last executing test programs: 5.758440634s ago: executing program 0 (id=1562): socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5.749542695s ago: executing program 1 (id=1563): socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (fail_nth: 6) 5.666660519s ago: executing program 2 (id=1564): r0 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="2e699325b73c5b033c8e6ce6758172419b3bcc86a3394f589b10041f1453957c00f96220c8122874b3d7b86682249b52b003e8b027799e9e2468d2be95dcd25b39ebf7f8dfb04d9a56fa0d7f860dfc61887b5003df09508a6437b16f706b29b42c59a34c4c7340365f1f74fad82ad670c6e57d6c86cfe199afb68015719723b0f2e173aa13423eccfa5100c7f6b4d7734337b14bd4e22896d03a8c99231d12c15f83a6a80950fc543128b7952b229850b80deca6bba8d3357114683946347ab5c385eb3d8fd4d761e1150c8e97527a61e0f1397f643849cdcedc6c453cbf2be6260d054b3c830196b54d5a7f0c549c15ccff2b96475f85d705", @ANYRES32, @ANYRES8, @ANYRES16, @ANYRES16=r1], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f0000000100), 0x4) sendmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x60) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x5, @empty, 0x20000, 0x1}, 0x80, 0x0}, 0x240440d1) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc6010", 0x15}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24048844) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x88, 0x67, &(0x7f00000002c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 5.303416398s ago: executing program 0 (id=1565): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e1e, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x808008}}], 0x18}, 0x2c000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b00)={&(0x7f0000000340), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB='\x00'/14], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x3}], 0x10}, 0xf7e5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x28, 0x6, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r5, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c00)="1400000037000b0f925a2a22feab3c3d06a2c2e4", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c000000000000000cfab9040a1d08030e000000e8fea4a118", 0x1d}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1c48}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 5.195381234s ago: executing program 1 (id=1567): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x4, 0xfffffffffffffe72, 0xc, 0x1, 0x0, 0x0, 0x0, 0x32efe636, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d4000000100000007910000000000000630000ff000000009500680000070000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x11}, 0x21) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9602, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x12280, 0x2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000200)="33a28ec2974f562df3b844af00af5a6c5563788da165f458c1c819d53b92eb57db461233215da67a597b167d18b971ab0033ad2ee856c28bf52ae76ebd6791ff69638e8bb350a7b6597bd029e17794e40bd686235884064fd3fa8d714ad31fd3b78870bdec36b614331dde103485e5c383fbdb27", 0x74}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x3d8}, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc000, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000300)=0xd) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_ext={0x1c, 0x10, &(0x7f0000001c00)=ANY=[@ANYBLOB="1800000008000000000000000006186a0000100000000000000005000000950000000000000018110000008793760d1a372ca40000000000000007006faffce425d738c5cb5bb03312356535cf2c168d7065eb378969b50c8a65e88b856784ca13fc5feba24d072c053965059c854e222650f62d41b21dc8f2ac58a0b3cdef19784987234058968f62b22a3099403e4a025721293054b8e8556f2cec74365c8c9de19d10723129488c0f33d26bb543dfd6abd50e769f7d0a6fe190f1256a65f5fb0d1e33e8be8a2200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000e72600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000001840)='syzkaller\x00', 0x2000000, 0xf3, &(0x7f0000001980)=""/243, 0x100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80)={0x4, 0x9, 0x7c9, 0x6}, 0x10, 0xdafd, r0, 0x6, 0x0, &(0x7f0000001ac0)=[{0x2, 0x5, 0x7, 0x3}, {0x5, 0x1, 0x5, 0x4}, {0x0, 0x5, 0xb, 0x7}, {0x1, 0x4, 0x1, 0x5}, {0x4, 0x3, 0x3, 0x4}, {0x4, 0x2, 0x10, 0x2}], 0x10, 0x6}, 0x94) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0xfffffffd}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}]}, 0x94) 5.002477124s ago: executing program 3 (id=1568): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003e00)=""/4050, 0xfd2}, {&(0x7f0000000b00)=""/4117, 0x1015}, {&(0x7f00000002c0)=""/129, 0x81}], 0x3}, 0x20) 4.71036756s ago: executing program 2 (id=1569): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x0, &(0x7f00000000c0)}) 4.474354882s ago: executing program 2 (id=1570): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e1e, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x808008}}], 0x18}, 0x2c000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b00)={&(0x7f0000000340), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB='\x00'/14], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x3}], 0x10}, 0xf7e5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x28, 0x6, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r5, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c00)="1400000037000b0f925a2a22feab3c3d06a2c2e4", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c000000000000000cfab9040a1d08030e000000e8fea4a118", 0x1d}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1c48}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 4.473952002s ago: executing program 3 (id=1571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000162cceec10315ca80000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x9, 0x1000, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000400)=[{0x2, 0x1, 0xc, 0x7}, {0x6, 0x5, 0x1, 0x4}, {0x4, 0x3, 0x8, 0x6}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000740)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9e, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x10}, 0x226, 0xb, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x484, 0x0, 0x0, 0x5, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r3}, 0x8) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x42) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000079560000000c00000009000100060000000000000700000000002ee1005f615f5f00"], 0x0, 0x2d, 0xffffffffffffff1a, 0x1, 0x4}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.213294676s ago: executing program 0 (id=1572): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000002040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffff0001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000240)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 4.079053623s ago: executing program 1 (id=1573): r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x3}, 0x2002) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x20, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x1fe, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.94686944s ago: executing program 0 (id=1574): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x3, 0x0, 0x6, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1394", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1d, 0x0, 0x0) 3.844663485s ago: executing program 3 (id=1575): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.703652873s ago: executing program 0 (id=1576): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x100b0c, 0x7, 0x43a1bd79, 0x7, 0x4, 0x6, 0x2, 0x0, 0x4000000, 0x0, 0x200d}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x1, 0xccb8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, r4, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x3}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(r1, &(0x7f0000000180), 0x13bb711e) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) 3.625888088s ago: executing program 3 (id=1577): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, &(0x7f0000000d80)=[{0x0, 0x28}], 0x1}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6d0920000800000018260000", @ANYRES32, @ANYBLOB="000000004a00aafe"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r1, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x4000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r3, 0x0, 0xe9, 0x0, &(0x7f0000000280)="3828f76a4550f9fa2ecd2964d3ece2727556220859890401698c5ea7ffa60ab3355817e3d834f46368a019476adfd40bf3c6b303612f304d8cb601ae0d268837b3d7f94dd203938016a42721635cf96ef9771d01c9b4e6fb6aced3dc8d78d9e07f9d6671c058ae83325eb7f4db63af5d385d66e2a4931620ab1b82d383481ed50b5015d6d30f77a3f1d3cc45b0aa8a75e6c624bb8d6f32e18636e469489a402468b58eb18f2f1e7417aa088d03f32695c3ded7ecee6058e5a93c25d59d77810639a3584b8e94e0a4337ea82d6acb2e1ba726e07782052213f512b1857cfe7a43cf1cf690ed20d143ba", 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000880), &(0x7f0000000dc0)="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", 0x4, 0x0, 0xae}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)="39000000140081ae0000dc676f97da021f2357f9ffffffffffffff0521018701546fabca05e28a06b8580e88370200c54c1960b89c67", 0x36}], 0x1}, 0x4000080) 3.456224937s ago: executing program 2 (id=1578): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c0000000000000000", @ANYRES64=r0], 0x48}, 0x20028814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 3.346932082s ago: executing program 1 (id=1579): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1ff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ec", 0x1}], 0x2}, 0x44840) 3.232392168s ago: executing program 1 (id=1580): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e1e, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x808008}}], 0x18}, 0x2c000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b00)={&(0x7f0000000340), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB='\x00'/14], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x3}], 0x10}, 0xf7e5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x28, 0x6, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r5, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c00)="1400000037000b0f925a2a22feab3c3d06a2c2e4", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c000000000000000cfab9040a1d08030e000000e8fea4a118", 0x1d}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1c48}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 3.030505469s ago: executing program 2 (id=1581): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x90}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.981504732s ago: executing program 3 (id=1582): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x3, 0x43a1bd73, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'bond_slave_1\x00', 0xf101}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000004f720000000000"], 0x0, 0x1a}, 0x28) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000b40)={&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x20008810) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030600000000000000000000850000001c000000b7080000000000007b8af8ff00000000b708000034f2c2864ab1883827000000bf82d51e6cf1091ca100000200000007010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32=r0, @ANYBLOB="0000000004000000851000"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000140)=""/64, 0x41100, 0x8, '\x00', 0x0, @tracing=0x19, r1, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x204, 0x6, 0x8, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000280)=[{0x1, 0x1, 0xb, 0x2}, {0x0, 0x4, 0x1, 0xd}, {0x5, 0x1, 0x10, 0x6}, {0x7, 0x3, 0x6, 0xc}, {0x2, 0x3, 0x4, 0x7}, {0x5, 0x1, 0x4, 0x9}, {0x2, 0x5, 0xf, 0x1}]}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x829, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x0, 0x0, 0x1, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0xa, 0x3, 0x73) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@ip_pktinfo={{0x1c, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x21) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x40086602, 0x110e22fff2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7f, 0x0, 0x5e, 0x0, 0x5f31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x200000000002}, 0x80, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b70800e7ff0000007b8af8ff00000000aa080000000000007b8af0ff00000000bfa100000000000007010000f8d1e222e8215affffffbfa4"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x6c07a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x200, 0x31, 0x56e, 0x7, 0xa07, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$kcm(0x2, 0x2, 0x84) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', r5}, 0x18) 2.789583362s ago: executing program 0 (id=1583): r0 = getpid() socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0xfe33) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 106.236324ms ago: executing program 1 (id=1584): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x1000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) 34.416598ms ago: executing program 3 (id=1585): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000563c000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r1, 0x1000000}, 0x38) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001d00)="1c0000005eabe36cbbdcc8ad1a76b781b27fde3825399c3683e5caa9", 0x1c}], 0x1}, 0x20001850) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffe54, 0x0, 0x0, 0x0, 0x7}, 0x10122) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x81200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 2 (id=1586): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 336.554267][ T5793] cgroup: Unknown subsys name 'net' [ 336.690530][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 338.088065][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 339.422896][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.433764][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.441774][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.464420][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.476217][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.483878][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.492370][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.499907][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.500775][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.508695][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.516342][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.522843][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.530858][ T5817] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.543895][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.544892][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.560792][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.563624][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.569558][ T5816] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.582866][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.583094][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.598047][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.598376][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.615839][ T5816] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.623900][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.961767][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 340.061240][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 340.156624][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.165002][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.172324][ T5806] bridge_slave_0: entered allmulticast mode [ 340.179829][ T5806] bridge_slave_0: entered promiscuous mode [ 340.192827][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.200920][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.208437][ T5806] bridge_slave_1: entered allmulticast mode [ 340.215766][ T5806] bridge_slave_1: entered promiscuous mode [ 340.264471][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 340.299545][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.320537][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.327867][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.335857][ T5805] bridge_slave_0: entered allmulticast mode [ 340.343057][ T5805] bridge_slave_0: entered promiscuous mode [ 340.350656][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.358093][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.365345][ T5805] bridge_slave_1: entered allmulticast mode [ 340.372418][ T5805] bridge_slave_1: entered promiscuous mode [ 340.380895][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.407351][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 340.479893][ T5806] team0: Port device team_slave_0 added [ 340.488728][ T5806] team0: Port device team_slave_1 added [ 340.506434][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.518217][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.601091][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.608308][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.634624][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.668837][ T5805] team0: Port device team_slave_0 added [ 340.678638][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.685819][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.711880][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.723401][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.730631][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.737989][ T5808] bridge_slave_0: entered allmulticast mode [ 340.744871][ T5808] bridge_slave_0: entered promiscuous mode [ 340.752296][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.759552][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.767106][ T5808] bridge_slave_1: entered allmulticast mode [ 340.774329][ T5808] bridge_slave_1: entered promiscuous mode [ 340.780990][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.788769][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.796259][ T5807] bridge_slave_0: entered allmulticast mode [ 340.803010][ T5807] bridge_slave_0: entered promiscuous mode [ 340.811763][ T5805] team0: Port device team_slave_1 added [ 340.832559][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.839921][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.847346][ T5807] bridge_slave_1: entered allmulticast mode [ 340.854718][ T5807] bridge_slave_1: entered promiscuous mode [ 340.920215][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.927574][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.953724][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.966995][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.981654][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.993626][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.011885][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.019301][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.046376][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.059670][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.082102][ T5806] hsr_slave_0: entered promiscuous mode [ 341.089014][ T5806] hsr_slave_1: entered promiscuous mode [ 341.158230][ T5807] team0: Port device team_slave_0 added [ 341.172030][ T5807] team0: Port device team_slave_1 added [ 341.189406][ T5808] team0: Port device team_slave_0 added [ 341.220496][ T5805] hsr_slave_0: entered promiscuous mode [ 341.226984][ T5805] hsr_slave_1: entered promiscuous mode [ 341.233229][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.241509][ T5805] Cannot create hsr debugfs directory [ 341.248762][ T5808] team0: Port device team_slave_1 added [ 341.281676][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.288874][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.314835][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.335351][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.342344][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.369396][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.401400][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.409165][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.435460][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.447312][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.454821][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.480959][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.573404][ T5807] hsr_slave_0: entered promiscuous mode [ 341.579672][ T5807] hsr_slave_1: entered promiscuous mode [ 341.586753][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.595085][ T5807] Cannot create hsr debugfs directory [ 341.674297][ T5819] Bluetooth: hci2: command tx timeout [ 341.674308][ T5083] Bluetooth: hci0: command tx timeout [ 341.674559][ T5083] Bluetooth: hci3: command tx timeout [ 341.680079][ T5819] Bluetooth: hci1: command tx timeout [ 341.711284][ T5808] hsr_slave_0: entered promiscuous mode [ 341.718502][ T5808] hsr_slave_1: entered promiscuous mode [ 341.725367][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.732981][ T5808] Cannot create hsr debugfs directory [ 341.899477][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.923579][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.956558][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.966648][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.068342][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.090208][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.101389][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.118503][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.181258][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.197066][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.208198][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.229685][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.289329][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.342760][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.359252][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.367964][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.390901][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.401609][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.435526][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.442969][ T4746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.505368][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.512477][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.632232][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.642363][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.655001][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.704817][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.722189][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.731212][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.766860][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.774066][ T4746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.784965][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.792538][ T4746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.804214][ T4746] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.811363][ T4746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.824927][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.832167][ T5847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.868638][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.875873][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.908003][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.915438][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.991440][ T5807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.004792][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.079703][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.188522][ T5806] veth0_vlan: entered promiscuous mode [ 343.237226][ T5806] veth1_vlan: entered promiscuous mode [ 343.321638][ T5806] veth0_macvtap: entered promiscuous mode [ 343.356264][ T5806] veth1_macvtap: entered promiscuous mode [ 343.396508][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.438984][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.487207][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.496415][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.506645][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.517165][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.541259][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.558853][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.586190][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.659190][ T5807] veth0_vlan: entered promiscuous mode [ 343.689429][ T5807] veth1_vlan: entered promiscuous mode [ 343.708851][ T5805] veth0_vlan: entered promiscuous mode [ 343.753408][ T5819] Bluetooth: hci1: command tx timeout [ 343.758881][ T5814] Bluetooth: hci3: command tx timeout [ 343.758906][ T5083] Bluetooth: hci2: command tx timeout [ 343.764990][ T5818] Bluetooth: hci0: command tx timeout [ 343.778240][ T5847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.795356][ T5847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.819579][ T5805] veth1_vlan: entered promiscuous mode [ 343.853004][ T5807] veth0_macvtap: entered promiscuous mode [ 343.865921][ T5858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.876886][ T5858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.878682][ T5808] veth0_vlan: entered promiscuous mode [ 343.904564][ T5807] veth1_macvtap: entered promiscuous mode [ 343.935457][ T5808] veth1_vlan: entered promiscuous mode [ 343.952122][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.964446][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.979332][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.046637][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.078561][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.101969][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.120939][ T5808] veth0_macvtap: entered promiscuous mode [ 344.146189][ T5805] veth0_macvtap: entered promiscuous mode [ 344.156809][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.170742][ T5807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.183229][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 344.186053][ T5807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.220544][ T5807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.259834][ T5808] veth1_macvtap: entered promiscuous mode [ 344.272999][ T5805] veth1_macvtap: entered promiscuous mode [ 344.323174][ C1] hrtimer: interrupt took 37731 ns [ 344.361872][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.365474][ T5868] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 344.381221][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.400884][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.412638][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.431438][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.463494][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.477396][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.487607][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.498075][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.508029][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.519659][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.531215][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.548260][ T5858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.552845][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.563198][ T5858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.576442][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.587399][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.598333][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.610091][ T5868] syz.2.3 (5868) used greatest stack depth: 20400 bytes left [ 344.619199][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.638033][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.647343][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.678104][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.688437][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.706148][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.721671][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.732305][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.743096][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.754068][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.764884][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.776027][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.814251][ T5805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.825029][ T5805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.834845][ T5805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.843926][ T5805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.856216][ T5874] warning: `syz.2.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 344.925499][ T5873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.940410][ T4746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.960070][ T4746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.135228][ T5845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.143127][ T5845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.296427][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.309584][ T4746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.333807][ T4746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.338389][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.509395][ T5878] bridge_slave_1: left allmulticast mode [ 345.517519][ T5878] bridge_slave_1: left promiscuous mode [ 345.531068][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.558951][ T5878] bridge_slave_0: left allmulticast mode [ 345.565348][ T5878] bridge_slave_0: left promiscuous mode [ 345.575538][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.710407][ T5881] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 345.719150][ T5881] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6'. [ 345.790727][ T5875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.801750][ T5875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.833933][ T5818] Bluetooth: hci2: command tx timeout [ 345.839416][ T5818] Bluetooth: hci0: command tx timeout [ 345.844978][ T5819] Bluetooth: hci1: command tx timeout [ 345.850525][ T5819] Bluetooth: hci3: command tx timeout [ 345.996838][ T5884] netlink: 'syz.2.7': attribute type 33 has an invalid length. [ 346.004934][ T5884] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7'. [ 346.048058][ T5878] syz.3.4 (5878) used greatest stack depth: 20200 bytes left [ 346.190119][ T5888] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1'. [ 346.371711][ T5893] syzkaller0: entered promiscuous mode [ 346.431848][ T5893] syzkaller0: entered allmulticast mode [ 347.123404][ T5910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 347.157066][ T5910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 347.169516][ T5914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 347.924751][ T5818] Bluetooth: hci0: command tx timeout [ 347.930838][ T5819] Bluetooth: hci3: command tx timeout [ 347.930875][ T5083] Bluetooth: hci1: command tx timeout [ 347.936635][ T5814] Bluetooth: hci2: command tx timeout [ 348.143980][ T5941] netlink: 'syz.1.25': attribute type 21 has an invalid length. [ 348.166047][ T5941] netlink: 'syz.1.25': attribute type 6 has an invalid length. [ 348.198142][ T5941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.25'. [ 348.589324][ T5959] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.33'. [ 348.636250][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.727092][ T5973] syzkaller0: entered promiscuous mode [ 349.732759][ T5973] syzkaller0: entered allmulticast mode [ 350.050117][ T5982] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 350.091439][ T5982] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.40'. [ 350.198800][ T5986] netlink: 'syz.3.42': attribute type 33 has an invalid length. [ 350.239242][ T5986] netlink: 152 bytes leftover after parsing attributes in process `syz.3.42'. [ 