last executing test programs: 7.1383138s ago: executing program 1 (id=12816): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfe, 0x2, 0x10, 0x0, 0xa, 0xa84a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x200000000000c8, 0x207fe, 0x7, 0xfffffffffffffff7, 0x80008000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xf7) 6.886186568s ago: executing program 1 (id=12817): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.851948161s ago: executing program 4 (id=12824): r0 = socket$kcm(0x15, 0x5, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000180)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="8500000008000000d400000010000000950000000000000043d961f63850449d1161800e555d6d7b8c5e2f05b288fbbef033c658dbe7f8d4dea280af9cbeb4169c9cfc3748663f5ad177ff7e3894c0aa32d53c15a450bc6adbad0490403ddb59e2b5b6f4e50eca133f3788758a164203aa73e1deb006b386938eb7a8fea13924edc5bfed0000bade5ffd0a9b3c567196c8339248af231433784e89a21bb43f0f05031ba17562789831eb84ec41e180525922741ad056dc2abfd76a80ff72e1fba5ac3476e08adbbc"], &(0x7f0000000240)='GPL\x00', 0x5, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x982) 5.777871564s ago: executing program 1 (id=12825): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d0}, 0x20000001) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x161}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4010}, 0x18) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000c00)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x1, @empty, 0x800}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000380)="bbf1adc76f8ae330edefafc9f27f2e91e32ee52c40337d06b37cc7d92ae5bd510397a6248c3852ebd9b9f4f9ae5be7c4a4b722", 0x33}, {&(0x7f0000000580)="2fa2cd7d18808b80fdc1244241b1ab2333bc78aec0798fced3bf2e6b98ac6ccb278e8e86abe0383b6598d190d0acc023c2235ac0c0ae174baf0e4fc3f8509d7c1801c81ad6ede73415352bf6b32e6f5126a99665d8a87ce3fdf7c94ab29cf0fb05b1b77cb09b3b4ac765d112eed42d602315f7e942cf7b3ee09d2a3e86e2e61beb", 0x81}, {&(0x7f00000007c0)="d4a00888ab77a71e9c65a3d98865ab3f39e1687a32f4d6cde8ccc597f5da7b32e9fcdb5ee54984039f41f084007e135ddbdefe97789d74c97fd1ddfb54c29981f964e4d105284d7c7bf47dbfaaa4ea47cbdb2ea69018e0c7af741c9315451ce83496e87bf986e5072a17da779e185eaabcc289c2cf2a1634e2a4ce13557ba0226c3e356f336c3acc9bc7ffb969f93b1562e7009337bc5b3415ac088ecf6c", 0x9e}, {&(0x7f0000000880)="77e5744071569385d8719786d0fa41786371e446d4b4ef085c71d29ace8acbac5203da1e68fbceacc71e1acd2c0f4cd9322868dbd41a5a1a4c5689ec46aa0f06502c6a87f7cfe8f3cdf09a33a2cad8a4b898bfcd9cf50c01acec95b78a352160b37124d79f91f5216b4133a28bd43903e8642c37c6fb825d86c6cf1cbf20dcc956727de020c6db9d721434fddcf41f36c2b09049ef0d0c27f4faa15e1a0679ed60cd8e4d7a0c790b00afc3a5868ce7eb0b8e36401790ea36f72aebf7084fdc6f7cb167f39c246c6222f353a1c0eb25e24d46fd6e952019e3fa7d740d3383667dbe475a31a4b56383f7", 0xe9}, {&(0x7f0000000980)="7695e5fc14a4ceb58780a594bbc14848d58d813a35d47ac7f3ad08fb8437ecbfbc5b7c87dcf6140523a03cbfc60bef9d394dc21aa2482f354a6c5b139594c4bd74877fc55badea", 0x47}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="a001000000000000190100009e000000252900175b0bc5708a4564f46b89951fff29b562689460991429c12875b9ddf4fe579e2dc5b8c1cfaeb8114bf6d078ff203227628945bee759346ba5aa26ea1c796263bdafb1ccd8ec79b224f984453a7075aa6a79788e6e19e5b559a4bb710d78f61a01fbe155541db656044848699ead2c77b8925bf11c9b972a256188f49339ade7352d4fd9d1b251a24788bdd7f6e45c46f299bf5ad47e7df321905f447c55bff7a530da14eb2603a7cdea0ba7ec7865fbba8d764cbd6cdafe9c24be266c632849ec20caffa86a93b416a9ed71727e10de3055d70430a6077f4d5bb8c6213d2897d34ef41b54ffc0b35475dd98f99a7dbf120ba339041e7935e42498dc15c8e39ad71726c187ed3bf3c4fd71753b0e8cd50ed0d001b7141c7f706bba0d1d0187dd586dc586ba040ec4d00e4bdd8b6261c8ccfe96bc0fb0014601a769d77f2476a7d2a888d47aeb43e448bfde8f8d30b23f0014fc528eaabad9820f8311bc08ae4bf5955836e61d43225af7853f68a1ccb5ef51de03c2a253f6000000000000a000000000000000840000000600000049e0e5a9f60304fc99117a6cec321c595c69dc6593a7ba5d7c18184d31dca590127057f09aeb2bca53993daa08fbe40985a46418594c7e4f00e1a9e9405e96f4bdfacae157da90bbe58a60b347f8b10d0fcdf8ebe284342d0814543ff61222dee36e095f717f48e84005f71fe82402a0d92bc13bd20c8d36212a94697c43ddf748d3531d892df60f5163d9b586440000"], 0x240}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r2, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000001304000000005f5f00c4e5"], &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r6, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, &(0x7f0000000740)}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) 5.496961233s ago: executing program 4 (id=12826): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xc77, 0x8000000000000003}, 0x11428d, 0x80089, 0x0, 0x5, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="60dd19c29e1b1b87b377a9f6966dce00bb2451cfb8f24e643dd751cf3fa42db57649063d7f019799c7790214a16400556f76a101a9a05464dcb48f69bfe7724e6beca6b396238431d1b05874068941e3bdccadfcf44417d4f56f2892ed7e768b11dfc7d6076608477d3401bf470527e4d572b5c73c8b2352d2ce4992a1f7c27b9317fbb2208143651a60c2974ae021056cc0d0b4e3711ab8a76959986a5a1bbec2cc99314c71e52949edd043edbea920894740bd4ab87ac9b3a464844153f709cea2f4fbb8b80f4d784c26a74d2bcc5be165148f1753f79e1debd4786b5f4d37ce85255573cc8e7b8bef5ae1cf6a516f111c18c86de70b", 0xf7}, {&(0x7f0000000680)="88defc533735c5bb8b1a181fc5308ceb2aa4beab08fd05a8d2a0ead7978cf9663a60c5a29497b04d47fe3fb17c8bb11b3062202fd3af2f33c9409ce2281347a9edda069a8a3f73c672c07bafc1f66ca018a9fd9de4c5f8f3c536", 0x5a}, {&(0x7f0000000700)="20d4543e3c01305736a8b966e4c92ba9f319824db1ff2b5a53e395fbd43ca4377cf2faccb08b0a0d59137dfc51e5c95258ea145fbb6b9bf4a8427682f96ea44351851c1e5f", 0x45}, {&(0x7f0000000840)="653150a837362a24aa9b988c6c88a118e8f391cfb1a8bf2997639b7884", 0x1d}, {&(0x7f0000000880)="18499f45fb832a4f098a672a9ddd44576d2629d13893133d84c44a08117b018a47a2d9ace8c89d1b31d670b57f8811f911f292ddd33438aab534e5a888a886158e16f3efcb9ba1757370b5e6038f0e2ce4a0a9d921be6f92bf46c3ecc03ccde029f260c0baad65cbacaa53282021695c2f3f4b3476321c4c9db8612dd9f91e26d4d536eb718d81e5746f04f9f2bd636f43a5343085f5c13f7d07baea49", 0x9d}, {&(0x7f0000000a00)="45a312b66352f8aff8977e4ad5aad031125bf9891ed7188fe7ca6b528d562de0d19cead27bd5d43dfff6f50e6e158b607ccfb57ea6f1392e2f0d7a7d1ea3deea5f95e929191df2d61501de9024e94d6eda32df4c9c7c4efe1919c42b79eaff2d2ac8bb67d717b006a6cc655abf89c8fd738bfe678186a67d22d8d4f9cb95a0c0ea8421dbf1b9d67957e587e153f29c06f708738d8f", 0x95}], 0x6, &(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2b8c7938fe74f8e03d502d35e9c6ff09e8040ff80a7eef220d897f9af2bf51102e25aa11e0808fe86c6d8d0d6991bf9e11fb2277e2e136d4da782da57be32df29423bdcb69bcb477b5ab91d21269843ab6dbe3ad88a9e0dfe93cc0da4913f718f2a8d24ec7c4b569512257837a2215e2080c9c9a57fc9681943b6a779ffd3c3cdf1b2aa7cc271dcd58c987dfb853"], 0xf8, 0x4}, 0x40850) setsockopt$sock_attach_bpf(r7, 0x29, 0x3, 0x0, 0x35) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[], 0x0, 0x26}, 0x28) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)) socketpair(0x1d, 0x2, 0x3ff, &(0x7f0000000b00)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x4a0e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x4104, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 4.426479267s ago: executing program 2 (id=12827): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfe, 0x2, 0x10, 0x0, 0xa, 0xa84a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x200000000000c8, 0x207fe, 0x7, 0xfffffffffffffff7, 0x80008000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xf7) 4.408095658s ago: executing program 0 (id=12828): perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}, 0x0) 4.34469299s ago: executing program 4 (id=12829): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x24, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdc1, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x3, 0x8, 0x1, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x923, 0x3f, &(0x7f0000000080)=""/63, 0x40f00, 0x50, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x2, 0xbf, 0x401}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r2, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x3, 0x4, 0x4, 0xb}, {0x5, 0x5, 0xc}, {0x3, 0x4, 0x6, 0x1}], 0x10, 0xfffff23e}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r1, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0x0, 0x9, 0x80, r2, 0x37d, '\x00', r0, r4, 0x4, 0x1, 0x2, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r3, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0xba0, 0x0, 0x1, 0x7fffffff, '\x00', r0, r4, 0x2, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x9, 0x1, 0x4, 0x9, 0x1ad2, r2, 0xfffffffb, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x7fff, 0x0, 0x0, r5, 0x80, '\x00', r0, r4, 0x3, 0x2, 0x5, 0xb}, 0x50) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000680)=@raw=[@ldst={0x3, 0x2, 0x4, 0x8, 0xa, 0xfffffffffffffea1, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f00000006c0)='syzkaller\x00', 0x81, 0xfc, &(0x7f0000000700)=""/252, 0x40f00, 0x0, '\x00', r6, 0x17, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x26c70, r3, 0x0, &(0x7f0000000c80)=[r5, 0xffffffffffffffff, r7, r5, r5, r8, r4, r9], 0x0, 0x10, 0x5}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', r0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x1b, 0xfffff6bb, 0x3, 0x2, 0x43, r11, 0x8001, '\x00', r0, r4, 0x4, 0x4}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@bloom_filter={0x1e, 0xfd8, 0x1, 0x1, 0x8000, r2, 0x6, '\x00', r6, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x9, @value=r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r12, 0xffffffffffffffff}, &(0x7f0000001140), &(0x7f0000001180)=r10}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001200)={&(0x7f0000000f00)="bbc1e27065e7562b87594bbf120f6a7986ae762cef7e1cbd15933d41d068d45c0c54033fde6cb9edd9527f8fe5b6dcb27d", &(0x7f0000000f40)=""/148, &(0x7f0000001000)="f4b296", &(0x7f0000001040)="50910a04b4437946957aad6664340e8978dee6ea81c23daead145797344a3b6af6a615d5c0e839cd7db66485b447ff6388bf97146ae448b249f83595a4fa4436032b5d2b984bc4b1bff12255b9359af346810c5efc2d0a00e639bd887909c26657668af7e04bb9233a78850b8ed3b30f74426c62d6cf3f378ef7009f9b456f2b5cf01daf60528540af486fb900a38874f05c2a1cad50fff8e3f015389b3b35793dcdee0d683be43c7ad7ae6c83a43b442d0705b3d1f04302a64b487d99a8ecd0bb6bbecd28fc12c40478d638d0e470bd03fd51e8889a26", 0xdc1, r14, 0x4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000013c0)={r7, &(0x7f0000001240)="884c0ee76b0b7ada72044279de3797feca587ffe3668ca4fe034a142efbb1795c553d88e425adfdb71d329e2e7cd3465ad8887a3aa2f46bde1d816c386381fff7004addb594d06d36281db0cc97561d2da7d342653e89cf02be195036f2c07ffea827bc8e7bdf01a738122407af1cb8f687daa562ae1d4f36598030661a54fcbbc1c11460af96741c0261e3ac63ac3ded1db5dc1b64eef0932eb0d21af3687ce89275a33da", &(0x7f0000001300)=""/178}, 0x20) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x10000, 0x0) ioctl$TUNSETCARRIER(r15, 0x400454e2, &(0x7f0000001440)=0x1) ioctl$TUNGETVNETHDRSZ(r15, 0x800454d7, &(0x7f0000001480)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r10, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000001500)=[0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000001580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f00000017c0)={'vcan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x4c, '\x00', r16, r4, 0x2, 0x2, 0x2}, 0x50) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x22200, 0x0) ioctl$TUNSETVNETBE(r17, 0x400454de, &(0x7f00000018c0)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x19, &(0x7f0000001900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x2, 0x0, 0xa, 0x8, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a00)='syzkaller\x00', 0x4ee, 0x0, 0x0, 0x1e00, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001a80)={0x5, 0x7, 0xae, 0x70d395d2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001ac0)=[{0x3, 0x5, 0x0, 0x6}, {0x3, 0x1, 0x2, 0xc}, {0x4, 0x5, 0x1, 0xb}, {0x5, 0x4, 0x1, 0x5}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f40)={{r12, 0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f00)=r17}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002040)={0x6, 0x1c, &(0x7f0000001c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r18}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001d80)='GPL\x00', 0x3ff, 0x7c, &(0x7f0000001dc0)=""/124, 0x41000, 0x76, '\x00', r0, 0x25, r4, 0x8, &(0x7f0000001e40)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001e80)={0x3, 0xe, 0xfff, 0xfffff001}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001f80)=[r19, r13], &(0x7f0000001fc0)=[{0x2, 0x5, 0x8, 0x7}, {0x4, 0x3, 0x10, 0x8}, {0x1, 0x3, 0x7}, {0x1, 0x2, 0xc, 0xb}, {0x5, 0x3, 0x2, 0x7}], 0x10, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r17, 0x400454d0, 0xb) ioctl$TUNGETVNETLE(r17, 0x800454dd, &(0x7f0000002100)) 4.199077085s ago: executing program 2 (id=12831): r0 = socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000100001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00@\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r4, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001600)={r5}, 0xc) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001740)={&(0x7f0000000080)="90b8f677ce827b279d8bbf603656f770508851009efd38", &(0x7f00000001c0)=""/22, &(0x7f00000005c0)="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", &(0x7f00000015c0)="4a552de777c4c88534f3f0b9ceb537b684ae64bb5d876543f8d5f3bba9608a58edda60ee48ed8e6edd20a111f555388268a1e82aceb6e8ceb2defb4d340aab8886c38b7c85cec79629e5376736688b7bcce439be0139575bf9b4859ca6694b06", 0x4, r11, 0x4}, 0x38) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r5, 0x8, 0x10}, 0xc) r13 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x80000001, 0x4, 0x84d, 0x11100, r12, 0xd, '\x00', r6, r9, 0x2, 0x3, 0x0, 0x0, @void, @value, @value=r13}, 0x50) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r14, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4.195379145s ago: executing program 3 (id=12841): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfe, 0x2, 0x10, 0x0, 0xa, 0xa84a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x200000000000c8, 0x207fe, 0x7, 0xfffffffffffffff7, 0x80008000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xf7) 4.185065215s ago: executing program 1 (id=12832): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext, 0x406, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x11, 0xb, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) setsockopt$sock_attach_bpf(r0, 0x0, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff00000000090000001801", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$unix(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.181011275s ago: executing program 4 (id=12833): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) gettid() bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 4.093028878s ago: executing program 0 (id=12834): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x4}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) 4.03323501s ago: executing program 3 (id=12835): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r0, &(0x7f0000000780)='syz1\x00', 0x1ff) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2d, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000011000000000000d07ae304fd74ac10b6846eea00010100000000"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="00000000db82", 0x6}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x46, &(0x7f00000000c0)=r7, 0x4) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)={[{0x22cd049699a5b1c6, 'net_cls'}, {0x2d, 'perf_event'}, {0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2b, 'rlimit'}, {0x2b, 'cpuset'}]}, 0x36) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) socket$kcm(0x21, 0x5, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x19, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80ca0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x104943, 0x400ac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x0) 4.008730051s ago: executing program 0 (id=12836): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000076006bab9a3fe3d86e17aa076b876c1d0000004404000d000af36504001a0538000ce70431a0e69ee517d34460bc06000000427ca1a3dc01aca73651f60a84c9f4d4938037e70e4509c5bb9b089f0994962c246332dbbf00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) socket$kcm(0x29, 0x7, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x2e, 0x30, 0x2e, 0x61, 0x5f, 0x30, 0x61, 0x2e]}}, &(0x7f0000001500)=""/166, 0x22, 0xa6, 0x0, 0x3, 0x10000, @value=r4}, 0x28) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r9, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r10, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@bloom_filter={0x1e, 0x13, 0x3, 0xc8f, 0x850, r3, 0x6, '\x00', 0x0, r5, 0x5, 0x1, 0x5, 0x5}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.752588939s ago: executing program 2 (id=12837): r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x2, 0x0, 0x3, 0x0, 0xffffffff00000001, 0x1605, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x100a0, 0x9, 0x8000, 0x3, 0x52e, 0x6, 0x8001, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x1, 0xd, 0x7, 0x4, 0x0, 0x4, 0x20ca0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x0, 0x7fff}, 0x100a8d, 0x6, 0x6, 0x2, 0x2, 0xe, 0xfff, 0x0, 0x0, 0x0, 0x9}, r1, 0xffffffffffffffff, r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) close(r0) 3.371583231s ago: executing program 3 (id=12838): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x2a}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.187510407s ago: executing program 2 (id=12839): perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x3, 0x0, 0x6, 0x7, 0x3, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="d80000001c0007044e81f782db44b904021d08020100000e1208000f0100810401a80016002000014003008000000000000000cf000461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516592eb2c4088c802a187913277ce06bbace8017cb090000383c96e46a150b6c001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6", 0xc9}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={r5}, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2.704700233s ago: executing program 3 (id=12840): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x100080, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x4084) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000280)=0x1) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x9, 0x4, 0x4, 0xa4, 0x0, 0x0, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000340)}, 0x4046, 0x9, 0xfff, 0x2, 0x7, 0xbb, 0x65, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.038423015s ago: executing program 0 (id=12842): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x10, 0xd7, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x100, 0xa, 0xe3000, 0x9, 0x2, 0x1, 0x8, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x20000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000003c0)=r4) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r2], 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 679.931278ms ago: executing program 4 (id=12843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)=r0}, 