last executing test programs: 5.011045272s ago: executing program 2 (id=7109): r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a3894696082417304"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1e00000008000000080000000900000000300000e0ef5d819ea0979ef833d3f3bc6a7aa22a1113a9ff338628583d61173c75edee2f01df04e18a244414288a4a295d356244a1d5f58805a23ade2c9b8dba770fb9697d43711e206643d1dd98ea166b3df0d17981400423abd7e3bb5ae5a152f0b20657bde66fd6ff", @ANYRES32=0x1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0xffff, 0x30046, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x100000000}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xa49, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010105}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x4040001) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x7, 0xeffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000c3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000020000000100000023000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r11, @ANYRES64, @ANYRESDEC=r10, @ANYBLOB="15c335d167d88cff534958e603dd679a8cdc240a9205681265e3868e4092d00fd994b149919ade8fdbd1101d1bfd5c5ac0ac2e70dac2ef97abc1e9606fb41fef2dbeee53", @ANYRESHEX=0x0], 0x128}, 0x20008010) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYRES8=r9, @ANYRES8=r0, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYRES16=r11], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xfffffffffffffe15, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 4.370057059s ago: executing program 2 (id=7116): socketpair(0x29, 0x4, 0x6, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x22, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.541925845s ago: executing program 2 (id=7125): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x2a, 0x2, 0x2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x2000031a9, 0x2}, 0x8980, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000040), &(0x7f0000000180)=r6}, 0x20) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000006d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x80cf}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8000000000000000) 3.413031845s ago: executing program 0 (id=7126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xb}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x5, 0x9, 0x7, 0x1, 0x0, 0x1, 0x10008, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x4, 0xffffffffffffff7f}, 0x181, 0x8, 0x5, 0x4, 0xff, 0x3, 0x6, 0x0, 0x4, 0x0, 0x1}, r0, 0x6, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000440)='&}}\x00') r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xf, 0x3, 0x2) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x240448c4) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[], 0xfefb) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d000000000000000000000000000000000000000300000000020000000300000000000000000000000100000d0000"], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) perf_event_open$cgroup(0x0, r0, 0xd, r4, 0x8) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup(r10, &(0x7f0000000b80)='syz0\x00', 0x1ff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r7, 0x20, &(0x7f0000000ac0)={&(0x7f0000000a00)=""/20, 0x14, 0x0, &(0x7f0000000a40)=""/105, 0x69}}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x401, '\x00', 0x0, r7, 0x3, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x17, 0x16, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0x8, 0x4, 0x0, 0x20, 0xfffffffffffffff0}, @alu={0x0, 0x1, 0x2, 0x3, 0x4, 0x2, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @alu={0x3, 0x1, 0x4, 0x4, 0x2, 0x20}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @jmp={0x5, 0x0, 0xa, 0x8, 0xb, 0x50, 0x10}, @generic={0x4, 0x5, 0x9, 0x3, 0x1029}]}, &(0x7f0000000740)='GPL\x00', 0x7, 0x62, &(0x7f0000000840)=""/98, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl, r9, 0x8, &(0x7f0000000980)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0xc, 0x6, 0x8}, 0x10, r11, r9, 0x4, &(0x7f0000000cc0)=[r1, r1, r3, 0xffffffffffffffff, r12, r9, r1, r1, r9], &(0x7f0000000d00)=[{0x1, 0x5, 0x10, 0x5}, {0x4, 0x5, 0xa, 0xc}, {0x3, 0x4, 0x2, 0x1}, {0x2, 0x3, 0xb}], 0x10, 0x8}, 0x94) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 3.189183941s ago: executing program 1 (id=7128): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4c}, 0x28) socket$kcm(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xb0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.903409769s ago: executing program 2 (id=7129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {0x7, 0x1, 0xb, 0x2, 0xa, 0xb0}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.868945813s ago: executing program 3 (id=7130): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.self_freezing\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.726068413s ago: executing program 1 (id=7131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2400}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) 2.700162871s ago: executing program 0 (id=7133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff0000, 0x9, 0x0, 0xfffffffe, 0x0, 0x9ba5}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa, 0x2, 0x10100, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x3, 0xfffffffd, 0xd3d, 0xffffffff, 0x3872, 0xffffffffffffffff, 0x3, '\x00', r2, r3, 0x3, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x7fffffff}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5e0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x7, 0xa, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}], &(0x7f0000000280)='syzkaller\x00', 0x8001, 0xd2, &(0x7f00000004c0)=""/210, 0x41000, 0x39, '\x00', r2, 0x17, r3, 0x8, &(0x7f00000006c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x243a7, r0, 0x3, &(0x7f0000000780)=[r4], &(0x7f00000007c0)=[{0x3, 0x1, 0x7, 0xa}, {0x5, 0x5, 0xe}, {0x5, 0x1, 0x10, 0xa}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40200000000000061114c000000000085d9af201c00da00950000000000000008e91844a00a19e64ba0bdf2891e9cba4900a58580bcce63a070f37908ba36831329fb0486a77bb96d7432cfef4947d0f99eff1c43a3116ea04f7c2ce3c52d"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e371e14018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 2.641563891s ago: executing program 2 (id=7134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 7) 2.577543866s ago: executing program 3 (id=7135): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001780)=""/4092, 0xffc}], 0x1}, 0x40000000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e23, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) 2.498174631s ago: executing program 4 (id=7136): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.16973579s ago: executing program 4 (id=7137): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x102082, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35a, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYBLOB="04000000001c67", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="145bc00000000000000000000100000280000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x3d, &(0x7f0000000600)}, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0xc3000, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x1}, {0x2}], 0x10, 0x3}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x23, &(0x7f0000000000)=r6, 0x8) 1.751492381s ago: executing program 1 (id=7138): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007009103000000"], 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92a24fc60", 0x14}], 0x3}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r4, 0x33, 0x1, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x2c, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/4088, 0xff8}, {&(0x7f0000004700)=""/4058, 0x17a967e2c6bc5d41}, {&(0x7f0000000200)=""/266, 0x10a}], 0x3}, 0x40000000) 1.644653625s ago: executing program 0 (id=7139): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x700, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.558083156s ago: executing program 0 (id=7140): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000006111080000000000731a0eff000000009500000cb917567d2a00000060a75353b7246f"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002c000b35d25a806f8c6394f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0xb, 0x0, &(0x7f0000000100)="c9188e9bb95d02ff428486", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r0, 0x0, 0x40000064) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r8) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x28) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001480)="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", 0x46a}, {&(0x7f0000000740)="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", 0x5da}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}}}], 0x20}, 0x1000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.557429406s ago: executing program 3 (id=7141): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x4}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0xf100, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.471935296s ago: executing program 1 (id=7142): r0 = syz_clone(0x8000000, &(0x7f0000000240)="c042671041b923c638a9222e88", 0xd, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x22, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x5, 0x6, 0x4, 0xfffffffffffffff0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd7}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000740)='GPL\x00', 0x1, 0x1e, &(0x7f0000000780)=""/30, 0x41100, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xb, 0x2, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) r3 = syz_open_procfs$namespace(r0, &(0x7f0000000940)='ns/pid\x00') r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x0, 0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0xd, &(0x7f0000000a40)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff89}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000ac0)='syzkaller\x00', 0x400, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xc, 0x1, 0x7ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$unix(r1, &(0x7f0000001c80)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000280)="6f5cca410031a30c7ad44fa0b693b7ec3c9f2c7ab00c2220a4deebf7abb5945310c99a77de6ee5076dd425444a88616009b34f1178e8b7197f727ecf8a5b1648f5f79eb667f3df706151e1ba951ca95de7ed3aef", 0x54}, {&(0x7f0000000300)="7cda55eb5477066c96dbe614762421d90cbdf7edf10a8e433e38af8127fee1770bad89a00708cd76ab78db9072dabeeb36571ad970bd838d3a92465de7eb4d6c55ad18c184714ad0e0a37cf46aac637a59710e09d0eee75ddf7c4de676f35919279c55f7b97fe58d1e40faa7f9d5c9d5da518bb826c8ddf58f4a130121433557d1520a346a29db3679989dadff652b4d03d44ac45c14ac7881d42baab3848b7c6d8cdb6b71af99ca765e5b0c12b2941fb427fb64b36c87f35e10de878a75a5303e5beaf217dfc0eac3d366c1b234c1fa5cb070e5b4ebdded2e151307d7f479ec9918f4ae091a541613d2973c", 