350.851505][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.560143][ T6019] syzkaller0: entered promiscuous mode [ 351.567979][ T6019] syzkaller0: entered allmulticast mode [ 351.577919][ T6020] bridge_slave_1: left allmulticast mode [ 351.587359][ T6020] bridge_slave_1: left promiscuous mode [ 351.598379][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.650885][ T6020] bridge_slave_0: left allmulticast mode [ 351.669668][ T6020] bridge_slave_0: left promiscuous mode [ 351.690658][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.735269][ T6026] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 351.778076][ T6026] __nla_validate_parse: 1 callbacks suppressed [ 351.778094][ T6026] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.53'. [ 352.340076][ T6036] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 352.366786][ T6036] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.65'. [ 353.048002][ T6055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.785612][ T6064] syzkaller0: entered promiscuous mode [ 353.791193][ T6064] syzkaller0: entered allmulticast mode [ 353.927780][ T6066] bridge_slave_1: left allmulticast mode [ 353.941753][ T6066] bridge_slave_1: left promiscuous mode [ 353.966013][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.011286][ T6070] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 354.021785][ T6070] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.69'. [ 354.022517][ T6066] bridge_slave_0: left allmulticast mode [ 354.054472][ T6066] bridge_slave_0: left promiscuous mode [ 354.061295][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.444488][ T6066] syz.2.67 (6066) used greatest stack depth: 19784 bytes left [ 354.587562][ T6080] bridge_slave_1: left allmulticast mode [ 354.613554][ T6080] bridge_slave_1: left promiscuous mode [ 354.619989][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.647067][ T6080] bridge_slave_0: left allmulticast mode [ 354.653099][ T6080] bridge_slave_0: left promiscuous mode [ 354.666402][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.236185][ T6105] syzkaller0: entered promiscuous mode [ 355.249038][ T6105] syzkaller0: entered allmulticast mode [ 355.274895][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.298871][ T6107] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 355.327278][ T6107] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.79'. [ 356.544868][ T6141] syzkaller0: entered promiscuous mode [ 356.550729][ T6141] syzkaller0: entered allmulticast mode [ 356.629040][ T6143] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 356.650650][ T6143] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.91'. [ 357.207303][ T6159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.092386][ T6173] syzkaller0: entered promiscuous mode [ 358.099902][ T6173] syzkaller0: entered allmulticast mode [ 358.231125][ T6179] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 358.260030][ T6179] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.104'. [ 358.984232][ T6204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.619378][ T6209] syzkaller0: entered promiscuous mode [ 359.638392][ T6209] syzkaller0: entered allmulticast mode [ 359.739884][ T6214] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 359.763219][ T6214] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.115'. [ 360.610482][ T6232] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 360.666217][ T6232] netlink: 156 bytes leftover after parsing attributes in process `syz.0.122'. [ 360.754546][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.779385][ T6238] syzkaller0: entered promiscuous mode [ 360.808981][ T6238] syzkaller0: entered allmulticast mode [ 361.428268][ T6245] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 361.482143][ T6245] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.126'. [ 361.610277][ T6247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'. [ 361.621067][ T6247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'. [ 361.635507][ T6247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'. [ 361.654657][ T6247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'. [ 361.807173][ T6252] netlink: 'syz.1.130': attribute type 33 has an invalid length. [ 361.865657][ T6252] netlink: 152 bytes leftover after parsing attributes in process `syz.1.130'. [ 362.539924][ T6270] syzkaller0: entered promiscuous mode [ 362.551298][ T6270] syzkaller0: entered allmulticast mode [ 363.047892][ T6284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.066442][ T6282] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 363.106153][ T6282] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.138'. [ 364.251822][ T6296] netlink: 'syz.3.143': attribute type 33 has an invalid length. [ 364.283019][ T6296] netlink: 152 bytes leftover after parsing attributes in process `syz.3.143'. [ 364.799012][ T6309] syzkaller0: entered promiscuous mode [ 364.806645][ T6309] syzkaller0: entered allmulticast mode [ 365.100526][ T6319] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 365.130155][ T6319] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.150'. [ 365.352429][ T6324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.151632][ T6336] netlink: 'syz.1.156': attribute type 33 has an invalid length. [ 366.175546][ T6336] netlink: 152 bytes leftover after parsing attributes in process `syz.1.156'. [ 366.380102][ T6342] syzkaller0: entered promiscuous mode [ 366.407135][ T6342] syzkaller0: entered allmulticast mode [ 367.109906][ T6367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.318287][ T6371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.168'. [ 367.345251][ T6371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.168'. [ 367.397301][ T6375] netlink: 'syz.2.169': attribute type 33 has an invalid length. [ 367.413799][ T6375] netlink: 152 bytes leftover after parsing attributes in process `syz.2.169'. [ 367.911242][ T6382] netlink: 'syz.3.172': attribute type 30 has an invalid length. [ 367.982083][ T6386] syzkaller0: entered promiscuous mode [ 368.001342][ T6386] syzkaller0: entered allmulticast mode [ 368.516587][ T6402] netlink: 'syz.2.180': attribute type 33 has an invalid length. [ 368.541419][ T6402] netlink: 152 bytes leftover after parsing attributes in process `syz.2.180'. [ 369.073698][ T6414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.195561][ T6419] syzkaller0: entered promiscuous mode [ 369.219147][ T6419] syzkaller0: entered allmulticast mode [ 369.676821][ T6442] netlink: 'syz.0.193': attribute type 33 has an invalid length. [ 369.691544][ T6442] netlink: 152 bytes leftover after parsing attributes in process `syz.0.193'. [ 369.708189][ T6439] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 369.727539][ T6439] syzkaller0: tun_chr_ioctl cmd 35108 [ 370.264962][ T6450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.459473][ T6458] syzkaller0: entered promiscuous mode [ 370.475010][ T6458] syzkaller0: entered allmulticast mode [ 370.582342][ T6466] Zero length message leads to an empty skb [ 371.116260][ T6479] netlink: 'syz.1.204': attribute type 33 has an invalid length. [ 371.144544][ T6479] netlink: 152 bytes leftover after parsing attributes in process `syz.1.204'. [ 371.358496][ T6487] netlink: 'syz.1.207': attribute type 3 has an invalid length. [ 371.369000][ T6487] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.207'. [ 371.567444][ T6485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.755868][ T6494] syzkaller0: entered promiscuous mode [ 371.761432][ T6494] syzkaller0: entered allmulticast mode [ 372.748036][ T6515] netlink: 'syz.0.217': attribute type 33 has an invalid length. [ 372.787681][ T6515] netlink: 152 bytes leftover after parsing attributes in process `syz.0.217'. [ 373.129509][ T6528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.194080][ T6530] syzkaller0: entered promiscuous mode [ 373.199778][ T6530] syzkaller0: entered allmulticast mode [ 374.001256][ T6543] netlink: 'syz.1.228': attribute type 33 has an invalid length. [ 374.012109][ T6543] netlink: 152 bytes leftover after parsing attributes in process `syz.1.228'. [ 374.636825][ T6560] netlink: 'syz.1.232': attribute type 10 has an invalid length. [ 374.648361][ T6560] netlink: 156 bytes leftover after parsing attributes in process `syz.1.232'. [ 374.676480][ T6559] syzkaller0: entered promiscuous mode [ 374.682139][ T6559] syzkaller0: entered allmulticast mode [ 375.048294][ T6575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.207861][ T6577] netlink: 'syz.2.240': attribute type 33 has an invalid length. [ 375.253719][ T6577] netlink: 152 bytes leftover after parsing attributes in process `syz.2.240'. [ 376.057668][ T6597] syzkaller0: entered promiscuous mode [ 376.073615][ T6597] syzkaller0: entered allmulticast mode [ 376.159618][ T6602] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 376.172620][ T6602] netlink: 'syz.1.248': attribute type 4 has an invalid length. [ 376.180924][ T6602] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.248'. [ 376.334689][ T6604] netlink: 'syz.3.249': attribute type 33 has an invalid length. [ 376.355967][ T6604] netlink: 152 bytes leftover after parsing attributes in process `syz.3.249'. [ 376.755236][ T6619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.478815][ T6629] syzkaller0: entered promiscuous mode [ 377.493398][ T6629] syzkaller0: entered allmulticast mode [ 377.708193][ T6639] netlink: 'syz.3.261': attribute type 33 has an invalid length. [ 377.730891][ T6639] netlink: 152 bytes leftover after parsing attributes in process `syz.3.261'. [ 378.392212][ T6660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.506751][ T6668] syzkaller0: entered promiscuous mode [ 378.512704][ T6668] syzkaller0: entered allmulticast mode [ 379.097923][ T6676] netlink: 'syz.0.273': attribute type 33 has an invalid length. [ 379.166357][ T6676] netlink: 152 bytes leftover after parsing attributes in process `syz.0.273'. [ 379.362172][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.373560][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.550972][ T6691] syzkaller0: entered promiscuous mode [ 379.561050][ T6691] syzkaller0: entered allmulticast mode [ 380.072016][ T6711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.276608][ T6714] netlink: 'syz.3.286': attribute type 33 has an invalid length. [ 380.293666][ T6714] netlink: 152 bytes leftover after parsing attributes in process `syz.3.286'. [ 381.161805][ T6737] syzkaller0: entered promiscuous mode [ 381.170920][ T6737] syzkaller0: entered allmulticast mode [ 381.600923][ T6749] netlink: 'syz.0.298': attribute type 33 has an invalid length. [ 381.637321][ T6749] netlink: 152 bytes leftover after parsing attributes in process `syz.0.298'. [ 381.933460][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.947202][ T6784] netlink: 'syz.3.307': attribute type 33 has an invalid length. [ 382.964727][ T6784] netlink: 152 bytes leftover after parsing attributes in process `syz.3.307'. [ 383.916013][ T6812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.995412][ T6834] netlink: 'syz.2.323': attribute type 33 has an invalid length. [ 385.003592][ T6834] netlink: 152 bytes leftover after parsing attributes in process `syz.2.323'. [ 385.866585][ T6863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.530705][ T6873] netlink: 'syz.0.335': attribute type 33 has an invalid length. [ 386.543494][ T6873] netlink: 152 bytes leftover after parsing attributes in process `syz.0.335'. [ 387.360429][ T6896] netlink: 'syz.1.345': attribute type 33 has an invalid length. [ 387.385603][ T6896] netlink: 152 bytes leftover after parsing attributes in process `syz.1.345'. [ 387.578862][ T6904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.630549][ T6915] delete_channel: no stack [ 388.915236][ T6934] netlink: 'syz.0.356': attribute type 33 has an invalid length. [ 388.929657][ T6934] netlink: 152 bytes leftover after parsing attributes in process `syz.0.356'. [ 389.491150][ T6949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.533052][ T6969] netlink: 'syz.2.368': attribute type 33 has an invalid length. [ 390.559712][ T6969] netlink: 152 bytes leftover after parsing attributes in process `syz.2.368'. [ 390.876285][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.372'. [ 390.898800][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 391.509610][ T6996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.854822][ T7003] netlink: 'syz.1.379': attribute type 33 has an invalid length. [ 391.862762][ T7003] netlink: 152 bytes leftover after parsing attributes in process `syz.1.379'. [ 392.242628][ T7009] syzkaller0: entered promiscuous mode [ 392.250194][ T7009] syzkaller0: entered allmulticast mode [ 392.823477][ T7019] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.383'. [ 392.839333][ T7019] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.383'. [ 392.852943][ T7015] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.383'. [ 392.878417][ T7019] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.383'. [ 393.067903][ T7015] netlink: 'syz.1.383': attribute type 10 has an invalid length. [ 393.091824][ T7015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.383'. [ 393.154143][ T7019] Driver unsupported XDP return value 0 on prog (id 202) dev N/A, expect packet loss! [ 393.213887][ T7015] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 393.268163][ T7015] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.313703][ T7015] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 393.720935][ T7038] syzkaller0: entered promiscuous mode [ 393.738878][ T7038] syzkaller0: entered allmulticast mode [ 393.755554][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.969319][ T7044] netlink: 'syz.3.392': attribute type 33 has an invalid length. [ 393.993860][ T7044] netlink: 152 bytes leftover after parsing attributes in process `syz.3.392'. [ 395.017324][ T7070] syzkaller0: entered promiscuous mode [ 395.028151][ T7070] syzkaller0: entered allmulticast mode [ 395.039481][ T7072] netlink: 'syz.3.403': attribute type 33 has an invalid length. [ 395.057835][ T7072] netlink: 152 bytes leftover after parsing attributes in process `syz.3.403'. [ 395.411597][ T7082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.604770][ T7094] syz.2.410 (7094) used greatest stack depth: 19688 bytes left [ 396.705976][ T7106] netlink: 'syz.0.414': attribute type 33 has an invalid length. [ 396.733547][ T7106] netlink: 152 bytes leftover after parsing attributes in process `syz.0.414'. [ 397.509206][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.792082][ T7147] netlink: 'syz.2.425': attribute type 33 has an invalid length. [ 397.808877][ T7147] netlink: 152 bytes leftover after parsing attributes in process `syz.2.425'. [ 399.101625][ T7182] netlink: 'syz.2.437': attribute type 33 has an invalid length. [ 399.168782][ T7182] netlink: 152 bytes leftover after parsing attributes in process `syz.2.437'. [ 399.606499][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.060519][ T7227] netlink: 'syz.2.451': attribute type 33 has an invalid length. [ 401.068991][ T7227] netlink: 152 bytes leftover after parsing attributes in process `syz.2.451'. [ 401.471687][ T7243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.487529][ T7242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.457'. [ 402.545863][ T7259] netlink: 'syz.1.463': attribute type 33 has an invalid length. [ 402.583281][ T7259] netlink: 152 bytes leftover after parsing attributes in process `syz.1.463'. [ 403.315417][ T7284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.117401][ T7293] netlink: 'syz.1.475': attribute type 33 has an invalid length. [ 404.130726][ T7293] netlink: 152 bytes leftover after parsing attributes in process `syz.1.475'. [ 405.067385][ T7328] netlink: 'syz.0.487': attribute type 33 has an invalid length. [ 405.075691][ T7328] netlink: 152 bytes leftover after parsing attributes in process `syz.0.487'. [ 