0x20) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000840)={'team0\x00', 0x4000}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) close(r2) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a863726558"], 0x12) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)=r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b675bc82850000002d000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7fffffff, 0x7fffffff, 0x1, 0x81, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r9, 0x20, &(0x7f00000007c0)={&(0x7f0000000680)=""/46, 0x2e, 0x0, &(0x7f00000006c0)=""/223, 0xdf}}, 0x10) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7084000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 474.224925ms ago: executing program 2 (id=12844): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d0}, 0x20000001) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x161}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4010}, 0x18) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000c00)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x1, @empty, 0x800}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000380)="bbf1adc76f8ae330edefafc9f27f2e91e32ee52c40337d06b37cc7d92ae5bd510397a6248c3852ebd9b9f4f9ae5be7c4a4b722", 0x33}, {&(0x7f0000000580)="2fa2cd7d18808b80fdc1244241b1ab2333bc78aec0798fced3bf2e6b98ac6ccb278e8e86abe0383b6598d190d0acc023c2235ac0c0ae174baf0e4fc3f8509d7c1801c81ad6ede73415352bf6b32e6f5126a99665d8a87ce3fdf7c94ab29cf0fb05b1b77cb09b3b4ac765d112eed42d602315f7e942cf7b3ee09d2a3e86e2e61beb", 0x81}, {&(0x7f00000007c0)="d4a00888ab77a71e9c65a3d98865ab3f39e1687a32f4d6cde8ccc597f5da7b32e9fcdb5ee54984039f41f084007e135ddbdefe97789d74c97fd1ddfb54c29981f964e4d105284d7c7bf47dbfaaa4ea47cbdb2ea69018e0c7af741c9315451ce83496e87bf986e5072a17da779e185eaabcc289c2cf2a1634e2a4ce13557ba0226c3e356f336c3acc9bc7ffb969f93b1562e7009337bc5b3415ac088ecf6c", 0x9e}, {&(0x7f0000000880)="77e5744071569385d8719786d0fa41786371e446d4b4ef085c71d29ace8acbac5203da1e68fbceacc71e1acd2c0f4cd9322868dbd41a5a1a4c5689ec46aa0f06502c6a87f7cfe8f3cdf09a33a2cad8a4b898bfcd9cf50c01acec95b78a352160b37124d79f91f5216b4133a28bd43903e8642c37c6fb825d86c6cf1cbf20dcc956727de020c6db9d721434fddcf41f36c2b09049ef0d0c27f4faa15e1a0679ed60cd8e4d7a0c790b00afc3a5868ce7eb0b8e36401790ea36f72aebf7084fdc6f7cb167f39c246c6222f353a1c0eb25e24d46fd6e952019e3fa7d740d3383667dbe475a31a4b56383f7", 0xe9}, {&(0x7f0000000980)="7695e5fc14a4ceb58780a594bbc14848d58d813a35d47ac7f3ad08fb8437ecbfbc5b7c87dcf6140523a03cbfc60bef9d394dc21aa2482f354a6c5b139594c4bd74877fc55badea", 0x47}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x240}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r2, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000001304000000005f5f00c4e5"], &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r6, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, &(0x7f0000000740)}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) 471.894355ms ago: executing program 1 (id=12845): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r2, 0x29, 0x15, &(0x7f00000000c0), 0xb9) 417.039476ms ago: executing program 3 (id=12846): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfe, 0x2, 0x10, 0x0, 0xa, 0xa84a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x200000000000c8, 0x207fe, 0x7, 0xfffffffffffffff7, 0x80008000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x6, 0x8, 0x0, 0x0, 0x40000000000, 0x24051, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1a2d, 0x0, 0x800004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xf7) 323.067919ms ago: executing program 0 (id=12847): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x84) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x34) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e00000004000000080000180a00000000000000", @ANYRES32, @ANYBLOB="8fef6a68d133f4b5", @ANYBLOB], 0x50) 287.396451ms ago: executing program 1 (id=12848): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x62, 0x3, 0x7, 0x4480, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x6}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1ff}, 0x0, 0x10, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@generic={0x25, "0100000000000000aed3a1cfe696346585c6f323aa1d0d73ad589fbfdd2c9274aa85bdc12718f2a1f439a55fcbe56fa514f165984e09fb7317019c69b1a14013db732cacb677bb3b00f0070039cc33016d8a6a3d141050c92220a92133f836530d61dd080096e21ba8375477051a79403d257fb778b6b3e788b3c51c388a"}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1}, 0x8000) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000040)=""/210}, 0x70) getpid() 287.053621ms ago: executing program 4 (id=12849): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009000000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 191.628944ms ago: executing program 2 (id=12850): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r0, &(0x7f0000000780)='syz1\x00', 0x1ff) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2d, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000011000000000000d07ae304fd74ac10b6846eea00010100000000"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="00000000db82", 0x6}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x46, &(0x7f00000000c0)=r7, 0x4) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)={[{0x22cd049699a5b1c6, 'net_cls'}, {0x2d, 'perf_event'}, {0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2b, 'rlimit'}, {0x2b, 'cpuset'}]}, 0x36) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) socket$kcm(0x21, 0x5, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x19, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80ca0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x104943, 0x400ac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x0) 191.407394ms ago: executing program 3 (id=12851): bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x11514, 0x0, 0x8, 0x2, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, 0x0}, 0xc000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x280, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="5c00000015006b03000000d86e6c1d002d847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000fc6a40000000000739367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 0 (id=12852): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x20000000000001df, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffefc, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f, 0x1e]}}, 0x0, 0x2a}, 0x28) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='c '], 0xa) kernel console output (not intermixed with test programs): 89.808786][ T8781] do_syscall_64+0x4c/0xa0 [ 2089.813250][ T8781] ? clear_bhb_loop+0x60/0xb0 [ 2089.817989][ T8781] ? clear_bhb_loop+0x60/0xb0 [ 2089.822726][ T8781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2089.828680][ T8781] RIP: 0033:0x7fad78d9ce59 [ 2089.833145][ T8781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2089.852891][ T8781] RSP: 002b:00007fad76ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2089.861363][ T8781] RAX: ffffffffffffffda RBX: 00007fad79015fa0 RCX: 00007fad78d9ce59 [ 2089.869384][ T8781] RDX: 0000000040000102 RSI: 00002000000004c0 RDI: 0000000000000003 [ 2089.877412][ T8781] RBP: 00007fad76ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2089.885436][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2089.893458][ T8781] R13: 00007fad79016038 R14: 00007fad79015fa0 R15: 00007ffe4e24a038 [ 2089.901511][ T8781] [ 2091.488826][T31481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2091.506491][T31481] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2091.517441][T31481] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2091.532306][T31481] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2091.545961][T31481] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2091.553626][T31481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2091.921192][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 2092.209796][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.239862][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.264958][ T8817] device bridge_slave_0 entered promiscuous mode [ 2092.290221][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.320389][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.345203][ T8817] device bridge_slave_1 entered promiscuous mode [ 2092.453951][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2092.488005][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2092.612592][ T8817] team0: Port device team_slave_0 added [ 2092.636924][ T8817] team0: Port device team_slave_1 added [ 2092.716378][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2092.730368][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2092.763883][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2092.784961][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2092.792228][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2092.826301][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2093.415591][ T8817] device hsr_slave_0 entered promiscuous mode [ 2093.633928][T31481] Bluetooth: hci5: command 0x0409 tx timeout [ 2093.731878][ T8817] device hsr_slave_1 entered promiscuous mode [ 2093.832820][ T8853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2093.862779][ T8853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2094.064876][ T8853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2094.091873][ T8853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2094.120960][ T8853] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2094.128542][ T8853] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2094.509597][ T8856] netlink: 'syz.3.11929': attribute type 13 has an invalid length. [ 2094.524563][ T8856] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11929'. [ 2094.546826][ T8856] syz_tun: refused to change device tx_queue_len [ 2094.553240][ T8856] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2094.570949][ T8859] netlink: 'syz.3.11929': attribute type 10 has an invalid length. [ 2094.727526][ T3405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.871727][ T8871] tap0: tun_chr_ioctl cmd 1074025677 [ 2094.891719][ T8871] tap0: linktype set to 804 [ 2094.974165][ T3405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.436910][ T3405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.578500][ T8894] netlink: 'syz.3.11937': attribute type 27 has an invalid length. [ 2095.592073][ T3405] team0: Port device netdevsim0 removed [ 2095.595478][ T8894] netlink: 'syz.3.11937': attribute type 3 has an invalid length. [ 2095.616065][ T3405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.714147][T31481] Bluetooth: hci5: command 0x041b tx timeout [ 2096.293500][ T8915] netlink: 'syz.4.11941': attribute type 13 has an invalid length. [ 2096.310590][ T8915] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11941'. [ 2096.360653][ T8915] syz_tun: refused to change device tx_queue_len [ 2096.383283][ T8915] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2096.469122][ T8916] netlink: 'syz.4.11941': attribute type 10 has an invalid length. [ 2096.586699][ T8916] team0: Port device netdevsim0 added [ 2097.151998][ T8938] netlink: 'syz.1.11948': attribute type 13 has an invalid length. [ 2097.174920][ T8938] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11948'. [ 2097.185593][ T8944] netlink: 'syz.1.11948': attribute type 10 has an invalid length. [ 2097.271115][ T8817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2097.298661][ T8817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2097.795782][T31481] Bluetooth: hci5: command 0x040f tx timeout [ 2097.870866][ T8817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2097.887662][ T8817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2098.149560][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2098.235526][ T8960] netlink: 'syz.1.11961': attribute type 2 has an invalid length. [ 2098.303068][ T8968] netlink: 'syz.4.11953': attribute type 3 has an invalid length. [ 2098.323896][ T8968] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11953'. [ 2098.910369][T21895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2098.927623][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.934742][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.943016][T21895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2099.195558][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 2099.253871][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2099.262874][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2099.330723][T24800] bridge0: port 1(bridge_slave_0) entered blocking state [ 2099.337979][T24800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2099.377130][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2099.413071][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2099.452722][T24800] bridge0: port 2(bridge_slave_1) entered blocking state [ 2099.460026][T24800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2099.477794][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2099.503491][ T3405] device hsr_slave_0 left promiscuous mode [ 2099.522567][ T3405] device hsr_slave_1 left promiscuous mode [ 2099.551917][ T3405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2099.571929][ T3405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2099.602054][ T3405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2099.620200][ T3405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2099.648097][ T3405] device bridge_slave_0 left promiscuous mode [ 2099.664293][ T3405] bridge0: port 1(bridge_slave_0) entered disabled state [ 2099.715048][ T3405] device veth1_macvtap left promiscuous mode [ 2099.721182][ T3405] device veth0_macvtap left promiscuous mode [ 2099.816587][ T8997] FAULT_INJECTION: forcing a failure. [ 2099.816587][ T8997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2099.856546][ T8997] CPU: 0 PID: 8997 Comm: syz.1.11971 Not tainted syzkaller #0 [ 2099.864095][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2099.874198][ T8997] Call Trace: [ 2099.877517][ T8997] [ 2099.880513][ T8997] dump_stack_lvl+0x188/0x24e [ 2099.885237][ T8997] ? show_regs_print_info+0x12/0x12 [ 2099.890473][ T8997] ? load_image+0x400/0x400 [ 2099.895031][ T8997] ? __lock_acquire+0x7d10/0x7d10 [ 2099.900109][ T8997] should_fail_ex+0x399/0x4d0 [ 2099.904830][ T8997] _copy_from_user+0x2c/0x170 [ 2099.909568][ T8997] ___sys_sendmsg+0x1c3/0x360 [ 2099.914291][ T8997] ? __sys_sendmsg+0x290/0x290 [ 2099.919114][ T8997] ? __lock_acquire+0x7d10/0x7d10 [ 2099.924205][ T8997] __se_sys_sendmsg+0x1bb/0x2a0 [ 2099.929107][ T8997] ? __x64_sys_sendmsg+0x80/0x80 [ 2099.934101][ T8997] ? lockdep_hardirqs_on+0x94/0x140 [ 2099.939538][ T8997] do_syscall_64+0x4c/0xa0 [ 2099.943995][ T8997] ? clear_bhb_loop+0x60/0xb0 [ 2099.948721][ T8997] ? clear_bhb_loop+0x60/0xb0 [ 2099.953450][ T8997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2099.959416][ T8997] RIP: 0033:0x7f488a59ce59 [ 2099.963874][ T8997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2099.983525][ T8997] RSP: 002b:00007f488b429028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2099.991974][ T8997] RAX: ffffffffffffffda RBX: 00007f488a815fa0 RCX: 00007f488a59ce59 [ 2099.999984][ T8997] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2100.007988][ T8997] RBP: 00007f488b429090 R08: 0000000000000000 R09: 0000000000000000 [ 2100.015996][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2100.024013][ T8997] R13: 00007f488a816038 R14: 00007f488a815fa0 R15: 00007fffb64311a8 [ 2100.032047][ T8997] [ 2100.038810][T31481] Bluetooth: hci5: command 0x0419 tx timeout [ 2100.310014][ T9007] netlink: 'syz.4.11965': attribute type 3 has an invalid length. [ 2100.320992][ T9007] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11965'. [ 2100.365564][ T9011] netlink: 'syz.3.11966': attribute type 1 has an invalid length. [ 2100.373594][ T9011] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.11966'. [ 2100.399468][ T3405] team0 (unregistering): Port device geneve1 removed [ 2101.171648][ T3405] team0 (unregistering): Port device team_slave_1 removed [ 2101.229021][ T3405] team0 (unregistering): Port device team_slave_0 removed [ 2101.771816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2101.780882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2101.798269][ T9004] netlink: 'syz.2.11962': attribute type 13 has an invalid length. [ 2101.806558][ T9004] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11962'. [ 2101.818134][ T9004] syz_tun: refused to change device tx_queue_len [ 2101.825592][ T9004] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2101.842465][ T9008] netlink: 'syz.2.11962': attribute type 10 has an invalid length. [ 2101.855123][ T9008] device netdevsim0 left promiscuous mode [ 2101.882719][ T9008] device netdevsim0 entered promiscuous mode [ 2101.891125][ T9008] team0: Port device netdevsim0 added [ 2101.897331][ T9010] tap0: tun_chr_ioctl cmd 1074025677 [ 2101.903031][ T9010] tap0: linktype set to 804 [ 2101.919497][ T9012] netlink: 'syz.4.11965': attribute type 7 has an invalid length. [ 2101.927717][ T9015] netlink: 'syz.3.11966': attribute type 49 has an invalid length. [ 2101.966649][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2101.998602][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2102.018523][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2102.040435][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2102.081851][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2102.112698][ T9025] netlink: 'syz.4.11967': attribute type 21 has an invalid length. [ 2102.174320][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2102.183054][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2102.224703][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2102.244195][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2102.255065][ T8817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2102.269081][ T9030] netlink: 'syz.2.11968': attribute type 3 has an invalid length. [ 2102.284018][ T9030] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11968'. [ 2102.514874][ T9032] netlink: 'syz.4.11970': attribute type 2 has an invalid length. [ 2102.852197][ T9044] FAULT_INJECTION: forcing a failure. [ 2102.852197][ T9044] name failslab, interval 1, probability 0, space 0, times 0 [ 2102.865481][ T9044] CPU: 0 PID: 9044 Comm: syz.2.11974 Not tainted syzkaller #0 [ 2102.873008][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2102.883128][ T9044] Call Trace: [ 2102.886461][ T9044] [ 2102.889446][ T9044] dump_stack_lvl+0x188/0x24e [ 2102.894193][ T9044] ? lock_chain_count+0x20/0x20 [ 2102.899117][ T9044] ? show_regs_print_info+0x12/0x12 [ 2102.904388][ T9044] ? load_image+0x400/0x400 [ 2102.908995][ T9044] should_fail_ex+0x399/0x4d0 [ 2102.913750][ T9044] should_failslab+0x5/0x20 [ 2102.918312][ T9044] slab_pre_alloc_hook+0x59/0x310 [ 2102.923422][ T9044] kmem_cache_alloc+0x56/0x2f0 [ 2102.928255][ T9044] ? __inet_hash_connect+0x832/0x18e0 [ 2102.933706][ T9044] __inet_hash_connect+0x832/0x18e0 [ 2102.939004][ T9044] ? inet_hash_connect+0x130/0x130 [ 2102.944212][ T9044] ? inet_bhash2_reset_saddr+0x80/0x80 [ 2102.949728][ T9044] ? rcu_is_watching+0x11/0xa0 [ 2102.954568][ T9044] tcp_v4_connect+0xc96/0x18e0 [ 2102.959414][ T9044] ? tcp_twsk_unique+0x990/0x990 [ 2102.964499][ T9044] __inet_stream_connect+0x242/0xe10 [ 2102.969846][ T9044] ? inet_dgram_connect+0x360/0x360 [ 2102.975112][ T9044] tcp_sendmsg_fastopen+0x38f/0x600 [ 2102.980368][ T9044] tcp_sendmsg_locked+0x3616/0x3a90 [ 2102.985620][ T9044] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 2102.991335][ T9044] ? perf_trace_lock+0xf8/0x390 [ 2102.996242][ T9044] ? mark_lock+0x94/0x320 [ 2103.000621][ T9044] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2103.006653][ T9044] ? lock_chain_count+0x20/0x20 [ 2103.011553][ T9044] ? tcp_set_state+0x520/0x520 [ 2103.016382][ T9044] tcp_sendmsg+0x2b/0x40 [ 2103.020666][ T9044] ? inet_send_prepare+0x260/0x260 [ 2103.025812][ T9044] ____sys_sendmsg+0x5be/0x970 [ 2103.030627][ T9044] ? __sys_sendmsg_sock+0x30/0x30 [ 2103.035683][ T9044] ? __import_iovec+0x315/0x500 [ 2103.040585][ T9044] ? import_iovec+0x6f/0xa0 [ 2103.045129][ T9044] ___sys_sendmsg+0x2a2/0x360 [ 2103.049854][ T9044] ? __sys_sendmsg+0x290/0x290 [ 2103.054693][ T9044] ? __lock_acquire+0x7d10/0x7d10 [ 2103.059806][ T9044] __se_sys_sendmsg+0x1bb/0x2a0 [ 2103.064795][ T9044] ? __x64_sys_sendmsg+0x80/0x80 [ 2103.069799][ T9044] ? lockdep_hardirqs_on+0x94/0x140 [ 2103.075053][ T9044] do_syscall_64+0x4c/0xa0 [ 2103.079498][ T9044] ? clear_bhb_loop+0x60/0xb0 [ 2103.084218][ T9044] ? clear_bhb_loop+0x60/0xb0 [ 2103.088938][ T9044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2103.094892][ T9044] RIP: 0033:0x7ff43499ce59 [ 2103.099355][ T9044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2103.119087][ T9044] RSP: 002b:00007ff4358e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2103.127632][ T9044] RAX: ffffffffffffffda RBX: 00007ff434c15fa0 RCX: 00007ff43499ce59 [ 2103.136072][ T9044] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000005 [ 2103.144078][ T9044] RBP: 00007ff4358e9090 R08: 0000000000000000 R09: 0000000000000000 [ 2103.152084][ T9044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.160119][ T9044] R13: 00007ff434c16038 R14: 00007ff434c15fa0 R15: 00007ffc296330e8 [ 2103.168151][ T9044] [ 2103.223351][ T9040] can: request_module (can-proto-0) failed. [ 2103.278739][ T9048] device syzkaller0 left promiscuous mode [ 2103.617470][T16519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2103.625864][T16519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2103.643262][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2103.672834][ T9060] netlink: 'syz.2.11976': attribute type 10 has an invalid length. [ 2103.693228][ T9060] device hsr_slave_0 entered promiscuous mode [ 2103.700519][ T9060] team0: Port device hsr_slave_0 added [ 2103.715439][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2103.731962][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2103.750439][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2103.852825][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2103.861649][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2103.871447][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2103.888502][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2103.902874][ T8817] device veth0_vlan entered promiscuous mode [ 2103.936766][ T8817] device veth1_vlan entered promiscuous mode [ 2104.071856][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2104.104586][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2104.128485][ T8817] device veth0_macvtap entered promiscuous mode [ 2104.157737][ T9067] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11979'. [ 2104.201010][ T8817] device veth1_macvtap entered promiscuous mode [ 2104.222972][ T9050] delete_channel: no stack [ 2105.899237][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2105.923991][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2105.943763][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2105.963754][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2105.983905][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2106.003769][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.025517][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2106.039411][T16519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2106.069238][T16519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2106.112904][T16519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2106.154308][T16519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2106.183741][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2106.216418][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.253741][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2106.273883][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.303201][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2106.321666][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.343602][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2106.352677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2106.375375][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2106.410002][ T8817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.427324][ T8817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.437042][ T8817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.448833][ T8817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.592932][ T9092] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11986'. [ 2106.654465][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2106.662852][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2106.683445][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2106.710416][ T9094] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11987'. [ 2106.741800][T24800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2106.762137][T24800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2106.777698][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2106.907537][ T9103] netlink: 'syz.3.11990': attribute type 29 has an invalid length. [ 2106.922898][ T9103] netlink: 'syz.3.11990': attribute type 29 has an invalid length. [ 2106.939408][ T9103] netlink: 'syz.3.11990': attribute type 29 has an invalid length. [ 2107.600673][ T9121] netlink: 'syz.3.11992': attribute type 2 has an invalid length. [ 2107.877271][ T9105] netlink: 'syz.0.11922': attribute type 1 has an invalid length. [ 2107.929773][ T9105] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11922'. [ 2108.004096][ T9126] netlink: 'syz.2.11993': attribute type 21 has an invalid length. [ 2108.081795][ T9128] netlink: 'syz.4.11994': attribute type 2 has an invalid length. [ 2108.103838][ T9128] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11994'. [ 2108.987798][ T9149] netlink: 'syz.2.12000': attribute type 13 has an invalid length. [ 2109.009856][ T9149] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.12000'. [ 2109.214885][T12934] Bluetooth: hci5: Malformed LE Event: 0x1d [ 2109.407105][ T9151] netlink: 'syz.3.11999': attribute type 3 has an invalid length. [ 2109.451433][ T9151] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.11999'. [ 2109.600833][ T9171] FAULT_INJECTION: forcing a failure. [ 2109.600833][ T9171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2109.636780][ T9171] CPU: 1 PID: 9171 Comm: syz.1.12007 Not tainted syzkaller #0 [ 2109.644343][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2109.654450][ T9171] Call Trace: [ 2109.657778][ T9171] [ 2109.660774][ T9171] dump_stack_lvl+0x188/0x24e [ 2109.665522][ T9171] ? show_regs_print_info+0x12/0x12 [ 2109.670772][ T9171] ? load_image+0x400/0x400 [ 2109.675344][ T9171] ? __lock_acquire+0x7d10/0x7d10 [ 2109.680430][ T9171] ? snprintf+0xe5/0x140 [ 2109.684732][ T9171] should_fail_ex+0x399/0x4d0 [ 2109.689470][ T9171] _copy_to_user+0x2c/0x130 [ 2109.694037][ T9171] simple_read_from_buffer+0xe3/0x150 [ 2109.699498][ T9171] proc_fail_nth_read+0x1a6/0x220 [ 2109.704585][ T9171] ? proc_fault_inject_write+0x310/0x310 [ 2109.710276][ T9171] ? fsnotify_perm+0x248/0x550 [ 2109.715107][ T9171] ? proc_fault_inject_write+0x310/0x310 [ 2109.720852][ T9171] vfs_read+0x2de/0xa00 [ 2109.725081][ T9171] ? kernel_read+0x1e0/0x1e0 [ 2109.729730][ T9171] ? __fget_files+0x28/0x4b0 [ 2109.734379][ T9171] ? __fget_files+0x28/0x4b0 [ 2109.739032][ T9171] ? __fget_files+0x43d/0x4b0 [ 2109.743781][ T9171] ? __fdget_pos+0x2ae/0x360 [ 2109.748436][ T9171] ? ksys_read+0x71/0x250 [ 2109.752832][ T9171] ksys_read+0x14c/0x250 [ 2109.757133][ T9171] ? vfs_write+0xa30/0xa30 [ 2109.761610][ T9171] ? lockdep_hardirqs_on+0x94/0x140 [ 2109.766887][ T9171] do_syscall_64+0x4c/0xa0 [ 2109.771359][ T9171] ? clear_bhb_loop+0x60/0xb0 [ 2109.776093][ T9171] ? clear_bhb_loop+0x60/0xb0 [ 2109.780841][ T9171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2109.786792][ T9171] RIP: 0033:0x7f488a55d68e [ 2109.791306][ T9171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2109.810967][ T9171] RSP: 002b:00007f488b428fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2109.819440][ T9171] RAX: ffffffffffffffda RBX: 00007f488b4296c0 RCX: 00007f488a55d68e [ 2109.827468][ T9171] RDX: 000000000000000f RSI: 00007f488b4290a0 RDI: 0000000000000006 [ 2109.835527][ T9171] RBP: 00007f488b429090 R08: 0000000000000000 R09: 0000000000000000 [ 2109.843554][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.851572][ T9171] R13: 00007f488a816038 R14: 00007f488a815fa0 R15: 00007fffb64311a8 [ 2109.859598][ T9171] [ 2110.247809][ T9185] netlink: 'syz.2.12009': attribute type 29 has an invalid length. [ 2110.565554][ T9198] device wg2 entered promiscuous mode [ 2110.605270][ T9197] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12014'. [ 2110.747173][T12934] Bluetooth: hci2: Malformed LE Event: 0x1d [ 2110.869673][ T9208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12018'. [ 2110.936285][ T9207] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12017'. [ 2110.956145][ T9207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2111.229961][T12934] Bluetooth: hci2: Malformed LE Event: 0x1d [ 2112.310891][ T9211] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12019'. [ 2112.336534][ T9211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2113.398572][T12934] Bluetooth: hci0: Malformed LE Event: 0x1d [ 2113.488930][ T9258] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.12033'. [ 2114.420660][ T9276] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12039'. [ 2114.455302][ T9276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2115.265287][T12934] Bluetooth: hci3: Malformed LE Event: 0x1d [ 2117.016154][ T9330] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12055'. [ 2117.063376][ T9330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2117.451948][T12934] Bluetooth: hci3: Malformed LE Event: 0x1d [ 2117.686563][T31481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2117.697348][T31481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2117.706937][T31481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2117.716984][T31481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2117.725408][T31481] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2117.732815][T31481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2117.790756][T21898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.952589][T21898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.041725][ T9342] validate_nla: 7 callbacks suppressed [ 2118.041763][ T9342] netlink: 'syz.0.12062': attribute type 29 has an invalid length. [ 2118.105931][T21898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.135335][ T9342] netlink: 'syz.0.12062': attribute type 29 has an invalid length. [ 2118.156209][ T9346] netlink: 'syz.0.12062': attribute type 29 has an invalid length. [ 2118.202400][T21898] device netdevsim0 left promiscuous mode [ 2118.287987][T21898] team0: Port device netdevsim0 removed [ 2118.307551][T21898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.497533][ T9337] chnl_net:caif_netlink_parms(): no params data found [ 2118.880265][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.895370][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 2118.909067][ T9337] device bridge_slave_0 entered promiscuous mode [ 2119.045197][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 2119.059910][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 2119.091042][ T9337] device bridge_slave_1 entered promiscuous mode [ 2119.368378][T12934] Bluetooth: hci3: Malformed LE Event: 0x1d [ 2119.402489][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2119.569816][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2119.717974][ T9337] team0: Port device team_slave_0 added [ 2119.794463][T12934] Bluetooth: hci1: command 0x0409 tx timeout [ 2119.808889][ T9337] team0: Port device team_slave_1 added [ 2119.877915][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2119.885834][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2119.912437][ T9337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2120.001777][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2120.022727][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2120.103713][ T9337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2120.220299][ T9395] netlink: 'syz.4.12076': attribute type 8 has an invalid length. [ 2120.242328][ T9395] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12076'. [ 2120.971784][ T9337] device hsr_slave_0 entered promiscuous mode [ 2121.027192][ T9337] device hsr_slave_1 entered promiscuous mode [ 2121.044476][ T9337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2121.063903][ T9337] Cannot create hsr debugfs directory [ 2121.140215][T12934] Bluetooth: hci0: Malformed LE Event: 0x1d [ 2121.690234][ T9434] FAULT_INJECTION: forcing a failure. [ 2121.690234][ T9434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2121.823981][ T9434] CPU: 1 PID: 9434 Comm: syz.2.12090 Not tainted syzkaller #0 [ 2121.831570][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2121.841702][ T9434] Call Trace: [ 2121.845047][ T9434] [ 2121.848046][ T9434] dump_stack_lvl+0x188/0x24e [ 2121.852820][ T9434] ? show_regs_print_info+0x12/0x12 [ 2121.858107][ T9434] ? load_image+0x400/0x400 [ 2121.862713][ T9434] ? __lock_acquire+0x7d10/0x7d10 [ 2121.867830][ T9434] ? verify_lock_unused+0x140/0x140 [ 2121.873138][ T9434] should_fail_ex+0x399/0x4d0 [ 2121.877913][ T9434] prepare_alloc_pages+0x1e2/0x5f0 [ 2121.883144][ T9434] __alloc_pages+0x130/0x4f0 [ 2121.887836][ T9434] ? zone_statistics+0x170/0x170 [ 2121.892895][ T9434] ? verify_lock_unused+0x140/0x140 [ 2121.898206][ T9434] __folio_alloc+0xe/0x30 [ 2121.902631][ T9434] vma_alloc_folio+0x4a3/0x900 [ 2121.907506][ T9434] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 2121.913418][ T9434] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 2121.919282][ T9434] ? shmem_replace_folio+0xee0/0xee0 [ 2121.924726][ T9434] ? xas_load+0x127/0x140 [ 2121.929148][ T9434] ? __filemap_get_folio+0x10f/0xdb0 [ 2121.934523][ T9434] ? __filemap_get_folio+0xb24/0xdb0 [ 2121.939887][ T9434] ? __filemap_get_folio+0x10f/0xdb0 [ 2121.945251][ T9434] ? page_cache_prev_miss+0x380/0x380 [ 2121.950727][ T9434] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2121.956776][ T9434] ? do_user_addr_fault+0x7a0/0xb10 [ 2121.962029][ T9434] ? lock_chain_count+0x20/0x20 [ 2121.966966][ T9434] shmem_get_folio_gfp+0x1361/0x3400 [ 2121.972408][ T9434] shmem_write_begin+0xee/0x3f0 [ 2121.977361][ T9434] generic_perform_write+0x2fa/0x5c0 [ 2121.982786][ T9434] ? generic_file_direct_write+0x330/0x330 [ 2121.988658][ T9434] ? __file_remove_privs+0x5f0/0x5f0 [ 2121.994002][ T9434] ? rwsem_write_trylock+0x135/0x1c0 [ 2121.999354][ T9434] ? clear_nonspinnable+0x60/0x60 [ 2122.004445][ T9434] ? generic_write_checks_count+0x3d9/0x4c0 [ 2122.010417][ T9434] __generic_file_write_iter+0x148/0x2a0 [ 2122.016135][ T9434] generic_file_write_iter+0xab/0x2e0 [ 2122.021601][ T9434] vfs_write+0x4b1/0xa30 [ 2122.025957][ T9434] ? file_end_write+0x250/0x250 [ 2122.030914][ T9434] ? __fget_files+0x43d/0x4b0 [ 2122.035722][ T9434] ? __fdget_pos+0x2ae/0x360 [ 2122.040404][ T9434] ? ksys_write+0x71/0x250 [ 2122.044905][ T9434] ksys_write+0x14c/0x250 [ 2122.049315][ T9434] ? __ia32_sys_read+0x80/0x80 [ 2122.054169][ T9434] ? lockdep_hardirqs_on+0x94/0x140 [ 2122.059469][ T9434] do_syscall_64+0x4c/0xa0 [ 2122.063967][ T9434] ? clear_bhb_loop+0x60/0xb0 [ 2122.068714][ T9434] ? clear_bhb_loop+0x60/0xb0 [ 2122.073470][ T9434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2122.079450][ T9434] RIP: 0033:0x7ff43499ce59 [ 2122.083930][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2122.103614][ T9434] RSP: 002b:00007ff4358e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2122.112113][ T9434] RAX: ffffffffffffffda RBX: 00007ff434c15fa0 RCX: 00007ff43499ce59 [ 2122.120158][ T9434] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 000000000000000a [ 2122.128180][ T9434] RBP: 00007ff4358e9090 R08: 0000000000000000 R09: 0000000000000000 [ 2122.136210][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2122.144236][ T9434] R13: 00007ff434c16038 R14: 00007ff434c15fa0 R15: 00007ffc296330e8 [ 2122.152319][ T9434] [ 2122.158851][T12934] Bluetooth: hci1: command 0x041b tx timeout [ 2124.279565][T12934] Bluetooth: hci1: command 0x040f tx timeout [ 2124.713778][ T9444] netlink: 'syz.0.12092': attribute type 21 has an invalid length. [ 2124.767819][T21898] device hsr_slave_0 left promiscuous mode [ 2124.785200][T21898] device hsr_slave_1 left promiscuous mode [ 2124.809076][T21898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2124.826672][T21898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2124.840739][T21898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2124.850377][T21898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2124.904767][T21898] bridge0: port 4(hsr0) entered disabled state [ 2124.914702][T21898] bridge0: port 3(team0) entered disabled state [ 2124.929868][T21898] device bridge_slave_0 left promiscuous mode [ 2124.941875][T21898] bridge0: port 1(bridge_slave_0) entered disabled state [ 2125.002993][T21898] device veth1_macvtap left promiscuous mode [ 2125.013429][T21898] device veth0_macvtap left promiscuous mode [ 2125.146340][ T9465] netlink: 'syz.4.12097': attribute type 2 has an invalid length. [ 2125.322678][ T9471] FAULT_INJECTION: forcing a failure. [ 2125.322678][ T9471] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.352002][ T9471] CPU: 0 PID: 9471 Comm: syz.0.12099 Not tainted syzkaller #0 [ 2125.359575][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2125.369687][ T9471] Call Trace: [ 2125.373020][ T9471] [ 2125.375999][ T9471] dump_stack_lvl+0x188/0x24e [ 2125.380739][ T9471] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2125.386975][ T9471] ? show_regs_print_info+0x12/0x12 [ 2125.392234][ T9471] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2125.398477][ T9471] ? dump_stack+0x5/0x12 [ 2125.402792][ T9471] should_fail_ex+0x399/0x4d0 [ 2125.407547][ T9471] should_failslab+0x5/0x20 [ 2125.412109][ T9471] slab_pre_alloc_hook+0x59/0x310 [ 2125.417215][ T9471] kmem_cache_alloc_node+0x5a/0x320 [ 2125.422486][ T9471] ? __alloc_skb+0xfc/0x7e0 [ 2125.427642][ T9471] __alloc_skb+0xfc/0x7e0 [ 2125.432072][ T9471] netlink_ack+0x372/0x1170 [ 2125.436753][ T9471] ? inet_diag_unregister+0xb0/0xb0 [ 2125.442117][ T9471] ? __mutex_trylock_common+0x155/0x260 [ 2125.447747][ T9471] ? netlink_dump+0xd00/0xd00 [ 2125.452481][ T9471] ? sock_diag_lock_handler+0x19/0x280 [ 2125.458011][ T9471] ? inet_diag_unregister+0xb0/0xb0 [ 2125.463285][ T9471] ? sock_diag_rcv_msg+0x3f6/0x5f0 [ 2125.468479][ T9471] netlink_rcv_skb+0x280/0x450 [ 2125.473306][ T9471] ? sock_diag_bind+0xa0/0xa0 [ 2125.478050][ T9471] ? netlink_ack+0x1170/0x1170 [ 2125.482908][ T9471] ? netlink_deliver_tap+0x2e/0x1b0 [ 2125.488272][ T9471] sock_diag_rcv+0x26/0x40 [ 2125.492783][ T9471] netlink_unicast+0x74d/0x8d0 [ 2125.497647][ T9471] netlink_sendmsg+0x8ad/0xbd0 [ 2125.502597][ T9471] ? netlink_getsockopt+0x550/0x550 [ 2125.507865][ T9471] ? aa_sock_msg_perm+0x94/0x150 [ 2125.512888][ T9471] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2125.518267][ T9471] ? security_socket_sendmsg+0x7c/0xa0 [ 2125.523793][ T9471] ? netlink_getsockopt+0x550/0x550 [ 2125.529053][ T9471] ____sys_sendmsg+0x5be/0x970 [ 2125.533905][ T9471] ? __sys_sendmsg_sock+0x30/0x30 [ 2125.539007][ T9471] ? __import_iovec+0x315/0x500 [ 2125.543935][ T9471] ? import_iovec+0x6f/0xa0 [ 2125.548516][ T9471] ___sys_sendmsg+0x2a2/0x360 [ 2125.553266][ T9471] ? __sys_sendmsg+0x290/0x290 [ 2125.558212][ T9471] __se_sys_sendmsg+0x1bb/0x2a0 [ 2125.563133][ T9471] ? __x64_sys_sendmsg+0x80/0x80 [ 2125.568186][ T9471] do_syscall_64+0x4c/0xa0 [ 2125.572653][ T9471] ? clear_bhb_loop+0x60/0xb0 [ 2125.577391][ T9471] ? clear_bhb_loop+0x60/0xb0 [ 2125.582132][ T9471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2125.588094][ T9471] RIP: 0033:0x7f4f77f9ce59 [ 2125.592659][ T9471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2125.612420][ T9471] RSP: 002b:00007f4f78f27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2125.620904][ T9471] RAX: ffffffffffffffda RBX: 00007f4f78215fa0 RCX: 00007f4f77f9ce59 [ 2125.629032][ T9471] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 2125.637066][ T9471] RBP: 00007f4f78f27090 R08: 0000000000000000 R09: 0000000000000000 [ 2125.645121][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2125.653150][ T9471] R13: 00007f4f78216038 R14: 00007f4f78215fa0 R15: 00007ffc4b88b318 [ 2125.661225][ T9471] [ 2125.730321][T21898] device geneve1 left promiscuous mode [ 2125.740867][T21898] team0 (unregistering): Port device geneve1 removed [ 2125.804780][T21898] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2125.896767][ T9478] netlink: 'syz.0.12101': attribute type 29 has an invalid length. [ 2126.319969][T21898] device team_slave_1 left promiscuous mode [ 2126.327427][T21898] team0 (unregistering): Port device team_slave_1 removed [ 2126.356861][T12934] Bluetooth: hci1: command 0x0419 tx timeout [ 2126.389275][T21898] device team_slave_0 left promiscuous mode [ 2126.396984][T21898] team0 (unregistering): Port device team_slave_0 removed [ 2126.453492][T21898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2126.518777][T21898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2126.574628][T21898] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2126.935294][T21898] bond0 (unregistering): Released all slaves [ 2127.064100][ T9473] device syzkaller0 entered promiscuous mode [ 2127.084465][ T9478] netlink: 'syz.0.12101': attribute type 29 has an invalid length. [ 2127.489557][ T9495] netlink: 763 bytes leftover after parsing attributes in process `syz.0.12106'. [ 2127.957311][ T9492] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 2128.519661][ T9515] netlink: 'syz.2.12111': attribute type 2 has an invalid length. [ 2128.680532][ T9337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2128.709177][ T9337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2128.736890][ T9337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2128.795947][ T9337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2129.205558][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2129.302825][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2129.314621][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2129.337322][ T9337] 8021q: adding VLAN 0 to HW filter on device team0 [ 2129.366664][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2129.444752][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2129.468279][T21898] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.475503][T21898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2129.524994][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2129.560031][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2129.589254][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2129.624625][T21898] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.628253][ T9542] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2129.631924][T21898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2129.691413][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2129.757724][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2129.785077][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2129.816380][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2129.884277][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2129.904775][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2129.944183][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2129.981981][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2130.005836][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2130.031335][ T9553] netlink: 'syz.2.12120': attribute type 29 has an invalid length. [ 2130.036961][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2130.116751][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2130.167790][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2130.200179][ T9553] netlink: 'syz.2.12120': attribute type 29 has an invalid length. [ 2130.224823][ T9550] netlink: 'syz.2.12120': attribute type 29 has an invalid length. [ 2130.260152][ T9558] netlink: 'syz.1.12125': attribute type 3 has an invalid length. [ 2130.290858][ T9558] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.12125'. [ 2130.571647][ T9565] netlink: 'syz.0.12126': attribute type 2 has an invalid length. [ 2130.676431][ T9570] netlink: 'syz.1.12128': attribute type 29 has an invalid length. [ 2130.801557][ T9570] netlink: 'syz.1.12128': attribute type 29 has an invalid length. [ 2130.824475][ T9568] FAULT_INJECTION: forcing a failure. [ 2130.824475][ T9568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.894167][ T9568] CPU: 0 PID: 9568 Comm: syz.1.12128 Not tainted syzkaller #0 [ 2130.901721][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2130.911829][ T9568] Call Trace: [ 2130.915160][ T9568] [ 2130.918148][ T9568] dump_stack_lvl+0x188/0x24e [ 2130.922888][ T9568] ? show_regs_print_info+0x12/0x12 [ 2130.928148][ T9568] ? load_image+0x400/0x400 [ 2130.932719][ T9568] ? __might_fault+0xa6/0x120 [ 2130.937457][ T9568] should_fail_ex+0x399/0x4d0 [ 2130.942189][ T9568] copyout+0x1b/0x120 [ 2130.946230][ T9568] _copy_to_iter+0x48b/0x1040 [ 2130.951011][ T9568] ? iov_iter_init+0x1f0/0x1f0 [ 2130.955836][ T9568] ? __virt_addr_valid+0x188/0x540 [ 2130.961013][ T9568] ? __virt_addr_valid+0x465/0x540 [ 2130.966185][ T9568] ? __phys_addr_symbol+0x2b/0x70 [ 2130.971296][ T9568] ? __check_object_size+0x500/0xa40 [ 2130.976631][ T9568] __skb_datagram_iter+0xde/0x740 [ 2130.981692][ T9568] ? skb_copy_datagram_iter+0x290/0x290 [ 2130.987280][ T9568] skb_copy_datagram_iter+0xd7/0x290 [ 2130.992603][ T9568] netlink_recvmsg+0x2d0/0xe00 [ 2130.997404][ T9568] ? netlink_sendmsg+0xbd0/0xbd0 [ 2131.002380][ T9568] ? aa_af_perm+0x340/0x340 [ 2131.006918][ T9568] ? __might_fault+0xa6/0x120 [ 2131.011629][ T9568] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 2131.016942][ T9568] ? security_socket_recvmsg+0x85/0xb0 [ 2131.022431][ T9568] ? netlink_sendmsg+0xbd0/0xbd0 [ 2131.027394][ T9568] ____sys_recvmsg+0x2cb/0x5e0 [ 2131.032202][ T9568] ? __sys_recvmsg_sock+0x40/0x40 [ 2131.037266][ T9568] ? import_iovec+0x6f/0xa0 [ 2131.041798][ T9568] ___sys_recvmsg+0x212/0x590 [ 2131.046505][ T9568] ? __sys_recvmsg+0x290/0x290 [ 2131.051301][ T9568] ? common_file_perm+0x171/0x1c0 [ 2131.056366][ T9568] ? __fget_files+0x43d/0x4b0 [ 2131.061097][ T9568] __x64_sys_recvmsg+0x205/0x2e0 [ 2131.066072][ T9568] ? ___sys_recvmsg+0x590/0x590 [ 2131.070970][ T9568] ? lockdep_hardirqs_on+0x94/0x140 [ 2131.076198][ T9568] do_syscall_64+0x4c/0xa0 [ 2131.080636][ T9568] ? clear_bhb_loop+0x60/0xb0 [ 2131.085347][ T9568] ? clear_bhb_loop+0x60/0xb0 [ 2131.090068][ T9568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2131.095997][ T9568] RIP: 0033:0x7f488a59ce59 [ 2131.100439][ T9568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2131.120084][ T9568] RSP: 002b:00007f488b429028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2131.128529][ T9568] RAX: ffffffffffffffda RBX: 00007f488a815fa0 RCX: 00007f488a59ce59 [ 2131.136531][ T9568] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000003 [ 2131.144529][ T9568] RBP: 00007f488b429090 R08: 0000000000000000 R09: 0000000000000000 [ 2131.152524][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2131.160526][ T9568] R13: 00007f488a816038 R14: 00007f488a815fa0 R15: 00007fffb64311a8 [ 2131.168538][ T9568] [ 2131.293944][ T9568] netlink: 'syz.1.12128': attribute type 29 has an invalid length. [ 2131.477655][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2131.498861][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2131.547198][ T9337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2131.677868][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2131.699833][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2134.606885][ T9600] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12137'. [ 2134.689264][ T9600] device team_slave_0 left promiscuous mode [ 2134.699794][ T9600] team0: Port device team_slave_0 removed [ 2134.743955][ T9613] netlink: 180 bytes leftover after parsing attributes in process `syz.4.12139'. [ 2134.757550][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2134.792481][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2134.842162][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2134.872712][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2134.940091][ T9337] device veth0_vlan entered promiscuous mode [ 2134.980591][ T9337] device veth1_vlan entered promiscuous mode [ 2135.092959][ T9623] netlink: 'syz.2.12141': attribute type 2 has an invalid length. [ 2135.108680][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2135.131567][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2135.172619][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2135.184139][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2135.197115][ T9337] device veth0_macvtap entered promiscuous mode [ 2135.222217][ T9337] device veth1_macvtap entered promiscuous mode [ 2135.254701][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.273402][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.284153][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.301158][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.340468][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.371801][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.398340][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2135.418306][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2135.437080][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2135.457811][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2135.490636][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2135.511948][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2135.538237][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.567816][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2135.596136][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.613713][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2135.634193][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.708766][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2135.732110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2135.753044][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2135.781123][ T9337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.802178][ T9337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.826110][ T9337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.841731][ T9337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.343927][T21898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2136.411460][T21898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2136.470329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2136.605978][T24800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2136.629217][T24800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2136.668683][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2137.028670][ T9676] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.12053'. [ 2137.069647][ T9676] netlink: zone id is out of range [ 2137.084122][ T9676] netlink: zone id is out of range [ 2137.111604][ T9676] netlink: zone id is out of range [ 2137.129195][ T9676] netlink: zone id is out of range [ 2137.160699][ T9676] netlink: zone id is out of range [ 2137.183093][ T9676] netlink: zone id is out of range [ 2137.225693][ T9676] netlink: zone id is out of range [ 2137.250195][ T9676] netlink: zone id is out of range [ 2137.275970][ T9676] netlink: zone id is out of range [ 2137.296250][ T9676] netlink: zone id is out of range [ 2138.002490][T24800] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.164879][T31481] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2138.175640][T31481] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2138.189814][T31481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2138.198091][T31481] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2138.206452][T31481] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2138.211720][T24800] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.230846][ T8368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2138.510195][T24800] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.725314][T24800] device netdevsim0 left promiscuous mode [ 2138.767433][T24800] team0: Port device netdevsim0 removed [ 2138.806707][T24800] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.981424][ T9725] FAULT_INJECTION: forcing a failure. [ 2138.981424][ T9725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2139.081598][ T9725] CPU: 0 PID: 9725 Comm: syz.0.12167 Not tainted syzkaller #0 [ 2139.089179][ T9725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2139.099312][ T9725] Call Trace: [ 2139.102657][ T9725] [ 2139.105656][ T9725] dump_stack_lvl+0x188/0x24e [ 2139.110421][ T9725] ? show_regs_print_info+0x12/0x12 [ 2139.115705][ T9725] ? load_image+0x400/0x400 [ 2139.120297][ T9725] ? __lock_acquire+0x7d10/0x7d10 [ 2139.125435][ T9725] should_fail_ex+0x399/0x4d0 [ 2139.130202][ T9725] strncpy_from_user+0x32/0x350 [ 2139.135138][ T9725] bpf_prog_load+0x1f3/0x1560 [ 2139.139901][ T9725] ? map_freeze+0x390/0x390 [ 2139.144466][ T9725] ? __might_fault+0xa6/0x120 [ 2139.149231][ T9725] ? __might_fault+0xa6/0x120 [ 2139.153969][ T9725] ? __might_fault+0xc2/0x120 [ 2139.158701][ T9725] ? __might_fault+0xa6/0x120 [ 2139.163424][ T9725] ? bpf_lsm_bpf+0x5/0x10 [ 2139.167798][ T9725] ? security_bpf+0x7a/0xa0 [ 2139.172352][ T9725] __sys_bpf+0x5b8/0x780 [ 2139.176656][ T9725] ? bpf_link_show_fdinfo+0x380/0x380 [ 2139.182125][ T9725] ? lock_chain_count+0x20/0x20 [ 2139.187136][ T9725] __x64_sys_bpf+0x78/0x90 [ 2139.191603][ T9725] do_syscall_64+0x4c/0xa0 [ 2139.196060][ T9725] ? clear_bhb_loop+0x60/0xb0 [ 2139.200792][ T9725] ? clear_bhb_loop+0x60/0xb0 [ 2139.205535][ T9725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2139.211480][ T9725] RIP: 0033:0x7f4f77f9ce59 [ 2139.215946][ T9725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2139.235592][ T9725] RSP: 002b:00007f4f78f27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2139.244052][ T9725] RAX: ffffffffffffffda RBX: 00007f4f78215fa0 RCX: 00007f4f77f9ce59 [ 2139.252066][ T9725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2139.260080][ T9725] RBP: 00007f4f78f27090 R08: 0000000000000000 R09: 0000000000000000 [ 2139.268088][ T9725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.276093][ T9725] R13: 00007f4f78216038 R14: 00007f4f78215fa0 R15: 00007ffc4b88b318 [ 2139.284150][ T9725] [ 2139.659706][T24800] bridge0: port 2(ip6gretap0) entered disabled state [ 2139.839552][T24800] device ip6gretap0 left promiscuous mode [ 2139.849775][T24800] bridge0: port 2(ip6gretap0) entered disabled state [ 2139.944847][ T9703] chnl_net:caif_netlink_parms(): no params data found [ 2140.091151][ T9745] netlink: 'syz.4.12171': attribute type 2 has an invalid length. [ 2140.274594][ T8368] Bluetooth: hci0: command 0x0409 tx timeout [ 2140.830344][ T9745] device 0 entered promiscuous mode [ 2140.935287][ T9763] netlink: 'syz.2.12175': attribute type 2 has an invalid length. [ 2141.297809][ T9703] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.324945][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.363160][ T9703] device bridge_slave_0 entered promiscuous mode [ 2141.417574][ T9703] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.435311][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.452328][ T9703] device bridge_slave_1 entered promiscuous mode [ 2141.527606][T24800] device gretap0 left promiscuous mode [ 2141.533223][T24800] Ÿë: port 1(gretap0) entered disabled state [ 2141.899701][ T9703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2141.958921][ T9703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2142.079183][ T9703] team0: Port device team_slave_0 added [ 2142.118046][ T9703] team0: Port device team_slave_1 added [ 2142.353890][ T8368] Bluetooth: hci0: command 0x041b tx timeout [ 2142.385373][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2142.396978][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2142.441941][ T9703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2142.529346][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2142.550994][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2142.587120][ T9703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2142.785072][ T9819] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.12190'. [ 2142.955591][ T9826] netlink: 'syz.4.12193': attribute type 2 has an invalid length. [ 2143.052365][ T9703] device hsr_slave_0 entered promiscuous mode [ 2143.326478][ T9703] device hsr_slave_1 entered promiscuous mode [ 2143.349462][ T9703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2143.382235][ T9703] Cannot create hsr debugfs directory [ 2143.418117][T24800] device bridge_slave_0 left promiscuous mode [ 2143.480938][T24800] bridge0: port 