0xec}, {&(0x7f0000000400)="7c649e451a1a59a9a4699bb6515bdacfe2e7df93f75ce5a106e4f2f8cfe652275cf72eaa52cea2df14c6849104376091d4327e3e9013be452accaa0dc5d421865e897fc53fa411f73f0589b34bf905434dfa58ea4b04a56a416e46d1dd3fad9963edec758874390e3b53b4229d2d306b4924e1ecb06128af89c9248d6797b78200f5aebabc8e894a66faa22805ae5d5a3b211c71ff8dbfa8ee6503d107ba46f64103f097bca96e06c0d4bd37c962b64ad66c63919af5d37308608c4e47c4bf8eb2a60b625fcfab936c668a7283083fd338ce8d7c354d266927b1e325c59fb8d19da3d377ebede72ee02294db", 0xec}, {&(0x7f0000000500)="87133dc3b46c6e577e0241f1c4418140e3cd40e825a4c01ebed5ff550fc3b6be9902d26a716f920f3bfd14c665f7518d7edb5dbb2f33aef09d8e43841f737ff3744700d61aa2fd83363325901f08e3a545984206a383da9c1fa63480fa1f3dbcd9a0ddfcfe95caff283f35fd2769b2ede5b3ae4c3aa4e0214ec8295c80c168279a", 0x81}], 0x4, &(0x7f0000001c40)=[@rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5, r6]}}], 0x30, 0x4000040}, 0xc800) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0xbf, 0x10, 0x0, 0x0, 0x7fffd, 0x48106, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100c, 0x0, @perf_config_ext={0x1, 0x6}, 0x104002, 0x0, 0x0, 0x1, 0x6f00000000004, 0x2, 0x0, 0x0, 0xffffbffe, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 1.384837936s ago: executing program 4 (id=7143): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4000}, 0x48) 1.288449933s ago: executing program 3 (id=7144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 1.287020224s ago: executing program 0 (id=7145): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a11800023ffe80000000000e1208000f0100a10401a80016eaa4000640fefffffffeffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.181368098s ago: executing program 4 (id=7146): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b0000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x8, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.12017905s ago: executing program 0 (id=7147): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0xbaff3e50736035b6, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1c, 0x72, &(0x7f0000000600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffff7d, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0x5, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b904020208a606007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e0011000140034788000360", 0x3e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b0000000000000000"], 0xffffffffffffffc7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYRES16=r0], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b000000080000000000000f050001"], 0x0, 0x2f, 0x0, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x41, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) close(r2) 1.026874075s ago: executing program 2 (id=7148): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x20003, 0x1}, {0x2, 0x7, 0x1}, {0x5, 0x9, 0x3}, {0x5, 0x2, 0x3}, {0xc, 0xa, 0xd302}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x61, 0x5f]}}, &(0x7f00000006c0)=""/237, 0x68, 0xed, 0x1}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000002580)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002540)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x4010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, &(0x7f0000000580), &(0x7f0000000640)=""/147}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) recvmsg(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)=""/201, 0xc9}, {&(0x7f0000000980)=""/163, 0xa3}, {&(0x7f0000000a40)=""/65, 0x41}, {&(0x7f0000000ac0)=""/55, 0x37}, {&(0x7f0000000b00)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/94, 0x5e}, {&(0x7f0000000c40)=""/242, 0xf2}, {&(0x7f0000000d40)=""/246, 0xf6}], 0x8, &(0x7f0000000ec0)=""/149, 0x95}, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r6, 0x4000, r0}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 809.484986ms ago: executing program 1 (id=7149): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x16, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001900)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0xfffd}, 0x3e8) 391.365848ms ago: executing program 4 (id=7150): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x6, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xc2b6, 0x0, 0x0, 0xfffffffd, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r1, &(0x7f0000000240)="57f80cb2794a497b3b2403289efe2c62f2339598dbf74f6574cfea6086009d10d5c0d8e040470d2d38174fe8b1c9b106015a58a850b1dbca1cab6f491dd2dbd83dc3cd65d92c2d2088ae4918b0f344b8fd4f704e90cd95766021cf8de425409ccf61ff8a", &(0x7f00000002c0)=""/101}, 0x20) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="09000000030000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00!\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) openat$cgroup_subtree(r8, &(0x7f0000000380), 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f0000000140)={{r7}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) 196.774783ms ago: executing program 3 (id=7151): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000003840)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x36}], 0x10}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x60) 33.158217ms ago: executing program 3 (id=7152): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x2}, 0x10460, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) (async) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af8", 0xe}, {&(0x7f0000000080)}, {&(0x7f0000000140)="9d7fa74553ce3f5d59516d02ede9999f3b073dd99175af73c8a3248a83807167484645540f8749acf5a7b3fe4fbe939939d14b68517342797d181af72c28b57d02234901e359e6a3807d9181abfbd8d9ad9b", 0x52}, {&(0x7f0000000340)}], 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x2, &(0x7f0000000000)=r4, 0x4) (async, rerun: 64) recvmsg$kcm(r2, &(0x7f0000000680)={&(0x7f0000000500)=@nl=@unspec, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/62, 0x3e}, {0x0}], 0x2, &(0x7f0000000640)=""/48, 0x30}, 0x3) (async, rerun: 64) syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/file0/file0\x00', r4, 0x4000, r1}, 0x18) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) mkdir(&(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x81) (async) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff00000000040000008500000036000000850000000800000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2b6, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) r6 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) 32.317507ms ago: executing program 1 (id=7153): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x102082, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35a, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYBLOB="04000000001c67", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="145bc00000000000000000000100000280000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x3d, &(0x7f0000000600)}, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0xc3000, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x1}, {0x2}], 0x10, 0x3}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x23, &(0x7f0000000000)=r6, 0x8) 0s ago: executing program 4 (id=7154): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0003c00000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): 6][T23458] ? load_image+0x410/0x410 [ 1051.870425][T23458] ? __lock_acquire+0x7c40/0x7c40 [ 1051.875484][T23458] should_fail_ex+0x390/0x4c0 [ 1051.880196][T23458] should_failslab+0x5/0x20 [ 1051.884719][T23458] slab_pre_alloc_hook+0x59/0x300 [ 1051.889768][T23458] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1051.895340][T23458] __kmem_cache_alloc_node+0x4f/0x270 [ 1051.900746][T23458] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1051.906403][T23458] __kmalloc+0xa3/0x240 [ 1051.910603][T23458] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1051.916022][T23458] ? __fget_files+0x28/0x460 [ 1051.920638][T23458] ? __fget_files+0x3fc/0x460 [ 1051.925354][T23458] ? cpu_online+0xa0/0xa0 [ 1051.929709][T23458] bpf_prog_test_run+0x31c/0x390 [ 1051.934675][T23458] __sys_bpf+0x62b/0x780 [ 1051.938949][T23458] ? bpf_link_show_fdinfo+0x380/0x380 [ 1051.944364][T23458] ? lock_chain_count+0x20/0x20 [ 1051.949254][T23458] __x64_sys_bpf+0x78/0x90 [ 1051.953716][T23458] do_syscall_64+0x4c/0xa0 [ 1051.958151][T23458] ? clear_bhb_loop+0x60/0xb0 [ 1051.962841][T23458] ? clear_bhb_loop+0x60/0xb0 [ 1051.967554][T23458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.973478][T23458] RIP: 0033:0x7fd2f959e159 [ 1051.977913][T23458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.997665][T23458] RSP: 002b:00007fd2fa4c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1052.006101][T23458] RAX: ffffffffffffffda RBX: 00007fd2f9825fa0 RCX: 00007fd2f959e159 [ 1052.014096][T23458] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 1052.022113][T23458] RBP: 00007fd2fa4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.030156][T23458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.038158][T23458] R13: 00007fd2f9826038 R14: 00007fd2f9825fa0 R15: 00007ffc5f142f98 [ 1052.046168][T23458] [ 1052.503778][T23471] netlink: 'syz.0.6001': attribute type 2 has an invalid length. [ 1052.511685][T23471] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.6001'. [ 1053.755569][T23499] netlink: 'syz.2.6014': attribute type 29 has an invalid length. [ 1053.782903][T23495] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6012'. [ 1053.802623][T23499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6014'. [ 1053.818217][T23499] netlink: 'syz.2.6014': attribute type 29 has an invalid length. [ 1053.842545][T23499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6014'. [ 1054.405469][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.412115][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.633791][T23516] netlink: 'syz.0.6020': attribute type 21 has an invalid length. [ 1054.881416][T23519] netlink: 'syz.1.6021': attribute type 10 has an invalid length. [ 1055.222622][T23528] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6025'. [ 1055.413140][T23533] netlink: 'syz.1.6026': attribute type 1 has an invalid length. [ 1055.866970][T23543] netlink: 'syz.4.6031': attribute type 39 has an invalid length. [ 1056.594194][T23562] netlink: 'syz.1.6036': attribute type 21 has an invalid length. [ 1056.619597][T23562] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6036'. [ 1056.650715][T23562] netlink: 'syz.1.6036': attribute type 5 has an invalid length. [ 1057.005368][T23572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.012844][T23572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.375282][T23583] netlink: 'syz.2.6043': attribute type 17 has an invalid length. [ 1057.402744][T23583] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6043'. [ 1057.847162][T23589] validate_nla: 1 callbacks suppressed [ 1057.847203][T23589] netlink: 'syz.2.6044': attribute type 1 has an invalid length. [ 1058.646140][T23615] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1058.737984][T23611] netlink: 'syz.0.6051': attribute type 3 