405.090254][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.480214][ T7360] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.498'. [ 406.831774][ T7372] netlink: 'syz.1.501': attribute type 33 has an invalid length. [ 406.839748][ T7372] netlink: 152 bytes leftover after parsing attributes in process `syz.1.501'. [ 407.143901][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.164517][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.175038][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.242830][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.261550][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.145391][ T7397] netlink: 'syz.3.510': attribute type 16 has an invalid length. [ 408.199753][ T7397] netlink: 48 bytes leftover after parsing attributes in process `syz.3.510'. [ 408.467951][ T7408] netlink: 'syz.1.514': attribute type 33 has an invalid length. [ 408.484148][ T7408] netlink: 152 bytes leftover after parsing attributes in process `syz.1.514'. [ 408.930262][ T7416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.841841][ T7438] netlink: 'syz.1.525': attribute type 33 has an invalid length. [ 409.850498][ T7438] netlink: 152 bytes leftover after parsing attributes in process `syz.1.525'. [ 410.340910][ T7448] syzkaller0: entered promiscuous mode [ 410.365661][ T7448] syzkaller0: entered allmulticast mode [ 410.694796][ T7463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.302491][ T7469] netlink: 'syz.3.536': attribute type 33 has an invalid length. [ 411.334176][ T7469] netlink: 152 bytes leftover after parsing attributes in process `syz.3.536'. [ 411.930485][ T7485] syzkaller0: entered promiscuous mode [ 411.944372][ T7485] syzkaller0: entered allmulticast mode [ 412.501494][ T7497] netlink: 'syz.3.547': attribute type 33 has an invalid length. [ 412.511087][ T7497] netlink: 152 bytes leftover after parsing attributes in process `syz.3.547'. [ 412.681857][ T7502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.474847][ T7520] netlink: 'syz.0.552': attribute type 29 has an invalid length. [ 413.493717][ T7520] netlink: 'syz.0.552': attribute type 29 has an invalid length. [ 413.539389][ T7520] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 413.562576][ T7522] syzkaller0: entered promiscuous mode [ 413.582419][ T7522] syzkaller0: entered allmulticast mode [ 414.034365][ T7536] netlink: 'syz.1.558': attribute type 33 has an invalid length. [ 414.042253][ T7536] netlink: 152 bytes leftover after parsing attributes in process `syz.1.558'. [ 414.394184][ T7551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.435770][ T7575] FAULT_INJECTION: forcing a failure. [ 415.435770][ T7575] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 415.473478][ T7575] CPU: 1 PID: 7575 Comm: syz.1.570 Not tainted syzkaller #0 [ 415.480836][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.491021][ T7575] Call Trace: [ 415.494372][ T7575] [ 415.497339][ T7575] dump_stack_lvl+0x18c/0x250 [ 415.502074][ T7575] ? show_regs_print_info+0x20/0x20 [ 415.507317][ T7575] ? load_image+0x420/0x420 [ 415.511958][ T7575] ? __might_fault+0xaa/0x120 [ 415.516660][ T7575] ? __lock_acquire+0x7d40/0x7d40 [ 415.521713][ T7575] should_fail_ex+0x39d/0x4d0 [ 415.526401][ T7575] _copy_to_user+0x2f/0xa0 [ 415.530817][ T7575] bpf_test_finish+0x25a/0x650 [ 415.535643][ T7575] ? convert_skb_to___skb+0x420/0x420 [ 415.541010][ T7575] ? read_tsc+0x9/0x20 [ 415.545081][ T7575] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 415.551325][ T7575] ? xdp_convert_buff_to_md+0x200/0x200 [ 415.556865][ T7575] ? __fget_files+0x28/0x4b0 [ 415.561464][ T7575] ? __fget_files+0x28/0x4b0 [ 415.566057][ T7575] ? xdp_convert_buff_to_md+0x200/0x200 [ 415.571771][ T7575] bpf_prog_test_run+0x321/0x390 [ 415.576759][ T7575] __sys_bpf+0x49d/0x890 [ 415.581010][ T7575] ? bpf_link_show_fdinfo+0x390/0x390 [ 415.586391][ T7575] ? lock_chain_count+0x20/0x20 [ 415.591241][ T7575] __x64_sys_bpf+0x7c/0x90 [ 415.595747][ T7575] do_syscall_64+0x55/0xa0 [ 415.600160][ T7575] ? clear_bhb_loop+0x40/0x90 [ 415.604852][ T7575] ? clear_bhb_loop+0x40/0x90 [ 415.609534][ T7575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.615425][ T7575] RIP: 0033:0x7fa80279c819 [ 415.619858][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.639546][ T7575] RSP: 002b:00007fa803579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.648065][ T7575] RAX: ffffffffffffffda RBX: 00007fa802a15fa0 RCX: 00007fa80279c819 [ 415.656024][ T7575] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 415.663990][ T7575] RBP: 00007fa803579090 R08: 0000000000000000 R09: 0000000000000000 [ 415.671951][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.680021][ T7575] R13: 00007fa802a16038 R14: 00007fa802a15fa0 R15: 00007fff9fd2e6b8 [ 415.688002][ T7575] [ 415.808321][ T7577] netlink: 'syz.2.572': attribute type 33 has an invalid length. [ 415.817889][ T7577] netlink: 152 bytes leftover after parsing attributes in process `syz.2.572'. [ 416.045612][ T7593] FAULT_INJECTION: forcing a failure. [ 416.045612][ T7593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.062458][ T7593] CPU: 0 PID: 7593 Comm: syz.2.575 Not tainted syzkaller #0 [ 416.069807][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 416.079888][ T7593] Call Trace: [ 416.083188][ T7593] [ 416.086215][ T7593] dump_stack_lvl+0x18c/0x250 [ 416.090917][ T7593] ? show_regs_print_info+0x20/0x20 [ 416.096144][ T7593] ? load_image+0x420/0x420 [ 416.100673][ T7593] ? __lock_acquire+0x7d40/0x7d40 [ 416.105803][ T7593] ? aa_sk_perm+0x970/0x970 [ 416.110323][ T7593] should_fail_ex+0x39d/0x4d0 [ 416.115010][ T7593] _copy_from_user+0x2f/0xe0 [ 416.119602][ T7593] copy_from_sockptr+0x69/0x80 [ 416.124449][ T7593] packet_setsockopt+0xbff/0x1500 [ 416.129817][ T7593] ? packet_ioctl+0x340/0x340 [ 416.134579][ T7593] ? aa_sk_perm+0x83c/0x970 [ 416.139085][ T7593] ? __fget_files+0x28/0x4b0 [ 416.143713][ T7593] ? aa_af_perm+0x330/0x330 [ 416.148235][ T7593] ? __fget_files+0x28/0x4b0 [ 416.152834][ T7593] ? __fget_files+0x28/0x4b0 [ 416.157430][ T7593] ? aa_sock_opt_perm+0x74/0x100 [ 416.162454][ T7593] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 416.168009][ T7593] ? security_socket_setsockopt+0x7e/0xa0 [ 416.173792][ T7593] ? packet_ioctl+0x340/0x340 [ 416.178661][ T7593] do_sock_setsockopt+0x175/0x1a0 [ 416.183714][ T7593] ? __fdget+0x180/0x210 [ 416.188140][ T7593] __x64_sys_setsockopt+0x182/0x200 [ 416.193344][ T7593] do_syscall_64+0x55/0xa0 [ 416.197777][ T7593] ? clear_bhb_loop+0x40/0x90 [ 416.202467][ T7593] ? clear_bhb_loop+0x40/0x90 [ 416.207180][ T7593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.213569][ T7593] RIP: 0033:0x7f21d999c819 [ 416.217980][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.237756][ T7593] RSP: 002b:00007f21da91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.246164][ T7593] RAX: ffffffffffffffda RBX: 00007f21d9c15fa0 RCX: 00007f21d999c819 [ 416.254305][ T7593] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 416.262359][ T7593] RBP: 00007f21da91f090 R08: 0000000000000004 R09: 0000000000000000 [ 416.270514][ T7593] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 416.278476][ T7593] R13: 00007f21d9c16038 R14: 00007f21d9c15fa0 R15: 00007ffc9f8fd668 [ 416.286453][ T7593] [ 416.429483][ T7595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.506933][ T7596] syzkaller0: entered promiscuous mode [ 416.512517][ T7596] syzkaller0: entered allmulticast mode [ 418.496442][ T7611] syzkaller0: entered promiscuous mode [ 418.508003][ T7611] syzkaller0: entered allmulticast mode [ 420.334873][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.725507][ T7621] netlink: 'syz.2.584': attribute type 33 has an invalid length. [ 420.735939][ T7621] netlink: 152 bytes leftover after parsing attributes in process `syz.2.584'. [ 421.653434][ T7669] netlink: 'syz.1.597': attribute type 33 has an invalid length. [ 421.661480][ T7669] netlink: 152 bytes leftover after parsing attributes in process `syz.1.597'. [ 421.911989][ T7677] netlink: 668 bytes leftover after parsing attributes in process `syz.1.599'. [ 421.930701][ T7677] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 421.939926][ T7677] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 422.200203][ T7685] syz.3.603 uses obsolete (PF_INET,SOCK_PACKET) [ 422.299379][ T7688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.045692][ T7698] netlink: 'syz.3.607': attribute type 33 has an invalid length. [ 423.061992][ T7698] netlink: 152 bytes leftover after parsing attributes in process `syz.3.607'. [ 423.307627][ T7712] FAULT_INJECTION: forcing a failure. [ 423.307627][ T7712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.321426][ T7712] CPU: 0 PID: 7712 Comm: syz.3.611 Not tainted syzkaller #0 [ 423.328856][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 423.338944][ T7712] Call Trace: [ 423.342247][ T7712] [ 423.345196][ T7712] dump_stack_lvl+0x18c/0x250 [ 423.350029][ T7712] ? show_regs_print_info+0x20/0x20 [ 423.355361][ T7712] ? load_image+0x420/0x420 [ 423.359898][ T7712] ? __might_fault+0xaa/0x120 [ 423.364613][ T7712] ? __lock_acquire+0x7d40/0x7d40 [ 423.369683][ T7712] should_fail_ex+0x39d/0x4d0 [ 423.374383][ T7712] _copy_from_iter+0x1d9/0x12e0 [ 423.379234][ T7712] ? __virt_addr_valid+0x18c/0x540 [ 423.384417][ T7712] ? __lock_acquire+0x7d40/0x7d40 [ 423.389488][ T7712] ? __alloc_skb+0x138/0x2c0 [ 423.394082][ T7712] ? copyout_mc+0x70/0x70 [ 423.398412][ T7712] ? __virt_addr_valid+0x18c/0x540 [ 423.403730][ T7712] ? __virt_addr_valid+0x18c/0x540 [ 423.408853][ T7712] ? __virt_addr_valid+0x469/0x540 [ 423.413971][ T7712] ? __phys_addr_symbol+0x2f/0x70 [ 423.419022][ T7712] ? __check_object_size+0x506/0xa20 [ 423.424315][ T7712] udplite_getfrag+0x4d/0xa0 [ 423.428945][ T7712] __ip6_append_data+0x2f1b/0x3c50 [ 423.434167][ T7712] ? udpv6_sendmsg+0x2390/0x2390 [ 423.439281][ T7712] ? mark_lock+0x94/0x320 [ 423.443615][ T7712] ? ip6_setup_cork+0xfe0/0xfe0 [ 423.448551][ T7712] ? __local_bh_enable_ip+0x13a/0x1c0 [ 423.453928][ T7712] ip6_append_data+0x1b0/0x350 [ 423.458778][ T7712] ? udpv6_sendmsg+0x2390/0x2390 [ 423.463922][ T7712] udpv6_sendmsg+0xc37/0x2390 [ 423.468810][ T7712] ? udpv6_sendmsg+0x2390/0x2390 [ 423.473767][ T7712] ? udp_v6_early_demux+0xf80/0xf80 [ 423.479100][ T7712] ? inet_send_prepare+0x5c/0x260 [ 423.484129][ T7712] ? inet6_sendmsg+0x5f/0xd0 [ 423.488809][ T7712] sock_write_iter+0x2df/0x420 [ 423.493599][ T7712] ? sock_read_iter+0x3e0/0x3e0 [ 423.498469][ T7712] ? common_file_perm+0x198/0x1f0 [ 423.503585][ T7712] vfs_write+0x46c/0x990 [ 423.507942][ T7712] ? file_end_write+0x250/0x250 [ 423.512884][ T7712] ? __fget_files+0x43d/0x4b0 [ 423.517565][ T7712] ? __fdget_pos+0x1d8/0x330 [ 423.522163][ T7712] ? ksys_write+0x75/0x260 [ 423.526605][ T7712] ksys_write+0x150/0x260 [ 423.530934][ T7712] ? __ia32_sys_read+0x90/0x90 [ 423.535695][ T7712] ? lockdep_hardirqs_on+0x98/0x150 [ 423.540896][ T7712] do_syscall_64+0x55/0xa0 [ 423.545325][ T7712] ? clear_bhb_loop+0x40/0x90 [ 423.550037][ T7712] ? clear_bhb_loop+0x40/0x90 [ 423.554727][ T7712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.560617][ T7712] RIP: 0033:0x7f3fa439c819 [ 423.565025][ T7712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.584622][ T7712] RSP: 002b:00007f3fa5255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.593136][ T7712] RAX: ffffffffffffffda RBX: 00007f3fa4615fa0 RCX: 00007f3fa439c819 [ 423.601213][ T7712] RDX: 000000000000fe33 RSI: 0000200000000300 RDI: 0000000000000003 [ 423.609177][ T7712] RBP: 00007f3fa5255090 R08: 0000000000000000 R09: 0000000000000000 [ 423.617228][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.625195][ T7712] R13: 00007f3fa4616038 R14: 00007f3fa4615fa0 R15: 00007fff4e160098 [ 423.633195][ T7712] [ 424.279015][ T7731] netlink: 'syz.0.619': attribute type 33 has an invalid length. [ 424.289751][ T7731] netlink: 152 bytes leftover after parsing attributes in process `syz.0.619'. [ 424.365881][ T7729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.788131][ T7741] netlink: 'syz.0.622': attribute type 3 has an invalid length. [ 424.872459][ T7741] netlink: 'syz.0.622': attribute type 6 has an invalid length. [ 424.940554][ T7741] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.622'. [ 425.772837][ T7769] netlink: 'syz.0.631': attribute type 33 has an invalid length. [ 425.781653][ T7769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.631'. [ 425.949029][ T7773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.229230][ T7796] netlink: 'syz.0.640': attribute type 33 has an invalid length. [ 427.261113][ T7796] netlink: 152 bytes leftover after parsing attributes in process `syz.0.640'. [ 427.722011][ T7809] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.644'. [ 427.905136][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.937407][ T7809] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 427.944814][ T7809] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 428.593912][ T7824] netlink: 'syz.1.650': attribute type 33 has an invalid length. [ 428.604536][ T7824] netlink: 152 bytes leftover after parsing attributes in process `syz.1.650'. [ 428.788888][ T7829] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.651'. [ 429.088427][ T7841] FAULT_INJECTION: forcing a failure. [ 429.088427][ T7841] name failslab, interval 1, probability 0, space 0, times 0 [ 429.101692][ T7841] CPU: 1 PID: 7841 Comm: syz.2.656 Not tainted syzkaller #0 [ 429.109146][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.119270][ T7841] Call Trace: [ 429.122599][ T7841] [ 429.125571][ T7841] dump_stack_lvl+0x18c/0x250 [ 429.130406][ T7841] ? show_regs_print_info+0x20/0x20 [ 429.135749][ T7841] ? load_image+0x420/0x420 [ 429.140374][ T7841] ? __might_sleep+0xe0/0xe0 [ 429.145039][ T7841] ? __lock_acquire+0x7d40/0x7d40 [ 429.150189][ T7841] ? perf_trace_lock+0xfc/0x3b0 [ 429.155326][ T7841] should_fail_ex+0x39d/0x4d0 [ 429.160271][ T7841] should_failslab+0x9/0x20 [ 429.164915][ T7841] slab_pre_alloc_hook+0x59/0x310 [ 429.170046][ T7841] ? __get_vm_area_node+0x125/0x370 [ 429.175406][ T7841] __kmem_cache_alloc_node+0x53/0x250 [ 429.181028][ T7841] ? __get_vm_area_node+0x125/0x370 [ 429.186469][ T7841] kmalloc_node_trace+0x26/0xe0 [ 429.191392][ T7841] __get_vm_area_node+0x125/0x370 [ 429.196492][ T7841] __vmalloc_node_range+0x36e/0x1330 [ 429.201834][ T7841] ? netlink_sendmsg+0x602/0xbf0 [ 429.206822][ T7841] ? netlink_insert+0x109f/0x13a0 [ 429.212238][ T7841] ? netlink_data_ready+0x10/0x10 [ 429.217335][ T7841] ? free_vm_area+0x50/0x50 [ 429.221922][ T7841] ? netlink_sendmsg+0x602/0xbf0 [ 429.226913][ T7841] vmalloc+0x79/0x90 [ 429.230861][ T7841] ? netlink_sendmsg+0x602/0xbf0 [ 429.235935][ T7841] netlink_sendmsg+0x602/0xbf0 [ 429.240783][ T7841] ? netlink_getsockopt+0x590/0x590 [ 429.246055][ T7841] ? aa_sock_msg_perm+0x94/0x150 [ 429.251053][ T7841] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.256532][ T7841] ? security_socket_sendmsg+0x80/0xa0 [ 429.262037][ T7841] ? netlink_getsockopt+0x590/0x590 [ 429.267296][ T7841] ____sys_sendmsg+0x5ba/0x960 [ 429.272213][ T7841] ? __asan_memset+0x22/0x40 [ 429.277385][ T7841] ? __sys_sendmsg_sock+0x30/0x30 [ 429.282577][ T7841] ? __import_iovec+0x5f2/0x850 [ 429.287990][ T7841] ? import_iovec+0x73/0xa0 [ 429.292601][ T7841] ___sys_sendmsg+0x2a6/0x360 [ 429.297535][ T7841] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.302715][ T7841] ? __lock_acquire+0x7d40/0x7d40 [ 429.307982][ T7841] __se_sys_sendmsg+0x1c2/0x2b0 [ 429.313965][ T7841] ? __x64_sys_sendmsg+0x80/0x80 [ 429.319245][ T7841] ? lockdep_hardirqs_on+0x98/0x150 [ 429.324723][ T7841] do_syscall_64+0x55/0xa0 [ 429.329198][ T7841] ? clear_bhb_loop+0x40/0x90 [ 429.334148][ T7841] ? clear_bhb_loop+0x40/0x90 [ 429.338891][ T7841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.344937][ T7841] RIP: 0033:0x7f21d999c819 [ 429.349420][ T7841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.369519][ T7841] RSP: 002b:00007f21da91f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.378076][ T7841] RAX: ffffffffffffffda RBX: 00007f21d9c15fa0 RCX: 00007f21d999c819 [ 429.386090][ T7841] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000005 [ 429.394104][ T7841] RBP: 00007f21da91f090 R08: 0000000000000000 R09: 0000000000000000 [ 429.402128][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.410168][ T7841] R13: 00007f21d9c16038 R14: 00007f21d9c15fa0 R15: 00007ffc9f8fd668 [ 429.418414][ T7841] [ 429.467909][ T7841] syz.2.656: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 429.544206][ T7841] CPU: 0 PID: 7841 Comm: syz.2.656 Not tainted syzkaller #0 [ 429.551613][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.561717][ T7841] Call Trace: [ 429.565064][ T7841] [ 429.568212][ T7841] dump_stack_lvl+0x18c/0x250 [ 429.572978][ T7841] ? show_regs_print_info+0x20/0x20 [ 429.578407][ T7841] ? load_image+0x420/0x420 [ 429.583082][ T7841] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 429.589694][ T7841] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 429.596276][ T7841] warn_alloc+0x246/0x340 [ 429.600680][ T7841] ? __get_vm_area_node+0x125/0x370 [ 429.606034][ T7841] ? zone_watermark_ok_safe+0x230/0x230 [ 429.611762][ T7841] ? rcu_is_watching+0x15/0xb0 [ 429.616600][ T7841] ? __get_vm_area_node+0x356/0x370 [ 429.621879][ T7841] __vmalloc_node_range+0x393/0x1330 [ 429.627351][ T7841] ? netlink_insert+0x109f/0x13a0 [ 429.632921][ T7841] ? netlink_data_ready+0x10/0x10 [ 429.638186][ T7841] ? free_vm_area+0x50/0x50 [ 429.642770][ T7841] ? netlink_sendmsg+0x602/0xbf0 [ 429.647847][ T7841] vmalloc+0x79/0x90 [ 429.651891][ T7841] ? netlink_sendmsg+0x602/0xbf0 [ 429.656888][ T7841] netlink_sendmsg+0x602/0xbf0 [ 429.661732][ T7841] ? netlink_getsockopt+0x590/0x590 [ 429.667109][ T7841] ? aa_sock_msg_perm+0x94/0x150 [ 429.672083][ T7841] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.677468][ T7841] ? security_socket_sendmsg+0x80/0xa0 [ 429.682979][ T7841] ? netlink_getsockopt+0x590/0x590 [ 429.688207][ T7841] ____sys_sendmsg+0x5ba/0x960 [ 429.692997][ T7841] ? __asan_memset+0x22/0x40 [ 429.697615][ T7841] ? __sys_sendmsg_sock+0x30/0x30 [ 429.702680][ T7841] ? __import_iovec+0x5f2/0x850 [ 429.707569][ T7841] ? import_iovec+0x73/0xa0 [ 429.712097][ T7841] ___sys_sendmsg+0x2a6/0x360 [ 429.716802][ T7841] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.721680][ T7841] ? __lock_acquire+0x7d40/0x7d40 [ 429.726861][ T7841] __se_sys_sendmsg+0x1c2/0x2b0 [ 429.731724][ T7841] ? __x64_sys_sendmsg+0x80/0x80 [ 429.736704][ T7841] ? lockdep_hardirqs_on+0x98/0x150 [ 429.741922][ T7841] do_syscall_64+0x55/0xa0 [ 429.746379][ T7841] ? clear_bhb_loop+0x40/0x90 [ 429.751066][ T7841] ? clear_bhb_loop+0x40/0x90 [ 429.755772][ T7841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.761673][ T7841] RIP: 0033:0x7f21d999c819 [ 429.766128][ T7841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.786118][ T7841] RSP: 002b:00007f21da91f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.795083][ T7841] RAX: ffffffffffffffda RBX: 00007f21d9c15fa0 RCX: 00007f21d999c819 [ 429.803351][ T7841] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000005 [ 429.811630][ T7841] RBP: 00007f21da91f090 R08: 0000000000000000 R09: 0000000000000000 [ 429.820011][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.828393][ T7841] R13: 00007f21d9c16038 R14: 00007f21d9c15fa0 R15: 00007ffc9f8fd668 [ 429.837057][ T7841] [ 429.876758][ T7841] Mem-Info: [ 429.880078][ T7841] active_anon:5608 inactive_anon:0 isolated_anon:0 [ 429.880078][ T7841] active_file:15055 inactive_file:39966 isolated_file:0 [ 429.880078][ T7841] unevictable:768 dirty:420 writeback:0 [ 429.880078][ T7841] slab_reclaimable:9904 slab_unreclaimable:90957 [ 429.880078][ T7841] mapped:24333 shmem:1361 pagetables:620 [ 429.880078][ T7841] sec_pagetables:0 bounce:0 [ 429.880078][ T7841] kernel_misc_reclaimable:0 [ 429.880078][ T7841] free:1353392 free_pcp:10762 free_cma:0 [ 429.941684][ T7841] Node 0 active_anon:22532kB inactive_anon:0kB active_file:60220kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97332kB dirty:1680kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10608kB pagetables:2480kB sec_pagetables:0kB all_unreclaimable? no [ 429.975925][ T7841] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 430.009475][ T7841] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.045496][ T7841] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 430.051748][ T7841] Node 0 DMA32 free:1501552kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22492kB inactive_anon:0kB active_file:60220kB inactive_file:158828kB unevictable:1536kB writepending:1680kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:26104kB local_pcp:19352kB free_cma:0kB [ 430.095911][ T7841] lowmem_reserve[]: 0 0 0 0 0 [ 430.100746][ T7841] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.147060][ T7841] lowmem_reserve[]: 0 0 0 0 0 [ 430.155001][ T7841] Node 1 Normal free:3896656kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17468kB local_pcp:11516kB free_cma:0kB [ 430.185140][ T7841] lowmem_reserve[]: 0 0 0 0 0 [ 430.189907][ T7841] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 430.243369][ T7841] Node 0 DMA32: 524*4kB (ME) 1336*8kB (UM) 1280*16kB (UME) 698*32kB (UME) 169*64kB (UME) 26*128kB (UME) 27*256kB (UME) 13*512kB (UME) 5*1024kB (ME) 2*2048kB (ME) 344*4096kB (UM) = 1501552kB [ 430.263174][ T7841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 430.275004][ T7841] Node 1 Normal: 164*4kB (UE) 62*8kB (UME) 39*16kB (UME) 57*32kB (UM) 21*64kB (UE) 4*128kB (UME) 0*256kB 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 949*4096kB (UM) = 3896656kB [ 430.294614][ T7841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.304438][ T7841] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 430.314955][ T7841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.326974][ T7841] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 430.348568][ T7841] 56382 total pagecache pages [ 430.373890][ T7841] 0 pages in swap cache [ 430.389016][ T7841] Free swap = 124996kB [ 430.398496][ T7841] Total swap = 124996kB [ 430.402707][ T7841] 2097051 pages RAM [ 430.408328][ T7841] 0 pages HighMem/MovableOnly [ 430.413520][ T7841] 416927 pages reserved [ 430.417696][ T7841] 0 pages cma reserved [ 430.619483][ T7866] netlink: 'syz.2.662': attribute type 33 has an invalid length. [ 430.637497][ T7866] netlink: 152 bytes leftover after parsing attributes in process `syz.2.662'. [ 430.652344][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.536631][ T7878] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.666'. [ 432.167873][ T7900] netlink: 'syz.1.673': attribute type 33 has an invalid length. [ 432.177540][ T7900] netlink: 152 bytes leftover after parsing attributes in process `syz.1.673'. [ 432.224195][ T7901] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.672'. [ 432.493842][ T7911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.592144][ T7927] netlink: 'syz.1.683': attribute type 33 has an invalid length. [ 433.616628][ T7927] netlink: 152 bytes leftover after parsing attributes in process `syz.1.683'. [ 434.236485][ T7947] syzkaller0: entered promiscuous mode [ 434.242562][ T7947] syzkaller0: entered allmulticast mode [ 434.459717][ T7956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.416980][ T7968] netlink: 'syz.3.695': attribute type 33 has an invalid length. [ 436.428755][ T7968] netlink: 152 bytes leftover after parsing attributes in process `syz.3.695'. [ 437.571907][ T8001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.758647][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.803690][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.810201][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.675839][ T8086] delete_channel: no stack [ 441.859319][ T8095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.936114][ T8147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.767651][ T8162] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 444.780028][ T8162] netlink: 156 bytes leftover after parsing attributes in process `syz.3.753'. [ 445.984257][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.951722][ T8215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.771'. [ 447.009341][ T8215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.771'. [ 447.100953][ T8215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.771'. [ 447.856841][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.374926][ T8288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.490247][ T8310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.797'. [ 451.510050][ T8310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.797'. [ 451.533810][ T8310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.797'. [ 451.739656][ T8319] netlink: 'syz.1.799': attribute type 10 has an invalid length. [ 451.759358][ T8319] netlink: 156 bytes leftover after parsing attributes in process `syz.1.799'. [ 452.253344][ T8331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.552514][ T8354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 453.573616][ T8354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 453.589997][ T8354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 453.622565][ T8354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 454.057175][ T8368] netlink: 'syz.1.816': attribute type 30 has an invalid length. [ 454.270251][ T8373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.840870][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.445038][ T8392] netlink: 60 bytes leftover after parsing attributes in process `syz.3.823'. [ 455.464143][ T8392] netlink: 60 bytes leftover after parsing attributes in process `syz.3.823'. [ 455.949133][ T8410] netlink: 'syz.0.829': attribute type 30 has an invalid length. [ 456.282843][ T8413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.812598][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.707650][ T8488] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 459.746738][ T8488] __nla_validate_parse: 2 callbacks suppressed [ 459.746751][ T8488] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.849'. [ 460.381048][ T8503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.746056][ T8512] delete_channel: no stack [ 462.152630][ T8529] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.863'. [ 462.163524][ T8529] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.863'. [ 462.210511][ T8519] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.863'. [ 462.227087][ T8529] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.863'. [ 462.331121][ T8519] netlink: 'syz.0.863': attribute type 10 has an invalid length. [ 462.342551][ T8519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.863'. [ 462.369300][ T8519] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 462.926119][ T8554] netlink: 184 bytes leftover after parsing attributes in process `syz.2.870'. [ 462.980158][ T8554] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 463.048319][ T8556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.357439][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 463.363898][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 463.369979][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 463.377470][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 464.604916][ T8578] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.878'. [ 464.623155][ T8578] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.878'. [ 464.647838][ T8586] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.878'. [ 464.782183][ T8578] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 464.800540][ T8578] __nla_validate_parse: 1 callbacks suppressed [ 464.800556][ T8578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.878'. [ 464.854847][ T8578] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 464.894105][ T8578] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.960951][ T8578] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 465.520792][ T8610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.330329][ T8632] netlink: 164 bytes leftover after parsing attributes in process `syz.0.902'. [ 467.778038][ T8643] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.894'. [ 467.798629][ T8643] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.894'. [ 467.842403][ T8637] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.894'. [ 467.984130][ T8648] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.894'. [ 468.074025][ T8637] netlink: 'syz.3.894': attribute type 10 has an invalid length. [ 468.101295][ T8637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.894'. [ 468.184086][ T8637] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 468.191345][ T8637] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.252915][ T8637] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 468.838372][ T8663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.951840][ T8680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.700450][ T8686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.439261][ T8718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.731863][ T8811] netlink: 'syz.2.949': attribute type 33 has an invalid length. [ 475.740340][ T8811] netlink: 164 bytes leftover after parsing attributes in process `syz.2.949'. [ 477.136296][ T8849] netlink: 'syz.2.961': attribute type 33 has an invalid length. [ 477.233303][ T8849] netlink: 164 bytes leftover after parsing attributes in process `syz.2.961'. [ 477.559525][ T8862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.269683][ T8876] netlink: 184 bytes leftover after parsing attributes in process `syz.0.970'. [ 478.289094][ T8876] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 478.550814][ T8884] netlink: 'syz.0.973': attribute type 33 has an invalid length. [ 478.570954][ T8884] netlink: 164 bytes leftover after parsing attributes in process `syz.0.973'. [ 478.716338][ T8892] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.976'. [ 478.996764][ T8899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.848068][ T8913] netlink: 184 bytes leftover after parsing attributes in process `syz.3.983'. [ 480.017247][ T8913] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 480.886354][ T8947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.138624][ T8951] netlink: 'syz.1.996': attribute type 29 has an invalid length. [ 481.147977][ T8951] netlink: 'syz.1.996': attribute type 29 has an invalid length. [ 481.163031][ T8951] netlink: 'syz.1.996': attribute type 29 has an invalid length. [ 481.172536][ T8951] netlink: 'syz.1.996': attribute type 29 has an invalid length. [ 482.013579][ T8967] netlink: 'syz.3.1002': attribute type 33 has an invalid length. [ 482.093358][ T8967] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1002'. [ 482.192773][ T8970] netlink: 'syz.1.1003': attribute type 33 has an invalid length. [ 482.201443][ T8970] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1003'. [ 482.504236][ T8983] netlink: 'syz.1.1014': attribute type 33 has an invalid length. [ 482.522263][ T8983] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1014'. [ 482.724299][ T8988] syz.0.1008[8988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 482.748138][ T8988] netlink: 'syz.0.1008': attribute type 3 has an invalid length. [ 482.772314][ T8988] netlink: 'syz.0.1008': attribute type 5 has an invalid length. [ 482.790039][ T8988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1008'. [ 482.955048][ T8993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.669728][ T9007] FAULT_INJECTION: forcing a failure. [ 483.669728][ T9007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.690954][ T9007] CPU: 0 PID: 9007 Comm: syz.0.1016 Not tainted syzkaller #0 [ 483.698489][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 483.708575][ T9007] Call Trace: [ 483.711853][ T9007] [ 483.714786][ T9007] dump_stack_lvl+0x18c/0x250 [ 483.719514][ T9007] ? show_regs_print_info+0x20/0x20 [ 483.724741][ T9007] ? load_image+0x420/0x420 [ 483.729287][ T9007] ? __lock_acquire+0x7d40/0x7d40 [ 483.734356][ T9007] ? snprintf+0xe9/0x140 [ 483.738623][ T9007] should_fail_ex+0x39d/0x4d0 [ 483.743326][ T9007] _copy_to_user+0x2f/0xa0 [ 483.747776][ T9007] simple_read_from_buffer+0xe7/0x150 [ 483.753263][ T9007] proc_fail_nth_read+0x1e8/0x260 [ 483.758472][ T9007] ? proc_fault_inject_write+0x360/0x360 [ 483.764553][ T9007] ? fsnotify_perm+0x271/0x5e0 [ 483.769349][ T9007] ? proc_fault_inject_write+0x360/0x360 [ 483.775034][ T9007] vfs_read+0x28b/0x970 [ 483.779333][ T9007] ? kernel_read+0x1e0/0x1e0 [ 483.784063][ T9007] ? __fget_files+0x28/0x4b0 [ 483.788706][ T9007] ? __fget_files+0x28/0x4b0 [ 483.793325][ T9007] ? __fget_files+0x43d/0x4b0 [ 483.798468][ T9007] ? __fdget_pos+0x2a3/0x330 [ 483.803163][ T9007] ? ksys_read+0x75/0x260 [ 483.807693][ T9007] ksys_read+0x150/0x260 [ 483.812125][ T9007] ? vfs_write+0x990/0x990 [ 483.816542][ T9007] ? syscall_enter_from_user_mode+0x2e/0x80 [ 483.822697][ T9007] do_syscall_64+0x55/0xa0 [ 483.827152][ T9007] ? clear_bhb_loop+0x40/0x90 [ 483.831823][ T9007] ? clear_bhb_loop+0x40/0x90 [ 483.836492][ T9007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.842384][ T9007] RIP: 0033:0x7f725735d04e [ 483.846791][ T9007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.866396][ T9007] RSP: 002b:00007f7258196fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.874802][ T9007] RAX: ffffffffffffffda RBX: 00007f72581976c0 RCX: 00007f725735d04e [ 483.882764][ T9007] RDX: 000000000000000f RSI: 00007f72581970a0 RDI: 0000000000000004 [ 483.890848][ T9007] RBP: 00007f7258197090 R08: 0000000000000000 R09: 0000000000000000 [ 483.898917][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.906885][ T9007] R13: 00007f7257616038 R14: 00007f7257615fa0 R15: 00007ffcabb6a048 [ 483.914950][ T9007] [ 484.251055][ T9018] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1020'. [ 484.330206][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1021'. [ 484.349467][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1021'. [ 484.369992][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1021'. [ 484.618854][ T9030] netlink: 'syz.1.1025': attribute type 40 has an invalid length. [ 484.690059][ T9032] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1026'. [ 484.699860][ T9032] netlink: zone id is out of range [ 484.707216][ T9032] netlink: zone id is out of range [ 484.712566][ T9032] netlink: zone id is out of range [ 484.718261][ T9032] netlink: zone id is out of range [ 484.729706][ T9032] netlink: zone id is out of range [ 484.735352][ T9032] netlink: zone id is out of range [ 484.741015][ T9032] netlink: zone id is out of range [ 484.746736][ T9032] netlink: zone id is out of range [ 484.752022][ T9032] netlink: zone id is out of range [ 484.757813][ T9032] netlink: zone id is out of range [ 485.009299][ T9039] IPv6: Can't replace route, no match found [ 485.010129][ T9042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.038502][ T9039] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.106951][ T9066] delete_channel: no stack [ 486.111702][ T9066] delete_channel: no stack [ 486.155805][ T9066] delete_channel: no stack [ 486.219208][ T9066] validate_nla: 1 callbacks suppressed [ 486.219231][ T9066] netlink: 'syz.0.1040': attribute type 10 has an invalid length. [ 486.339615][ T9064] netlink: 'syz.3.1039': attribute type 3 has an invalid length. [ 486.352959][ T9065] delete_channel: no stack [ 486.353025][ T9064] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1039'. [ 486.439807][ T9076] IPv6: Can't replace route, no match found [ 486.453566][ T9078] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.740240][ T9089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.900519][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'. [ 487.969151][ T9110] netlink: 'syz.1.1055': attribute type 3 has an invalid length. [ 487.981312][ T9110] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1055'. [ 488.296285][ T9126] IPv6: Can't replace route, no match found [ 488.331955][ T9122] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 488.481760][ T9131] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 488.493451][ T9131] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1060'. [ 489.188031][ T9152] netlink: 'syz.2.1067': attribute type 3 has an invalid length. [ 489.196153][ T9152] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1067'. [ 489.921585][ T9174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.652017][ T9220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.502714][ T9230] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1094'. [ 492.774230][ T9240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1097'. [ 493.236710][ T9260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.148186][ T9270] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1108'. [ 494.197741][ T9272] FAULT_INJECTION: forcing a failure. [ 494.197741][ T9272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.211973][ T9272] CPU: 0 PID: 9272 Comm: syz.0.1109 Not tainted syzkaller #0 [ 494.219383][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 494.229459][ T9272] Call Trace: [ 494.232773][ T9272] [ 494.235793][ T9272] dump_stack_lvl+0x18c/0x250 [ 494.240500][ T9272] ? show_regs_print_info+0x20/0x20 [ 494.245840][ T9272] ? load_image+0x420/0x420 [ 494.250385][ T9272] ? __lock_acquire+0x7d40/0x7d40 [ 494.255434][ T9272] ? snprintf+0xe9/0x140 [ 494.259701][ T9272] should_fail_ex+0x39d/0x4d0 [ 494.264439][ T9272] _copy_to_user+0x2f/0xa0 [ 494.268896][ T9272] simple_read_from_buffer+0xe7/0x150 [ 494.274326][ T9272] proc_fail_nth_read+0x1e8/0x260 [ 494.279396][ T9272] ? proc_fault_inject_write+0x360/0x360 [ 494.285068][ T9272] ? fsnotify_perm+0x271/0x5e0 [ 494.289856][ T9272] ? proc_fault_inject_write+0x360/0x360 [ 494.295516][ T9272] vfs_read+0x28b/0x970 [ 494.299793][ T9272] ? kernel_read+0x1e0/0x1e0 [ 494.304548][ T9272] ? __fget_files+0x28/0x4b0 [ 494.309175][ T9272] ? __fget_files+0x28/0x4b0 [ 494.313834][ T9272] ? __fget_files+0x43d/0x4b0 [ 494.318613][ T9272] ? __fdget_pos+0x2a3/0x330 [ 494.323223][ T9272] ? ksys_read+0x75/0x260 [ 494.327592][ T9272] ksys_read+0x150/0x260 [ 494.331970][ T9272] ? vfs_write+0x990/0x990 [ 494.336400][ T9272] ? lockdep_hardirqs_on+0x98/0x150 [ 494.341615][ T9272] do_syscall_64+0x55/0xa0 [ 494.346158][ T9272] ? clear_bhb_loop+0x40/0x90 [ 494.350875][ T9272] ? clear_bhb_loop+0x40/0x90 [ 494.355565][ T9272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.361578][ T9272] RIP: 0033:0x7f725735d04e [ 494.366135][ T9272] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.385753][ T9272] RSP: 002b:00007f7258196fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.394212][ T9272] RAX: ffffffffffffffda RBX: 00007f72581976c0 RCX: 00007f725735d04e [ 494.402208][ T9272] RDX: 000000000000000f RSI: 00007f72581970a0 RDI: 000000000000000a [ 494.410213][ T9272] RBP: 00007f7258197090 R08: 0000000000000000 R09: 0000000000000000 [ 494.418286][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.426258][ T9272] R13: 00007f7257616038 R14: 00007f7257615fa0 R15: 00007ffcabb6a048 [ 494.434237][ T9272] [ 495.406304][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.443272][ T9319] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.451208][ T9319] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1121'. [ 495.498384][ T9319] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1121'. [ 497.044070][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.072326][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.100569][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.120613][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.139580][ T9350] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 497.162331][ T9350] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 497.904495][ T5819] Bluetooth: hci3: ISO packet for unknown connection handle 16 [ 498.000258][ T9375] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 498.008324][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1138'. [ 498.018180][ T9375] net_ratelimit: 90 callbacks suppressed [ 498.018194][ T9375] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 498.187695][ T9381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.295725][ T9395] netlink: 'syz.2.1143': attribute type 13 has an invalid length. [ 499.331414][ T9395] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1143'. [ 499.951017][ T9416] FAULT_INJECTION: forcing a failure. [ 499.951017][ T9416] name failslab, interval 1, probability 0, space 0, times 0 [ 499.968705][ T9416] CPU: 0 PID: 9416 Comm: syz.0.1151 Not tainted syzkaller #0 [ 499.976141][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 499.986317][ T9416] Call Trace: [ 499.989618][ T9416] [ 499.992569][ T9416] dump_stack_lvl+0x18c/0x250 [ 499.997282][ T9416] ? show_regs_print_info+0x20/0x20 [ 500.002604][ T9416] ? load_image+0x420/0x420 [ 500.007163][ T9416] ? verify_lock_unused+0x140/0x140 [ 500.012506][ T9416] should_fail_ex+0x39d/0x4d0 [ 500.017348][ T9416] should_failslab+0x9/0x20 [ 500.022077][ T9416] slab_pre_alloc_hook+0x59/0x310 [ 500.027417][ T9416] kmem_cache_alloc+0x5a/0x2d0 [ 500.032252][ T9416] ? skb_clone+0x1eb/0x370 [ 500.036710][ T9416] skb_clone+0x1eb/0x370 [ 500.041043][ T9416] __netlink_deliver_tap+0x41c/0x830 [ 500.046387][ T9416] ? netlink_deliver_tap+0x2e/0x1b0 [ 500.051640][ T9416] netlink_deliver_tap+0x19c/0x1b0 [ 500.056804][ T9416] netlink_unicast+0x72c/0x8d0 [ 500.061635][ T9416] netlink_sendmsg+0x8d0/0xbf0 [ 500.066448][ T9416] ? netlink_getsockopt+0x590/0x590 [ 500.071694][ T9416] ? aa_sock_msg_perm+0x94/0x150 [ 500.076678][ T9416] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 500.081999][ T9416] ? security_socket_sendmsg+0x80/0xa0 [ 500.087512][ T9416] ? netlink_getsockopt+0x590/0x590 [ 500.092875][ T9416] ____sys_sendmsg+0x5ba/0x960 [ 500.097773][ T9416] ? __asan_memset+0x22/0x40 [ 500.102402][ T9416] ? __sys_sendmsg_sock+0x30/0x30 [ 500.107454][ T9416] ? __import_iovec+0x3fa/0x850 [ 500.112336][ T9416] ? import_iovec+0x73/0xa0 [ 500.116875][ T9416] ___sys_sendmsg+0x2a6/0x360 [ 500.121598][ T9416] ? get_pid_task+0x20/0x1e0 [ 500.126231][ T9416] ? __sys_sendmsg+0x2a0/0x2a0 [ 500.131132][ T9416] ? __lock_acquire+0x7d40/0x7d40 [ 500.136227][ T9416] __se_sys_sendmsg+0x1c2/0x2b0 [ 500.141117][ T9416] ? __x64_sys_sendmsg+0x80/0x80 [ 500.146202][ T9416] ? lockdep_hardirqs_on+0x98/0x150 [ 500.151440][ T9416] do_syscall_64+0x55/0xa0 [ 500.155882][ T9416] ? clear_bhb_loop+0x40/0x90 [ 500.160597][ T9416] ? clear_bhb_loop+0x40/0x90 [ 500.165348][ T9416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.171277][ T9416] RIP: 0033:0x7f725739c819 [ 500.175724][ T9416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.195358][ T9416] RSP: 002b:00007f7258197028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.203808][ T9416] RAX: ffffffffffffffda RBX: 00007f7257615fa0 RCX: 00007f725739c819 [ 500.211906][ T9416] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 500.219903][ T9416] RBP: 00007f7258197090 R08: 0000000000000000 R09: 0000000000000000 [ 500.227910][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.236000][ T9416] R13: 00007f7257616038 R14: 00007f7257615fa0 R15: 00007ffcabb6a048 [ 500.244125][ T9416] [ 500.426243][ T9426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.490950][ T9425] netlink: 'syz.0.1153': attribute type 2 has an invalid length. [ 500.514529][ T9425] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1153'. [ 501.331364][ T9455] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1163'. [ 502.238054][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.245643][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.443411][ T9482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.500022][ T9489] netlink: 'syz.3.1173': attribute type 2 has an invalid length. [ 502.523015][ T9489] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 502.628726][ T5819] Bluetooth: hci3: ACL packet for unknown connection handle 3072 [ 502.787324][ T9493] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 502.813420][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.497656][ T9513] FAULT_INJECTION: forcing a failure. [ 503.497656][ T9513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.542410][ T9513] CPU: 0 PID: 9513 Comm: syz.3.1182 Not tainted syzkaller #0 [ 503.549842][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 503.559925][ T9513] Call Trace: [ 503.563222][ T9513] [ 503.566205][ T9513] dump_stack_lvl+0x18c/0x250 [ 503.570914][ T9513] ? show_regs_print_info+0x20/0x20 [ 503.576145][ T9513] ? load_image+0x420/0x420 [ 503.580691][ T9513] ? __might_fault+0xaa/0x120 [ 503.585399][ T9513] ? __lock_acquire+0x7d40/0x7d40 [ 503.590454][ T9513] should_fail_ex+0x39d/0x4d0 [ 503.595166][ T9513] _copy_from_iter+0x1d9/0x12e0 [ 503.600041][ T9513] ? __virt_addr_valid+0x18c/0x540 [ 503.605186][ T9513] ? __lock_acquire+0x7d40/0x7d40 [ 503.610326][ T9513] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 503.615822][ T9513] ? copyout_mc+0x70/0x70 [ 503.620176][ T9513] ? __virt_addr_valid+0x18c/0x540 [ 503.625308][ T9513] ? __virt_addr_valid+0x18c/0x540 [ 503.630448][ T9513] ? __virt_addr_valid+0x469/0x540 [ 503.635931][ T9513] ? __check_object_size+0x506/0xa20 [ 503.641240][ T9513] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 503.646996][ T9513] ? dev_get_by_index+0x22/0x2d0 [ 503.651962][ T9513] ? skb_put+0x11b/0x210 [ 503.656335][ T9513] packet_sendmsg+0x3566/0x4d70 [ 503.661255][ T9513] ? verify_lock_unused+0x140/0x140 [ 503.666703][ T9513] ? mark_lock+0x94/0x320 [ 503.671068][ T9513] ? __lock_acquire+0x1273/0x7d40 [ 503.676128][ T9513] ? aa_sk_perm+0x83c/0x970 [ 503.680758][ T9513] ? packet_getsockopt+0xad0/0xad0 [ 503.685922][ T9513] ? aa_sock_msg_perm+0x94/0x150 [ 503.690899][ T9513] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 503.696215][ T9513] ? security_socket_sendmsg+0x80/0xa0 [ 503.701695][ T9513] ? packet_getsockopt+0xad0/0xad0 [ 503.706842][ T9513] ____sys_sendmsg+0x5ba/0x960 [ 503.711624][ T9513] ? __lock_acquire+0x7d40/0x7d40 [ 503.716700][ T9513] ? __asan_memset+0x22/0x40 [ 503.721404][ T9513] ? __sys_sendmsg_sock+0x30/0x30 [ 503.726444][ T9513] ? __import_iovec+0x5f2/0x850 [ 503.731320][ T9513] ? import_iovec+0x73/0xa0 [ 503.735952][ T9513] ___sys_sendmsg+0x2a6/0x360 [ 503.740669][ T9513] ? __sys_sendmsg+0x2a0/0x2a0 [ 503.745476][ T9513] ? __lock_acquire+0x7d40/0x7d40 [ 503.750545][ T9513] __se_sys_sendmsg+0x1c2/0x2b0 [ 503.755427][ T9513] ? __x64_sys_sendmsg+0x80/0x80 [ 503.760414][ T9513] ? lockdep_hardirqs_on+0x98/0x150 [ 503.765741][ T9513] do_syscall_64+0x55/0xa0 [ 503.770195][ T9513] ? clear_bhb_loop+0x40/0x90 [ 503.774933][ T9513] ? clear_bhb_loop+0x40/0x90 [ 503.779648][ T9513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.785572][ T9513] RIP: 0033:0x7f3fa439c819 [ 503.790008][ T9513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.809640][ T9513] RSP: 002b:00007f3fa5255028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.818100][ T9513] RAX: ffffffffffffffda RBX: 00007f3fa4615fa0 RCX: 00007f3fa439c819 [ 503.826110][ T9513] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 503.834109][ T9513] RBP: 00007f3fa5255090 R08: 0000000000000000 R09: 0000000000000000 [ 503.842106][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.850100][ T9513] R13: 00007f3fa4616038 R14: 00007f3fa4615fa0 R15: 00007fff4e160098 [ 503.858295][ T9513] [ 504.182767][ T9530] netlink: 'syz.3.1187': attribute type 10 has an invalid length. [ 504.288580][ T9537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.772232][ T9530] veth0_vlan: left promiscuous mode [ 504.809797][ T9530] veth0_vlan: entered promiscuous mode [ 504.835754][ T9530] team0: Device veth0_vlan failed to register rx_handler [ 504.985937][ T9530] syz.3.1187 (9530) used greatest stack depth: 19528 bytes left [ 505.163315][ T9546] netlink: 'syz.3.1192': attribute type 2 has an invalid length. [ 505.181960][ T9546] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1192'. [ 505.605576][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 505.614824][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 505.625430][ T9565] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1198'. [ 505.634803][ T9565] bridge_slave_0: entered allmulticast mode [ 505.641529][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 505.651092][ T9565] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1198'. [ 505.784812][ T9570] IPv6: Can't replace route, no match found [ 505.796081][ T9573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.007016][ T9581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.677359][ T9596] netlink: 'syz.1.1209': attribute type 2 has an invalid length. [ 506.685576][ T9596] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1209'. [ 507.017988][ T9610] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1213'. [ 507.079727][ T9610] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 507.330116][ T9618] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 [ 507.915698][ T9644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.362401][ T9659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.411939][ T9705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.801018][ T9719] FAULT_INJECTION: forcing a failure. [ 509.801018][ T9719] name failslab, interval 1, probability 0, space 0, times 0 [ 509.814152][ T9719] CPU: 1 PID: 9719 Comm: syz.0.1252 Not tainted syzkaller #0 [ 509.821833][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 509.832178][ T9719] Call Trace: [ 509.835562][ T9719] [ 509.838516][ T9719] dump_stack_lvl+0x18c/0x250 [ 509.843334][ T9719] ? show_regs_print_info+0x20/0x20 [ 509.848579][ T9719] ? load_image+0x420/0x420 [ 509.853142][ T9719] ? netdev_core_pick_tx+0x340/0x340 [ 509.858453][ T9719] should_fail_ex+0x39d/0x4d0 [ 509.863349][ T9719] should_failslab+0x9/0x20 [ 509.867869][ T9719] slab_pre_alloc_hook+0x59/0x310 [ 509.873060][ T9719] kmem_cache_alloc+0x5a/0x2d0 [ 509.877954][ T9719] ? skb_clone+0x1eb/0x370 [ 509.882420][ T9719] skb_clone+0x1eb/0x370 [ 509.886793][ T9719] bpf_clone_redirect+0x167/0x4a0 [ 509.892131][ T9719] bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 509.897619][ T9719] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 509.903605][ T9719] ? perf_trace_preemptirq_template+0xac/0x330 [ 509.909823][ T9719] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 509.915797][ T9719] ? lockdep_softirqs_on+0x580/0x580 [ 509.921076][ T9719] ? lock_chain_count+0x20/0x20 [ 509.925926][ T9719] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 509.932256][ T9719] ? __local_bh_disable_ip+0x108/0x1a0 [ 509.937737][ T9719] ? __cant_sleep+0x220/0x220 [ 509.942428][ T9719] ? __local_bh_enable_ip+0x13a/0x1c0 [ 509.947804][ T9719] ? _local_bh_enable+0xa0/0xa0 [ 509.952663][ T9719] ? bpf_test_timer_continue+0x135/0x380 [ 509.958292][ T9719] ? bpf_test_run+0x174/0x870 [ 509.962969][ T9719] bpf_test_run+0x2df/0x870 [ 509.967486][ T9719] ? bpf_test_run+0x174/0x870 [ 509.972168][ T9719] ? convert___skb_to_skb+0x590/0x590 [ 509.977572][ T9719] ? eth_get_headlen+0x210/0x210 [ 509.982517][ T9719] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 509.988055][ T9719] ? convert___skb_to_skb+0x3d/0x590 [ 509.993337][ T9719] bpf_prog_test_run_skb+0xad2/0x12b0 [ 509.998836][ T9719] ? cpu_online+0x60/0x60 [ 510.003176][ T9719] bpf_prog_test_run+0x321/0x390 [ 510.008150][ T9719] __sys_bpf+0x49d/0x890 [ 510.012515][ T9719] ? bpf_link_show_fdinfo+0x390/0x390 [ 510.017913][ T9719] ? lock_chain_count+0x20/0x20 [ 510.022860][ T9719] __x64_sys_bpf+0x7c/0x90 [ 510.027358][ T9719] do_syscall_64+0x55/0xa0 [ 510.031818][ T9719] ? clear_bhb_loop+0x40/0x90 [ 510.036501][ T9719] ? clear_bhb_loop+0x40/0x90 [ 510.041208][ T9719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.047135][ T9719] RIP: 0033:0x7f725739c819 [ 510.051585][ T9719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.071378][ T9719] RSP: 002b:00007f7258197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.079846][ T9719] RAX: ffffffffffffffda RBX: 00007f7257615fa0 RCX: 00007f725739c819 [ 510.087851][ T9719] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 510.096017][ T9719] RBP: 00007f7258197090 R08: 0000000000000000 R09: 0000000000000000 [ 510.103990][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.111980][ T9719] R13: 00007f7257616038 R14: 00007f7257615fa0 R15: 00007ffcabb6a048 [ 510.120061][ T9719] [ 510.127578][ T9720] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.319329][ T9724] netlink: 'syz.3.1254': attribute type 1 has an invalid length. [ 510.327302][ T9724] netlink: 60179 bytes leftover after parsing attributes in process `syz.3.1254'. [ 510.955193][ T9756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.053519][ T9778] netlink: 'syz.2.1274': attribute type 11 has an invalid length. [ 512.421820][ T9783] À: port 1(vlan0) entered blocking state [ 512.428460][ T9783] À: port 1(vlan0) entered disabled state [ 512.442502][ T9783] vlan0: entered allmulticast mode [ 512.449057][ T9783] veth0_vlan: entered allmulticast mode [ 512.462440][ T9783] vlan0: entered promiscuous mode [ 514.754849][ T9797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.489996][ T9822] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1288'. [ 515.628445][ T9825] netlink: 'syz.0.1290': attribute type 10 has an invalid length. [ 515.636727][ T9825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1290'. [ 515.647454][ T9825] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 516.545045][ T9846] netlink: 'syz.3.1296': attribute type 29 has an invalid length. [ 516.564358][ T9846] netlink: 'syz.3.1296': attribute type 29 has an invalid length. [ 516.576684][ T9846] netlink: 'syz.3.1296': attribute type 29 has an invalid length. [ 516.585259][ T9846] netlink: 'syz.3.1296': attribute type 29 has an invalid length. [ 516.608624][ T9846] netlink: 'syz.3.1296': attribute type 29 has an invalid length. [ 516.722294][ T9849] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1298'. [ 516.787422][ T9853] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1299'. [ 517.064580][ T9861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.656216][ T9875] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.1307'. [ 518.069606][ T9890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1314'. [ 518.146325][ T9890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1314'. [ 518.200237][ T9891] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1314'. [ 518.947815][ T9915] netlink: 'syz.0.1319': attribute type 5 has an invalid length. [ 518.984887][ T9915] netlink: 'syz.0.1319': attribute type 1 has an invalid length. [ 519.008262][ T9915] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1319'. [ 519.037496][ T9920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1319'. [ 520.252324][ T9953] netlink: 'syz.2.1333': attribute type 21 has an invalid length. [ 520.275189][ T9953] netlink: 'syz.2.1333': attribute type 4 has an invalid length. [ 520.315547][ T9953] .`: renamed from bond0 (while UP) [ 520.607961][ T9957] __nla_validate_parse: 3 callbacks suppressed [ 520.608008][ T9957] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1334'. [ 520.855202][ T9962] netlink: 'syz.0.1336': attribute type 28 has an invalid length. [ 520.864498][ T9962] netlink: 'syz.0.1336': attribute type 29 has an invalid length. [ 520.873714][ T9962] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1336'. [ 521.867020][ T9985] netlink: 'syz.2.1343': attribute type 8 has an invalid length. [ 521.886070][ T9985] netlink: 'syz.2.1343': attribute type 1 has an invalid length. [ 521.894564][ T9985] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1343'. [ 522.009372][ T9989] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1344'. [ 524.714794][T10033] netlink: 'syz.3.1357': attribute type 21 has an invalid length. [ 526.367051][T10064] delete_channel: no stack [ 526.852412][T10087] netlink: 'syz.0.1376': attribute type 11 has an invalid length. [ 526.860566][T10087] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1376'. [ 527.081188][T10095] veth0_vlan: entered allmulticast mode [ 527.157038][T10095] veth0_vlan: left promiscuous mode [ 527.163845][T10095] veth0_vlan: entered promiscuous mode [ 527.430416][T10102] netlink: 'syz.3.1381': attribute type 21 has an invalid length. [ 527.477910][T10102] netlink: 'syz.3.1381': attribute type 4 has an invalid length. [ 527.507053][T10102] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1381'. [ 527.561299][T10102] .`: renamed from bond0 (while UP) [ 527.657961][T10105] netlink: 'syz.2.1382': attribute type 2 has an invalid length. [ 527.696931][T10105] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.1382'. [ 527.877849][T10110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1383'. [ 527.898120][T10110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1383'. [ 527.920521][T10110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1383'. [ 527.966302][T10110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1383'. [ 528.171689][T10118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.567989][T10130] netlink: 'syz.3.1391': attribute type 41 has an invalid length. [ 528.591603][ T5819] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 528.599503][ T5819] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 528.875440][T10139] netlink: 'syz.3.1393': attribute type 8 has an invalid length. [ 528.901002][T10139] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 528.933386][T10139] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1393'. [ 529.674659][T10163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.300706][ T5819] Bluetooth: hci0: ACL packet too small [ 531.216338][T10201] netlink: 'syz.0.1417': attribute type 10 has an invalid length. [ 531.241301][T10201] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1417'. [ 531.268515][T10210] netlink: 'syz.3.1418': attribute type 29 has an invalid length. [ 531.278003][T10210] netlink: 'syz.3.1418': attribute type 29 has an invalid length. [ 532.771988][T10219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.452010][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1428'. [ 533.462312][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1428'. [ 533.480267][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1428'. [ 533.503754][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1428'. [ 533.537581][T10236] netlink: 'syz.2.1430': attribute type 29 has an invalid length. [ 533.545932][T10236] netlink: 'syz.2.1430': attribute type 29 has an invalid length. [ 533.560180][T10236] netlink: 'syz.2.1430': attribute type 29 has an invalid length. [ 534.131592][T10255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1438'. [ 534.141002][T10255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1438'. [ 534.336185][T10263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1441'. [ 534.336422][T10264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.364382][T10263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1441'. [ 534.394542][T10263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1441'. [ 534.420069][T10263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1441'. [ 535.009596][T10281] netlink: 'syz.0.1447': attribute type 11 has an invalid length. [ 535.988106][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.247582][T10328] syzkaller0: entered promiscuous mode [ 536.253396][T10328] syzkaller0: entered allmulticast mode [ 539.400843][T10339] __nla_validate_parse: 9 callbacks suppressed [ 539.400858][T10339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1468'. [ 539.417982][T10343] veth1_vlan: mtu greater than device maximum [ 539.425562][T10349] netlink: 'syz.2.1469': attribute type 10 has an invalid length. [ 539.433639][T10349] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1469'. [ 539.827111][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.845895][T10379] netlink: 'syz.1.1479': attribute type 7 has an invalid length. [ 540.081117][T10387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1482'. [ 540.096476][T10387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1482'. [ 540.112773][T10387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1482'. [ 540.748149][T10401] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1486'. [ 541.025821][T10412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1491'. [ 541.065693][T10412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1491'. [ 541.076835][T10412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1491'. [ 541.260806][T10425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.321128][T10448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1502'. [ 543.252038][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.424012][T10510] netlink: 'syz.3.1523': attribute type 29 has an invalid length. [ 544.435190][T10510] netlink: 'syz.3.1523': attribute type 29 has an invalid length. [ 544.455543][T10510] netlink: 'syz.3.1523': attribute type 29 has an invalid length. [ 544.474440][T10510] netlink: 'syz.3.1523': attribute type 29 has an invalid length. [ 544.521135][T10512] __nla_validate_parse: 10 callbacks suppressed [ 544.521178][T10512] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1524'. [ 544.778239][T10523] netlink: 'syz.0.1529': attribute type 5 has an invalid length. [ 544.872392][T10525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1530'. [ 544.881751][T10525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1530'. [ 544.892634][T10525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1530'. [ 545.709142][T10557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1540'. [ 545.718629][T10557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1540'. [ 545.730776][T10557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1540'. [ 546.415783][T10587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1550'. [ 546.439046][T10587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1550'. [ 546.467417][T10587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1550'. [ 547.492251][T10609] netlink: 'syz.0.1558': attribute type 29 has an invalid length. [ 547.528147][T10609] netlink: 'syz.0.1558': attribute type 29 has an invalid length. [ 547.555280][T10614] netlink: 'syz.0.1558': attribute type 29 has an invalid length. [ 547.577408][T10609] netlink: 'syz.0.1558': attribute type 29 has an invalid length. [ 547.601516][T10609] netlink: 'syz.0.1558': attribute type 29 has an invalid length. [ 547.895800][T10624] FAULT_INJECTION: forcing a failure. [ 547.895800][T10624] name failslab, interval 1, probability 0, space 0, times 0 [ 547.911342][T10624] CPU: 0 PID: 10624 Comm: syz.1.1563 Not tainted syzkaller #0 [ 547.918881][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 547.928966][T10624] Call Trace: [ 547.932259][T10624] [ 547.935190][T10624] dump_stack_lvl+0x18c/0x250 [ 547.939880][T10624] ? show_regs_print_info+0x20/0x20 [ 547.945086][T10624] ? load_image+0x420/0x420 [ 547.949603][T10624] ? trace_event_raw_event_lock+0x250/0x250 [ 547.955612][T10624] should_fail_ex+0x39d/0x4d0 [ 547.960319][T10624] should_failslab+0x9/0x20 [ 547.964840][T10624] slab_pre_alloc_hook+0x59/0x310 [ 547.969962][T10624] ? __hw_addr_add_ex+0x202/0x710 [ 547.974991][T10624] __kmem_cache_alloc_node+0x53/0x250 [ 547.980379][T10624] ? __hw_addr_add_ex+0x202/0x710 [ 547.985429][T10624] kmalloc_trace+0x2a/0xe0 [ 547.989895][T10624] __hw_addr_add_ex+0x202/0x710 [ 547.994763][T10624] dev_addr_init+0x15f/0x240 [ 547.999460][T10624] ? dev_addr_flush+0x210/0x210 [ 548.004330][T10624] alloc_netdev_mqs+0x2e4/0x1040 [ 548.009292][T10624] ? ip6gre_tunnel_locate+0x5d0/0x5d0 [ 548.014701][T10624] ip6gre_tunnel_locate+0x227/0x5d0 [ 548.019916][T10624] ? apparmor_capable+0x137/0x1a0 [ 548.025040][T10624] ? ip6gre_tnl_change+0x920/0x920 [ 548.030186][T10624] ? __asan_memcpy+0x40/0x70 [ 548.034789][T10624] ? ip6gre_tunnel_siocdevprivate+0x521/0x740 [ 