1(bridge_slave_0) entered disabled state [ 2143.691516][T24800] device veth1_macvtap left promiscuous mode [ 2143.701454][T24800] device veth0_macvtap left promiscuous mode [ 2143.731830][T24800] device veth1_vlan left promiscuous mode [ 2144.433872][ T8368] Bluetooth: hci0: command 0x040f tx timeout [ 2146.090408][T24800] device team_slave_1 left promiscuous mode [ 2146.100253][T24800] team0 (unregistering): Port device team_slave_1 removed [ 2146.162082][T24800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2146.216693][T24800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2146.270800][T24800] device bridge_slave_1 left promiscuous mode [ 2146.280942][T24800] team0 (unregistering): Port device bridge_slave_1 removed [ 2146.513953][ T8368] Bluetooth: hci0: command 0x0419 tx timeout [ 2146.558216][T24800] device bridge0 left promiscuous mode [ 2146.565775][T24800] team0 (unregistering): Port device bridge0 removed [ 2146.607750][T24800] bond0 (unregistering): Released all slaves [ 2147.182117][ T9867] netlink: 'syz.4.12207': attribute type 2 has an invalid length. [ 2148.458775][ T9703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2148.492008][ T9703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2148.530823][ T9703] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2148.575532][ T9703] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2149.007796][ T9703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2149.122648][ T9703] 8021q: adding VLAN 0 to HW filter on device team0 [ 2149.169518][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2149.192939][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2149.278872][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2149.315137][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2149.372321][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.379567][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2149.658472][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2149.718662][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2149.775536][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2149.838365][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state [ 2149.845622][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2149.901357][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2149.952448][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2149.997210][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2150.051579][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2150.148114][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2150.184892][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2150.255081][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2150.314719][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2150.375477][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2150.482780][ T9703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2150.524927][ T9703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2150.562439][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2150.587052][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2150.616225][ T9923] netlink: 'syz.4.12219': attribute type 29 has an invalid length. [ 2150.649759][ T9922] netlink: 'syz.3.12220': attribute type 2 has an invalid length. [ 2150.744785][ T9925] FAULT_INJECTION: forcing a failure. [ 2150.744785][ T9925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2150.759904][ T9923] netlink: 'syz.4.12219': attribute type 29 has an invalid length. [ 2150.842029][ T9925] CPU: 1 PID: 9925 Comm: syz.4.12219 Not tainted syzkaller #0 [ 2150.849575][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2150.859756][ T9925] Call Trace: [ 2150.863063][ T9925] [ 2150.866021][ T9925] dump_stack_lvl+0x188/0x24e [ 2150.870732][ T9925] ? show_regs_print_info+0x12/0x12 [ 2150.875957][ T9925] ? load_image+0x400/0x400 [ 2150.880502][ T9925] ? __lock_acquire+0x7d10/0x7d10 [ 2150.885571][ T9925] should_fail_ex+0x399/0x4d0 [ 2150.890287][ T9925] _copy_from_user+0x2c/0x170 [ 2150.895024][ T9925] ___sys_recvmsg+0x172/0x590 [ 2150.899798][ T9925] ? __sys_recvmsg+0x290/0x290 [ 2150.904608][ T9925] ? common_file_perm+0x171/0x1c0 [ 2150.909674][ T9925] ? __fget_files+0x43d/0x4b0 [ 2150.914401][ T9925] __x64_sys_recvmsg+0x205/0x2e0 [ 2150.919369][ T9925] ? ___sys_recvmsg+0x590/0x590 [ 2150.924302][ T9925] ? lockdep_hardirqs_on+0x94/0x140 [ 2150.929576][ T9925] do_syscall_64+0x4c/0xa0 [ 2150.934024][ T9925] ? clear_bhb_loop+0x60/0xb0 [ 2150.938734][ T9925] ? clear_bhb_loop+0x60/0xb0 [ 2150.943444][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2150.949372][ T9925] RIP: 0033:0x7fad78d9ce59 [ 2150.953812][ T9925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2150.973450][ T9925] RSP: 002b:00007fad76fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2150.981931][ T9925] RAX: ffffffffffffffda RBX: 00007fad79016180 RCX: 00007fad78d9ce59 [ 2150.989929][ T9925] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000008 [ 2150.997941][ T9925] RBP: 00007fad76fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 2151.005977][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2151.013975][ T9925] R13: 00007fad79016218 R14: 00007fad79016180 R15: 00007ffe4e24a038 [ 2151.021989][ T9925] [ 2151.587670][ T9939] netlink: 'syz.0.12222': attribute type 29 has an invalid length. [ 2151.893476][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2151.909813][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2151.960720][ T9703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2152.021753][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2152.040701][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2152.085049][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2152.095430][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2152.112128][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2152.136151][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2152.164725][ T9703] device veth0_vlan entered promiscuous mode [ 2152.206684][ T9703] device veth1_vlan entered promiscuous mode [ 2152.305102][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2152.323569][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2152.368788][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2152.386828][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2152.404378][ T9703] device veth0_macvtap entered promiscuous mode [ 2152.424949][ T9703] device veth1_macvtap entered promiscuous mode [ 2152.449933][ T9939] netlink: 'syz.0.12222': attribute type 29 has an invalid length. [ 2152.463496][ T9938] netlink: 'syz.0.12222': attribute type 29 has an invalid length. [ 2152.500447][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.520012][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.563774][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.606863][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.680570][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.717083][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.773155][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.811507][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.878040][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2152.961579][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2152.974403][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2153.018894][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2153.068726][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2153.135496][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.235098][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.314291][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.400853][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.502330][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.543105][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.572505][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.621194][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.676419][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2153.699760][ T9703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.732116][ T9703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.760215][ T9703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.789625][ T9703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.840593][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2153.886229][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2154.252753][T24800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2154.304690][T24800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2154.312474][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2154.392438][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2154.413271][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2154.452039][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2154.672197][ T9979] netlink: 'syz.0.12233': attribute type 2 has an invalid length. [ 2155.876420][T12934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2155.886328][T12934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2155.895189][T12934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2155.909398][T12934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2155.919392][T12934] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2155.927704][T12934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2156.360149][T16519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.383486][T10012] netlink: 'syz.1.12239': attribute type 29 has an invalid length. [ 2156.474113][T10012] netlink: 'syz.1.12239': attribute type 29 has an invalid length. [ 2156.567529][T16519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.685013][T16519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.843549][T16519] device netdevsim0 left promiscuous mode [ 2156.928076][T10025] netlink: 'syz.4.12244': attribute type 11 has an invalid length. [ 2156.932891][T16519] team0: Port device netdevsim0 removed [ 2156.969963][T10000] chnl_net:caif_netlink_parms(): no params data found [ 2157.014224][T10025] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12244'. [ 2157.464412][T10038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12249'. [ 2157.674284][T10050] netlink: 'syz.3.12250': attribute type 2 has an invalid length. [ 2157.954259][ T8368] Bluetooth: hci4: command 0x0409 tx timeout [ 2159.744295][T10019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2159.857691][T10000] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.893816][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.949972][T10000] device bridge_slave_0 entered promiscuous mode [ 2159.995544][T10000] bridge0: port 2(bridge_slave_1) entered blocking state [ 2160.028906][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 2160.034981][ T8368] Bluetooth: hci4: command 0x041b tx timeout [ 2160.065793][T10000] device bridge_slave_1 entered promiscuous mode [ 2160.359692][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.366147][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.541899][T10082] netlink: 'syz.3.12256': attribute type 29 has an invalid length. [ 2161.597701][T10082] netlink: 'syz.3.12256': attribute type 29 has an invalid length. [ 2161.733983][T10085] netlink: 'syz.3.12256': attribute type 29 has an invalid length. [ 2161.762952][T10000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2161.920979][T10000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2162.113885][ T8368] Bluetooth: hci4: command 0x040f tx timeout [ 2162.221329][T10000] team0: Port device team_slave_0 added [ 2162.234384][T10106] netlink: 'syz.1.12262': attribute type 2 has an invalid length. [ 2162.314706][T10000] team0: Port device team_slave_1 added [ 2163.145644][T10112] netlink: 'syz.3.12264': attribute type 21 has an invalid length. [ 2163.166148][T10112] netlink: 'syz.3.12264': attribute type 1 has an invalid length. [ 2163.204902][T10112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12264'. [ 2163.502492][T16519] device gretap0 left promiscuous mode [ 2163.535835][T16519] Ÿë: port 1(gretap0) entered disabled state [ 2163.696098][T10000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2163.724186][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2163.803026][T10000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2163.905172][T10000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2163.913989][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2164.026555][T10000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2164.070322][T10127] FAULT_INJECTION: forcing a failure. [ 2164.070322][T10127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2164.135638][T10127] CPU: 1 PID: 10127 Comm: syz.1.12267 Not tainted syzkaller #0 [ 2164.143293][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2164.153412][T10127] Call Trace: [ 2164.156743][T10127] [ 2164.159737][T10127] dump_stack_lvl+0x188/0x24e [ 2164.164483][T10127] ? show_regs_print_info+0x12/0x12 [ 2164.169753][T10127] ? load_image+0x400/0x400 [ 2164.174332][T10127] ? __lock_acquire+0x7d10/0x7d10 [ 2164.179413][T10127] ? snprintf+0xe5/0x140 [ 2164.183713][T10127] should_fail_ex+0x399/0x4d0 [ 2164.188437][T10127] _copy_to_user+0x2c/0x130 [ 2164.192988][T10127] simple_read_from_buffer+0xe3/0x150 [ 2164.198416][T10127] proc_fail_nth_read+0x1a6/0x220 [ 2164.203490][T10127] ? proc_fault_inject_write+0x310/0x310 [ 2164.209167][T10127] ? fsnotify_perm+0x248/0x550 [ 2164.213974][T10127] ? proc_fault_inject_write+0x310/0x310 [ 2164.219644][T10127] vfs_read+0x2de/0xa00 [ 2164.223849][T10127] ? kernel_read+0x1e0/0x1e0 [ 2164.228486][T10127] ? __fget_files+0x28/0x4b0 [ 2164.233118][T10127] ? __fget_files+0x28/0x4b0 [ 2164.237753][T10127] ? __fget_files+0x43d/0x4b0 [ 2164.242489][T10127] ? __fdget_pos+0x2ae/0x360 [ 2164.247122][T10127] ? ksys_read+0x71/0x250 [ 2164.251502][T10127] ksys_read+0x14c/0x250 [ 2164.255799][T10127] ? vfs_write+0xa30/0xa30 [ 2164.260316][T10127] ? lockdep_hardirqs_on+0x94/0x140 [ 2164.265564][T10127] do_syscall_64+0x4c/0xa0 [ 2164.270014][T10127] ? clear_bhb_loop+0x60/0xb0 [ 2164.274732][T10127] ? clear_bhb_loop+0x60/0xb0 [ 2164.279458][T10127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2164.285508][T10127] RIP: 0033:0x7f1ab375d68e [ 2164.289955][T10127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2164.309590][T10127] RSP: 002b:00007f1ab45d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2164.318036][T10127] RAX: ffffffffffffffda RBX: 00007f1ab45d26c0 RCX: 00007f1ab375d68e [ 2164.326041][T10127] RDX: 000000000000000f RSI: 00007f1ab45d20a0 RDI: 0000000000000006 [ 2164.334045][T10127] RBP: 00007f1ab45d2090 R08: 0000000000000000 R09: 0000000000000000 [ 2164.342046][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2164.350049][T10127] R13: 00007f1ab3a16038 R14: 00007f1ab3a15fa0 R15: 00007ffe6eec3f58 [ 2164.358084][T10127] [ 2164.375786][ T8368] Bluetooth: hci4: command 0x0419 tx timeout [ 2164.448018][T10000] device hsr_slave_0 entered promiscuous mode [ 2164.484229][T10000] device hsr_slave_1 entered promiscuous mode [ 2164.513034][T10000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2164.537603][T10000] Cannot create hsr debugfs directory [ 2165.680757][T10168] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.12274'. [ 2165.734542][T10170] netlink: 'syz.0.12275': attribute type 2 has an invalid length. [ 2165.902221][T16519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2165.962790][T16519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2166.016722][T16519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2166.043888][T16519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2166.095073][T16519] bridge0: port 4(team0) entered disabled state [ 2166.116792][T16519] device bridge_slave_0 left promiscuous mode [ 2166.138527][T16519] bridge0: port 1(bridge_slave_0) entered disabled state [ 2166.267736][T16519] device veth1_macvtap left promiscuous mode [ 2166.281003][T16519] device veth0_macvtap left promiscuous mode [ 2170.428308][T16519] device geneve1 left promiscuous mode [ 2170.438446][T16519] team0 (unregistering): Port device geneve1 removed [ 2170.672065][T16519] device hsr_slave_0 left promiscuous mode [ 2170.679336][T16519] team0 (unregistering): Port device hsr_slave_0 removed [ 2170.820121][T16519] device team_slave_1 left promiscuous mode [ 2170.827455][T16519] team0 (unregistering): Port device team_slave_1 removed [ 2170.880215][T16519] device team_slave_0 left promiscuous mode [ 2170.888820][T16519] team0 (unregistering): Port device team_slave_0 removed [ 2170.941352][T16519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2171.000097][T16519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2171.057779][T16519] device bridge_slave_1 left promiscuous mode [ 2171.065369][T16519] team0 (unregistering): Port device bridge_slave_1 removed [ 2171.396662][T16519] bond0 (unregistering): Released all slaves [ 2171.582508][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12287'. [ 2171.593789][T10218] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12287'. [ 2171.716353][T10230] FAULT_INJECTION: forcing a failure. [ 2171.716353][T10230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2171.732118][T10213] device syzkaller0 entered promiscuous mode [ 2171.743826][T10230] CPU: 1 PID: 10230 Comm: syz.0.12290 Not tainted syzkaller #0 [ 2171.751435][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2171.761517][T10230] Call Trace: [ 2171.764826][T10230] [ 2171.767783][T10230] dump_stack_lvl+0x188/0x24e [ 2171.772499][T10230] ? show_regs_print_info+0x12/0x12 [ 2171.777726][T10230] ? load_image+0x400/0x400 [ 2171.782294][T10230] ? __lock_acquire+0x7d10/0x7d10 [ 2171.787358][T10230] should_fail_ex+0x399/0x4d0 [ 2171.792067][T10230] _copy_from_user+0x2c/0x170 [ 2171.796804][T10230] __sys_bpf+0x2ea/0x780 [ 2171.801086][T10230] ? bpf_link_show_fdinfo+0x380/0x380 [ 2171.806501][T10230] ? lock_chain_count+0x20/0x20 [ 2171.811390][T10230] __x64_sys_bpf+0x78/0x90 [ 2171.815841][T10230] do_syscall_64+0x4c/0xa0 [ 2171.820287][T10230] ? clear_bhb_loop+0x60/0xb0 [ 2171.824995][T10230] ? clear_bhb_loop+0x60/0xb0 [ 2171.829726][T10230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2171.835654][T10230] RIP: 0033:0x7f4f77f9ce59 [ 2171.840094][T10230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2171.859723][T10230] RSP: 002b:00007f4f78f27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2171.868164][T10230] RAX: ffffffffffffffda RBX: 00007f4f78215fa0 RCX: 00007f4f77f9ce59 [ 2171.876162][T10230] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2171.884174][T10230] RBP: 00007f4f78f27090 R08: 0000000000000000 R09: 0000000000000000 [ 2171.892188][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2171.900473][T10230] R13: 00007f4f78216038 R14: 00007f4f78215fa0 R15: 00007ffc4b88b318 [ 2171.908488][T10230] [ 2172.084765][T10235] netlink: 'syz.1.12292': attribute type 2 has an invalid length. [ 2173.147339][ T8368] Bluetooth: hci5: Malformed LE Event: 0x1d [ 2174.842672][T10232] netlink: 'syz.4.12291': attribute type 1 has an invalid length. [ 