has an invalid length. [ 1058.746886][T23618] netlink: 'syz.3.6054': attribute type 2 has an invalid length. [ 1058.755426][T23611] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1058.779522][T23619] netlink: 'syz.0.6051': attribute type 3 has an invalid length. [ 1058.816287][T23619] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1058.832125][T23618] netlink: 'syz.3.6054': attribute type 1 has an invalid length. [ 1058.851958][T23618] netlink: 'syz.3.6054': attribute type 4 has an invalid length. [ 1058.859789][T23618] netlink: 'syz.3.6054': attribute type 6 has an invalid length. [ 1058.909872][T23618] netlink: 'syz.3.6054': attribute type 7 has an invalid length. [ 1058.942368][T23618] netlink: 'syz.3.6054': attribute type 5 has an invalid length. [ 1058.953016][T23618] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.6054'. [ 1059.852870][T23643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.860376][T23643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.896079][T23643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.935737][T23643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.139876][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1060.152744][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1060.161173][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1060.172025][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1060.179848][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1060.187327][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1060.686428][T23659] netlink: 'syz.3.6069': attribute type 1 has an invalid length. [ 1061.135211][T23649] chnl_net:caif_netlink_parms(): no params data found [ 1061.332064][T23649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.357782][T23649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.370235][T23649] device bridge_slave_0 entered promiscuous mode [ 1061.383175][T23649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.390732][T23649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.399531][T23649] device bridge_slave_1 entered promiscuous mode [ 1062.242426][ T4291] Bluetooth: hci5: command 0x0409 tx timeout [ 1063.639713][T23649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.706126][T23649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.768433][T23649] team0: Port device team_slave_0 added [ 1063.789526][T23675] netlink: 'syz.1.6074': attribute type 1 has an invalid length. [ 1063.810159][T23649] team0: Port device team_slave_1 added [ 1063.868604][T23649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.881557][T23649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.921513][T23649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.947537][T23649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.978204][T23649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.017386][T23649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.103695][T23649] device hsr_slave_0 entered promiscuous mode [ 1064.129342][T23649] device hsr_slave_1 entered promiscuous mode [ 1064.162629][T23649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1064.201127][T23649] Cannot create hsr debugfs directory [ 1064.322170][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 1064.524628][T23686] netlink: 'syz.3.6079': attribute type 2 has an invalid length. [ 1064.559446][T23686] netlink: 'syz.3.6079': attribute type 1 has an invalid length. [ 1064.639550][T23686] netlink: 'syz.3.6079': attribute type 4 has an invalid length. [ 1064.696966][T23686] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.6079'. [ 1065.037774][T23649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.417243][T23649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.573537][T23649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.813201][T23649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.177912][T23649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1066.230064][T23649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1066.270871][T23649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1066.337627][T23649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1066.401985][ T4291] Bluetooth: hci5: command 0x040f tx timeout [ 1066.519919][T23719] device pim6reg1 entered promiscuous mode [ 1066.575582][T23719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6088'. [ 1066.799962][T23731] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.6091'. [ 1066.954721][T23649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.203013][T23649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.234228][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1067.248046][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1067.317665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1067.334881][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1067.357015][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.364373][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.381213][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1067.393374][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1067.407038][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1067.446561][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.453844][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.823481][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1067.864467][T23750] netlink: 'syz.3.6098': attribute type 10 has an invalid length. [ 1068.482312][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 1069.015055][T23750] device veth0_macvtap left promiscuous mode [ 1070.538996][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1070.560352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1070.612734][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1070.635061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1070.734876][T23772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.757391][T23772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.860015][T23772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.884875][T23772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.957956][T23772] batman_adv: batadv0: Removing interface: netdevsim0 [ 1071.637191][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1071.652834][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1071.718871][T23778] netlink: 'syz.2.6105': attribute type 10 has an invalid length. [ 1071.786415][T23778] team0: Device wg1 is of different type [ 1071.836245][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1071.857767][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1071.888117][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1071.908867][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1071.925942][T23649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1072.030620][T23785] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1072.037204][T23785] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1072.378594][T23793] netlink: 'syz.3.6110': attribute type 1 has an invalid length. [ 1073.008879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1073.016752][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1073.080561][T23649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.121489][T23804] netlink: 'syz.3.6113': attribute type 2 has an invalid length. [ 1073.158151][T23804] netlink: 'syz.3.6113': attribute type 8 has an invalid length. [ 1073.193830][T23804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6113'. [ 1073.304575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1073.332639][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1073.487722][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1073.508447][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1073.550715][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1073.585175][ T4291] Bluetooth: hci4: unknown advertising packet type: 0xc2 [ 1073.588986][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1073.647588][T23649] device veth0_vlan entered promiscuous mode [ 1073.720098][T23649] device veth1_vlan entered promiscuous mode [ 1073.768790][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1073.823658][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1073.848676][T23649] device veth0_macvtap entered promiscuous mode [ 1073.877973][T23649] device veth1_macvtap entered promiscuous mode [ 1073.917816][T23822] FAULT_INJECTION: forcing a failure. [ 1073.917816][T23822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.969237][T23649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.005417][T23649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.041138][T23649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.058858][T23822] CPU: 1 PID: 23822 Comm: syz.4.6120 Not tainted syzkaller #0 [ 1074.066427][T23822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1074.076535][T23822] Call Trace: [ 1074.079854][T23822] [ 1074.082823][T23822] dump_stack_lvl+0x188/0x24e [ 1074.087558][T23822] ? show_regs_print_info+0x12/0x12 [ 1074.092816][T23822] ? load_image+0x410/0x410 [ 1074.097376][T23822] ? __lock_acquire+0x7c40/0x7c40 [ 1074.102476][T23822] should_fail_ex+0x390/0x4c0 [ 1074.107222][T23822] _copy_to_user+0x2c/0x130 [ 1074.111789][T23822] bpf_verifier_vlog+0x172/0x3a0 [ 1074.116798][T23822] __btf_verifier_log+0xdf/0x130 [ 1074.121804][T23822] ? btf_check_sec_info+0x350/0x350 [ 1074.127071][T23822] ? btf_parse_hdr+0x1dd/0x7d0 [ 1074.131900][T23822] btf_parse_hdr+0x400/0x7d0 [ 1074.136549][T23822] btf_new_fd+0x367/0x760 [ 1074.140943][T23822] __sys_bpf+0x612/0x780 [ 1074.145241][T23822] ? bpf_link_show_fdinfo+0x380/0x380 [ 1074.150702][T23822] ? lock_chain_count+0x20/0x20 [ 1074.155624][T23822] __x64_sys_bpf+0x78/0x90 [ 1074.160101][T23822] do_syscall_64+0x4c/0xa0 [ 1074.164661][T23822] ? clear_bhb_loop+0x60/0xb0 [ 1074.169479][T23822] ? clear_bhb_loop+0x60/0xb0 [ 1074.174215][T23822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1074.180176][T23822] RIP: 0033:0x7f604679e159 [ 1074.184643][T23822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.204324][T23822] RSP: 002b:00007f6047715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1074.212793][T23822] RAX: ffffffffffffffda RBX: 00007f6046a25fa0 RCX: 00007f604679e159 [ 1074.220817][T23822] RDX: 0000000000000028 RSI: 0000200000000a40 RDI: 0000000000000012 [ 1074.228849][T23822] RBP: 00007f6047715090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.236879][T23822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1074.244918][T23822] R13: 00007f6046a26038 R14: 00007f6046a25fa0 R15: 00007ffd8fee15c8 [ 1074.252964][T23822] [ 1074.268743][T23649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.285402][T23649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.296617][T23649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.323005][T23649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.337907][T23824] netlink: 'syz.1.6121': attribute type 21 has