548.040916][T10624] ip6gre_tunnel_siocdevprivate+0x54e/0x740 [ 548.046886][T10624] ? ip6gre_tunnel_init+0x150/0x150 [ 548.052127][T10624] ? __mutex_lock+0x315/0xcc0 [ 548.056948][T10624] ? dev_ioctl+0x83c/0x1140 [ 548.061495][T10624] ? dev_ifsioc+0x958/0xc40 [ 548.066023][T10624] dev_ioctl+0x84c/0x1140 [ 548.070365][T10624] sock_ioctl+0x74c/0x7e0 [ 548.074887][T10624] ? sock_poll+0x3e0/0x3e0 [ 548.079456][T10624] ? bpf_lsm_file_ioctl+0x9/0x10 [ 548.084518][T10624] ? security_file_ioctl+0x80/0xa0 [ 548.090024][T10624] ? sock_poll+0x3e0/0x3e0 [ 548.094492][T10624] __se_sys_ioctl+0xfd/0x170 [ 548.099100][T10624] do_syscall_64+0x55/0xa0 [ 548.103526][T10624] ? clear_bhb_loop+0x40/0x90 [ 548.108207][T10624] ? clear_bhb_loop+0x40/0x90 [ 548.112891][T10624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.118792][T10624] RIP: 0033:0x7fa80279c819 [ 548.123219][T10624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.142983][T10624] RSP: 002b:00007fa803579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.151503][T10624] RAX: ffffffffffffffda RBX: 00007fa802a15fa0 RCX: 00007fa80279c819 [ 548.159481][T10624] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 548.167466][T10624] RBP: 00007fa803579090 R08: 0000000000000000 R09: 0000000000000000 [ 548.175526][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.183680][T10624] R13: 00007fa802a16038 R14: 00007fa802a15fa0 R15: 00007fff9fd2e6b8 [ 548.191768][T10624] [ 548.598697][T10635] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 548.689080][T10635] netlink: 'syz.1.1567': attribute type 10 has an invalid length. [ 549.397591][T10646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.667013][T10680] hsr0: VLAN not yet supported [ 550.987716][T10689] __nla_validate_parse: 8 callbacks suppressed [ 550.987733][T10689] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1583'. [ 553.670010][ C1] ================================================================== [ 553.678222][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 553.686082][ C1] Write of size 80 at addr ffff888060ff9390 by task syz.1.1584/10699 [ 553.694172][ C1] [ 553.696596][ C1] CPU: 1 PID: 10699 Comm: syz.1.1584 Not tainted syzkaller #0 [ 553.704108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 553.714185][ C1] Call Trace: [ 553.717522][ C1] [ 553.720377][ C1] dump_stack_lvl+0x18c/0x250 [ 553.725167][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 553.730209][ C1] ? show_regs_print_info+0x20/0x20 [ 553.735411][ C1] ? load_image+0x420/0x420 [ 553.739903][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 553.745449][ C1] ? __virt_addr_valid+0x18c/0x540 [ 553.750558][ C1] ? __virt_addr_valid+0x469/0x540 [ 553.755662][ C1] print_report+0xa8/0x210 [ 553.760101][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 553.765363][ C1] kasan_report+0x117/0x150 [ 553.769971][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 553.775092][ C1] kasan_check_range+0x241/0x290 [ 553.780039][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 553.785321][ C1] __asan_memcpy+0x40/0x70 [ 553.789761][ C1] __bpf_get_stackid+0x6bf/0x900 [ 553.794716][ C1] bpf_get_stackid_pe+0x343/0x410 [ 553.799742][ C1] bpf_prog_000f949dc4761d6a+0x30/0x45 [ 553.805193][ C1] bpf_overflow_handler+0x1fc/0x510 [ 553.810555][ C1] ? verify_lock_unused+0x140/0x140 [ 553.815885][ C1] ? bpf_overflow_handler+0xde/0x510 [ 553.821246][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 553.826527][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 553.832844][ C1] __perf_event_overflow+0x447/0x630 [ 553.838331][ C1] perf_swevent_hrtimer+0x439/0x610 [ 553.843609][ C1] ? cpu_clock_event_read+0x40/0x40 [ 553.848803][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 553.854698][ C1] ? _raw_spin_unlock+0x40/0x40 [ 553.859738][ C1] __hrtimer_run_queues+0x4e1/0xc40 [ 553.864948][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 553.870940][ C1] ? cpu_clock_event_read+0x40/0x40 [ 553.876158][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 553.881333][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 553.887445][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 553.892407][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 553.898340][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 553.904100][ C1] [ 553.907030][ C1] [ 553.909953][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 553.915933][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 553.921219][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 553.940933][ C1] RSP: 0018:ffffc90004ea7920 EFLAGS: 00000206 [ 553.946990][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3c3a064602e82400 [ 553.954952][ C1] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60 [ 553.962914][ C1] RBP: ffffc90004ea7a40 R08: dffffc0000000000 R09: 1ffffffff2238abf [ 553.970873][ C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: 1ffff920009d4f30 [ 553.978932][ C1] R13: ffffc90000a3b9a0 R14: 0000000000000246 R15: dffffc0000000000 [ 553.986940][ C1] ? try_to_wake_up+0x70a/0x1190 [ 553.992399][ C1] ? read_lock_is_recursive+0x20/0x20 [ 553.997781][ C1] ? get_futex_key+0x7f0/0x1010 [ 554.002646][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 554.008636][ C1] ? futex_setup_timer+0xc0/0xc0 [ 554.013575][ C1] _raw_spin_lock+0x2e/0x40 [ 554.018072][ C1] ? futex_q_lock+0x1aa/0x250 [ 554.022771][ C1] futex_q_lock+0x1aa/0x250 [ 554.027286][ C1] futex_wait_setup+0xed/0x270 [ 554.032089][ C1] ? futex_wait_multiple+0x970/0x970 [ 554.037382][ C1] futex_wait+0x1bf/0x5e0 [ 554.041884][ C1] ? futex_wait_setup+0x270/0x270 [ 554.046913][ C1] do_futex+0x2ff/0x3e0 [ 554.051064][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 554.057050][ C1] __se_sys_futex+0x3a9/0x440 [ 554.061808][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 554.066562][ C1] ? __x64_sys_futex+0x21/0xf0 [ 554.071339][ C1] do_syscall_64+0x55/0xa0 [ 554.075745][ C1] ? clear_bhb_loop+0x40/0x90 [ 554.080410][ C1] ? clear_bhb_loop+0x40/0x90 [ 554.085078][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.090960][ C1] RIP: 0033:0x7fa80279c819 [ 554.095364][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.114958][ C1] RSP: 002b:00007fa8009f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.123450][ C1] RAX: ffffffffffffffda RBX: 00007fa802a16098 RCX: 00007fa80279c819 [ 554.131411][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa802a16098 [ 554.139368][ C1] RBP: 00007fa802a16090 R08: 0000000000000000 R09: 0000000000000000 [ 554.147329][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.155462][ C1] R13: 00007fa802a16128 R14: 00007fff9fd2e5d0 R15: 00007fff9fd2e6b8 [ 554.163441][ C1] [ 554.166464][ C1] [ 554.168786][ C1] Allocated by task 10699: [ 554.173197][ C1] kasan_set_track+0x4e/0x70 [ 554.177794][ C1] __kasan_kmalloc+0x8f/0xa0 [ 554.182370][ C1] __kmalloc_node+0xb4/0x230 [ 554.186949][ C1] bpf_map_area_alloc+0x5e/0x110 [ 554.191874][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 554.197584][ C1] stack_map_alloc+0x33a/0x4c0 [ 554.202363][ C1] map_create+0x877/0x12f0 [ 554.206762][ C1] __sys_bpf+0x651/0x890 [ 554.211004][ C1] __x64_sys_bpf+0x7c/0x90 [ 554.215404][ C1] do_syscall_64+0x55/0xa0 [ 554.219981][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.225861][ C1] [ 554.228197][ C1] Last potentially related work creation: [ 554.234105][ C1] kasan_save_stack+0x3e/0x60 [ 554.238879][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 554.244375][ C1] call_rcu+0x153/0x950 [ 554.248564][ C1] __nf_register_net_hook+0x788/0x910 [ 554.254053][ C1] nf_register_net_hook+0xb2/0x190 [ 554.259171][ C1] nf_register_net_hooks+0x44/0x1b0 [ 554.264453][ C1] ebt_register_table+0xcec/0x10b0 [ 554.269586][ C1] find_inlist_lock_noload+0x178/0x260 [ 554.275151][ C1] do_ebt_get_ctl+0x2d6/0x1d80 [ 554.280261][ C1] nf_getsockopt+0x262/0x280 [ 554.284889][ C1] ip_getsockopt+0x19f/0x230 [ 554.289469][ C1] do_sock_getsockopt+0x379/0x450 [ 554.294494][ C1] __x64_sys_getsockopt+0x1d6/0x280 [ 554.299990][ C1] do_syscall_64+0x55/0xa0 [ 554.304404][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.310380][ C1] [ 554.312691][ C1] The buggy address belongs to the object at ffff888060ff9380 [ 554.312691][ C1] which belongs to the cache kmalloc-cg-64 of size 64 [ 554.326927][ C1] The buggy address is located 16 bytes inside of [ 554.326927][ C1] allocated 40-byte region [ffff888060ff9380, ffff888060ff93a8) [ 554.340964][ C1] [ 554.343370][ C1] The buggy address belongs to the physical page: [ 554.349776][ C1] page:ffffea000183fe40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60ff9 [ 554.359927][ C1] memcg:ffff888030854001 [ 554.364415][ C1] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 554.372052][ C1] page_type: 0xffffffff() [ 554.376371][ C1] raw: 00fff00000000800 ffff888017c4da00 ffffea00016bba80 dead000000000004 [ 554.384942][ C1] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888030854001 [ 554.393591][ C1] page dumped because: kasan: bad access detected [ 554.400003][ C1] page_owner tracks the page as allocated [ 554.405798][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5805, tgid 5805 (syz-executor), ts 339948093625, free_ts 25774266896 [ 554.424185][ C1] post_alloc_hook+0x1c1/0x200 [ 554.428951][ C1] get_page_from_freelist+0x1951/0x19e0 [ 554.434486][ C1] __alloc_pages+0x1f0/0x460 [ 554.439066][ C1] alloc_slab_page+0x5d/0x160 [ 554.443736][ C1] new_slab+0x87/0x2d0 [ 554.447789][ C1] ___slab_alloc+0xc5d/0x12f0 [ 554.452451][ C1] __kmem_cache_alloc_node+0x19e/0x250 [ 554.457924][ C1] __kmalloc_node+0xa4/0x230 [ 554.462528][ C1] kvmalloc_node+0x70/0x180 [ 554.467129][ C1] nf_hook_entries_grow+0x27d/0x6d0 [ 554.472332][ C1] __nf_register_net_hook+0x2c9/0x910 [ 554.477798][ C1] nf_register_net_hook+0xb2/0x190 [ 554.482925][ C1] nf_register_net_hooks+0x44/0x1b0 [ 554.488144][ C1] brnf_device_event+0x132/0x1d0 [ 554.493095][ C1] notifier_call_chain+0x197/0x380 [ 554.498203][ C1] register_netdevice+0x16a5/0x1bb0 [ 554.503476][ C1] page last free stack trace: [ 554.508224][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 554.513671][ C1] free_unref_page+0x32/0x2e0 [ 554.518334][ C1] free_contig_range+0xa1/0x150 [ 554.523170][ C1] destroy_args+0x80/0x850 [ 554.527575][ C1] debug_vm_pgtable+0x411/0x440 [ 554.532415][ C1] do_one_initcall+0x242/0x790 [ 554.537338][ C1] do_initcall_level+0x137/0x1f0 [ 554.542267][ C1] do_initcalls+0x69/0xd0 [ 554.546584][ C1] kernel_init_freeable+0x3ed/0x580 [ 554.551770][ C1] kernel_init+0x1d/0x1c0 [ 554.556088][ C1] ret_from_fork+0x48/0x80 [ 554.560489][ C1] ret_from_fork_asm+0x11/0x20 [ 554.565239][ C1] [ 554.567640][ C1] Memory state around the buggy address: [ 554.573262][ C1] ffff888060ff9280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 554.581318][ C1] ffff888060ff9300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 554.589366][ C1] >ffff888060ff9380: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 554.597410][ C1] ^ [ 554.602760][ C1] ffff888060ff9400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 554.610837][ C1] ffff888060ff9480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 554.618925][ C1] ================================================================== [ 554.627066][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 554.634700][ C1] CPU: 1 PID: 10699 Comm: syz.1.1584 Not tainted syzkaller #0 [ 554.642158][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 554.652220][ C1] Call Trace: [ 554.655503][ C1] [ 554.658346][ C1] dump_stack_lvl+0x18c/0x250 [ 554.663057][ C1] ? show_regs_print_info+0x20/0x20 [ 554.668343][ C1] ? load_image+0x420/0x420 [ 554.672844][ C1] panic+0x2dc/0x730 [ 554.676729][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 554.681747][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 554.686262][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 554.692171][ C1] ? _raw_spin_unlock+0x40/0x40 [ 554.697027][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 554.702132][ C1] check_panic_on_warn+0x84/0xa0 [ 554.707072][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 554.712181][ C1] end_report+0x6f/0x130 [ 554.716420][ C1] kasan_report+0x128/0x150 [ 554.721031][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 554.726136][ C1] kasan_check_range+0x241/0x290 [ 554.731157][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 554.736380][ C1] __asan_memcpy+0x40/0x70 [ 554.740819][ C1] __bpf_get_stackid+0x6bf/0x900 [ 554.745773][ C1] bpf_get_stackid_pe+0x343/0x410 [ 554.750792][ C1] bpf_prog_000f949dc4761d6a+0x30/0x45 [ 554.756256][ C1] bpf_overflow_handler+0x1fc/0x510 [ 554.761445][ C1] ? verify_lock_unused+0x140/0x140 [ 554.766653][ C1] ? bpf_overflow_handler+0xde/0x510 [ 554.772021][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 554.777564][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 554.783826][ C1] __perf_event_overflow+0x447/0x630 [ 554.789189][ C1] perf_swevent_hrtimer+0x439/0x610 [ 554.794460][ C1] ? cpu_clock_event_read+0x40/0x40 [ 554.799770][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 554.805661][ C1] ? _raw_spin_unlock+0x40/0x40 [ 554.810527][ C1] __hrtimer_run_queues+0x4e1/0xc40 [ 554.815748][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 554.821765][ C1] ? cpu_clock_event_read+0x40/0x40 [ 554.826979][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 554.832085][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 554.838148][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 554.843091][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 554.849058][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 554.854707][ C1] [ 554.857624][ C1] [ 554.860654][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 554.866657][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 554.872043][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 554.891748][ C1] RSP: 0018:ffffc90004ea7920 EFLAGS: 00000206 [ 554.897893][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3c3a064602e82400 [ 554.906030][ C1] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60 [ 554.913988][ C1] RBP: ffffc90004ea7a40 R08: dffffc0000000000 R09: 1ffffffff2238abf [ 554.921962][ C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: 1ffff920009d4f30 [ 554.929948][ C1] R13: ffffc90000a3b9a0 R14: 0000000000000246 R15: dffffc0000000000 [ 554.937935][ C1] ? try_to_wake_up+0x70a/0x1190 [ 554.942864][ C1] ? read_lock_is_recursive+0x20/0x20 [ 554.948229][ C1] ? get_futex_key+0x7f0/0x1010 [ 554.953071][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 554.959044][ C1] ? futex_setup_timer+0xc0/0xc0 [ 554.964062][ C1] _raw_spin_lock+0x2e/0x40 [ 554.968581][ C1] ? futex_q_lock+0x1aa/0x250 [ 554.973254][ C1] futex_q_lock+0x1aa/0x250 [ 554.977746][ C1] futex_wait_setup+0xed/0x270 [ 554.982499][ C1] ? futex_wait_multiple+0x970/0x970 [ 554.987779][ C1] futex_wait+0x1bf/0x5e0 [ 554.992101][ C1] ? futex_wait_setup+0x270/0x270 [ 554.997210][ C1] do_futex+0x2ff/0x3e0 [ 555.001449][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 555.007504][ C1] __se_sys_futex+0x3a9/0x440 [ 555.012168][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 555.016949][ C1] ? __x64_sys_futex+0x21/0xf0 [ 555.021749][ C1] do_syscall_64+0x55/0xa0 [ 555.026190][ C1] ? clear_bhb_loop+0x40/0x90 [ 555.031090][ C1] ? clear_bhb_loop+0x40/0x90 [ 555.035785][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.041684][ C1] RIP: 0033:0x7fa80279c819 [ 555.046122][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.066019][ C1] RSP: 002b:00007fa8009f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 555.074432][ C1] RAX: ffffffffffffffda RBX: 00007fa802a16098 RCX: 00007fa80279c819 [ 555.082418][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa802a16098 [ 555.090463][ C1] RBP: 00007fa802a16090 R08: 0000000000000000 R09: 0000000000000000 [ 555.098508][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.106660][ C1] R13: 00007fa802a16128 R14: 00007fff9fd2e5d0 R15: 00007fff9fd2e6b8 [ 555.114653][ C1] [ 555.118345][ C1] Kernel Offset: disabled [ 555.122673][ C1] Rebooting in 86400 seconds..