2175.379921][T10000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2175.500816][T10000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2175.561336][T10000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2175.747131][T10000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2176.153865][T10000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2176.195023][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2176.203003][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2176.232939][T10286] netlink: 'syz.3.12307': attribute type 2 has an invalid length. [ 2176.296769][T10000] 8021q: adding VLAN 0 to HW filter on device team0 [ 2176.486836][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2176.496547][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2176.538706][T10166] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.545932][T10166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2176.610052][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2176.639966][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2176.690588][T10166] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.697823][T10166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2176.748780][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2176.879000][T10000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2176.963877][T10000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2177.036269][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2177.047612][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2177.128823][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2177.207746][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2177.250485][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2177.298895][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2177.365024][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2177.404750][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2177.485616][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2177.524482][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2177.533171][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2177.606183][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2178.950024][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2178.986832][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2179.030782][T10000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2179.112200][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2179.131022][T10348] netlink: 'syz.1.12323': attribute type 2 has an invalid length. [ 2179.145870][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2179.407161][T10346] device syzkaller0 entered promiscuous mode [ 2179.435165][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2179.454479][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2179.470057][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2179.480056][T21898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2179.515826][T10000] device veth0_vlan entered promiscuous mode [ 2182.109810][T10389] netlink: 'syz.1.12327': attribute type 3 has an invalid length. [ 2182.128333][T10389] netlink: 'syz.1.12327': attribute type 1 has an invalid length. [ 2182.155004][T10389] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.12327'. [ 2182.171687][T10390] netlink: 'syz.1.12327': attribute type 3 has an invalid length. [ 2182.183595][T10390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12327'. [ 2184.273848][T10000] device veth1_vlan entered promiscuous mode [ 2184.386336][T10000] device veth0_macvtap entered promiscuous mode [ 2184.399647][T21895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2184.450365][T21895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2184.481569][T10000] device veth1_macvtap entered promiscuous mode [ 2184.501192][T21895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2184.518839][T21895] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2184.569324][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2184.608286][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.619799][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2184.638024][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.660350][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2184.672613][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.691045][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2184.709819][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.723032][T10000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2184.737807][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2184.748939][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2184.760833][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2184.772561][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.793459][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2184.810303][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.821225][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2184.839308][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.851961][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2184.869186][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.890797][T10000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2184.901872][T21895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2184.929077][T21895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2184.956778][T10000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2184.973135][T10000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2184.991259][T10000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.001164][T10000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.432898][T10407] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.12334'. [ 2185.446788][T10410] netlink: 'syz.0.12335': attribute type 2 has an invalid length. [ 2185.455173][T10407] net_ratelimit: 3 callbacks suppressed [ 2185.455191][T10407] netlink: zone id is out of range [ 2185.527468][T10407] netlink: zone id is out of range [ 2185.535754][T10407] netlink: zone id is out of range [ 2185.557464][T10407] netlink: zone id is out of range [ 2185.580771][T10407] netlink: zone id is out of range [ 2185.614591][T10407] netlink: zone id is out of range [ 2185.630733][T21895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2185.639805][T10407] netlink: zone id is out of range [ 2185.645668][T21895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2185.667220][T10407] netlink: zone id is out of range [ 2185.676571][T21895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2185.684263][T10407] netlink: zone id is out of range [ 2185.689468][T10407] netlink: zone id is out of range [ 2185.736609][T24800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2185.766895][T24800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2185.849310][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2186.462333][T10422] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.12236'. [ 2186.656696][T10427] netlink: 'syz.0.12339': attribute type 10 has an invalid length. [ 2186.683964][T10427] device netdevsim0 entered promiscuous mode [ 2186.952842][T10429] device syzkaller0 entered promiscuous mode [ 2188.408396][T10449] netlink: 'syz.0.12344': attribute type 2 has an invalid length. [ 2188.416460][T10449] netlink: 'syz.0.12344': attribute type 3 has an invalid length. [ 2188.424530][T10449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12344'. [ 2189.880387][T10461] netlink: 'syz.4.12349': attribute type 2 has an invalid length. [ 2190.200679][T10472] netlink: 'syz.2.12353': attribute type 21 has an invalid length. [ 2190.771494][T10478] FAULT_INJECTION: forcing a failure. [ 2190.771494][T10478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.794274][T10478] CPU: 0 PID: 10478 Comm: syz.3.12355 Not tainted syzkaller #0 [ 2190.801897][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2190.811977][T10478] Call Trace: [ 2190.815278][T10478] [ 2190.818233][T10478] dump_stack_lvl+0x188/0x24e [ 2190.822937][T10478] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2190.829130][T10478] ? show_regs_print_info+0x12/0x12 [ 2190.834356][T10478] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2190.840577][T10478] ? dump_stack+0x5/0x12 [ 2190.844846][T10478] should_fail_ex+0x399/0x4d0 [ 2190.849551][T10478] _copy_to_user+0x2c/0x130 [ 2190.854083][T10478] simple_read_from_buffer+0xe3/0x150 [ 2190.859499][T10478] proc_fail_nth_read+0x1a6/0x220 [ 2190.864553][T10478] ? proc_fault_inject_write+0x310/0x310 [ 2190.870220][T10478] ? fsnotify_perm+0x248/0x550 [ 2190.875013][T10478] ? proc_fault_inject_write+0x310/0x310 [ 2190.880668][T10478] vfs_read+0x2de/0xa00 [ 2190.884865][T10478] ? kernel_read+0x1e0/0x1e0 [ 2190.889510][T10478] ? __fget_files+0x28/0x4b0 [ 2190.894178][T10478] ? __fget_files+0x28/0x4b0 [ 2190.898816][T10478] ? __fget_files+0x43d/0x4b0 [ 2190.903537][T10478] ? __fdget_pos+0x2ae/0x360 [ 2190.908157][T10478] ? ksys_read+0x71/0x250 [ 2190.912524][T10478] ksys_read+0x14c/0x250 [ 2190.916802][T10478] ? vfs_write+0xa30/0xa30 [ 2190.921253][T10478] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2190.927179][T10478] do_syscall_64+0x4c/0xa0 [ 2190.931621][T10478] ? clear_bhb_loop+0x60/0xb0 [ 2190.936334][T10478] ? clear_bhb_loop+0x60/0xb0 [ 2190.941044][T10478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2190.946971][T10478] RIP: 0033:0x7f5c6915d68e [ 2190.951412][T10478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2190.971039][T10478] RSP: 002b:00007f5c69f89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2190.979481][T10478] RAX: ffffffffffffffda RBX: 00007f5c69f8a6c0 RCX: 00007f5c6915d68e [ 2190.987478][T10478] RDX: 000000000000000f RSI: 00007f5c69f8a0a0 RDI: 0000000000000006 [ 2190.995474][T10478] RBP: 00007f5c69f8a090 R08: 0000000000000000 R09: 0000000000000000 [ 2191.003468][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2191.011459][T10478] R13: 00007f5c69416038 R14: 00007f5c69415fa0 R15: 00007ffe03de5ac8 [ 2191.019466][T10478] [ 2191.226171][T10481] device syzkaller0 entered promiscuous mode [ 2191.251377][T10476] netlink: 'syz.0.12354': attribute type 2 has an invalid length. [ 2191.270450][T10476] netlink: 'syz.0.12354': attribute type 3 has an invalid length. [ 2191.285141][T12934] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 2191.298003][T10476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12354'. [ 2191.811151][T10503] FAULT_INJECTION: forcing a failure. [ 2191.811151][T10503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2191.824684][T10503] CPU: 0 PID: 10503 Comm: syz.4.12363 Not tainted syzkaller #0 [ 2191.832282][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2191.842373][T10503] Call Trace: [ 2191.845681][T10503] [ 2191.848653][T10503] dump_stack_lvl+0x188/0x24e [ 2191.853370][T10503] ? show_regs_print_info+0x12/0x12 [ 2191.858593][T10503] ? load_image+0x400/0x400 [ 2191.863131][T10503] ? __lock_acquire+0x7d10/0x7d10 [ 2191.868191][T10503] should_fail_ex+0x399/0x4d0 [ 2191.872893][T10503] _copy_from_user+0x2c/0x170 [ 2191.877598][T10503] ___sys_sendmsg+0x1c3/0x360 [ 2191.882315][T10503] ? __sys_sendmsg+0x290/0x290 [ 2191.887124][T10503] ? __lock_acquire+0x7d10/0x7d10 [ 2191.892200][T10503] __se_sys_sendmsg+0x1bb/0x2a0 [ 2191.897075][T10503] ? ct_nmi_exit+0x145/0x1c0 [ 2191.901700][T10503] ? __x64_sys_sendmsg+0x80/0x80 [ 2191.906675][T10503] ? lockdep_hardirqs_on+0x94/0x140 [ 2191.911902][T10503] do_syscall_64+0x4c/0xa0 [ 2191.916343][T10503] ? clear_bhb_loop+0x60/0xb0 [ 2191.921050][T10503] ? clear_bhb_loop+0x60/0xb0 [ 2191.925760][T10503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2191.931684][T10503] RIP: 0033:0x7fad78d9ce59 [ 2191.936138][T10503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2191.955766][T10503] RSP: 002b:00007fad76ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2191.964201][T10503] RAX: ffffffffffffffda RBX: 00007fad79015fa0 RCX: 00007fad78d9ce59 [ 2191.972195][T10503] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 2191.980192][T10503] RBP: 00007fad76ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2191.988224][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2191.996214][T10503] R13: 00007fad79016038 R14: 00007fad79015fa0 R15: 00007ffe4e24a038 [ 2192.004219][T10503] [ 2192.513506][T10513] syz.4.12365[10513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2192.513820][T10513] syz.4.12365[10513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2193.156071][T12934] Bluetooth: hci3: command 0x0406 tx timeout [ 2193.794873][T10522] netlink: 'syz.0.12368': attribute type 2 has an invalid length. [ 2194.583865][T10512] netlink: 'syz.4.12365': attribute type 2 has an invalid length. [ 2194.601802][T10512] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.12365'. [ 2194.768038][T12934] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2196.427231][T10553] netlink: 'syz.1.12380': attribute type 21 has an invalid length. [ 2196.459994][T10553] netlink: 'syz.1.12380': attribute type 15 has an invalid length. [ 2196.662193][T10563] netlink: 'syz.2.12383': attribute type 2 has an invalid length. [ 2197.024952][T12934] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2197.446077][T10577] netlink: 'syz.1.12389': attribute type 3 has an invalid length. [ 2197.465541][T10577] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12389'. [ 2197.676944][T10580] mac80211_hwsim hwsim98 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2199.204669][T10608] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12394'. [ 2199.226254][T12934] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 2199.322870][T10608] net_ratelimit: 13 callbacks suppressed [ 2199.322892][T10608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2199.417306][T10626] netlink: 'syz.0.12401': attribute type 2 has an invalid length. [ 2199.858476][T10638] netlink: 'syz.3.12405': attribute type 3 has an invalid length. [ 2199.871809][T10638] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12405'. [ 2199.875629][T10166] wlan1: Trigger new scan to find an IBSS to join [ 2199.979847][T10638] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2200.553903][T10652] netlink: 'syz.4.12411': attribute type 10 has an invalid length. [ 2200.616241][T12934] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2201.043621][T10652] team0 (unregistering): Port device team_slave_0 removed [ 2201.129538][T10652] team0 (unregistering): Port device team_slave_1 removed [ 2201.205998][T10652] team0 (unregistering): Port device netdevsim0 removed [ 2201.743209][T10679] netlink: 'syz.4.12421': attribute type 3 has an invalid length. [ 2201.772237][T10679] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12421'. [ 2201.952274][T10684] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2201.998621][T10683] netlink: 'syz.1.12422': attribute type 29 has an invalid length. [ 2202.017475][T10683] netlink: 'syz.1.12422': attribute type 29 has an invalid length. [ 2202.047176][T10685] netlink: 'syz.1.12422': attribute type 29 has an invalid length. [ 2202.073499][T10683] netlink: 'syz.1.12422': attribute type 29 has an invalid length. [ 2202.107833][T10683] netlink: 'syz.1.12422': attribute type 29 has an invalid length. [ 2202.170154][T10683] bridge0: port 3(batadv0) entered blocking state [ 2202.187907][T10683] bridge0: port 3(batadv0) entered disabled state [ 2202.222491][T10683] device batadv0 entered promiscuous mode [ 2202.236929][T10690] netlink: 'syz.3.12423': attribute type 2 has an invalid length. [ 2202.261653][T10683] bridge0: port 3(batadv0) entered blocking state [ 2202.269665][T10683] bridge0: port 3(batadv0) entered forwarding state [ 2202.366686][T12934] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 2202.473567][T10691] device syzkaller0 entered promiscuous mode [ 2202.646025][ T4301] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2202.655992][ T4301] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2202.920259][ T3405] wlan1: Trigger new scan to find an IBSS to join [ 2203.601673][T10722] netlink: 'syz.0.12436': attribute type 29 has an invalid length. [ 2203.881685][T10166] wlan1: Trigger new scan to find an IBSS to join [ 2205.884764][ T3405] wlan1: Creating new IBSS network, BSSID 8e:82:2a:14:03:b7 [ 2205.897098][T10166] wlan1: Trigger new scan to find an IBSS to join [ 2206.469636][T10722] netlink: 'syz.0.12436': attribute type 29 has an invalid length. [ 2206.505733][T10738] netlink: 71 bytes leftover after parsing attributes in process `syz.3.12441'. [ 2206.689276][T10747] netlink: 'syz.4.12443': attribute type 2 has an invalid length. [ 2206.749010][T10753] netlink: 'syz.3.12445': attribute type 29 has an invalid length. [ 2206.778083][T10753] netlink: 'syz.3.12445': attribute type 29 has an invalid length. [ 2206.805887][T10756] netlink: 'syz.3.12445': attribute type 29 has an invalid length. [ 2206.855249][T10753] netlink: 'syz.3.12445': attribute type 29 has an invalid length. [ 2206.883943][T10753] FAULT_INJECTION: forcing a failure. [ 2206.883943][T10753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2206.913908][T10753] CPU: 1 PID: 10753 Comm: syz.3.12445 Not tainted syzkaller #0 [ 2206.921538][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2206.931624][T10753] Call Trace: [ 2206.934929][T10753] [ 2206.937881][T10753] dump_stack_lvl+0x188/0x24e [ 2206.942588][T10753] ? show_regs_print_info+0x12/0x12 [ 2206.947813][T10753] ? load_image+0x400/0x400 [ 2206.952348][T10753] ? __lock_acquire+0x7d10/0x7d10 [ 2206.957401][T10753] ? perf_trace_lock+0xf8/0x390 [ 2206.962284][T10753] should_fail_ex+0x399/0x4d0 [ 2206.966991][T10753] _copy_from_user+0x2c/0x170 [ 2206.971700][T10753] ___sys_recvmsg+0x172/0x590 [ 2206.976407][T10753] ? __sys_recvmsg+0x290/0x290 [ 2206.981199][T10753] ? common_file_perm+0x171/0x1c0 [ 2206.986258][T10753] ? __fget_files+0x43d/0x4b0 [ 2206.990985][T10753] __x64_sys_recvmsg+0x205/0x2e0 [ 2206.995953][T10753] ? ___sys_recvmsg+0x590/0x590 [ 2207.000844][T10753] ? lockdep_hardirqs_on+0x94/0x140 [ 2207.006077][T10753] do_syscall_64+0x4c/0xa0 [ 2207.010518][T10753] ? clear_bhb_loop+0x60/0xb0 [ 2207.015271][T10753] ? clear_bhb_loop+0x60/0xb0 [ 2207.020015][T10753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2207.025973][T10753] RIP: 0033:0x7f5c6919ce59 [ 2207.030423][T10753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2207.050077][T10753] RSP: 002b:00007f5c69f8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2207.058523][T10753] RAX: ffffffffffffffda RBX: 00007f5c69415fa0 RCX: 00007f5c6919ce59 [ 2207.066522][T10753] RDX: 0000000000000100 RSI: 00002000000003c0 RDI: 0000000000000003 [ 2207.074545][T10753] RBP: 00007f5c69f8a090 R08: 0000000000000000 R09: 0000000000000000 [ 2207.082537][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2207.090530][T10753] R13: 00007f5c69416038 R14: 00007f5c69415fa0 R15: 00007ffe03de5ac8 [ 2207.098545][T10753] [ 2207.126247][ T3405] wlan1: Trigger new scan to find an IBSS to join [ 2207.169529][T10761] netlink: 'syz.1.12447': attribute type 10 has an invalid length. [ 2207.886868][T10778] device syzkaller0 