an invalid length. [ 1074.352764][T23824] netlink: 'syz.1.6121': attribute type 6 has an invalid length. [ 1074.396662][T23824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6121'. [ 1074.441524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1074.454435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1074.483410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1074.496880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1074.517802][T23649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.534742][T23649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.562023][T23649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.595020][T23649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.616454][T23649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.638428][T23649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.737905][T23649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.746470][T23829] netlink: 'syz.2.6123': attribute type 39 has an invalid length. [ 1074.764669][T23831] netlink: 'syz.4.6125': attribute type 1 has an invalid length. [ 1074.881140][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1074.921152][T23835] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.6133'. [ 1074.952361][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1074.978367][T23649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.042623][T23649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.051470][T23649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.183308][T23649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.530168][T11280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.565160][T11280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.596946][T23847] netlink: 68520 bytes leftover after parsing attributes in process `syz.2.6137'. [ 1075.632591][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1075.674862][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.710056][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.769950][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1076.365714][T23861] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1076.412481][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1076.424534][T23865] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6059'. [ 1076.472883][T23861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1077.251131][T23884] netlink: 'syz.1.6136': attribute type 39 has an invalid length. [ 1077.793879][T23893] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.6142'. [ 1080.393174][T23893] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1080.394508][T23911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.415121][T23911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.423856][T23893] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1080.437357][T23893] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1080.450674][T23911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.471982][T23911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.953679][T23927] netlink: 'syz.3.6147': attribute type 10 has an invalid length. [ 1081.119379][T23927] team0: Device wg1 is of different type [ 1081.400601][T23933] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6152'. [ 1081.453397][T23941] netlink: 'syz.4.6154': attribute type 39 has an invalid length. [ 1081.469142][T23943] netlink: 'syz.1.6155': attribute type 1 has an invalid length. [ 1082.786046][T23973] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1082.871985][T23973] syzkaller1: linktype set to 825 [ 1083.530088][T23987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6167'. [ 1083.580389][T23987] : renamed from caif0 [ 1084.177653][T23987] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1084.238254][T23985] netlink: 'syz.4.6168': attribute type 4 has an invalid length. [ 1084.293274][T23985] netlink: 'syz.4.6168': attribute type 26 has an invalid length. [ 1084.311515][T23985] netlink: 'syz.4.6168': attribute type 26 has an invalid length. [ 1084.331918][T23985] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.6168'. [ 1084.562800][T23999] netlink: 'syz.2.6171': attribute type 1 has an invalid length. [ 1085.290501][T24020] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1086.541111][T24043] netlink: 'syz.3.6188': attribute type 1 has an invalid length. [ 1087.060252][T24063] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.6195'. [ 1087.470107][T24068] FAULT_INJECTION: forcing a failure. [ 1087.470107][T24068] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.545059][T24068] CPU: 0 PID: 24068 Comm: syz.2.6196 Not tainted syzkaller #0 [ 1087.552618][T24068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1087.562804][T24068] Call Trace: [ 1087.566123][T24068] [ 1087.569100][T24068] dump_stack_lvl+0x188/0x24e [ 1087.573841][T24068] ? show_regs_print_info+0x12/0x12 [ 1087.579096][T24068] ? load_image+0x410/0x410 [ 1087.583662][T24068] ? __might_sleep+0xd0/0xd0 [ 1087.588307][T24068] ? __lock_acquire+0x7c40/0x7c40 [ 1087.593400][T24068] should_fail_ex+0x390/0x4c0 [ 1087.598150][T24068] should_failslab+0x5/0x20 [ 1087.602708][T24068] slab_pre_alloc_hook+0x59/0x300 [ 1087.607790][T24068] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1087.614014][T24068] ? prog_array_map_alloc+0x4d/0x1f0 [ 1087.619366][T24068] __kmem_cache_alloc_node+0x4f/0x270 [ 1087.624817][T24068] ? prog_array_map_alloc+0x4d/0x1f0 [ 1087.630163][T24068] kmalloc_trace+0x26/0xe0 [ 1087.634638][T24068] prog_array_map_alloc+0x4d/0x1f0 [ 1087.639805][T24068] map_create+0x524/0xff0 [ 1087.644191][T24068] ? security_bpf+0x7a/0xa0 [ 1087.648767][T24068] __sys_bpf+0x38b/0x780 [ 1087.653072][T24068] ? bpf_link_show_fdinfo+0x380/0x380 [ 1087.658528][T24068] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1087.664755][T24068] __x64_sys_bpf+0x78/0x90 [ 1087.669244][T24068] do_syscall_64+0x4c/0xa0 [ 1087.673735][T24068] ? clear_bhb_loop+0x60/0xb0 [ 1087.678475][T24068] ? clear_bhb_loop+0x60/0xb0 [ 1087.683215][T24068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1087.689185][T24068] RIP: 0033:0x7fd2f959e159 [ 1087.693659][T24068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.713324][T24068] RSP: 002b:00007fd2fa4a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1087.721858][T24068] RAX: ffffffffffffffda RBX: 00007fd2f9826090 RCX: 00007fd2f959e159 [ 1087.729886][T24068] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 1087.737920][T24068] RBP: 00007fd2fa4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.745948][T24068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.753973][T24068] R13: 00007fd2f9826128 R14: 00007fd2f9826090 R15: 00007ffc5f142f98 [ 1087.762020][T24068] [ 1088.639753][T24093] netlink: 'syz.0.6206': attribute type 4 has an invalid length. [ 1088.687134][T24094] netlink: 'syz.2.6207': attribute type 10 has an invalid length. [ 1091.688903][T24116] netlink: 'syz.1.6214': attribute type 1 has an invalid length. [ 1092.469094][T24139] netlink: 'syz.2.6222': attribute type 33 has an invalid length. [ 1092.514399][T24139] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6222'. [ 1092.710085][T24147] netlink: 'syz.0.6224': attribute type 1 has an invalid length. [ 1092.733117][T24147] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.6224'. [ 1092.770060][T24144] netlink: 'syz.4.6225': attribute type 2 has an invalid length. [ 1092.847732][T24144] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.6225'. [ 1093.305983][T22931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1093.315912][T22931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1093.328322][T22931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1093.340524][T22931] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1093.351462][T22931] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1093.360926][T22931] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1093.655938][T11280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.759620][T24168] netlink: 'syz.0.6230': attribute type 1 has an invalid length. [ 1093.891673][T11280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.165131][T11280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.413117][T24194] sctp: [Deprecated]: syz.0.6240 (pid 24194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1094.413117][T24194] Use struct sctp_sack_info instead [ 1095.469907][T22931] Bluetooth: hci6: command 0x0409 tx timeout [ 1096.408733][T11280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.544223][T24198] netlink: 'syz.3.6238': attribute type 10 has an invalid length. [ 1096.580839][T24198] device syz_tun entered promiscuous mode [ 1096.710511][T24203] netlink: 'syz.2.6242': attribute type 39 has an invalid length. [ 1097.119532][T24165] chnl_net:caif_netlink_parms(): no params data found [ 1097.523877][T22931] Bluetooth: hci6: command 0x041b tx timeout [ 1097.994966][T24165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.022917][T24165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.030915][T24165] device bridge_slave_0 entered promiscuous mode [ 1098.120159][T24232] netlink: 'syz.3.6249': attribute type 1 has an invalid length. [ 1098.319226][T24247] netlink: 'syz.0.6251': attribute type 2 has an invalid length. [ 1098.338662][T24165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.348210][T24247] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.6251'. [ 1098.362848][T24165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.400305][T24165] device bridge_slave_1 entered promiscuous mode [ 1098.754688][T24165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.861413][T24165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.101546][T24165] team0: Port device team_slave_0 added [ 1099.208560][T24165] team0: Port device team_slave_1 added [ 1099.217091][T24263] netlink: 'syz.2.6256': attribute type 11 has an invalid length. [ 1099.271818][T24263] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1099.310566][T24262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.360047][T24165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.385170][T24165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.471868][T24165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.592637][T24165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.599665][T24165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.632268][T22931] Bluetooth: hci6: command 0x040f tx timeout [ 1099.692013][T24165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.832681][T24268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.840258][T24268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.309427][T24165] device hsr_slave_0 entered promiscuous mode [ 1100.338682][T24292] netlink: 'syz.4.6263': attribute type 29 has an invalid length. [ 1100.383324][T24165] device hsr_slave_1 entered promiscuous mode [ 1100.412718][T24165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1100.420355][T24165] Cannot