 1412.404314][ T540] bpf_prog_alloc+0x1c/0x1b0 [ 1412.408970][ T540] bpf_prog_load+0x7d4/0x1530 [ 1412.413720][ T540] ? map_freeze+0x390/0x390 [ 1412.418287][ T540] ? __might_fault+0xa6/0x120 [ 1412.423029][ T540] ? __might_fault+0xa6/0x120 [ 1412.427762][ T540] ? __might_fault+0xc2/0x120 [ 1412.432487][ T540] ? __might_fault+0xa6/0x120 [ 1412.437235][ T540] ? bpf_lsm_bpf+0x5/0x10 [ 1412.441614][ T540] ? security_bpf+0x7a/0xa0 [ 1412.446168][ T540] __sys_bpf+0x5b8/0x780 [ 1412.450460][ T540] ? bpf_link_show_fdinfo+0x380/0x380 [ 1412.455995][ T540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1412.462208][ T540] __x64_sys_bpf+0x78/0x90 [ 1412.466679][ T540] do_syscall_64+0x4c/0xa0 [ 1412.471158][ T540] ? clear_bhb_loop+0x60/0xb0 [ 1412.475874][ T540] ? clear_bhb_loop+0x60/0xb0 [ 1412.480601][ T540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1412.486540][ T540] RIP: 0033:0x7f1370b9e199 [ 1412.491000][ T540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.510663][ T540] RSP: 002b:00007f1371b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1412.519145][ T540] RAX: ffffffffffffffda RBX: 00007f1370e25fa0 RCX: 00007f1370b9e199 [ 1412.527176][ T540] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1412.535199][ T540] RBP: 00007f1371b27090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.543227][ T540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.551233][ T540] R13: 00007f1370e26038 R14: 00007f1370e25fa0 R15: 00007ffc57d259b8 [ 1412.559251][ T540] [ 1412.591657][ T540] Mem-Info: [ 1412.595386][ T540] active_anon:12635 inactive_anon:0 isolated_anon:0 [ 1412.595386][ T540] active_file:21797 inactive_file:40498 isolated_file:0 [ 1412.595386][ T540] unevictable:768 dirty:269 writeback:0 [ 1412.595386][ T540] slab_reclaimable:21903 slab_unreclaimable:97518 [ 1412.595386][ T540] mapped:29992 shmem:1361 pagetables:606 [ 1412.595386][ T540] sec_pagetables:0 bounce:0 [ 1412.595386][ T540] kernel_misc_reclaimable:0 [ 1412.595386][ T540] free:1310790 free_pcp:7709 free_cma:0 [ 1412.647860][ T540] Node 0 active_anon:50540kB inactive_anon:0kB active_file:87188kB inactive_file:161788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119968kB dirty:1076kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10652kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no [ 1412.766640][ T540] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1412.932556][ T560] netlink: 'syz.1.9207': attribute type 14 has an invalid length. [ 1412.946443][ T560] netlink: 64519 bytes leftover after parsing attributes in process `syz.1.9207'. [ 1412.955829][ T540] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.990728][ T540] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1413.006858][ T540] Node 0 DMA32 free:1327128kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:50260kB inactive_anon:0kB active_file:87188kB inactive_file:161788kB unevictable:1536kB writepending:1104kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:16428kB local_pcp:3124kB free_cma:0kB [ 1413.076860][ T540] lowmem_reserve[]: 0 0 1 1 1 [ 1413.081679][ T540] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1413.116862][ T563] device syzkaller0 entered promiscuous mode [ 1413.157609][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1413.215795][ T540] lowmem_reserve[]: 0 0 0 0 0 [ 1413.240803][ T540] Node 1 Normal free:3900856kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15284kB local_pcp:6256kB free_cma:0kB [ 1413.367538][ T540] lowmem_reserve[]: 0 0 0 0 0 [ 1413.390765][ T540] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1413.445117][ T540] Node 0 DMA32: 2107*4kB (UM) 1804*8kB (UME) 1745*16kB (UME) 1527*32kB (UME) 1103*64kB (UME) 351*128kB (UME) 126*256kB (UME) 151*512kB (UME) 131*1024kB (UM) 17*2048kB (UME) 203*4096kB (UM) = 1325180kB [ 1413.503834][ T540] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1413.542085][ T540] Node 1 Normal: 212*4kB (UME) 41*8kB (UME) 28*16kB (UME) 57*32kB (UE) 23*64kB (UME) 9*128kB (UME) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3900856kB [ 1413.619865][ T540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.652046][ T540] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1413.680981][ T540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.705516][ T540] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1413.743602][ T540] 63656 total pagecache pages [ 1413.755422][ T540] 0 pages in swap cache [ 1413.769191][ T540] Free swap = 124728kB [ 1413.783170][ T540] Total swap = 124996kB [ 1413.806456][ T540] 2097051 pages RAM [ 1413.810513][ T540] 0 pages HighMem/MovableOnly [ 1413.815372][ T540] 415230 pages reserved [ 1413.824816][ T540] 0 pages cma reserved [ 1414.320540][T31209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1414.331434][T31209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1414.339530][T31209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1414.349465][T31209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1414.357287][T31209] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1414.364788][T31209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1414.464834][ T574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9214'. [ 1415.038680][ T5983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.105175][ T598] netlink: 'syz.0.9219': attribute type 9 has an invalid length. [ 1415.219694][ T5983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.249686][ T584] chnl_net:caif_netlink_parms(): no params data found [ 1415.304782][ T607] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9224'. [ 1415.315483][ T607] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1415.941394][ T622] netlink: 86816 bytes leftover after parsing attributes in process `syz.3.9227'. [ 1416.179554][ T5983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.216522][ T618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9228'. [ 1416.235749][ T622] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1416.410368][ T5983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.426808][T31209] Bluetooth: hci4: command 0x0409 tx timeout [ 1416.598574][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.605879][ T584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.627704][ T584] device bridge_slave_0 entered promiscuous mode [ 1416.638962][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.646211][ T584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.662653][ T584] device bridge_slave_1 entered promiscuous mode [ 1416.735643][ T584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.812665][ T584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.964229][ T584] team0: Port device team_slave_0 added [ 1416.994143][ T584] team0: Port device team_slave_1 added [ 1417.055220][ T5983] device .*! left promiscuous mode [ 1417.110099][ T584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.136661][ T584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.271384][ T584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.299893][ T654] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9237'. [ 1417.329074][ T654] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1417.370570][ T660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9239'. [ 1418.078605][ T584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.096723][ T584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.135646][ T584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.256187][ T675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1418.431551][ T584] device hsr_slave_0 entered promiscuous mode [ 1418.461302][ T584] device hsr_slave_1 entered promiscuous mode [ 1418.468811][ T584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1418.470775][ T681] netlink: 'syz.4.9243': attribute type 29 has an invalid length. [ 1418.477222][ T584] Cannot create hsr debugfs directory [ 1418.506585][T31209] Bluetooth: hci4: command 0x041b tx timeout [ 1418.579055][ T683] netlink: 'syz.0.9245': attribute type 10 has an invalid length. [ 1418.592967][ T683] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9245'. [ 1418.603321][ T681] netlink: 'syz.4.9243': attribute type 29 has an invalid length. [ 1420.588148][T31209] Bluetooth: hci4: command 0x040f tx timeout [ 1421.568962][ T728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9255'. [ 1422.234138][ T743] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.9259'. [ 1422.256921][ T743] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1422.495647][ T584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1422.521753][ T584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1422.531451][ T747] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9260'. [ 1422.555439][ T584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1422.666575][T31209] Bluetooth: hci4: command 0x0419 tx timeout [ 1423.070010][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.076491][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.071687][ T5974] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1425.388936][ T584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1425.411892][ T756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9262'. [ 1425.601028][ T5983] device hsr_slave_0 left promiscuous mode [ 1425.610998][ T5983] device hsr_slave_1 left promiscuous mode [ 1425.709012][ T5983] device veth1_vlan left promiscuous mode [ 1425.716946][ T5983] device veth0_vlan left promiscuous mode [ 1426.454226][ T777] netlink: 86816 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1428.268093][ T5983] team0 (unregistering): Port device macvlan0 removed [ 1428.583515][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 1428.645682][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 1428.698131][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1428.744750][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.064877][ T5983] bond0 (unregistering): Released all slaves [ 1429.107162][ T771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9268'. [ 1429.125917][ T777] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1429.434522][ T584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.506100][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1429.522062][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1429.561071][ T584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.619274][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1429.643860][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1429.661381][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.668712][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.698001][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1429.842990][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1429.897552][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1429.931660][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.938977][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.012967][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1430.224497][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1430.278801][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1430.338067][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1430.390141][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1430.410097][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1430.418976][ T4281] Bluetooth: hci5: unexpected event 0x2c length: 151 > 17 [ 1430.438646][ T4281] Bluetooth: hci5: unexpected event 0x2c length: 151 > 17 [ 1430.467660][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1430.524350][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1430.554656][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1430.583559][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1430.633950][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1430.661456][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1430.840628][ T810] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1430.897467][ T814] netlink: 'syz.2.9277': attribute type 21 has an invalid length. [ 1430.930352][ T814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9277'. [ 1430.987280][ T818] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.9277'. [ 1431.062967][ T831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9281'. [ 1432.007453][ T848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1432.124487][ T848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1432.190524][ T848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1432.243512][ T848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1432.253337][ T848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1432.464593][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1432.491826][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1432.529530][ T584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1432.630255][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1432.651208][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1432.733824][ T584] device veth0_vlan entered promiscuous mode [ 1432.811909][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1432.837566][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1432.874764][ T584] device veth1_vlan entered promiscuous mode [ 1432.904767][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1432.934032][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1432.970556][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1433.059420][ T584] device veth0_macvtap entered promiscuous mode [ 1433.131912][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1433.151012][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1433.186995][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1433.228874][ T584] device veth1_macvtap entered promiscuous mode [ 1433.254969][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1433.291080][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1433.330377][ T584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.382320][ T584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.413237][ T584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.432776][ T584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.455221][ T584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.510843][ T584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.542312][ T584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.581338][ T584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.615832][ T584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.656456][ T584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.686962][ T584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.729071][ T584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.772541][ T584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.820061][ T584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.847842][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1433.886596][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1433.907233][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1433.947630][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1433.984782][ T584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.008985][ T584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.036142][ T584] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.072501][ T584] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.364594][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.376519][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.408293][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1434.494476][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.516755][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.524380][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1434.823880][ T876] netlink: 'syz.3.9288': attribute type 9 has an invalid length. [ 1434.854791][ T876] __nla_validate_parse: 60 callbacks suppressed [ 1434.854886][ T876] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.9288'. [ 1435.791638][ T916] netlink: 'syz.3.9294': attribute type 21 has an invalid length. [ 1435.841847][ T916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9294'. [ 1436.008109][ T922] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.9294'. [ 1436.622620][ T931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9296'. [ 1436.711451][ T940] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9298'. [ 1436.730277][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1436.773781][ T940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1438.125044][ T956] netlink: 'syz.0.9302': attribute type 29 has an invalid length. [ 1438.172854][ T956] netlink: 'syz.0.9302': attribute type 29 has an invalid length. [ 1439.467867][ T985] netlink: 'syz.4.9311': attribute type 21 has an invalid length. [ 1439.550893][ T985] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9311'. [ 1439.602663][ T986] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.9311'. [ 1440.065526][ T1001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9314'. [ 1440.418965][ T1014] netlink: 180 bytes leftover after parsing attributes in process `syz.0.9319'. [ 1440.506491][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 1440.593477][ T1019] netlink: 'syz.2.9323': attribute type 1 has an invalid length. [ 1440.603444][ T1019] netlink: 'syz.2.9323': attribute type 3 has an invalid length. [ 1440.611697][ T1019] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9323'. [ 1440.628041][ T1024] netlink: 'syz.1.9322': attribute type 10 has an invalid length. [ 1441.240983][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1441.268657][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1441.281960][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1441.292221][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1441.311421][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1441.319594][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1442.152962][ T1059] netlink: 'syz.1.9327': attribute type 21 has an invalid length. [ 1442.188898][ T1059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9327'. [ 1442.299012][ T1059] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.9327'. [ 1442.500542][ T1031] chnl_net:caif_netlink_parms(): no params data found [ 1442.543131][ T1068] netlink: 'syz.2.9331': attribute type 10 has an invalid length. [ 1442.554691][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1442.570820][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.819627][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.857872][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.882665][ T1031] device bridge_slave_0 entered promiscuous mode [ 1442.928235][ T1078] netlink: 'syz.2.9334': attribute type 16 has an invalid length. [ 1442.936438][ T1078] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9334'. [ 1443.178636][ T1084] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9337'. [ 1443.386522][T31209] Bluetooth: hci0: command 0x0409 tx timeout [ 1443.859125][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.869135][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.877648][ T1031] device bridge_slave_1 entered promiscuous mode [ 1443.991306][ T5978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.047818][ T1090] FAULT_INJECTION: forcing a failure. [ 1444.047818][ T1090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.094048][ T1090] CPU: 1 PID: 1090 Comm: syz.1.9339 Not tainted syzkaller #0 [ 1444.100271][ T1031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.101488][ T1090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1444.101504][ T1090] Call Trace: [ 1444.101512][ T1090] [ 1444.101522][ T1090] dump_stack_lvl+0x188/0x24e [ 1444.131626][ T1090] ? show_regs_print_info+0x12/0x12 [ 1444.136908][ T1090] ? load_image+0x410/0x410 [ 1444.141479][ T1090] ? __lock_acquire+0x7ea0/0x7ea0 [ 1444.146573][ T1090] should_fail_ex+0x390/0x4c0 [ 1444.151310][ T1090] _copy_to_user+0x2c/0x130 [ 1444.155865][ T1090] bpf_test_finish+0x198/0x600 [ 1444.160683][ T1090] ? dst_hold+0xb0/0xb0 [ 1444.164902][ T1090] ? convert_skb_to___skb+0x420/0x420 [ 1444.170325][ T1090] ? refcount_dec_and_lock_irqsave+0xd1/0xf0 [ 1444.176391][ T1090] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1444.182422][ T1090] bpf_prog_test_run_xdp+0x827/0xf80 [ 1444.187772][ T1090] ? __lock_acquire+0x7ea0/0x7ea0 [ 1444.192868][ T1090] ? dev_put+0x80/0x80 [ 1444.197006][ T1090] ? dev_put+0x80/0x80 [ 1444.201131][ T1090] bpf_prog_test_run+0x31c/0x390 [ 1444.206124][ T1090] __sys_bpf+0x62b/0x780 [ 1444.210413][ T1090] ? bpf_link_show_fdinfo+0x380/0x380 [ 1444.215851][ T1090] ? lock_chain_count+0x20/0x20 [ 1444.220780][ T1090] __x64_sys_bpf+0x78/0x90 [ 1444.225335][ T1090] do_syscall_64+0x4c/0xa0 [ 1444.229794][ T1090] ? clear_bhb_loop+0x60/0xb0 [ 1444.234505][ T1090] ? clear_bhb_loop+0x60/0xb0 [ 1444.239207][ T1090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1444.245128][ T1090] RIP: 0033:0x7f9c16d9e199 [ 1444.249585][ T1090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1444.269271][ T1090] RSP: 002b:00007f9c17be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1444.277741][ T1090] RAX: ffffffffffffffda RBX: 00007f9c17025fa0 RCX: 00007f9c16d9e199 [ 1444.285757][ T1090] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1444.293770][ T1090] RBP: 00007f9c17be7090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.301781][ T1090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.309796][ T1090] R13: 00007f9c17026038 R14: 00007f9c17025fa0 R15: 00007fff76d94d98 [ 1444.317821][ T1090] [ 1444.363148][ T5978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.381658][ T1031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.510144][ T5978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.600281][ T1031] team0: Port device team_slave_0 added [ 1444.722236][ T5978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.826060][ T1031] team0: Port device team_slave_1 added [ 1444.993777][ T1031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.007841][ T1031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.043887][ T1031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.091183][ T1031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.099380][ T1031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.166147][ T1031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.462047][ T1031] device hsr_slave_0 entered promiscuous mode [ 1445.470185][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 1445.571792][ T1031] device hsr_slave_1 entered promiscuous mode [ 1445.607359][ T1031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.615002][ T1031] Cannot create hsr debugfs directory [ 1445.697540][ T5978] device 0 left promiscuous mode [ 1446.590701][ T5978] device .*! left promiscuous mode [ 1447.546782][T31209] Bluetooth: hci0: command 0x040f tx timeout [ 1449.494142][ T1031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1449.527761][ T1031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1449.626444][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 1450.354487][ T1031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1450.393914][ T1197] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9364'. [ 1450.416967][ T1031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1450.747217][ T1206] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1450.885690][ T1031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.271183][ T1031] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.317691][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1451.345662][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1451.558293][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1451.580996][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1451.612992][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.620345][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.004297][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1452.161686][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1452.182192][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1452.233343][ T5978] device veth1_macvtap left promiscuous mode [ 1452.260118][ T5978] device veth0_macvtap left promiscuous mode [ 1452.290587][ T5978] device veth1_vlan left promiscuous mode [ 1452.306764][ T5978] device veth0_vlan left promiscuous mode [ 1452.906819][ T5985] wlan1: Trigger new scan to find an IBSS to join [ 1454.300036][ T5978] team0 (unregistering): Port device virt_wifi0 removed [ 1454.494975][ T5978] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1454.550324][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 1454.650638][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.705017][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.079461][ T5978] bond0 (unregistering): Released all slaves [ 1455.121734][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1455.131041][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1455.141138][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.148300][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1455.197840][ T1275] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9377'. [ 1455.258958][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1455.294901][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1455.346092][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1455.384319][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1455.405943][ T5985] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1455.409776][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1455.465281][ T1278] device bridge_slave_1 left promiscuous mode [ 1455.472112][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.503457][ T1278] device bridge_slave_0 left promiscuous mode [ 1455.510894][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.646131][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1455.665940][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1455.685660][ T1031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1455.706685][ T1031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1455.745485][ T1286] netlink: 'syz.2.9379': attribute type 10 has an invalid length. [ 1455.756586][ T1286] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9379'. [ 1455.787536][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.795109][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.839308][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.846552][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1455.854019][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.861265][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1455.915490][ T1286] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1455.925738][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1455.937987][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1455.958434][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1455.977591][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1456.025472][ T1290] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9380'. [ 1456.061834][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1456.198668][ T1296] netlink: 'syz.2.9381': attribute type 3 has an invalid length. [ 1456.237149][ T1296] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9381'. [ 1456.427507][ T1304] netlink: 'syz.2.9381': attribute type 41 has an invalid length. [ 1456.827738][ T64] wlan1: Trigger new scan to find an IBSS to join [ 1457.200027][ T1316] netlink: 'syz.3.9384': attribute type 2 has an invalid length. [ 1457.230792][ T1316] device .*! entered promiscuous mode [ 1458.152961][ T1321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9385'. [ 1458.156284][ T64] wlan1: Creating new IBSS network, BSSID 92:fa:dd:d9:2a:4c [ 1458.228373][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1458.257034][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1458.270868][ T1031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.582557][ T1352] netlink: 'syz.2.9390': attribute type 11 has an invalid length. [ 1458.614587][ T1352] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9390'. [ 1458.820722][ T1347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.412137][ T1375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9396'. [ 1460.765937][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1460.785283][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1460.861403][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1460.892574][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1460.930366][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1460.940553][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1460.974717][ T1031] device veth0_vlan entered promiscuous mode [ 1461.015916][ T1031] device veth1_vlan entered promiscuous mode [ 1461.120127][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1461.141704][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1461.155659][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1461.173082][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1461.185445][ T1031] device veth0_macvtap entered promiscuous mode [ 1461.194825][ T1392] netlink: 'syz.3.9401': attribute type 21 has an invalid length. [ 1461.214258][ T1031] device veth1_macvtap entered promiscuous mode [ 1461.225195][ T1392] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9401'. [ 1461.262525][ T1031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.274040][ T1031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.285383][ T1031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.296486][ T1031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.309093][ T1031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1461.334739][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1461.347815][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1461.367480][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1461.389869][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1461.620646][ T1031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.653680][ T1031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.672862][ T1031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.683915][ T1031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.699641][ T1031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.721810][ T1031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.732968][ T1031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.744760][ T1031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.759008][ T1031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.768518][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1461.785641][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1461.814610][ T1031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.851011][ T1031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.881412][ T1031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.894252][ T1031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.261473][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.286699][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.364394][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1462.377483][ T1413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9409'. [ 1462.455823][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.468568][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.492769][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1463.763085][ T1435] netlink: 'syz.1.9414': attribute type 21 has an invalid length. [ 1463.837936][ T1440] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9414'. [ 1464.721416][ T1451] netlink: 'syz.3.9421': attribute type 21 has an invalid length. [ 1464.780052][ T1451] IPv6: NLM_F_CREATE should be specified when creating new route [ 1464.857756][ T1451] IPv6: Can't replace route, no match found [ 1464.894415][ T1453] device bridge_slave_1 left promiscuous mode [ 1464.908338][ T1453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.933233][ T1453] device bridge_slave_0 left promiscuous mode [ 1465.164252][ T1453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.048128][ T1455] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9421'. [ 1466.149594][ T1457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9422'. [ 1466.161733][ T1450] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9421'. [ 1468.730979][ T1499] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9436'. [ 1470.710053][ T1525] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9443'. [ 1470.896239][ T1530] netlink: 'syz.3.9444': attribute type 22 has an invalid length. [ 1470.907286][ T1530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9444'. [ 1471.000505][ T1540] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.9447'. [ 1472.250191][ T1561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9453'. [ 1472.810470][ T1564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9455'. [ 1473.014076][ T1580] netlink: 'syz.1.9458': attribute type 8 has an invalid length. [ 1473.046174][ T1580] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9458'. [ 1473.127227][ T1584] IPv6: Can't replace route, no match found [ 1473.162569][ T1587] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9459'. [ 1473.189006][ T1587] netlink: zone id is out of range [ 1473.194580][ T1587] netlink: zone id is out of range [ 1473.277175][ T1587] netlink: zone id is out of range [ 1473.287263][ T1587] netlink: zone id is out of range [ 1473.292451][ T1587] netlink: zone id is out of range [ 1473.298738][ T1587] netlink: zone id is out of range [ 1473.318661][ T1587] netlink: zone id is out of range [ 1473.323962][ T1587] netlink: zone id is out of range [ 1473.330744][ T1587] netlink: zone id is out of range [ 1473.335994][ T1587] netlink: zone id is out of range [ 1473.599417][ T1595] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1473.796181][ T1602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9464'. [ 1474.241419][ T1612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9469'. [ 1474.307742][ T1610] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9468'. [ 1477.041936][ T1647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9480'. [ 1478.273562][ T1671] netlink: 'syz.1.9486': attribute type 10 has an invalid length. [ 1478.579329][ T1683] netlink: 'syz.0.9490': attribute type 9 has an invalid length. [ 1478.626379][ T1683] netlink: 'syz.0.9490': attribute type 8 has an invalid length. [ 1478.678549][ T1683] netlink: 355 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1478.692814][ T1682] IPv6: Can't replace route, no match found [ 1478.773771][ T1682] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9489'. [ 1478.832795][ T1682] net_ratelimit: 12 callbacks suppressed [ 1478.832817][ T1682] netlink: zone id is out of range [ 1478.910789][ T1682] netlink: zone id is out of range [ 1478.940384][ T1682] netlink: zone id is out of range [ 1478.955449][ T1682] netlink: zone id is out of range [ 1478.976469][ T1689] netlink: 'syz.0.9492': attribute type 10 has an invalid length. [ 1478.991203][ T1682] netlink: zone id is out of range [ 1479.000586][ T1682] netlink: zone id is out of range [ 1479.021744][ T1682] netlink: zone id is out of range [ 1479.043787][ T1682] netlink: zone id is out of range [ 1479.072041][ T1682] netlink: zone id is out of range [ 1479.093756][ T1682] netlink: zone id is out of range [ 1479.424087][ T1694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9494'. [ 1479.715525][ T1704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9497'. [ 1479.747817][ T1704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9497'. [ 1479.771069][ T1699] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9497'. [ 1480.621805][ T1729] IPv6: Can't replace route, no match found [ 1480.695954][ T1729] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9506'. [ 1481.247846][ T1744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9512'. [ 1482.606851][ T1769] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 1482.633034][ T1771] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1482.658274][ T1771] syzkaller1: group set to 778 [ 1482.818764][ T1777] netlink: 'syz.0.9523': attribute type 29 has an invalid length. [ 1482.827604][ T1777] netlink: 'syz.0.9523': attribute type 29 has an invalid length. [ 1482.897193][ T1778] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9522'. [ 1482.936993][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1482.966006][ T1781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9524'. [ 1483.545967][ T1798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9531'. [ 1483.699720][ T1798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9531'. [ 1484.450899][ T1808] __nla_validate_parse: 1 callbacks suppressed [ 1484.450924][ T1808] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9534'. [ 1484.509017][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.515508][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.690611][ T1832] netlink: 'syz.0.9541': attribute type 10 has an invalid length. [ 1485.709168][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.757042][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.996913][ T1838] netlink: 'syz.1.9544': attribute type 10 has an invalid length. [ 1486.005857][ T1838] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9544'. [ 1486.137097][ T1846] FAULT_INJECTION: forcing a failure. [ 1486.137097][ T1846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.156472][ T1846] CPU: 0 PID: 1846 Comm: syz.1.9548 Not tainted syzkaller #0 [ 1486.163971][ T1846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1486.174112][ T1846] Call Trace: [ 1486.177462][ T1846] [ 1486.180431][ T1846] dump_stack_lvl+0x188/0x24e [ 1486.185174][ T1846] ? show_regs_print_info+0x12/0x12 [ 1486.190431][ T1846] ? load_image+0x410/0x410 [ 1486.195084][ T1846] ? __lock_acquire+0x7ea0/0x7ea0 [ 1486.200173][ T1846] should_fail_ex+0x390/0x4c0 [ 1486.204920][ T1846] _copy_to_user+0x2c/0x130 [ 1486.209481][ T1846] bpf_test_finish+0x266/0x600 [ 1486.214319][ T1846] ? dst_hold+0xb0/0xb0 [ 1486.218571][ T1846] ? convert_skb_to___skb+0x420/0x420 [ 1486.224032][ T1846] ? refcount_dec_and_lock_irqsave+0xd1/0xf0 [ 1486.230084][ T1846] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1486.236145][ T1846] bpf_prog_test_run_xdp+0x827/0xf80 [ 1486.241500][ T1846] ? __lock_acquire+0x7ea0/0x7ea0 [ 1486.246594][ T1846] ? dev_put+0x80/0x80 [ 1486.250718][ T1846] ? dev_put+0x80/0x80 [ 1486.254836][ T1846] bpf_prog_test_run+0x31c/0x390 [ 1486.259816][ T1846] __sys_bpf+0x62b/0x780 [ 1486.264091][ T1846] ? bpf_link_show_fdinfo+0x380/0x380 [ 1486.269517][ T1846] ? lock_chain_count+0x20/0x20 [ 1486.274413][ T1846] __x64_sys_bpf+0x78/0x90 [ 1486.278871][ T1846] do_syscall_64+0x4c/0xa0 [ 1486.283316][ T1846] ? clear_bhb_loop+0x60/0xb0 [ 1486.288028][ T1846] ? clear_bhb_loop+0x60/0xb0 [ 1486.292738][ T1846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1486.298664][ T1846] RIP: 0033:0x7f9c16d9e199 [ 1486.303110][ T1846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.322752][ T1846] RSP: 002b:00007f9c17be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1486.331196][ T1846] RAX: ffffffffffffffda RBX: 00007f9c17025fa0 RCX: 00007f9c16d9e199 [ 1486.339199][ T1846] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1486.347223][ T1846] RBP: 00007f9c17be7090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.355225][ T1846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.363228][ T1846] R13: 00007f9c17026038 R14: 00007f9c17025fa0 R15: 00007fff76d94d98 [ 1486.371238][ T1846] [ 1486.392058][ T1851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9550'. [ 1486.393038][ T64] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1488.180321][ T5978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1488.585551][ T1875] netlink: 'syz.3.9558': attribute type 10 has an invalid length. [ 1488.593799][ T1875] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9558'. [ 1489.409020][ T1898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9565'. [ 1489.640887][ T1903] netlink: 'syz.4.9568': attribute type 21 has an invalid length. [ 1489.666811][ T1903] netlink: 'syz.4.9568': attribute type 1 has an invalid length. [ 1489.682053][ T1903] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9568'. [ 1490.082024][ T1918] FAULT_INJECTION: forcing a failure. [ 1490.082024][ T1918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.150870][ T1918] CPU: 1 PID: 1918 Comm: syz.4.9572 Not tainted syzkaller #0 [ 1490.158348][ T1918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1490.168468][ T1918] Call Trace: [ 1490.171797][ T1918] [ 1490.174783][ T1918] dump_stack_lvl+0x188/0x24e [ 1490.179536][ T1918] ? show_regs_print_info+0x12/0x12 [ 1490.184805][ T1918] ? load_image+0x410/0x410 [ 1490.189411][ T1918] ? __lock_acquire+0x7ea0/0x7ea0 [ 1490.194516][ T1918] should_fail_ex+0x390/0x4c0 [ 1490.199270][ T1918] _copy_from_user+0x2c/0x170 [ 1490.204011][ T1918] __sys_bpf+0x2ea/0x780 [ 1490.208320][ T1918] ? bpf_link_show_fdinfo+0x380/0x380 [ 1490.213771][ T1918] ? lock_chain_count+0x20/0x20 [ 1490.218701][ T1918] __x64_sys_bpf+0x78/0x90 [ 1490.223179][ T1918] do_syscall_64+0x4c/0xa0 [ 1490.227662][ T1918] ? clear_bhb_loop+0x60/0xb0 [ 1490.232398][ T1918] ? clear_bhb_loop+0x60/0xb0 [ 1490.237141][ T1918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1490.243096][ T1918] RIP: 0033:0x7f49e059e199 [ 1490.247567][ T1918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.267229][ T1918] RSP: 002b:00007f49e13cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1490.275684][ T1918] RAX: ffffffffffffffda RBX: 00007f49e0825fa0 RCX: 00007f49e059e199 [ 1490.283700][ T1918] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1490.291710][ T1918] RBP: 00007f49e13cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.299709][ T1918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.307804][ T1918] R13: 00007f49e0826038 R14: 00007f49e0825fa0 R15: 00007ffef30c5348 [ 1490.315835][ T1918] [ 1490.692542][ T1935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9578'. [ 1490.830502][ T1938] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9577'. [ 1490.846640][ T1938] device bridge_slave_1 entered promiscuous mode [ 1491.017102][ T1941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9579'. [ 1491.319989][ T1951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9581'. [ 1492.563082][ T1969] netlink: 'syz.1.9588': attribute type 10 has an invalid length. [ 1492.583940][ T1969] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9588'. [ 1492.885706][ T1985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9596'. [ 1492.935640][ T1981] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9595'. [ 1493.037807][ T1981] net_ratelimit: 33 callbacks suppressed [ 1493.037828][ T1981] netlink: zone id is out of range [ 1493.097214][ T1981] netlink: zone id is out of range [ 1493.117409][ T1981] netlink: zone id is out of range [ 1493.137658][ T1981] netlink: zone id is out of range [ 1493.159134][ T1981] netlink: zone id is out of range [ 1493.176005][ T1981] netlink: zone id is out of range [ 1493.285597][ T1981] netlink: zone id is out of range [ 1493.399021][ T1981] netlink: zone id is out of range [ 1493.542173][ T1981] netlink: zone id is out of range [ 1493.644617][ T1981] netlink: zone id is out of range [ 1494.870710][ T2024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9612'. [ 1496.826491][T31209] Bluetooth: hci1: command 0x0406 tx timeout [ 1497.007468][ T2071] netlink: 'syz.1.9630': attribute type 3 has an invalid length. [ 1497.026470][ T2071] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9630'. [ 1497.898015][ T2089] netlink: 'syz.0.9635': attribute type 11 has an invalid length. [ 1497.906982][ T2089] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9635'. [ 1498.190774][ T2093] netlink: 'syz.3.9637': attribute type 29 has an invalid length. [ 1498.288569][ T2093] netlink: 'syz.3.9637': attribute type 29 has an invalid length. [ 1498.485526][ T2097] netlink: 'syz.3.9637': attribute type 29 has an invalid length. [ 1499.051521][ T2088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1500.233192][ T2139] netlink: 'syz.3.9647': attribute type 8 has an invalid length. [ 1500.286443][ T2139] netlink: 91080 bytes leftover after parsing attributes in process `syz.3.9647'. [ 1500.846748][ T2145] FAULT_INJECTION: forcing a failure. [ 1500.846748][ T2145] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.901406][ T2145] CPU: 0 PID: 2145 Comm: syz.2.9651 Not tainted syzkaller #0 [ 1500.908891][ T2145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1500.919009][ T2145] Call Trace: [ 1500.922334][ T2145] [ 1500.925334][ T2145] dump_stack_lvl+0x188/0x24e [ 1500.930039][ T2143] IPv6: Can't replace route, no match found [ 1500.935970][ T2145] ? show_regs_print_info+0x12/0x12 [ 1500.936041][ T2145] ? load_image+0x410/0x410 [ 1500.936076][ T2145] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1500.936114][ T2145] ? lock_chain_count+0x20/0x20 [ 1500.936150][ T2145] should_fail_ex+0x390/0x4c0 [ 1500.936197][ T2145] should_failslab+0x5/0x20 [ 1500.936219][ T2145] slab_pre_alloc_hook+0x59/0x300 [ 1500.936248][ T2145] ? sctp_add_bind_addr+0x89/0x350 [ 1500.936276][ T2145] __kmem_cache_alloc_node+0x4f/0x270 [ 1500.936304][ T2145] ? sctp_add_bind_addr+0x89/0x350 [ 1500.936329][ T2145] kmalloc_trace+0x26/0xe0 [ 1500.936353][ T2145] sctp_add_bind_addr+0x89/0x350 [ 1500.936382][ T2145] sctp_copy_local_addr_list+0x317/0x4d0 [ 1500.936412][ T2145] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1500.936439][ T2145] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1500.936469][ T2145] ? sctp_v4_is_any+0x31/0x50 [ 1500.936493][ T2145] ? sctp_copy_one_addr+0x93/0x660 [ 1500.936522][ T2145] sctp_bind_addr_copy+0xaf/0x3c0 [ 1501.028896][ T2145] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1501.035287][ T2145] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1501.040632][ T2145] ? __sctp_connect+0xd80/0xd80 [ 1501.045544][ T2145] ? __local_bh_enable_ip+0x136/0x1c0 [ 1501.050984][ T2145] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1501.051499][ T2143] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9649'. [ 1501.056570][ T2145] ? security_sctp_bind_connect+0x85/0xb0 [ 1501.056614][ T2145] sctp_sendmsg+0x1686/0x2940 [ 1501.056657][ T2145] ? sctp_getsockopt+0x8a0/0x8a0 [ 1501.056682][ T2145] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1501.056713][ T2145] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1501.056744][ T2145] ? aa_sock_msg_perm+0x94/0x150 [ 1501.056785][ T2145] ? inet_sendmsg+0xca/0x2a0 [ 1501.056813][ T2145] ? inet_send_prepare+0x250/0x250 [ 1501.056843][ T2145] ____sys_sendmsg+0x5ed/0x9a0 [ 1501.056878][ T2145] ? __sys_sendmsg_sock+0x30/0x30 [ 1501.056902][ T2145] ? __import_iovec+0x306/0x510 [ 1501.056945][ T2145] ? import_iovec+0x6f/0xa0 [ 1501.056982][ T2145] ___sys_sendmsg+0x2a2/0x360 [ 1501.057006][ T2145] ? __fget_files+0x28/0x460 [ 1501.057044][ T2145] ? __sys_sendmsg+0x2a0/0x2a0 [ 1501.057092][ T2145] ? ktime_get+0x7b/0x270 [ 1501.057148][ T2145] __se_sys_sendmsg+0x1c3/0x2b0 [ 1501.057173][ T2145] ? perf_trace_preemptirq_template+0x268/0x320 [ 1501.057215][ T2145] ? __x64_sys_sendmsg+0x80/0x80 [ 1501.057258][ T2145] ? lockdep_hardirqs_on+0x94/0x140 [ 1501.057294][ T2145] do_syscall_64+0x4c/0xa0 [ 1501.057319][ T2145] ? clear_bhb_loop+0x60/0xb0 [ 1501.057344][ T2145] ? clear_bhb_loop+0x60/0xb0 [ 1501.057370][ T2145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1501.057395][ T2145] RIP: 0033:0x7fd6ddf9e199 [ 1501.057417][ T2145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1501.057436][ T2145] RSP: 002b:00007fd6dee9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1501.057461][ T2145] RAX: ffffffffffffffda RBX: 00007fd6de225fa0 RCX: 00007fd6ddf9e199 [ 1501.057479][ T2145] RDX: 00000000000003e8 RSI: 0000200000001900 RDI: 0000000000000006 [ 1501.057495][ T2145] RBP: 00007fd6dee9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.057510][ T2145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1501.057524][ T2145] R13: 00007fd6de226038 R14: 00007fd6de225fa0 R15: 00007fffd6452e78 [ 1501.057558][ T2145] [ 1501.382597][ T2150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9653'. [ 1501.419359][ T2143] net_ratelimit: 479 callbacks suppressed [ 1501.419379][ T2143] netlink: zone id is out of range [ 1501.436741][ T2143] netlink: zone id is out of range [ 1501.518825][ T2143] netlink: zone id is out of range [ 1501.524517][ T2143] netlink: zone id is out of range [ 1501.542129][ T2143] netlink: zone id is out of range [ 1501.556642][ T2143] netlink: zone id is out of range [ 1501.562578][ T2143] netlink: zone id is out of range [ 1501.699319][ T2143] netlink: zone id is out of range [ 1501.710396][ T2143] netlink: zone id is out of range [ 1501.758698][ T2143] netlink: zone id is out of range [ 1502.828586][ T2189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9666'. [ 1503.087676][ T2193] IPv6: Can't replace route, no match found [ 1503.115567][ T2195] IPv6: Can't replace route, no match found [ 1503.149810][ T2193] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9668'. [ 1503.172997][ T2199] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1503.444812][ T2209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9673'. [ 1504.990643][ T2228] netlink: 'syz.3.9677': attribute type 10 has an invalid length. [ 1505.026046][ T2228] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9677'. [ 1505.086663][ T2230] netlink: 'syz.0.9678': attribute type 2 has an invalid length. [ 1505.095661][ T2230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9678'. [ 1505.233927][ T2238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9682'. [ 1505.459671][ T2244] IPv6: Can't replace route, no match found [ 1505.502634][ T2244] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1505.663882][ T2251] netlink: 'syz.3.9685': attribute type 3 has an invalid length. [ 1505.692417][ T2251] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9685'. [ 1507.734281][ T2270] FAULT_INJECTION: forcing a failure. [ 1507.734281][ T2270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1507.771584][ T2270] CPU: 1 PID: 2270 Comm: syz.1.9694 Not tainted syzkaller #0 [ 1507.779052][ T2270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1507.789166][ T2270] Call Trace: [ 1507.792483][ T2270] [ 1507.795474][ T2270] dump_stack_lvl+0x188/0x24e [ 1507.800206][ T2270] ? show_regs_print_info+0x12/0x12 [ 1507.805455][ T2270] ? load_image+0x410/0x410 [ 1507.810022][ T2270] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1507.816230][ T2270] should_fail_ex+0x390/0x4c0 [ 1507.820984][ T2270] prepare_alloc_pages+0x1e1/0x5b0 [ 1507.826177][ T2270] __alloc_pages+0x130/0x4f0 [ 1507.830836][ T2270] ? zone_statistics+0x170/0x170 [ 1507.835841][ T2270] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1507.841713][ T2270] ? verify_lock_unused+0x140/0x140 [ 1507.846978][ T2270] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1507.853026][ T2270] __folio_alloc+0xe/0x30 [ 1507.857413][ T2270] vma_alloc_folio+0x499/0x900 [ 1507.862310][ T2270] wp_page_copy+0x24b/0x1660 [ 1507.866958][ T2270] ? __lock_acquire+0x7ea0/0x7ea0 [ 1507.872063][ T2270] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 1507.877765][ T2270] ? do_raw_spin_unlock+0x11d/0x230 [ 1507.883038][ T2270] ? _raw_spin_unlock+0x24/0x40 [ 1507.887953][ T2270] ? do_wp_page+0x678/0x16b0 [ 1507.892610][ T2270] handle_mm_fault+0x1b1b/0x3d40 [ 1507.897627][ T2270] ? numa_migrate_prep+0x250/0x250 [ 1507.902824][ T2270] ? do_user_addr_fault+0x852/0xb20 [ 1507.908089][ T2270] do_user_addr_fault+0x58e/0xb20 [ 1507.913190][ T2270] exc_page_fault+0x60/0x100 [ 1507.917850][ T2270] asm_exc_page_fault+0x22/0x30 [ 1507.922751][ T2270] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1507.929403][ T2270] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1507.949071][ T2270] RSP: 0018:ffffc900063976c8 EFLAGS: 00050206 [ 1507.955205][ T2270] RAX: ffffffff84148501 RBX: 00000000000101d0 RCX: 000000000000d690 [ 1507.963221][ T2270] RDX: 00000000000101d0 RSI: ffff888054f62c28 RDI: 0000200000003000 [ 1507.971225][ T2270] RBP: 0000000000000000 R08: ffff888054f702b7 R09: 1ffff1100a9ee056 [ 1507.979235][ T2270] R10: dffffc0000000000 R11: ffffed100a9ee057 R12: 00007ffffffeee30 [ 1507.987242][ T2270] R13: 00000000000101d0 R14: ffff888054f600e8 R15: 00002000000004c0 [ 1507.995259][ T2270] ? copyout+0x71/0x120 [ 1507.999462][ T2270] copyout+0xe7/0x120 [ 1508.003484][ T2270] _copy_to_iter+0x482/0x1050 [ 1508.008213][ T2270] ? iov_iter_init+0x1f0/0x1f0 [ 1508.013014][ T2270] ? __virt_addr_valid+0x188/0x540 [ 1508.018169][ T2270] ? __virt_addr_valid+0x467/0x540 [ 1508.023319][ T2270] ? __phys_addr_symbol+0x2b/0x70 [ 1508.028383][ T2270] __skb_datagram_iter+0xde/0x740 [ 1508.033625][ T2270] ? skb_copy_datagram_iter+0x290/0x290 [ 1508.039225][ T2270] skb_copy_datagram_iter+0xd7/0x290 [ 1508.044564][ T2270] tipc_recvstream+0x72c/0xe90 [ 1508.049386][ T2270] ? tipc_sendstream+0x70/0x70 [ 1508.054186][ T2270] ____sys_recvmsg+0x2c8/0x5b0 [ 1508.059001][ T2270] ? __sys_recvmsg_sock+0x40/0x40 [ 1508.064069][ T2270] ? import_iovec+0x6f/0xa0 [ 1508.068612][ T2270] ___sys_recvmsg+0x210/0x590 [ 1508.073344][ T2270] ? __sys_recvmsg+0x2a0/0x2a0 [ 1508.078156][ T2270] ? __fget_files+0x3fc/0x460 [ 1508.082899][ T2270] __x64_sys_recvmsg+0x20d/0x2e0 [ 1508.087893][ T2270] ? perf_trace_preemptirq_template+0x268/0x320 [ 1508.094168][ T2270] ? ___sys_recvmsg+0x590/0x590 [ 1508.099060][ T2270] ? lockdep_hardirqs_on+0x94/0x140 [ 1508.104301][ T2270] do_syscall_64+0x4c/0xa0 [ 1508.108747][ T2270] ? clear_bhb_loop+0x60/0xb0 [ 1508.113454][ T2270] ? clear_bhb_loop+0x60/0xb0 [ 1508.118181][ T2270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1508.124102][ T2270] RIP: 0033:0x7f9c16d9e199 [ 1508.128542][ T2270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.148179][ T2270] RSP: 002b:00007f9c17be7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1508.156625][ T2270] RAX: ffffffffffffffda RBX: 00007f9c17025fa0 RCX: 00007f9c16d9e199 [ 1508.164624][ T2270] RDX: 0000000040000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 1508.172630][ T2270] RBP: 00007f9c17be7090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.180645][ T2270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.188652][ T2270] R13: 00007f9c17026038 R14: 00007f9c17025fa0 R15: 00007fff76d94d98 [ 1508.196676][ T2270] [ 1508.954662][ T2290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1509.156073][ T2296] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9700'. [ 1509.190401][ T2293] IPv6: Can't replace route, no match found [ 1509.214726][ T2296] net_ratelimit: 74 callbacks suppressed [ 1509.214745][ T2296] netlink: zone id is out of range [ 1509.235202][ T2296] netlink: zone id is out of range [ 1509.284888][ T2296] netlink: zone id is out of range [ 1509.296606][ T2296] netlink: zone id is out of range [ 1509.325518][ T2296] netlink: zone id is out of range [ 1509.366222][ T2296] netlink: zone id is out of range [ 1509.408224][ T2296] netlink: zone id is out of range [ 1509.413434][ T2296] netlink: zone id is out of range [ 1509.504289][ T2296] netlink: zone id is out of range [ 1509.524687][ T2296] netlink: zone id is out of range [ 1510.218184][ T2314] netlink: 'syz.1.9707': attribute type 29 has an invalid length. [ 1510.241678][ T2319] netlink: 'syz.3.9708': attribute type 2 has an invalid length. [ 1510.262469][ T2319] netlink: 'syz.3.9708': attribute type 1 has an invalid length. [ 1510.320958][ T2311] netlink: 'syz.1.9707': attribute type 29 has an invalid length. [ 1510.349781][ T2314] netlink: 'syz.1.9707': attribute type 29 has an invalid length. [ 1510.397785][ T2321] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9707'. [ 1510.601863][ T2321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.649374][ T2321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.718363][ T2321] bond0 (unregistering): Released all slaves [ 1510.740095][ T2329] netlink: 'syz.3.9711': attribute type 9 has an invalid length. [ 1510.762843][ T2323] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9707'. [ 1510.801629][ T2329] netlink: 'syz.3.9711': attribute type 8 has an invalid length. [ 1510.827520][ T2317] netlink: 'syz.1.9707': attribute type 29 has an invalid length. [ 1510.866619][ T2329] netlink: 355 bytes leftover after parsing attributes in process `syz.3.9711'. [ 1510.925143][ T2331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9712'. [ 1511.109955][ T2331] netlink: 'syz.0.9712': attribute type 28 has an invalid length. [ 1511.118103][ T2339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9715'. [ 1511.118152][ T2339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9715'. [ 1511.118471][ T2338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9715'. [ 1511.206840][ T2331] netlink: 'syz.0.9712': attribute type 3 has an invalid length. [ 1511.247892][ T2331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9712'. [ 1511.840046][ T2355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9722'. [ 1513.783985][ T2384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9729'. [ 1515.954721][ T2442] validate_nla: 3 callbacks suppressed [ 1515.954741][ T2442] netlink: 'syz.1.9744': attribute type 28 has an invalid length. [ 1515.993055][ T2442] netlink: 'syz.1.9744': attribute type 3 has an invalid length. [ 1516.007897][ T2442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9744'. [ 1517.838828][ T2434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9744'. [ 1517.851293][ T2451] netlink: 'syz.3.9746': attribute type 10 has an invalid length. [ 1517.866717][ T2451] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9746'. [ 1518.147282][ T2466] netlink: 'syz.0.9751': attribute type 29 has an invalid length. [ 1518.155239][ T2466] netlink: 'syz.0.9751': attribute type 29 has an invalid length. [ 1518.203030][ T2465] netlink: 'syz.0.9751': attribute type 29 has an invalid length. [ 1518.255004][ T2474] netlink: 'syz.2.9754': attribute type 16 has an invalid length. [ 1518.283785][ T2474] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9754'. [ 1518.589904][ T5983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1518.648038][ T2487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9758'. [ 1518.832600][ T2489] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9757'. [ 1518.958819][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1519.076802][ T2490] netlink: 'syz.2.9758': attribute type 28 has an invalid length. [ 1519.205210][ T2489] net_ratelimit: 11 callbacks suppressed [ 1519.205297][ T2489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1519.239781][ T2490] netlink: 'syz.2.9758': attribute type 3 has an invalid length. [ 1519.306499][ T2490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9758'. [ 1519.386733][ T2488] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.9757'. [ 1519.406225][ T5978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1520.607493][ T2535] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.9769'. [ 1520.617137][ T2535] netlink: zone id is out of range [ 1520.622596][ T2535] netlink: zone id is out of range [ 1520.755851][ T2535] netlink: zone id is out of range [ 1520.767900][ T2535] netlink: get zone limit has 8 unknown bytes [ 1521.497964][ T2543] netlink: 'syz.3.9771': attribute type 28 has an invalid length. [ 1521.567249][ T2543] netlink: 'syz.3.9771': attribute type 3 has an invalid length. [ 1521.609785][ T2543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9771'. [ 1522.448361][ T2537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9771'. [ 1522.800736][ T2576] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9780'. [ 1522.862439][ T2575] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1523.174322][ T2594] netlink: 'syz.2.9784': attribute type 4 has an invalid length. [ 1523.463987][ T2599] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9786'. [ 1523.475914][ T2599] netlink: zone id is out of range [ 1523.487796][ T2599] netlink: zone id is out of range [ 1523.493138][ T2599] netlink: zone id is out of range [ 1523.502950][ T2599] netlink: zone id is out of range [ 1523.512080][ T2599] netlink: zone id is out of range [ 1523.682375][ T2607] FAULT_INJECTION: forcing a failure. [ 1523.682375][ T2607] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.751204][ T2607] CPU: 0 PID: 2607 Comm: syz.2.9788 Not tainted syzkaller #0 [ 1523.758703][ T2607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1523.768814][ T2607] Call Trace: [ 1523.772160][ T2607] [ 1523.775159][ T2607] dump_stack_lvl+0x188/0x24e [ 1523.779896][ T2607] ? show_regs_print_info+0x12/0x12 [ 1523.785142][ T2607] ? load_image+0x410/0x410 [ 1523.789711][ T2607] ? __lock_acquire+0x7ea0/0x7ea0 [ 1523.794801][ T2607] ? trace_event_raw_event_lock+0x230/0x230 [ 1523.800746][ T2607] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1523.806435][ T2607] should_fail_ex+0x390/0x4c0 [ 1523.811177][ T2607] should_failslab+0x5/0x20 [ 1523.815727][ T2607] slab_pre_alloc_hook+0x59/0x300 [ 1523.820810][ T2607] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1523.826414][ T2607] __kmem_cache_alloc_node+0x4f/0x270 [ 1523.831840][ T2607] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1523.837436][ T2607] __kmalloc+0xa3/0x240 [ 1523.841655][ T2607] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1523.847104][ T2607] ? __fget_files+0x28/0x460 [ 1523.851753][ T2607] ? __fget_files+0x3fc/0x460 [ 1523.856494][ T2607] ? cpu_online+0xa0/0xa0 [ 1523.860888][ T2607] bpf_prog_test_run+0x31c/0x390 [ 1523.865877][ T2607] __sys_bpf+0x62b/0x780 [ 1523.870175][ T2607] ? bpf_link_show_fdinfo+0x380/0x380 [ 1523.875624][ T2607] ? lock_chain_count+0x20/0x20 [ 1523.880542][ T2607] __x64_sys_bpf+0x78/0x90 [ 1523.885021][ T2607] do_syscall_64+0x4c/0xa0 [ 1523.889481][ T2607] ? clear_bhb_loop+0x60/0xb0 [ 1523.894224][ T2607] ? clear_bhb_loop+0x60/0xb0 [ 1523.898951][ T2607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1523.904895][ T2607] RIP: 0033:0x7fd6ddf9e199 [ 1523.909350][ T2607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.929011][ T2607] RSP: 002b:00007fd6dee9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1523.937478][ T2607] RAX: ffffffffffffffda RBX: 00007fd6de225fa0 RCX: 00007fd6ddf9e199 [ 1523.945491][ T2607] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1523.953508][ T2607] RBP: 00007fd6dee9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.961526][ T2607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.969547][ T2607] R13: 00007fd6de226038 R14: 00007fd6de225fa0 R15: 00007fffd6452e78 [ 1523.977591][ T2607] [ 1524.447911][ T2616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9791'. [ 1524.616420][ T2625] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9795'. [ 1524.725881][ T2616] netlink: 'syz.2.9791': attribute type 28 has an invalid length. [ 1524.766771][ T2616] netlink: 'syz.2.9791': attribute type 3 has an invalid length. [ 1524.799953][ T2616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9791'. [ 1525.324628][ T2654] netlink: 'syz.2.9798': attribute type 41 has an invalid length. [ 1525.456080][ T2663] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9799'. [ 1525.557592][ T2663] net_ratelimit: 1 callbacks suppressed [ 1525.557614][ T2663] netlink: zone id is out of range [ 1525.643438][ T2663] netlink: zone id is out of range [ 1525.702270][ T2663] netlink: zone id is out of range [ 1525.752590][ T2663] netlink: zone id is out of range [ 1525.805043][ T2663] netlink: zone id is out of range [ 1525.911227][ T2663] netlink: del zone limit has 4 unknown bytes [ 1526.733063][ T2687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9808'. [ 1526.961997][ T4878] wlan1: Trigger new scan to find an IBSS to join [ 1527.075374][ T2687] netlink: 'syz.4.9808': attribute type 28 has an invalid length. [ 1527.154170][ T2687] netlink: 'syz.4.9808': attribute type 3 has an invalid length. [ 1527.163239][ T2687] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9808'. [ 1527.481464][ T2694] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1527.540466][ T2694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1527.599583][ T2694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1527.626835][ T2694] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1527.648783][ T2694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1527.668119][ T2694] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1527.736073][ T2694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1527.760583][ T2694] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1527.979267][ T2710] netlink: 'syz.2.9814': attribute type 11 has an invalid length. [ 1528.234082][ T2720] netlink: zone id is out of range [ 1528.255242][ T2720] netlink: zone id is out of range [ 1528.279617][ T2720] netlink: zone id is out of range [ 1528.301434][ T2720] netlink: zone id is out of range [ 1528.322699][ T2707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1529.020066][ T2739] netlink: 'syz.2.9819': attribute type 28 has an invalid length. [ 1529.061313][ T2739] netlink: 'syz.2.9819': attribute type 3 has an invalid length. [ 1529.876516][ T5986] wlan1: Trigger new scan to find an IBSS to join [ 1530.390467][ T5983] wlan1: Creating new IBSS network, BSSID b2:fb:0f:2e:60:78 [ 1531.209251][ T2763] net_ratelimit: 2 callbacks suppressed [ 1531.209272][ T2763] netlink: zone id is out of range [ 1531.256674][ T2763] netlink: zone id is out of range [ 1531.262068][ T2763] netlink: zone id is out of range [ 1531.304114][ T2763] netlink: zone id is out of range [ 1531.331007][ T2763] netlink: zone id is out of range [ 1531.454034][ T2763] netlink: del zone limit has 4 unknown bytes [ 1532.057431][ T2781] netlink: 'syz.2.9832': attribute type 28 has an invalid length. [ 1532.150255][ T2781] netlink: 'syz.2.9832': attribute type 3 has an invalid length. [ 1532.244527][ T2781] __nla_validate_parse: 8 callbacks suppressed [ 1532.244547][ T2781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9832'. [ 1533.011899][ T2817] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.9840'. [ 1533.054593][ T2812] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.9837'. [ 1533.205713][ T2812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9837'. [ 1533.274336][ T2812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9837'. [ 1533.283458][ T2812] netlink: 33 bytes leftover after parsing attributes in process `syz.0.9837'. [ 1533.292665][ T2812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9837'. [ 1533.306397][ T2812] netlink: 33 bytes leftover after parsing attributes in process `syz.0.9837'. [ 1533.375066][ T2821] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9841'. [ 1533.399952][ T2812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9837'. [ 1533.404912][ T2821] netlink: zone id is out of range [ 1533.456129][ T2821] netlink: zone id is out of range [ 1533.486304][ T2821] netlink: zone id is out of range [ 1533.492607][ T2821] netlink: zone id is out of range [ 1535.059416][ T2848] netlink: 'syz.0.9846': attribute type 28 has an invalid length. [ 1535.081669][ T2848] netlink: 'syz.0.9846': attribute type 3 has an invalid length. [ 1535.729433][ T2879] FAULT_INJECTION: forcing a failure. [ 1535.729433][ T2879] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.749222][ T2879] CPU: 0 PID: 2879 Comm: syz.0.9855 Not tainted syzkaller #0 [ 1535.756689][ T2879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1535.766803][ T2879] Call Trace: [ 1535.770126][ T2879] [ 1535.773101][ T2879] dump_stack_lvl+0x188/0x24e [ 1535.777830][ T2879] ? sctp_sendmsg+0x1686/0x2940 [ 1535.782733][ T2879] ? ___sys_sendmsg+0x2a2/0x360 [ 1535.787735][ T2879] ? show_regs_print_info+0x12/0x12 [ 1535.793015][ T2879] ? load_image+0x410/0x410 [ 1535.797637][ T2879] should_fail_ex+0x390/0x4c0 [ 1535.802402][ T2879] should_failslab+0x5/0x20 [ 1535.806983][ T2879] slab_pre_alloc_hook+0x59/0x300 [ 1535.812087][ T2879] ? sctp_add_bind_addr+0x89/0x350 [ 1535.817265][ T2879] __kmem_cache_alloc_node+0x4f/0x270 [ 1535.822696][ T2879] ? sctp_add_bind_addr+0x89/0x350 [ 1535.827868][ T2879] kmalloc_trace+0x26/0xe0 [ 1535.832342][ T2879] sctp_add_bind_addr+0x89/0x350 [ 1535.837340][ T2879] sctp_copy_local_addr_list+0x317/0x4d0 [ 1535.843026][ T2879] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1535.848810][ T2879] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1535.854936][ T2879] ? sctp_v4_is_any+0x31/0x50 [ 1535.859684][ T2879] ? sctp_copy_one_addr+0x93/0x660 [ 1535.864867][ T2879] sctp_bind_addr_copy+0xaf/0x3c0 [ 1535.869951][ T2879] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1535.876346][ T2879] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1535.881694][ T2879] ? __sctp_connect+0xd80/0xd80 [ 1535.886600][ T2879] ? __local_bh_enable_ip+0x136/0x1c0 [ 1535.892121][ T2879] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1535.897722][ T2879] ? security_sctp_bind_connect+0x85/0xb0 [ 1535.903510][ T2879] sctp_sendmsg+0x1686/0x2940 [ 1535.908268][ T2879] ? sctp_getsockopt+0x8a0/0x8a0 [ 1535.913290][ T2879] ? __might_fault+0xa6/0x120 [ 1535.918025][ T2879] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1535.924497][ T2879] ? aa_sock_msg_perm+0x94/0x150 [ 1535.929563][ T2879] ? inet_sendmsg+0xca/0x2a0 [ 1535.934208][ T2879] ? inet_send_prepare+0x250/0x250 [ 1535.939377][ T2879] ____sys_sendmsg+0x5ed/0x9a0 [ 1535.944199][ T2879] ? __sys_sendmsg_sock+0x30/0x30 [ 1535.949271][ T2879] ? __import_iovec+0x306/0x510 [ 1535.954198][ T2879] ? import_iovec+0x6f/0xa0 [ 1535.958771][ T2879] ___sys_sendmsg+0x2a2/0x360 [ 1535.963511][ T2879] ? __sys_sendmsg+0x2a0/0x2a0 [ 1535.968354][ T2879] ? __lock_acquire+0x7ea0/0x7ea0 [ 1535.973492][ T2879] __se_sys_sendmsg+0x1c3/0x2b0 [ 1535.978403][ T2879] ? __x64_sys_sendmsg+0x80/0x80 [ 1535.983410][ T2879] ? lockdep_hardirqs_on+0x94/0x140 [ 1535.988676][ T2879] do_syscall_64+0x4c/0xa0 [ 1535.993148][ T2879] ? clear_bhb_loop+0x60/0xb0 [ 1535.997872][ T2879] ? clear_bhb_loop+0x60/0xb0 [ 1536.002602][ T2879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1536.008550][ T2879] RIP: 0033:0x7f253a19e199 [ 1536.013013][ T2879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.032674][ T2879] RSP: 002b:00007f253b0b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.041156][ T2879] RAX: ffffffffffffffda RBX: 00007f253a426090 RCX: 00007f253a19e199 [ 1536.049181][ T2879] RDX: 00000000000003e8 RSI: 0000200000001900 RDI: 0000000000000006 [ 1536.057198][ T2879] RBP: 00007f253b0b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.065223][ T2879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1536.073246][ T2879] R13: 00007f253a426128 R14: 00007f253a426090 R15: 00007ffe96ece5a8 [ 1536.081290][ T2879] [ 1536.974481][ T2906] net_ratelimit: 8 callbacks suppressed [ 1536.974503][ T2906] netlink: zone id is out of range [ 1537.073709][ T2906] netlink: zone id is out of range [ 1537.097407][ T2906] netlink: zone id is out of range [ 1537.103531][ T2906] netlink: zone id is out of range [ 1537.161659][ T2906] netlink: zone id is out of range [ 1537.278733][ T2906] netlink: del zone limit has 4 unknown bytes [ 1537.786552][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 1538.030047][ T2931] __nla_validate_parse: 20 callbacks suppressed [ 1538.030068][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9876'. [ 1538.147733][ T2929] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9875'. [ 1538.157615][ T2929] netlink: zone id is out of range [ 1538.165272][ T2929] netlink: zone id is out of range [ 1538.174515][ T2929] netlink: zone id is out of range [ 1538.197567][ T2929] netlink: zone id is out of range [ 1538.317125][ T2939] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9879'. [ 1538.564920][ T2948] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9882'. [ 1538.624122][ T2952] netlink: 'syz.4.9883': attribute type 10 has an invalid length. [ 1539.564112][ T2969] netlink: 'syz.2.9889': attribute type 10 has an invalid length. [ 1539.576097][ T2969] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9889'. [ 1539.603453][ T2965] device syzkaller0 entered promiscuous mode [ 1539.891083][ T2978] netlink: 'syz.4.9891': attribute type 1 has an invalid length. [ 1539.928944][ T2978] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.9891'. [ 1540.154039][ T2983] netlink: 'syz.1.9893': attribute type 3 has an invalid length. [ 1540.207042][ T2983] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9893'. [ 1540.216892][ T2984] FAULT_INJECTION: forcing a failure. [ 1540.216892][ T2984] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.230980][ T2984] CPU: 0 PID: 2984 Comm: syz.0.9894 Not tainted syzkaller #0 [ 1540.238433][ T2984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1540.248545][ T2984] Call Trace: [ 1540.251870][ T2984] [ 1540.254856][ T2984] dump_stack_lvl+0x188/0x24e [ 1540.260556][ T2984] ? show_regs_print_info+0x12/0x12 [ 1540.265798][ T2984] ? load_image+0x410/0x410 [ 1540.270340][ T2984] ? __might_sleep+0xd0/0xd0 [ 1540.274956][ T2984] ? __lock_acquire+0x7ea0/0x7ea0 [ 1540.280024][ T2984] should_fail_ex+0x390/0x4c0 [ 1540.284739][ T2984] should_failslab+0x5/0x20 [ 1540.289265][ T2984] slab_pre_alloc_hook+0x59/0x300 [ 1540.294319][ T2984] ? tomoyo_encode+0x28a/0x550 [ 1540.299116][ T2984] __kmem_cache_alloc_node+0x4f/0x270 [ 1540.304523][ T2984] ? tomoyo_encode+0x28a/0x550 [ 1540.309322][ T2984] __kmalloc+0xa3/0x240 [ 1540.313539][ T2984] tomoyo_encode+0x28a/0x550 [ 1540.318165][ T2984] tomoyo_realpath_from_path+0x578/0x5c0 [ 1540.323854][ T2984] ? tomoyo_domain+0xd2/0x120 [ 1540.328571][ T2984] ? tomoyo_path_number_perm+0x205/0x650 [ 1540.334235][ T2984] tomoyo_path_number_perm+0x22f/0x650 [ 1540.339724][ T2984] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1540.345224][ T2984] ? ksys_write+0x1ce/0x260 [ 1540.349765][ T2984] ? common_file_perm+0x171/0x1c0 [ 1540.354853][ T2984] ? __fget_files+0x28/0x460 [ 1540.359495][ T2984] security_file_ioctl+0x6c/0xa0 [ 1540.364461][ T2984] __se_sys_ioctl+0x48/0x170 [ 1540.369108][ T2984] do_syscall_64+0x4c/0xa0 [ 1540.373568][ T2984] ? clear_bhb_loop+0x60/0xb0 [ 1540.378275][ T2984] ? clear_bhb_loop+0x60/0xb0 [ 1540.382982][ T2984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1540.388904][ T2984] RIP: 0033:0x7f253a19e199 [ 1540.393347][ T2984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.412984][ T2984] RSP: 002b:00007f253b0b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1540.421430][ T2984] RAX: ffffffffffffffda RBX: 00007f253a426090 RCX: 00007f253a19e199 [ 1540.429430][ T2984] RDX: 0000000000000000 RSI: 0000000000002401 RDI: 0000000000000004 [ 1540.437426][ T2984] RBP: 00007f253b0b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.445430][ T2984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.453423][ T2984] R13: 00007f253a426128 R14: 00007f253a426090 R15: 00007ffe96ece5a8 [ 1540.461536][ T2984] [ 1540.526491][ T2984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1540.661598][ T2987] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9895'. [ 1540.936012][ T2992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9896'. [ 1541.193327][ T2994] netlink: 'syz.0.9906': attribute type 275 has an invalid length. [ 1541.207062][ T2992] netlink: 'syz.3.9896': attribute type 28 has an invalid length. [ 1541.231397][ T2992] netlink: 'syz.3.9896': attribute type 3 has an invalid length. [ 1541.256786][ T2992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9896'. [ 1541.543102][ T3006] netlink: 'syz.0.9906': attribute type 12 has an invalid length. [ 1542.894642][ T3023] net_ratelimit: 11 callbacks suppressed [ 1542.894664][ T3023] netlink: zone id is out of range [ 1542.928961][ T3023] netlink: zone id is out of range [ 1542.948020][ T3023] netlink: zone id is out of range [ 1543.036189][ T3023] netlink: del zone limit has 4 unknown bytes [ 1543.277288][ T3025] netlink: 'syz.2.9908': attribute type 28 has an invalid length. [ 1543.294363][ T3025] netlink: 'syz.2.9908': attribute type 3 has an invalid length. [ 1543.320345][ T3025] __nla_validate_parse: 3 callbacks suppressed [ 1543.320366][ T3025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9908'. [ 1543.649222][ T3038] netlink: 'syz.2.9910': attribute type 1 has an invalid length. [ 1543.689107][ T3038] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.9910'. [ 1544.817621][ T3065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9921'. [ 1544.836666][ T3067] netlink: 'syz.1.9922': attribute type 9 has an invalid length. [ 1544.844756][ T3067] netlink: 'syz.1.9922': attribute type 8 has an invalid length. [ 1544.852652][ T3067] netlink: 355 bytes leftover after parsing attributes in process `syz.1.9922'. [ 1544.870290][ T3068] netlink: 'syz.2.9931': attribute type 41 has an invalid length. [ 1545.097552][ T4878] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 1545.116798][ T4878] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1545.141898][ T5978] ------------[ cut here ]------------ [ 1545.148050][ T5978] WARNING: CPU: 0 PID: 5978 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 1545.158123][ T5978] Modules linked in: [ 1545.162076][ T5978] CPU: 0 PID: 5978 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 1545.169819][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1545.180046][ T5978] Workqueue: cfg80211 cfg80211_event_work [ 1545.185840][ T5978] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1545.192249][ T5978] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 ae e7 f7 0f 0b eb bf e8 37 ae e7 f7 <0f> 0b eb b6 e8 2e ae e7 f7 0f 0b e9 82 fd ff ff e8 22 ae e7 f7 0f [ 1545.212478][ T5978] RSP: 0018:ffffc90003627ac0 EFLAGS: 00010293 [ 1545.219088][ T5978] RAX: ffffffff899a9849 RBX: 1ffff920006c4f5c RCX: ffff888054713c00 [ 1545.227161][ T5978] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6de0 [ 1545.235188][ T5978] RBP: ffffc90003627b70 R08: ffffffff90b332af R09: 1ffffffff2166655 [ 1545.243284][ T5978] R10: dffffc0000000000 R11: fffffbfff2166656 R12: ffff88803f0bb5f8 [ 1545.251431][ T5978] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888049e94c90 [ 1545.259491][ T5978] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1545.268512][ T5978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1545.275149][ T5978] CR2: 00007f9c17b556c8 CR3: 0000000066e20000 CR4: 00000000003506f0 [ 1545.283205][ T5978] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 1545.291255][ T5978] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1545.299338][ T5978] Call Trace: [ 1545.302659][ T5978] [ 1545.305638][ T5978] ? trace_rdev_return_void+0x240/0x240 [ 1545.311307][ T5978] cfg80211_process_wdev_events+0x359/0x4d0 [ 1545.317390][ T5978] ? process_one_work+0x7b4/0x1160 [ 1545.322640][ T5978] cfg80211_process_rdev_events+0x9d/0x110 [ 1545.328562][ T5978] cfg80211_event_work+0x2b/0x40 [ 1545.333563][ T5978] process_one_work+0x8ab/0x1160 [ 1545.338637][ T5978] ? worker_detach_from_pool+0x240/0x240 [ 1545.344325][ T5978] ? _raw_spin_lock_irq+0x86/0xf0 [ 1545.349502][ T5978] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1545.354594][ T5978] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1545.360259][ T5978] ? wq_worker_running+0x97/0x190 [ 1545.365345][ T5978] worker_thread+0xaf5/0x12a0 [ 1545.370160][ T5978] kthread+0x29d/0x330 [ 1545.374288][ T5978] ? worker_clr_flags+0x1a0/0x1a0 [ 1545.379419][ T5978] ? kthread_blkcg+0xd0/0xd0 [ 1545.384105][ T5978] ret_from_fork+0x1f/0x30 [ 1545.388675][ T5978] [ 1545.391761][ T5978] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1545.399076][ T5978] CPU: 0 PID: 5978 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 1545.406836][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1545.416944][ T5978] Workqueue: cfg80211 cfg80211_event_work [ 1545.422723][ T5978] Call Trace: [ 1545.426046][ T5978] [ 1545.429109][ T5978] dump_stack_lvl+0x188/0x24e [ 1545.433819][ T5978] ? memcpy+0x3c/0x60 [ 1545.437831][ T5978] ? show_regs_print_info+0x12/0x12 [ 1545.443061][ T5978] ? load_image+0x410/0x410 [ 1545.447607][ T5978] panic+0x2d3/0x710 [ 1545.451553][ T5978] ? bpf_jit_dump+0xd0/0xd0 [ 1545.456093][ T5978] ? ret_from_fork+0x1f/0x30 [ 1545.460716][ T5978] __warn+0x2f8/0x4f0 [ 1545.464729][ T5978] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1545.470342][ T5978] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1545.475914][ T5978] report_bug+0x2ba/0x4f0 [ 1545.480302][ T5978] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1545.485889][ T5978] handle_bug+0x3a/0x70 [ 1545.490071][ T5978] exc_invalid_op+0x16/0x40 [ 1545.494604][ T5978] asm_exc_invalid_op+0x16/0x20 [ 1545.499485][ T5978] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1545.505669][ T5978] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 ae e7 f7 0f 0b eb bf e8 37 ae e7 f7 <0f> 0b eb b6 e8 2e ae e7 f7 0f 0b e9 82 fd ff ff e8 22 ae e7 f7 0f [ 1545.525300][ T5978] RSP: 0018:ffffc90003627ac0 EFLAGS: 00010293 [ 1545.531397][ T5978] RAX: ffffffff899a9849 RBX: 1ffff920006c4f5c RCX: ffff888054713c00 [ 1545.539402][ T5978] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6de0 [ 1545.547397][ T5978] RBP: ffffc90003627b70 R08: ffffffff90b332af R09: 1ffffffff2166655 [ 1545.555397][ T5978] R10: dffffc0000000000 R11: fffffbfff2166656 R12: ffff88803f0bb5f8 [ 1545.563392][ T5978] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888049e94c90 [ 1545.571417][ T5978] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1545.577011][ T5978] ? trace_rdev_return_void+0x240/0x240 [ 1545.582595][ T5978] cfg80211_process_wdev_events+0x359/0x4d0 [ 1545.588520][ T5978] ? process_one_work+0x7b4/0x1160 [ 1545.593657][ T5978] cfg80211_process_rdev_events+0x9d/0x110 [ 1545.599502][ T5978] cfg80211_event_work+0x2b/0x40 [ 1545.604471][ T5978] process_one_work+0x8ab/0x1160 [ 1545.609469][ T5978] ? worker_detach_from_pool+0x240/0x240 [ 1545.615130][ T5978] ? _raw_spin_lock_irq+0x86/0xf0 [ 1545.620193][ T5978] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1545.625280][ T5978] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1545.630884][ T5978] ? wq_worker_running+0x97/0x190 [ 1545.635934][ T5978] worker_thread+0xaf5/0x12a0 [ 1545.640660][ T5978] kthread+0x29d/0x330 [ 1545.644766][ T5978] ? worker_clr_flags+0x1a0/0x1a0 [ 1545.649826][ T5978] ? kthread_blkcg+0xd0/0xd0 [ 1545.654445][ T5978] ret_from_fork+0x1f/0x30 [ 1545.658910][ T5978] [ 1545.662541][ T5978] Kernel Offset: disabled [ 1545.666969][ T5978] Rebooting in 86400 seconds..