entered promiscuous mode [ 2208.034479][ T3405] wlan1: Creating new IBSS network, BSSID b6:66:6b:bf:bc:36 [ 2208.483027][T10811] netlink: 'syz.0.12464': attribute type 2 has an invalid length. [ 2208.835227][T10166] wlan1: Trigger new scan to find an IBSS to join [ 2209.766010][ T4301] wlan1: Creating new IBSS network, BSSID 86:1d:48:74:49:35 [ 2211.212099][T10808] netlink: 'syz.1.12463': attribute type 6 has an invalid length. [ 2212.547388][T10856] device syzkaller0 entered promiscuous mode [ 2215.879865][T10888] netlink: 'syz.0.12492': attribute type 16 has an invalid length. [ 2215.892515][T10888] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12492'. [ 2216.040222][T10899] device syzkaller0 entered promiscuous mode [ 2216.091837][T10904] netlink: 'syz.4.12496': attribute type 29 has an invalid length. [ 2218.753753][T12934] Bluetooth: hci5: command 0x0406 tx timeout [ 2221.728947][T10904] netlink: 'syz.4.12496': attribute type 29 has an invalid length. [ 2221.738127][T10918] netlink: 'syz.3.12498': attribute type 1 has an invalid length. [ 2221.753740][T10918] netlink: 'syz.3.12498': attribute type 4 has an invalid length. [ 2221.761624][T10918] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12498'. [ 2221.771838][T10920] bridge0: port 3(batadv0) entered blocking state [ 2221.795334][T10920] bridge0: port 3(batadv0) entered disabled state [ 2221.802896][T10920] device batadv0 entered promiscuous mode [ 2221.813952][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.820313][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.874520][T10920] bridge0: port 3(batadv0) entered blocking state [ 2221.881105][T10920] bridge0: port 3(batadv0) entered forwarding state [ 2222.155277][T13161] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2222.164899][T13161] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2222.597295][T10963] netlink: 'syz.2.12514': attribute type 2 has an invalid length. [ 2222.983076][T10968] device syzkaller0 entered promiscuous mode [ 2225.941863][T10982] netlink: 'syz.2.12520': attribute type 10 has an invalid length. [ 2226.083488][T10982] team0 (unregistering): Port device team_slave_0 removed [ 2226.127090][ T8368] Bluetooth: hci5: Malformed LE Event: 0x1d [ 2226.152268][T10982] team0 (unregistering): Port device team_slave_1 removed [ 2226.203997][T10986] netlink: 'syz.2.12520': attribute type 9 has an invalid length. [ 2226.212690][T10976] device syzkaller0 entered promiscuous mode [ 2226.249730][T10980] device syzkaller0 left promiscuous mode [ 2226.576301][T11012] netlink: 'syz.3.12530': attribute type 2 has an invalid length. [ 2227.399348][ T8368] Bluetooth: hci4: Malformed LE Event: 0x1d [ 2227.601912][T11041] FAULT_INJECTION: forcing a failure. [ 2227.601912][T11041] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.686591][T11041] CPU: 0 PID: 11041 Comm: syz.1.12540 Not tainted syzkaller #0 [ 2227.694238][T11041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2227.704340][T11041] Call Trace: [ 2227.707650][T11041] [ 2227.710618][T11041] dump_stack_lvl+0x188/0x24e [ 2227.715329][T11041] ? show_regs_print_info+0x12/0x12 [ 2227.720555][T11041] ? load_image+0x400/0x400 [ 2227.725092][T11041] ? verify_lock_unused+0x140/0x140 [ 2227.730327][T11041] ? irqentry_enter+0x33/0x50 [ 2227.735047][T11041] should_fail_ex+0x399/0x4d0 [ 2227.739759][T11041] should_failslab+0x5/0x20 [ 2227.744291][T11041] slab_pre_alloc_hook+0x59/0x310 [ 2227.749352][T11041] kmem_cache_alloc+0x56/0x2f0 [ 2227.754140][T11041] ? skb_clone+0x1e7/0x370 [ 2227.758591][T11041] skb_clone+0x1e7/0x370 [ 2227.762862][T11041] __netlink_deliver_tap+0x3ed/0x800 [ 2227.768186][T11041] ? netlink_deliver_tap+0x2e/0x1b0 [ 2227.773416][T11041] netlink_deliver_tap+0x19c/0x1b0 [ 2227.778556][T11041] netlink_unicast+0x728/0x8d0 [ 2227.783360][T11041] netlink_sendmsg+0x8ad/0xbd0 [ 2227.788159][T11041] ? netlink_getsockopt+0x550/0x550 [ 2227.793386][T11041] ? aa_sock_msg_perm+0x94/0x150 [ 2227.798356][T11041] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2227.803684][T11041] ? security_socket_sendmsg+0x7c/0xa0 [ 2227.809173][T11041] ? netlink_getsockopt+0x550/0x550 [ 2227.814400][T11041] ____sys_sendmsg+0x5be/0x970 [ 2227.819199][T11041] ? __sys_sendmsg_sock+0x30/0x30 [ 2227.824251][T11041] ? __import_iovec+0x315/0x500 [ 2227.829136][T11041] ? import_iovec+0x6f/0xa0 [ 2227.833671][T11041] ___sys_sendmsg+0x2a2/0x360 [ 2227.838386][T11041] ? __sys_sendmsg+0x290/0x290 [ 2227.843213][T11041] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2227.848992][T11041] __se_sys_sendmsg+0x1bb/0x2a0 [ 2227.853962][T11041] ? __x64_sys_sendmsg+0x80/0x80 [ 2227.858941][T11041] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2227.864867][T11041] do_syscall_64+0x4c/0xa0 [ 2227.869313][T11041] ? clear_bhb_loop+0x60/0xb0 [ 2227.874024][T11041] ? clear_bhb_loop+0x60/0xb0 [ 2227.878738][T11041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2227.884662][T11041] RIP: 0033:0x7f1ab379ce59 [ 2227.889106][T11041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2227.908744][T11041] RSP: 002b:00007f1ab45d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2227.917185][T11041] RAX: ffffffffffffffda RBX: 00007f1ab3a15fa0 RCX: 00007f1ab379ce59 [ 2227.925180][T11041] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 2227.933182][T11041] RBP: 00007f1ab45d2090 R08: 0000000000000000 R09: 0000000000000000 [ 2227.941178][T11041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2227.949178][T11041] R13: 00007f1ab3a16038 R14: 00007f1ab3a15fa0 R15: 00007ffe6eec3f58 [ 2227.957189][T11041] [ 2228.779465][T11073] netlink: 'syz.1.12551': attribute type 23 has an invalid length. [ 2228.879776][ T8368] Bluetooth: hci5: Malformed LE Event: 0x1d [ 2229.192069][T11078] device syzkaller0 entered promiscuous mode [ 2229.338757][T11091] netlink: 'syz.0.12554': attribute type 2 has an invalid length. [ 2232.633815][T11097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12558'. [ 2233.749406][T11130] netlink: 'syz.0.12571': attribute type 3 has an invalid length. [ 2233.797680][T11130] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12571'. [ 2233.864204][T11136] netlink: 'syz.2.12572': attribute type 10 has an invalid length. [ 2233.872216][T11136] device hsr0 entered promiscuous mode [ 2233.894261][T11136] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2234.037121][T11138] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.12572'. [ 2234.047112][T10166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2234.096539][T11140] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12571'. [ 2237.500269][T11154] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.12577'. [ 2237.564939][T11170] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12581'. [ 2237.664939][T11170] netlink: 43 bytes leftover after parsing attributes in process `syz.1.12581'. [ 2238.129639][T24800] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2239.409774][T11198] netlink: 'syz.1.12589': attribute type 2 has an invalid length. [ 2239.751521][T11206] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.12592'. [ 2239.769503][T24800] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2244.075820][T11254] netlink: 'syz.2.12608': attribute type 2 has an invalid length. [ 2244.121108][T11251] netlink: 'syz.1.12607': attribute type 10 has an invalid length. [ 2244.354026][ T8368] Bluetooth: hci1: command 0x0406 tx timeout [ 2245.022212][T11251] team0 (unregistering): Port device team_slave_0 removed [ 2245.065804][T11251] team0 (unregistering): Port device team_slave_1 removed [ 2245.505828][T11275] device syzkaller0 entered promiscuous mode [ 2248.436588][T11295] netlink: 'syz.4.12624': attribute type 21 has an invalid length. [ 2248.445349][T11295] netlink: 'syz.4.12624': attribute type 1 has an invalid length. [ 2248.551078][T11297] netlink: 'syz.3.12626': attribute type 2 has an invalid length. [ 2249.090592][T11305] device syzkaller0 entered promiscuous mode [ 2249.116006][T11306] netlink: 'syz.2.12627': attribute type 10 has an invalid length. [ 2251.797504][T11313] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.12628'. [ 2252.561278][T11312] delete_channel: no stack [ 2254.333772][T11318] netlink: 'syz.4.12629': attribute type 10 has an invalid length. [ 2255.047767][T11356] netlink: 'syz.4.12644': attribute type 2 has an invalid length. [ 2257.522282][T11380] device syzkaller0 entered promiscuous mode [ 2257.554804][T11377] netlink: 'syz.3.12649': attribute type 10 has an invalid length. [ 2258.486472][T11377] team0 (unregistering): Port device team_slave_0 removed [ 2258.545784][T11377] team0 (unregistering): Port device team_slave_1 removed [ 2258.596073][T11382] netlink: 'syz.1.12653': attribute type 10 has an invalid length. [ 2258.900487][T11399] netlink: 'syz.0.12657': attribute type 4 has an invalid length. [ 2258.913012][T11399] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.12657'. [ 2261.516729][T11396] netlink: 'syz.1.12658': attribute type 13 has an invalid length. [ 2261.530737][T11396] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12658'. [ 2261.542602][T11396] syz_tun: refused to change device tx_queue_len [ 2261.556241][T11396] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2261.580624][T11400] netlink: 'syz.1.12658': attribute type 10 has an invalid length. [ 2261.621097][T11404] netlink: 'syz.3.12660': attribute type 1 has an invalid length. [ 2261.653886][T11404] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12660'. [ 2261.690227][T11418] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.707925][T11421] netlink: 'syz.2.12666': attribute type 2 has an invalid length. [ 2261.731243][T11423] netlink: 'syz.4.12665': attribute type 2 has an invalid length. [ 2261.965734][T11427] netlink: 'syz.0.12668': attribute type 10 has an invalid length. [ 2262.342119][T11427] team0 (unregistering): Port device team_slave_0 removed [ 2262.609976][T11427] team0 (unregistering): Port device team_slave_1 removed [ 2262.729557][T11434] mac80211_hwsim hwsim100 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2263.029247][T11450] device syzkaller0 entered promiscuous mode [ 2263.300978][T11461] netlink: 'syz.2.12680': attribute type 2 has an invalid length. [ 2263.820612][T11466] netlink: 'syz.3.12682': attribute type 2 has an invalid length. [ 2264.335386][T11480] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12686'. [ 2264.834592][ T8368] Bluetooth: hci0: command 0x0406 tx timeout [ 2266.808186][T10166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2267.519468][T11494] netlink: 'syz.0.12692': attribute type 10 has an invalid length. [ 2267.699493][T11502] FAULT_INJECTION: forcing a failure. [ 2267.699493][T11502] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.738532][T11502] CPU: 1 PID: 11502 Comm: syz.2.12694 Not tainted syzkaller #0 [ 2267.746169][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2267.756314][T11502] Call Trace: [ 2267.759634][T11502] [ 2267.762604][T11502] dump_stack_lvl+0x188/0x24e [ 2267.767419][T11502] ? show_regs_print_info+0x12/0x12 [ 2267.772663][T11502] ? load_image+0x400/0x400 [ 2267.777227][T11502] ? __might_sleep+0xd0/0xd0 [ 2267.781863][T11502] ? __lock_acquire+0x7d10/0x7d10 [ 2267.786938][T11502] ? lock_chain_count+0x20/0x20 [ 2267.791846][T11502] should_fail_ex+0x399/0x4d0 [ 2267.796588][T11502] should_failslab+0x5/0x20 [ 2267.801137][T11502] slab_pre_alloc_hook+0x59/0x310 [ 2267.806220][T11502] ? bpf_prog_test_run_skb+0x241/0x1890 [ 2267.811825][T11502] __kmem_cache_alloc_node+0x4f/0x260 [ 2267.817252][T11502] ? bpf_prog_test_run_skb+0x241/0x1890 [ 2267.822851][T11502] __kmalloc+0xa0/0x240 [ 2267.827068][T11502] bpf_prog_test_run_skb+0x241/0x1890 [ 2267.832494][T11502] ? __fget_files+0x28/0x4b0 [ 2267.837139][T11502] ? __fget_files+0x28/0x4b0 [ 2267.841792][T11502] ? __fget_files+0x43d/0x4b0 [ 2267.846541][T11502] ? cpu_online+0xa0/0xa0 [ 2267.850920][T11502] bpf_prog_test_run+0x31e/0x390 [ 2267.855919][T11502] __sys_bpf+0x62b/0x780 [ 2267.860219][T11502] ? bpf_link_show_fdinfo+0x380/0x380 [ 2267.865688][T11502] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2267.871929][T11502] __x64_sys_bpf+0x78/0x90 [ 2267.876420][T11502] do_syscall_64+0x4c/0xa0 [ 2267.880887][T11502] ? clear_bhb_loop+0x60/0xb0 [ 2267.885621][T11502] ? clear_bhb_loop+0x60/0xb0 [ 2267.890353][T11502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2267.896300][T11502] RIP: 0033:0x7fe28559ce59 [ 2267.900756][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2267.920413][T11502] RSP: 002b:00007fe2837d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2267.928878][T11502] RAX: ffffffffffffffda RBX: 00007fe285816090 RCX: 00007fe28559ce59 [ 2267.936896][T11502] RDX: 000000000000002a RSI: 0000200000000080 RDI: 000000000000000a [ 2267.944912][T11502] RBP: 00007fe2837d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2267.952932][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2267.960944][T11502] R13: 00007fe285816128 R14: 00007fe285816090 R15: 00007ffc657bdcb8 [ 2267.968971][T11502] [ 2268.721401][T11507] netlink: 'syz.4.12696': attribute type 2 has an invalid length. [ 2269.361228][ T3405] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2270.475892][T11515] FAULT_INJECTION: forcing a failure. [ 2270.475892][T11515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2270.500368][T11515] CPU: 1 PID: 11515 Comm: syz.1.12699 Not tainted syzkaller #0 [ 2270.508009][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2270.518121][T11515] Call Trace: [ 2270.521442][T11515] [ 2270.524413][T11515] dump_stack_lvl+0x188/0x24e [ 2270.529158][T11515] ? show_regs_print_info+0x12/0x12 [ 2270.534410][T11515] ? load_image+0x400/0x400 [ 2270.538982][T11515] ? __lock_acquire+0x7d10/0x7d10 [ 2270.544097][T11515] ? snprintf+0xe5/0x140 [ 2270.548457][T11515] should_fail_ex+0x399/0x4d0 [ 2270.553195][T11515] _copy_to_user+0x2c/0x130 [ 2270.557769][T11515] simple_read_from_buffer+0xe3/0x150 [ 2270.563184][T11515] proc_fail_nth_read+0x1a6/0x220 [ 2270.568243][T11515] ? proc_fault_inject_write+0x310/0x310 [ 2270.573915][T11515] ? fsnotify_perm+0x248/0x550 [ 2270.578718][T11515] ? proc_fault_inject_write+0x310/0x310 [ 2270.584380][T11515] vfs_read+0x2de/0xa00 [ 2270.588578][T11515] ? kernel_read+0x1e0/0x1e0 [ 2270.593204][T11515] ? __fget_files+0x28/0x4b0 [ 2270.597863][T11515] ? __fget_files+0x28/0x4b0 [ 2270.602509][T11515] ? __fget_files+0x43d/0x4b0 [ 2270.607235][T11515] ? __fdget_pos+0x2ae/0x360 [ 2270.611868][T11515] ? ksys_read+0x71/0x250 [ 2270.616250][T11515] ksys_read+0x14c/0x250 [ 2270.620554][T11515] ? vfs_write+0xa30/0xa30 [ 2270.625017][T11515] ? lockdep_hardirqs_on+0x94/0x140 [ 2270.630256][T11515] do_syscall_64+0x4c/0xa0 [ 2270.634705][T11515] ? clear_bhb_loop+0x60/0xb0 [ 2270.639414][T11515] ? clear_bhb_loop+0x60/0xb0 [ 2270.644126][T11515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2270.650058][T11515] RIP: 0033:0x7f1ab375d68e [ 2270.654502][T11515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2270.674138][T11515] RSP: 002b:00007f1ab45d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2270.682609][T11515] RAX: ffffffffffffffda RBX: 00007f1ab45d26c0 RCX: 00007f1ab375d68e [ 2270.690606][T11515] RDX: 000000000000000f RSI: 00007f1ab45d20a0 RDI: 0000000000000007 [ 2270.698618][T11515] RBP: 00007f1ab45d2090 R08: 0000000000000000 R09: 0000000000000000 [ 2270.706626][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2270.714629][T11515] R13: 00007f1ab3a16038 R14: 00007f1ab3a15fa0 R15: 00007ffe6eec3f58 [ 2270.722641][T11515] [ 2270.733981][T12934] Bluetooth: hci4: Malformed LE Event: 0x1d [ 2270.880764][T11526] netlink: 'syz.3.12712': attribute type 3 has an invalid length. [ 2270.909757][T11526] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12712'. [ 2271.173585][T11530] device syzkaller0 entered promiscuous mode [ 2271.190343][T11528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2271.209983][T11528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2271.319520][T11528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2271.333291][T11528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2271.528828][T11528] bridge0: port 3(batadv0) entered disabled state [ 2271.845019][T11528] device batadv0 left promiscuous mode [ 2271.859097][T11528] bridge0: port 3(batadv0) entered disabled state [ 2272.843328][T24800] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2272.956945][T11552] netlink: 'syz.3.12713': attribute type 2 has an invalid length. [ 2275.233129][T11542] netlink: 'syz.1.12708': attribute type 10 has an invalid length. [ 2275.886277][T12934] Bluetooth: hci0: Malformed LE Event: 0x1d [ 2276.061813][T11583] netlink: 'syz.2.12722': attribute type 10 has an invalid length. [ 2276.312739][T11589] netlink: 'syz.4.12725': attribute type 2 has an invalid length. [ 2279.166987][T11607] netlink: 'syz.1.12729': attribute type 1 has an invalid length. [ 2279.177070][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12729'. [ 2279.239307][T11604] delete_channel: no stack [ 2279.437695][T11610] device syzkaller0 entered promiscuous mode [ 2279.447564][T11620] netlink: 'syz.1.12734': attribute type 21 has an invalid length. [ 2279.627014][T11625] netlink: 'syz.2.12733': attribute type 21 has an invalid length. [ 2280.207416][T12934] Bluetooth: hci4: command 0x0406 tx timeout [ 2282.235614][T11621] FAULT_INJECTION: forcing a failure. [ 2282.235614][T11621] name failslab, interval 1, probability 0, space 0, times 0 [ 2282.248665][T11621] CPU: 1 PID: 11621 Comm: syz.3.12731 Not tainted syzkaller #0 [ 2282.256226][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2282.266307][T11621] Call Trace: [ 2282.269615][T11621] [ 2282.272566][T11621] dump_stack_lvl+0x188/0x24e [ 2282.277262][T11621] ? show_regs_print_info+0x12/0x12 [ 2282.282489][T11621] ? load_image+0x400/0x400 [ 2282.287065][T11621] ? verify_lock_unused+0x140/0x140 [ 2282.292335][T11621] should_fail_ex+0x399/0x4d0 [ 2282.297064][T11621] should_failslab+0x5/0x20 [ 2282.301614][T11621] slab_pre_alloc_hook+0x59/0x310 [ 2282.306675][T11621] ? __mutex_lock+0x1ab/0xaf0 [ 2282.311371][T11621] ? ref_tracker_alloc+0x14e/0x4b0 [ 2282.316511][T11621] __kmem_cache_alloc_node+0x4f/0x260 [ 2282.321930][T11621] ? ref_tracker_alloc+0x14e/0x4b0 [ 2282.327096][T11621] kmalloc_trace+0x26/0xe0 [ 2282.331556][T11621] ref_tracker_alloc+0x14e/0x4b0 [ 2282.336551][T11621] ? ref_tracker_dir_print+0x150/0x150 [ 2282.342178][T11621] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2282.348463][T11621] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 2282.353953][T11621] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 2282.359455][T11621] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 2282.364971][T11621] ? _raw_spin_lock+0x40/0x40 [ 2282.369688][T11621] linkwatch_fire_event+0x1a9/0x210 [ 2282.374921][T11621] ieee80211_ibss_disconnect+0x41b/0x710 [ 2282.380679][T11621] ieee80211_ibss_leave+0x21/0x130 [ 2282.385822][T11621] __cfg80211_leave_ibss+0x1da/0x450 [ 2282.391187][T11621] cfg80211_leave_ibss+0x5a/0x70 [ 2282.396152][T11621] cfg80211_change_iface+0x4b3/0xf80 [ 2282.401539][T11621] __cfg80211_wext_siwmode+0x1c2/0x290 [ 2282.407072][T11621] ? __cfg80211_wext_giwfreq+0x8b0/0x8b0 [ 2282.412742][T11621] ? full_name_hash+0x8e/0xe0 [ 2282.417448][T11621] ? __cfg80211_wext_giwfreq+0x8b0/0x8b0 [ 2282.423118][T11621] ioctl_standard_call+0xd4/0x2b0 [ 2282.428175][T11621] ? __cfg80211_wext_giwfreq+0x8b0/0x8b0 [ 2282.433840][T11621] wext_ioctl_dispatch+0x3da/0x470 [ 2282.438974][T11621] ? wext_ioctl_dispatch+0x470/0x470 [ 2282.444284][T11621] ? iw_handler_get_private+0x1e0/0x1e0 [ 2282.449858][T11621] wext_handle_ioctl+0x113/0x1d0 [ 2282.454846][T11621] ? call_commit_handler+0xf0/0xf0 [ 2282.459997][T11621] sock_ioctl+0x143/0x710 [ 2282.464362][T11621] ? sock_poll+0x410/0x410 [ 2282.468810][T11621] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2282.473782][T11621] ? security_file_ioctl+0x7c/0xa0 [ 2282.478924][T11621] ? sock_poll+0x410/0x410 [ 2282.483367][T11621] __se_sys_ioctl+0xfa/0x170 [ 2282.488020][T11621] do_syscall_64+0x4c/0xa0 [ 2282.492457][T11621] ? clear_bhb_loop+0x60/0xb0 [ 2282.497172][T11621] ? clear_bhb_loop+0x60/0xb0 [ 2282.501885][T11621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2282.507809][T11621] RIP: 0033:0x7f5c6919ce59 [ 2282.512245][T11621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2282.531877][T11621] RSP: 002b:00007f5c673f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2282.540319][T11621] RAX: ffffffffffffffda RBX: 00007f5c69416090 RCX: 00007f5c6919ce59 [ 2282.548317][T11621] RDX: 0000200000000040 RSI: 0000000000008b06 RDI: 000000000000000c [ 2282.556310][T11621] RBP: 00007f5c673f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2282.564301][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2282.572298][T11621] R13: 00007f5c69416128 R14: 00007f5c69416090 R15: 00007ffe03de5ac8 [ 2282.580316][T11621] [ 2282.988945][T11633] netlink: 'syz.0.12737': attribute type 3 has an invalid length. [ 2283.057194][T11633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12737'. [ 2283.273791][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.280191][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.473105][T11653] netlink: 'syz.1.12742': attribute type 2 has an invalid length. [ 2287.786206][T11702] netlink: 'syz.1.12759': attribute type 29 has an invalid length. [ 2287.834284][T11702] netlink: 'syz.1.12759': attribute type 29 has an invalid length. [ 2288.940226][T11712] netlink: 'syz.2.12762': attribute type 29 has an invalid length. [ 2288.959065][T11712] netlink: 'syz.2.12762': attribute type 29 has an invalid length. [ 2288.999637][T11712] netlink: 'syz.2.12762': attribute type 29 has an invalid length. [ 2294.617682][T11793] netlink: 'syz.3.12788': attribute type 20 has an invalid length. [ 2294.728863][T11799] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.12790'. [ 2294.791535][T11800] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.12788'. [ 2294.813732][T11800] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.12788'. [ 2294.850071][T11793] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.12788'. [ 2295.412306][T11824] netlink: 'syz.4.12800': attribute type 10 has an invalid length. [ 2296.197358][ T8368] Bluetooth: hci5: ISO packet for unknown connection handle 3847 [ 2296.223287][T11847] netlink: 'syz.0.12807': attribute type 11 has an invalid length. [ 2296.263889][T11847] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12807'. [ 2297.011367][T11843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2297.583459][T11877] netlink: 'syz.2.12830': attribute type 3 has an invalid length. [ 2297.611010][T11877] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12830'. [ 2297.805498][T11887] netlink: 'syz.3.12821': attribute type 17 has an invalid length. [ 2297.859282][T11887] netlink: 'syz.3.12821': attribute type 16 has an invalid length. [ 2297.921614][T11887] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12821'. [ 2298.990821][T11904] netlink: 'syz.0.12823': attribute type 46 has an invalid length. [ 2300.193282][T24800] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2300.989914][T11943] netlink: 'syz.2.12839': attribute type 3 has an invalid length. [ 2301.013720][T11943] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12839'. [ 2303.668456][T11971] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.12848'. [ 2303.768358][T11972] ================================================================== [ 2303.776578][T11972] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 2303.784445][T11972] Write of size 56 at addr ffff888077dc2a90 by task syz.4.12849/11972 [ 2303.792712][T11972] [ 2303.795081][T11972] CPU: 0 PID: 11972 Comm: syz.4.12849 Not tainted syzkaller #0 [ 2303.802680][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2303.812783][T11972] Call Trace: [ 2303.816108][T11972] [ 2303.819094][T11972] dump_stack_lvl+0x188/0x24e [ 2303.823825][T11972] ? __lock_acquire+0x7d10/0x7d10 [ 2303.828912][T11972] ? show_regs_print_info+0x12/0x12 [ 2303.834161][T11972] ? load_image+0x400/0x400 [ 2303.838729][T11972] ? __virt_addr_valid+0x465/0x540 [ 2303.843904][T11972] ? __bpf_get_stackid+0x6c9/0x920 [ 2303.849154][T11972] print_report+0xa8/0x210 [ 2303.853629][T11972] kasan_report+0x10b/0x140 [ 2303.858233][T11972] ? __bpf_get_stackid+0x6c9/0x920 [ 2303.863407][T11972] kasan_check_range+0x235/0x290 [ 2303.868415][T11972] ? __bpf_get_stackid+0x6c9/0x920 [ 2303.873589][T11972] memcpy+0x3c/0x60 [ 2303.877448][T11972] __bpf_get_stackid+0x6c9/0x920 [ 2303.882448][T11972] bpf_get_stackid_pe+0x33f/0x400 [ 2303.887536][T11972] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 2303.893052][T11972] bpf_overflow_handler+0x522/0x7c0 [ 2303.898309][T11972] ? bpf_overflow_handler+0xd9/0x7c0 [ 2303.903675][T11972] ? perf_swevent_overflow+0x230/0x230 [ 2303.909185][T11972] ? ct_irq_exit_irqson+0x113/0x170 [ 2303.914433][T11972] ? __lock_acquire+0x13cf/0x7d10 [ 2303.919526][T11972] ? __perf_event_account_interrupt+0x187/0x280 [ 2303.925837][T11972] __perf_event_overflow+0x448/0x610 [ 2303.931210][T11972] perf_swevent_event+0x315/0x570 [ 2303.936298][T11972] ? perf_tp_event+0xc30/0xc30 [ 2303.941124][T11972] ? perf_tp_event+0xaac/0xc30 [ 2303.945967][T11972] ___perf_sw_event+0x49e/0x6e0 [ 2303.950891][T11972] ? ___perf_sw_event+0x180/0x6e0 [ 2303.955976][T11972] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 2303.962477][T11972] ? verify_lock_unused+0x140/0x140 [ 2303.967755][T11972] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2303.973813][T11972] ? lock_chain_count+0x20/0x20 [ 2303.978730][T11972] __perf_sw_event+0x135/0x260 [ 2303.983560][T11972] do_user_addr_fault+0xaea/0xb10 [ 2303.988644][T11972] ? trace_hardirqs_off_finish+0x86/0x180 [ 2303.994430][T11972] exc_page_fault+0x60/0x100 [ 2303.999082][T11972] asm_exc_page_fault+0x22/0x30 [ 2304.004035][T11972] RIP: 0010:strncpy_from_user+0x14b/0x350 [ 2304.009819][T11972] Code: 4c 89 e6 e8 77 be 49 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 [ 2304.029485][T11972] RSP: 0018:ffffc9000e967b50 EFLAGS: 00050246 [ 2304.035612][T11972] RAX: ffffffff8438c109 RBX: ffffc9000e967c70 RCX: ffff88802b7c1e00 [ 2304.043642][T11972] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 2304.051659][T11972] RBP: ffffc9000e967c70 R08: ffff88802b7c1e00 R09: 0000000000000003 [ 2304.059685][T11972] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 2304.067708][T11972] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 2304.075775][T11972] ? strncpy_from_user+0x129/0x350 [ 2304.080955][T11972] bpf_prog_load+0x1f3/0x1560 [ 2304.085690][T11972] ? map_freeze+0x390/0x390 [ 2304.090273][T11972] ? __might_fault+0xa6/0x120 [ 2304.095009][T11972] ? __might_fault+0xa6/0x120 [ 2304.099735][T11972] ? __might_fault+0xc2/0x120 [ 2304.104453][T11972] ? __might_fault+0xa6/0x120 [ 2304.109181][T11972] ? bpf_lsm_bpf+0x5/0x10 [ 2304.113572][T11972] ? security_bpf+0x7a/0xa0 [ 2304.118125][T11972] __sys_bpf+0x5b8/0x780 [ 2304.122433][T11972] ? bpf_link_show_fdinfo+0x380/0x380 [ 2304.127892][T11972] ? lock_chain_count+0x20/0x20 [ 2304.132810][T11972] __x64_sys_bpf+0x78/0x90 [ 2304.137292][T11972] do_syscall_64+0x4c/0xa0 [ 2304.141762][T11972] ? clear_bhb_loop+0x60/0xb0 [ 2304.146500][T11972] ? clear_bhb_loop+0x60/0xb0 [ 2304.151244][T11972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2304.157197][T11972] RIP: 0033:0x7fad78d9ce59 [ 2304.161662][T11972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2304.181321][T11972] RSP: 002b:00007fad76ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2304.189785][T11972] RAX: ffffffffffffffda RBX: 00007fad79015fa0 RCX: 00007fad78d9ce59 [ 2304.197809][T11972] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2304.205829][T11972] RBP: 00007fad78e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2304.213845][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2304.221972][T11972] R13: 00007fad79016038 R14: 00007fad79015fa0 R15: 00007ffe4e24a038 [ 2304.230006][T11972] [ 2304.233069][T11972] [ 2304.235454][T11972] Allocated by task 11972: [ 2304.239911][T11972] kasan_set_track+0x4b/0x70 [ 2304.244562][T11972] __kasan_kmalloc+0x8e/0xa0 [ 2304.249209][T11972] __kmalloc_node+0xb0/0x240 [ 2304.253859][T11972] bpf_map_area_alloc+0x47/0xe0 [ 2304.258768][T11972] prealloc_elems_and_freelist+0x86/0x1c0 [ 2304.264542][T11972] stack_map_alloc+0x390/0x520 [ 2304.269357][T11972] map_create+0x534/0x1000 [ 2304.273824][T11972] __sys_bpf+0x38b/0x780 [ 2304.278124][T11972] __x64_sys_bpf+0x78/0x90 [ 2304.282592][T11972] do_syscall_64+0x4c/0xa0 [ 2304.287050][T11972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2304.293009][T11972] [ 2304.295369][T11972] Last potentially related work creation: [ 2304.301143][T11972] kasan_save_stack+0x3a/0x60 [ 2304.305886][T11972] __kasan_record_aux_stack+0xb2/0xc0 [ 2304.311305][T11972] call_rcu+0x14f/0x990 [ 2304.315520][T11972] __nf_register_net_hook+0x788/0x910 [ 2304.320977][T11972] nf_register_net_hook+0xae/0x190 [ 2304.326138][T11972] nf_register_net_hooks+0x40/0x1a0 [ 2304.331392][T11972] nf_ct_netns_do_get+0x20f/0x5b0 [ 2304.336589][T11972] nf_ct_netns_inet_get+0x3b/0x150 [ 2304.341784][T11972] nf_conncount_init+0x123/0x380 [ 2304.346895][T11972] ovs_ct_init+0x312/0x480 [ 2304.351410][T11972] ovs_init_net+0x1e2/0x240 [ 2304.356010][T11972] ops_init+0x355/0x5f0 [ 2304.360214][T11972] setup_net+0x4f2/0xbd0 [ 2304.364500][T11972] copy_net_ns+0x348/0x5b0 [ 2304.368970][T11972] create_new_namespaces+0x3d3/0x6f0 [ 2304.374313][T11972] copy_namespaces+0x3b0/0x410 [ 2304.379118][T11972] copy_process+0x19c2/0x4080 [ 2304.383845][T11972] kernel_clone+0x24b/0x900 [ 2304.388403][T11972] __x64_sys_clone+0x1a7/0x220 [ 2304.393216][T11972] do_syscall_64+0x4c/0xa0 [ 2304.397674][T11972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2304.403650][T11972] [ 2304.406008][T11972] The buggy address belongs to the object at ffff888077dc2a80 [ 2304.406008][T11972] which belongs to the cache kmalloc-cg-64 of size 64 [ 2304.420204][T11972] The buggy address is located 16 bytes inside of [ 2304.420204][T11972] 64-byte region [ffff888077dc2a80, ffff888077dc2ac0) [ 2304.433353][T11972] [ 2304.435716][T11972] The buggy address belongs to the physical page: [ 2304.442227][T11972] page:ffffea0001df7080 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888077dc2a00 pfn:0x77dc2 [ 2304.453755][T11972] memcg:ffff88802f2e3401 [ 2304.458117][T11972] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 2304.465713][T11972] raw: 00fff00000000200 ffffea0001f9f4c0 dead000000000006 ffff888017442780 [ 2304.474343][T11972] raw: ffff888077dc2a00 0000000080200017 00000001ffffffff ffff88802f2e3401 [ 2304.482966][T11972] page dumped because: kasan: bad access detected [ 2304.489428][T11972] page_owner tracks the page as allocated [ 2304.495183][T11972] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 21898, tgid 21898 (kworker/u4:12), ts 2118796662815, free_ts 2118375081131 [ 2304.514075][T11972] post_alloc_hook+0x173/0x1a0 [ 2304.518895][T11972] get_page_from_freelist+0x1a1e/0x1ab0 [ 2304.524510][T11972] __alloc_pages+0x1ec/0x4f0 [ 2304.529159][T11972] alloc_slab_page+0x5d/0x160 [ 2304.533884][T11972] new_slab+0x87/0x2c0 [ 2304.538011][T11972] ___slab_alloc+0xbc6/0x1240 [ 2304.542731][T11972] __kmem_cache_alloc_node+0x1a0/0x260 [ 2304.548233][T11972] __kmalloc_node+0xa0/0x240 [ 2304.552881][T11972] kvmalloc_node+0x6c/0x180 [ 2304.557442][T11972] __nf_hook_entries_try_shrink+0x310/0x6d0 [ 2304.563390][T11972] __nf_unregister_net_hook+0x4e1/0x6e0 [ 2304.568982][T11972] nf_unregister_net_hooks+0xc7/0x130 [ 2304.574407][T11972] nf_defrag_ipv6_disable+0x91/0xe0 [ 2304.579751][T11972] nf_ct_netns_put+0x371/0x510 [ 2304.584566][T11972] nf_conncount_destroy+0x3d/0x150 [ 2304.589716][T11972] ovs_ct_exit+0x98/0x200 [ 2304.594085][T11972] page last free stack trace: [ 2304.598782][T11972] free_unref_page_prepare+0x8b4/0x9a0 [ 2304.604303][T11972] free_unref_page+0x2e/0x3f0 [ 2304.609031][T11972] __unfreeze_partials+0x1a5/0x200 [ 2304.614185][T11972] put_cpu_partial+0x17c/0x250 [ 2304.619005][T11972] qlist_free_all+0x76/0xe0 [ 2304.623627][T11972] kasan_quarantine_reduce+0x144/0x160 [ 2304.629137][T11972] __kasan_slab_alloc+0x1e/0x80 [ 2304.634046][T11972] slab_post_alloc_hook+0x4b/0x480 [ 2304.639211][T11972] __kmem_cache_alloc_node+0x140/0x260 [ 2304.644725][T11972] kmalloc_trace+0x26/0xe0 [ 2304.649196][T11972] kset_create_and_add+0x56/0x160 [ 2304.654274][T11972] netdev_register_kobject+0x1ae/0x320 [ 2304.659833][T11972] register_netdevice+0x12dc/0x1b10 [ 2304.665096][T11972] rtnl_newlink+0x167c/0x20a0 [ 2304.669816][T11972] rtnetlink_rcv_msg+0x87c/0xfc0 [ 2304.674799][T11972] netlink_rcv_skb+0x1fb/0x450 [ 2304.679616][T11972] [ 2304.681980][T11972] Memory state around the buggy address: [ 2304.687652][T11972] ffff888077dc2980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2304.695754][T11972] ffff888077dc2a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2304.703854][T11972] >ffff888077dc2a80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 2304.711948][T11972] ^ [ 2304.717357][T11972] ffff888077dc2b00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 2304.725456][T11972] ffff888077dc2b80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 2304.733552][T11972] ================================================================== [ 2304.741669][T11972] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2304.748896][T11972] CPU: 0 PID: 11972 Comm: syz.4.12849 Not tainted syzkaller #0 [ 2304.756504][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2304.766604][T11972] Call Trace: [ 2304.769923][T11972] [ 2304.772885][T11972] dump_stack_lvl+0x188/0x24e [ 2304.777623][T11972] ? memcpy+0x3c/0x60 [ 2304.781651][T11972] ? show_regs_print_info+0x12/0x12 [ 2304.786895][T11972] ? load_image+0x400/0x400 [ 2304.791463][T11972] panic+0x2e5/0x730 [ 2304.795409][T11972] ? bpf_jit_dump+0xd0/0xd0 [ 2304.799958][T11972] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2304.805911][T11972] ? _raw_spin_unlock+0x40/0x40 [ 2304.810818][T11972] ? print_memory_metadata+0x314/0x400 [ 2304.816342][T11972] check_panic_on_warn+0x80/0xa0 [ 2304.821338][T11972] ? __bpf_get_stackid+0x6c9/0x920 [ 2304.826494][T11972] end_report+0x66/0x110 [ 2304.830795][T11972] kasan_report+0x118/0x140 [ 2304.835368][T11972] ? __bpf_get_stackid+0x6c9/0x920 [ 2304.840533][T11972] kasan_check_range+0x235/0x290 [ 2304.845523][T11972] ? __bpf_get_stackid+0x6c9/0x920 [ 2304.850692][T11972] memcpy+0x3c/0x60 [ 2304.854552][T11972] __bpf_get_stackid+0x6c9/0x920 [ 2304.859551][T11972] bpf_get_stackid_pe+0x33f/0x400 [ 2304.864640][T11972] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 2304.870152][T11972] bpf_overflow_handler+0x522/0x7c0 [ 2304.875408][T11972] ? bpf_overflow_handler+0xd9/0x7c0 [ 2304.880748][T11972] ? perf_swevent_overflow+0x230/0x230 [ 2304.886257][T11972] ? ct_irq_exit_irqson+0x113/0x170 [ 2304.891510][T11972] ? __lock_acquire+0x13cf/0x7d10 [ 2304.896602][T11972] ? __perf_event_account_interrupt+0x187/0x280 [ 2304.902911][T11972] __perf_event_overflow+0x448/0x610 [ 2304.908260][T11972] perf_swevent_event+0x315/0x570 [ 2304.913339][T11972] ? perf_tp_event+0xc30/0xc30 [ 2304.918161][T11972] ? perf_tp_event+0xaac/0xc30 [ 2304.922989][T11972] ___perf_sw_event+0x49e/0x6e0 [ 2304.927908][T11972] ? ___perf_sw_event+0x180/0x6e0 [ 2304.932994][T11972] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 2304.939488][T11972] ? verify_lock_unused+0x140/0x140 [ 2304.944755][T11972] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2304.950800][T11972] ? lock_chain_count+0x20/0x20 [ 2304.955721][T11972] __perf_sw_event+0x135/0x260 [ 2304.960552][T11972] do_user_addr_fault+0xaea/0xb10 [ 2304.965645][T11972] ? trace_hardirqs_off_finish+0x86/0x180 [ 2304.971425][T11972] exc_page_fault+0x60/0x100 [ 2304.976076][T11972] asm_exc_page_fault+0x22/0x30 [ 2304.980996][T11972] RIP: 0010:strncpy_from_user+0x14b/0x350 [ 2304.986789][T11972] Code: 4c 89 e6 e8 77 be 49 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 [ 2305.006461][T11972] RSP: 0018:ffffc9000e967b50 EFLAGS: 00050246 [ 2305.012580][T11972] RAX: ffffffff8438c109 RBX: ffffc9000e967c70 RCX: ffff88802b7c1e00 [ 2305.020606][T11972] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 2305.028627][T11972] RBP: ffffc9000e967c70 R08: ffff88802b7c1e00 R09: 0000000000000003 [ 2305.036654][T11972] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 2305.044678][T11972] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 2305.052821][T11972] ? strncpy_from_user+0x129/0x350 [ 2305.058009][T11972] bpf_prog_load+0x1f3/0x1560 [ 2305.062761][T11972] ? map_freeze+0x390/0x390 [ 2305.067417][T11972] ? __might_fault+0xa6/0x120 [ 2305.072153][T11972] ? __might_fault+0xa6/0x120 [ 2305.076884][T11972] ? __might_fault+0xc2/0x120 [ 2305.081644][T11972] ? __might_fault+0xa6/0x120 [ 2305.086376][T11972] ? bpf_lsm_bpf+0x5/0x10 [ 2305.090768][T11972] ? security_bpf+0x7a/0xa0 [ 2305.095344][T11972] __sys_bpf+0x5b8/0x780 [ 2305.099648][T11972] ? bpf_link_show_fdinfo+0x380/0x380 [ 2305.105089][T11972] ? lock_chain_count+0x20/0x20 [ 2305.110008][T11972] __x64_sys_bpf+0x78/0x90 [ 2305.114483][T11972] do_syscall_64+0x4c/0xa0 [ 2305.118953][T11972] ? clear_bhb_loop+0x60/0xb0 [ 2305.123693][T11972] ? clear_bhb_loop+0x60/0xb0 [ 2305.128519][T11972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2305.134477][T11972] RIP: 0033:0x7fad78d9ce59 [ 2305.138943][T11972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2305.158599][T11972] RSP: 002b:00007fad76ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2305.167067][T11972] RAX: ffffffffffffffda RBX: 00007fad79015fa0 RCX: 00007fad78d9ce59 [ 2305.175089][T11972] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2305.183117][T11972] RBP: 00007fad78e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2305.191141][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2305.199158][T11972] R13: 00007fad79016038 R14: 00007fad79015fa0 R15: 00007ffe4e24a038 [ 2305.207189][T11972] [ 2305.210833][T11972] Kernel Offset: disabled [ 2305.215176][T11972] Rebooting in 86400 seconds..