create hsr debugfs directory [ 1100.611490][T24292] netlink: 'syz.4.6263': attribute type 29 has an invalid length. [ 1100.633871][T24301] netlink: 'syz.3.6265': attribute type 2 has an invalid length. [ 1100.642810][T24295] netlink: 'syz.4.6263': attribute type 29 has an invalid length. [ 1100.666280][T24297] netlink: 'syz.4.6263': attribute type 29 has an invalid length. [ 1100.679612][T24301] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1100.704544][T24299] netlink: 'syz.2.6264': attribute type 1 has an invalid length. [ 1100.761491][T24302] netlink: 'syz.4.6263': attribute type 29 has an invalid length. [ 1101.084144][T24313] netlink: 'syz.0.6267': attribute type 11 has an invalid length. [ 1101.103600][T24313] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6267'. [ 1101.166362][T24312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.202998][T11280] bridge0: port 3(team0) entered disabled state [ 1101.245163][T11280] device bridge_slave_1 left promiscuous mode [ 1101.251561][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.324697][T11280] device bridge_slave_0 left promiscuous mode [ 1101.382060][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.520120][T11280] device veth0_macvtap left promiscuous mode [ 1101.644091][T24325] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.6271'. [ 1101.681851][T22931] Bluetooth: hci6: command 0x0419 tx timeout [ 1102.139696][T24339] netlink: 'syz.3.6273': attribute type 2 has an invalid length. [ 1102.188784][T24339] netlink: 'syz.3.6273': attribute type 1 has an invalid length. [ 1102.242020][T24339] netlink: 'syz.3.6273': attribute type 4 has an invalid length. [ 1102.282188][T24339] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.6273'. [ 1102.842114][T11280] device team_slave_1 left promiscuous mode [ 1102.853043][T11280] team0 (unregistering): Port device team_slave_1 removed [ 1102.901080][T11280] device team_slave_0 left promiscuous mode [ 1102.908567][T11280] team0 (unregistering): Port device team_slave_0 removed [ 1103.354961][T24325] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1103.374291][T24325] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1103.386254][T24325] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1103.744900][T24353] netlink: 'syz.4.6277': attribute type 1 has an invalid length. [ 1103.778114][T24356] netlink: 'syz.2.6278': attribute type 11 has an invalid length. [ 1103.806148][T24356] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6278'. [ 1103.823553][T24354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.125602][T24364] netlink: 'syz.2.6280': attribute type 2 has an invalid length. [ 1104.163632][T24364] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.6280'. [ 1104.549137][T24165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1105.363131][T24165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1105.463789][T24165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1105.535076][T24165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1105.610347][T24411] netlink: 'syz.2.6290': attribute type 11 has an invalid length. [ 1105.676373][T24411] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6290'. [ 1105.710908][T24408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.823032][T24165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.910080][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1105.960424][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1106.026729][T24165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.102053][T24417] netlink: 'syz.0.6293': attribute type 1 has an invalid length. [ 1106.117475][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1106.172315][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1106.181208][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.188582][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.262133][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1106.448884][T24426] netlink: 'syz.2.6294': attribute type 2 has an invalid length. [ 1106.499317][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1106.514225][T24426] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1106.548317][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1106.604078][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.611367][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.658972][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1106.713669][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1106.725388][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1106.737516][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1106.762664][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1106.781923][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1106.798324][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1106.858033][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1106.873347][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1106.919335][T24165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1106.969012][T24165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1106.995979][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1107.012678][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1108.084998][T24457] netlink: 'syz.3.6303': attribute type 11 has an invalid length. [ 1108.141806][T24457] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6303'. [ 1108.170349][T24456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.289356][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1108.299623][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1108.380829][T24165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.479292][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1108.495024][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1108.578433][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1108.601501][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1108.645116][T24165] device veth0_vlan entered promiscuous mode [ 1108.687240][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1108.733333][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1108.772643][T24165] device veth1_vlan entered promiscuous mode [ 1108.815207][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1108.862758][T24476] netlink: 'syz.2.6308': attribute type 1 has an invalid length. [ 1109.061942][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1109.070863][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1109.085961][T24165] device veth0_macvtap entered promiscuous mode [ 1109.099477][T24165] device veth1_macvtap entered promiscuous mode [ 1109.121558][T24165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.133794][T24165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.144315][T24165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.165454][T24165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.191408][T24165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.242822][T24165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.263958][T24165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.289510][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1109.328517][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1109.338326][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1109.347938][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1109.393150][T24165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.460478][T24165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.480851][T24165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.501998][T24165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.520614][T24496] netlink: 'syz.2.6315': attribute type 11 has an invalid length. [ 1109.530319][T24165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.546372][T24496] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6315'. [ 1109.555939][T24165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.575458][T24495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.611463][T24165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.711427][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1109.748706][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1109.809992][T24165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.847547][T24165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.880026][T24165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.909452][T24165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.130572][T24505] bridge0: port 4(batadv0) entered blocking state [ 1110.190824][T24505] bridge0: port 4(batadv0) entered disabled state [ 1110.270124][T24505] device batadv0 entered promiscuous mode [ 1110.318684][T24505] bridge0: port 4(batadv0) entered blocking state [ 1110.325511][T24505] bridge0: port 4(batadv0) entered forwarding state [ 1110.514875][T11280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.532377][T11280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.576184][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1110.594352][ T5969] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1110.604179][ T5969] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1110.682597][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.690511][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.751414][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1111.131223][T24534] netlink: 'syz.1.6223': attribute type 4 has an invalid length. [ 1111.174492][T24535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1111.200964][T24533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1111.278947][T24535] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1111.322392][T24535] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1111.325963][T24543] netlink: 'syz.0.6326': attribute type 11 has an invalid length. [ 1111.390557][T24543] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1111.463024][T24540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.630575][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1112.640846][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1112.652758][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1112.661170][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1112.670779][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1112.678684][T13428] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1113.481898][T24580] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1113.488394][T24580] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1113.506600][ T5967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.573540][T24584] netlink: 'syz.1.6338': attribute type 11 has an invalid length. [ 1113.581567][T24584] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6338'. [ 1113.680850][T24581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.760999][ T5967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.005896][ T5967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.074808][T24570] chnl_net:caif_netlink_parms(): no params data found [ 1114.228211][T24612] FAULT_INJECTION: forcing a failure. [ 1114.228211][T24612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.299235][ T5967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.437602][T24612] CPU: 0 PID: 24612 Comm: syz.1.6345 Not tainted syzkaller #0 [ 1114.445172][T24612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1114.455275][T24612] Call Trace: [ 1114.458584][T24612] [ 1114.461554][T24612] dump_stack_lvl+0x188/0x24e [ 1114.466357][T24612] ? show_regs_print_info+0x12/0x12 [ 1114.471606][T24612] ? load_image+0x410/0x410 [ 1114.476167][T24612] ? __lock_acquire+0x7c40/0x7c40 [ 1114.481243][T24612] should_fail_ex+0x390/0x4c0 [ 1114.485986][T24612] _copy_to_user+0x2c/0x130 [ 1114.490543][T24612] bpf_verifier_vlog+0x172/0x3a0 [ 1114.495550][T24612] __btf_verifier_log+0xdf/0x130 [ 1114.500553][T24612] ? btf_check_sec_info+0x350/0x350 [ 1114.505816][T24612] ? btf_parse_hdr+0x1dd/0x7d0 [ 1114.510630][T24612] btf_parse_hdr+0x42b/0x7d0 [ 1114.515270][T24612] btf_new_fd+0x367/0x760 [ 1114.519656][T24612] __sys_bpf+0x612/0x780 [ 1114.523974][T24612] ? bpf_link_show_fdinfo+0x380/0x380 [ 1114.529415][T24612] ? lock_chain_count+0x20/0x20 [ 1114.534332][T24612] __x64_sys_bpf+0x78/0x90 [ 1114.538826][T24612] do_syscall_64+0x4c/0xa0 [ 1114.543290][T24612] ? clear_bhb_loop+0x60/0xb0 [ 1114.548028][T24612] ? clear_bhb_loop+0x60/0xb0 [ 1114.552760][T24612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1114.558715][T24612] RIP: 0033:0x7f5af8f9e159 [ 1114.563178][T24612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.582833][T24612] RSP: 002b:00007f5af9e4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1114.591299][T24612] RAX: ffffffffffffffda RBX: 00007f5af9225fa0 RCX: 00007f5af8f9e159 [ 1114.599328][T24612] RDX: 0000000000000028 RSI: 0000200000000a40 RDI: 0000000000000012 [ 1114.607440][T24612] RBP: 00007f5af9e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.615483][T24612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1114.623512][T24612] R13: 00007f5af9226038 R14: 00007f5af9225fa0 R15: 00007ffe0355ea78 [ 1114.631551][T24612] [ 1114.721871][T22931] Bluetooth: hci1: command 0x0409 tx timeout [ 1114.873591][T24570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.880846][T24570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.899333][T24570] device bridge_slave_0 entered promiscuous mode [ 1115.034015][T24570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.041188][T24570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.093009][T24570] device bridge_slave_1 entered promiscuous mode [ 1115.102231][ T5967] device .*! left promiscuous mode [ 1115.229161][T24632] netlink: 'syz.3.6350': attribute type 11 has an invalid length. [ 1115.244773][T24570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.285411][T24632] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1115.334778][T24634] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6349'. [ 1115.349951][T24631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.844616][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.851019][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.192282][ T5967] device ip6gretap0 left promiscuous mode [ 1116.198187][ T5967] : port 1(ip6gretap0) entered disabled state [ 1116.228923][T24570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.271520][T24660] netlink: 'syz.3.6355': attribute type 39 has an invalid length. [ 1116.802547][T22931] Bluetooth: hci1: command 0x041b tx timeout [ 1116.820493][T24570] team0: Port device team_slave_0 added [ 1117.069737][T24570] team0: Port device team_slave_1 added [ 1117.369148][T24570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.384819][T24686] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1117.403292][T24570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.501612][T24570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.751189][T24570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.767844][T24570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.919507][T24570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.407775][T24694] netlink: 'syz.1.6363': attribute type 11 has an invalid length. [ 1118.475429][T24694] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6363'. [ 1118.541625][T24693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.569914][T24570] device hsr_slave_0 entered promiscuous mode [ 1118.620561][T24570] device hsr_slave_1 entered promiscuous mode [ 1118.697848][T24570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1118.723468][T24570] Cannot create hsr debugfs directory [ 1118.881930][T22931] Bluetooth: hci1: command 0x040f tx timeout [ 1118.929688][T24703] netlink: 'syz.3.6366': attribute type 10 has an invalid length. [ 1118.937954][T24703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6366'. [ 1118.967112][T24703] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1119.128469][T24708] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.6369'. [ 1119.431572][ T5967] team0: Port device wlan1 removed [ 1120.347329][T24739] netlink: 'syz.1.6376': attribute type 11 has an invalid length. [ 1120.355480][T24739] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6376'. [ 1120.435681][T24738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.962503][T22931] Bluetooth: hci1: command 0x0419 tx timeout [ 1120.973053][T24570] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1121.042813][T24570] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1121.109511][T24570] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1121.747738][T24765] netlink: 'syz.1.6382': attribute type 1 has an invalid length. [ 1121.787864][T24570] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1122.148068][ T5967] device hsr_slave_0 left promiscuous mode [ 1122.171022][ T5967] device hsr_slave_1 left promiscuous mode [ 1122.190176][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1122.201908][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.227531][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1122.250282][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.305985][ T5967] device veth0_to_bond left promiscuous mode [ 1122.325281][ T5967] bridge0: port 3(veth0_to_bond) entered disabled state [ 1122.365755][ T5967] device bridge_slave_1 left promiscuous mode [ 1122.379786][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.420683][ T5967] device bridge_slave_0 left promiscuous mode [ 1122.442024][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.539732][ T5967] device veth0_macvtap left promiscuous mode [ 1122.661872][T24789] netlink: 'syz.1.6388': attribute type 11 has an invalid length. [ 1122.680176][T24789] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6388'. [ 1122.750448][T24788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1123.825409][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 1123.968055][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 1125.197546][T24570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.264032][T24570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.306717][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1125.331012][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1125.340946][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1125.357461][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1125.370901][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.378142][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.394189][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1125.437404][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1125.460236][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1125.490265][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.497634][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.548886][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1125.575503][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1126.232339][T24825] netlink: 'syz.2.6399': attribute type 11 has an invalid length. [ 1126.249067][T24815] netlink: 'syz.3.6396': attribute type 1 has an invalid length. [ 1126.257607][T24825] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6399'. [ 1126.272855][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1126.283296][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1126.294533][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1126.304187][T24824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.325509][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1126.353068][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1126.420460][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1126.441164][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1126.490862][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1126.526029][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1126.549302][T24570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1126.730082][T24834] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6401'. [ 1128.031311][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1128.051160][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1128.108843][T24570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.327543][T24864] netlink: 'syz.3.6412': attribute type 11 has an invalid length. [ 1128.351417][T24865] delete_channel: no stack [ 1128.373961][T24865] delete_channel: no stack [ 1128.429840][T24864] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6412'. [ 1128.541103][T24873] netlink: 'syz.0.6410': attribute type 15 has an invalid length. [ 1128.552905][T24862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1128.647049][T24873] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1129.876080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1129.912819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1130.045716][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1130.060817][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1130.098442][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1130.136704][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1130.180003][T24570] device veth0_vlan entered promiscuous mode [ 1130.206124][T24888] netlink: 'syz.0.6415': attribute type 1 has an invalid length. [ 1130.252631][T24890] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6416'. [ 1130.310333][T24570] device veth1_vlan entered promiscuous mode [ 1130.406947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1130.425861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1130.444788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1130.478929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1130.540824][T24570] device veth0_macvtap entered promiscuous mode [ 1130.667537][T24570] device veth1_macvtap entered promiscuous mode [ 1130.805361][T24570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.898299][T24570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.932706][T24570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.975793][T24570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.023623][T24570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.056412][T24570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.154109][T24570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.965923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1131.974571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1131.994573][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1132.030162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1132.054829][T24902] netlink: 'syz.0.6421': attribute type 2 has an invalid length. [ 1132.088066][T24902] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6421'. [ 1132.234435][T24908] netlink: 'syz.3.6424': attribute type 11 has an invalid length. [ 1132.243888][T24570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.264774][T24570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.274906][T24908] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6424'. [ 1132.291914][T24570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.311956][T24570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.333934][T24907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1132.351779][T24570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.391796][T24570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.431902][T24570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.507517][T24911] netlink: 'syz.1.6425': attribute type 3 has an invalid length. [ 1132.523305][T24911] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6425'. [ 1132.562097][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1132.571128][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1132.632905][T24570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.658618][T24570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.701920][T24570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.731378][T24570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.111422][T11280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.152507][T11280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.245107][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.263844][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1133.268752][T24924] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1133.317805][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.352999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1133.414499][T24928] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6428'. [ 1133.502104][T24928] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.6428'. [ 1133.559169][T24937] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6429'. [ 1133.629520][T24936] netlink: 'syz.2.6428': attribute type 10 has an invalid length. [ 1133.665979][T24936] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.707711][T24936] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.743180][T24936] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.781927][T24936] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.844484][T24936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.886490][T24936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.918035][T24936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.950993][T24936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.086965][T24936] team0: Port device geneve1 added [ 1134.638241][T24956] netlink: 'syz.1.6436': attribute type 11 has an invalid length. [ 1134.703945][T24956] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6436'. [ 1134.806333][T24953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.879473][T13428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1135.891669][T13428] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1135.907916][T13428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1135.916315][T13428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1135.926308][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1135.933818][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1136.364856][T24969] chnl_net:caif_netlink_parms(): no params data found [ 1136.625977][T24969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.650926][T24969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.670130][T24969] device bridge_slave_0 entered promiscuous mode [ 1136.680382][T24969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.688097][T24969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.696936][T24969] device bridge_slave_1 entered promiscuous mode [ 1136.732424][T24969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.758161][T24969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.829828][T24969] team0: Port device team_slave_0 added [ 1136.847047][T24969] team0: Port device team_slave_1 added [ 1136.873978][T24969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.881005][T24969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.910039][T24969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.934742][T24969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.952802][T24969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.981106][T24969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.034938][T24985] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6443'. [ 1138.001974][T22931] Bluetooth: hci0: command 0x0409 tx timeout [ 1138.157904][T24969] device hsr_slave_0 entered promiscuous mode [ 1138.180457][T24969] device hsr_slave_1 entered promiscuous mode [ 1138.217249][T24969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1138.231283][T24969] Cannot create hsr debugfs directory [ 1138.679882][T24969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.869436][T25001] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 1138.877459][T25001] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6448'. [ 1138.933132][T25000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.659567][T24969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.845589][T24969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.947152][T25018] netlink: 'syz.4.6455': attribute type 33 has an invalid length. [ 1139.971797][T25018] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6455'. [ 1140.082000][T22931] Bluetooth: hci0: command 0x041b tx timeout [ 1140.118222][T24969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.274206][T25030] netlink: 'syz.1.6458': attribute type 2 has an invalid length. [ 1140.317245][T25030] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1140.510619][T25037] netlink: 'syz.4.6461': attribute type 11 has an invalid length. [ 1140.540684][T25037] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6461'. [ 1140.614725][T24969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1140.631548][T25036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1140.671856][T24969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1140.711951][T24969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1140.771100][T24969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1141.023584][T24969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.089850][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1141.140554][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1141.197488][T24969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.248176][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1141.274376][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1141.316618][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.324028][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.374542][ T46] tipc: Left network mode [ 1141.379436][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1141.397106][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1141.417501][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1141.431442][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.438700][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.465374][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1141.492045][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1141.553213][ T46] bridge0: port 3(ip6gretap0) entered disabled state [ 1141.630593][ T46] device ip6gretap0 left promiscuous mode [ 1141.636591][ T46] bridge0: port 3(ip6gretap0) entered disabled state [ 1141.654418][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1141.666478][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1141.678336][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1141.689313][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1141.698872][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1141.707944][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1141.724449][T24969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1141.737819][T24969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1141.846176][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1141.880457][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1141.916022][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1142.162117][T22931] Bluetooth: hci0: command 0x040f tx timeout [ 1142.227153][T25073] netlink: 'syz.3.6472': attribute type 11 has an invalid length. [ 1142.235315][T25073] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6472'. [ 1142.372141][T25072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1144.241987][T22931] Bluetooth: hci0: command 0x0419 tx timeout [ 1145.107597][T25086] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6476'. [ 1145.387340][T25103] netlink: 'syz.4.6482': attribute type 11 has an invalid length. [ 1145.429224][T25103] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6482'. [ 1145.642205][T25102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.726264][T24969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.768163][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1145.789488][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1145.995865][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1146.034350][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1146.441736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1146.459386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1146.494158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1146.515759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1146.550929][T24969] device veth0_vlan entered promiscuous mode [ 1146.652120][T24969] device veth1_vlan entered promiscuous mode [ 1147.172048][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1147.181189][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1147.200666][T25123] netlink: 'syz.3.6489': attribute type 10 has an invalid length. [ 1147.216052][T25123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.223830][T25123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.233827][T25123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.246166][T25123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.300677][T25123] team0: Port device bridge0 added [ 1147.336032][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1147.349885][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1147.375105][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1147.405380][T24969] device veth0_macvtap entered promiscuous mode [ 1147.574525][T24969] device veth1_macvtap entered promiscuous mode [ 1147.651249][T25137] netlink: 'syz.4.6494': attribute type 10 has an invalid length. [ 1147.753405][T25137] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1147.852446][T25143] netlink: 'syz.0.6496': attribute type 11 has an invalid length. [ 1147.860604][T25143] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6496'. [ 1147.885820][ T46] device hsr_slave_0 left promiscuous mode [ 1147.961573][T25142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.982837][ T46] device hsr_slave_1 left promiscuous mode [ 1147.991604][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1148.001959][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.021127][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1148.037049][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.073253][ T46] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1148.080488][ T46] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1148.112524][ T46] device batadv0 left promiscuous mode [ 1148.134870][ T46] bridge0: port 4(batadv0) entered disabled state [ 1148.161930][ T46] device bridge_slave_1 left promiscuous mode [ 1148.168458][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.187509][ T46] device bridge_slave_0 left promiscuous mode [ 1148.194837][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.239639][ T46] device veth1_vlan left promiscuous mode [ 1148.252257][ T46] device veth0_vlan left promiscuous mode [ 1148.641867][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 1148.949718][ T46] team0 (unregistering): Port device geneve1 removed [ 1149.653024][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1150.118519][T25148] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.6498'. [ 1150.130348][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1150.144622][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1150.163440][T25163] netlink: 'syz.1.6504': attribute type 10 has an invalid length. [ 1150.179847][T25163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.187385][T25163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.243575][T25163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.250973][T25163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.259873][T25163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.267635][T25163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.292637][T25163] team0: Port device bridge0 added [ 1150.330536][T24969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.351442][T24969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.372040][T24969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.392848][T24969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.434494][T24969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.448119][T24969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.462837][T24969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.472432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1150.504101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1150.546547][T24969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.569169][T24969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.582625][T25173] netlink: 'syz.1.6508': attribute type 11 has an invalid length. [ 1150.584323][T24969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.590480][T25173] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6508'. [ 1150.610760][T24969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.640307][T24969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.669299][T24969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.682964][T24969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.691194][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1150.701015][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1150.713410][T24969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.729801][T24969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.743476][T24969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.755665][T24969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.768891][T25177] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6510'. [ 1150.813536][T25172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1150.968641][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.002255][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.043027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1151.147919][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.170233][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.239420][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1152.280014][T25216] netlink: 'syz.3.6522': attribute type 11 has an invalid length. [ 1152.316455][T25216] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6522'. [ 1152.526684][T25222] FAULT_INJECTION: forcing a failure. [ 1152.526684][T25222] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.551972][T25222] CPU: 1 PID: 25222 Comm: syz.1.6524 Not tainted syzkaller #0 [ 1152.559601][T25222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1152.569703][T25222] Call Trace: [ 1152.573001][T25222] [ 1152.575942][T25222] dump_stack_lvl+0x188/0x24e [ 1152.580647][T25222] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1152.586825][T25222] ? show_regs_print_info+0x12/0x12 [ 1152.592041][T25222] ? load_image+0x410/0x410 [ 1152.596587][T25222] should_fail_ex+0x390/0x4c0 [ 1152.601292][T25222] should_failslab+0x5/0x20 [ 1152.605838][T25222] slab_pre_alloc_hook+0x59/0x300 [ 1152.610899][T25222] ? kvmalloc_node+0x6c/0x180 [ 1152.615710][T25222] __kmem_cache_alloc_node+0x4f/0x270 [ 1152.621107][T25222] ? kvmalloc_node+0x6c/0x180 [ 1152.625808][T25222] __kmalloc_node+0xa2/0x240 [ 1152.630444][T25222] kvmalloc_node+0x6c/0x180 [ 1152.634962][T25222] bpf_test_run_xdp_live+0x1da/0x1a90 [ 1152.640394][T25222] ? 0xffffffffa00041c0 [ 1152.644566][T25222] ? text_poke_copy+0x7b/0x90 [ 1152.649320][T25222] ? 0xffffffffa00041c0 [ 1152.653491][T25222] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1152.659418][T25222] ? xdp_convert_md_to_buff+0x330/0x330 [ 1152.665005][T25222] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1152.671274][T25222] ? bpf_prog_change_xdp+0xe/0x30 [ 1152.676337][T25222] bpf_prog_test_run_xdp+0x757/0xf80 [ 1152.681680][T25222] ? __lock_acquire+0x7c40/0x7c40 [ 1152.686741][T25222] ? dev_put+0x80/0x80 [ 1152.690878][T25222] ? dev_put+0x80/0x80 [ 1152.694963][T25222] bpf_prog_test_run+0x31c/0x390 [ 1152.699936][T25222] __sys_bpf+0x62b/0x780 [ 1152.704209][T25222] ? bpf_link_show_fdinfo+0x380/0x380 [ 1152.709616][T25222] ? lock_chain_count+0x20/0x20 [ 1152.714499][T25222] __x64_sys_bpf+0x78/0x90 [ 1152.718937][T25222] do_syscall_64+0x4c/0xa0 [ 1152.723385][T25222] ? clear_bhb_loop+0x60/0xb0 [ 1152.728109][T25222] ? clear_bhb_loop+0x60/0xb0 [ 1152.732811][T25222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1152.738750][T25222] RIP: 0033:0x7f5af8f9e159 [ 1152.743183][T25222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.762810][T25222] RSP: 002b:00007f5af9e4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1152.771260][T25222] RAX: ffffffffffffffda RBX: 00007f5af9225fa0 RCX: 00007f5af8f9e159 [ 1152.779252][T25222] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1152.787241][T25222] RBP: 00007f5af9e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.795228][T25222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.803215][T25222] R13: 00007f5af9226038 R14: 00007f5af9225fa0 R15: 00007ffe0355ea78 [ 1152.811212][T25222] [ 1152.824555][T25215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.221836][ T4291] Bluetooth: hci5: unexpected subevent 0x0a length: 150 > 30 [ 1154.473492][T25253] netlink: 'syz.1.6537': attribute type 11 has an invalid length. [ 1154.497031][T25253] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6537'. [ 1154.709013][T25252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.067511][T22931] Bluetooth: hci5: unexpected event 0x2c length: 151 > 17 [ 1155.960937][T25293] netlink: 'syz.2.6553': attribute type 11 has an invalid length. [ 1156.047967][T25293] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6553'. [ 1156.294809][T25305] netlink: 'syz.3.6554': attribute type 1 has an invalid length. [ 1156.668648][T25292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1157.735520][T25316] tipc: Started in network mode [ 1157.740641][T25316] tipc: Node identity 9215a268, cluster identity 4711 [ 1157.782712][T25316] tipc: Node number set to 2450891368 [ 1157.996882][T25332] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1158.003501][T25332] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1158.857961][T25343] netlink: 'syz.2.6567': attribute type 11 has an invalid length. [ 1158.895624][T25343] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6567'. [ 1159.022999][T25348] netlink: 'syz.0.6569': attribute type 39 has an invalid length. [ 1159.129103][T25342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1159.985644][T25375] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.6578'. [ 1160.647608][T25388] netlink: 'syz.1.6583': attribute type 11 has an invalid length. [ 1160.657077][T25388] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6583'. [ 1160.780914][T25385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.494660][T25423] netlink: 'syz.0.6597': attribute type 11 has an invalid length. [ 1161.533681][T25423] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6597'. [ 1161.556425][T25424] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6596'. [ 1161.948078][T25422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1162.186850][T25432] device sit0 entered promiscuous mode [ 1162.539599][T25421] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6596'. [ 1162.798498][T25449] netlink: 'syz.1.6603': attribute type 21 has an invalid length. [ 1162.807185][T25449] netlink: 'syz.1.6603': attribute type 1 has an invalid length. [ 1162.843733][T25454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6601'. [ 1163.214211][T25468] delete_channel: no stack [ 1163.255124][T25474] netlink: 'syz.4.6610': attribute type 11 has an invalid length. [ 1163.288660][T25474] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6610'. [ 1163.476259][T25470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1164.582080][T25508] tap0: tun_chr_ioctl cmd 1074025677 [ 1164.607161][T25508] tap0: linktype set to 6 [ 1164.664452][T25504] netlink: 'syz.0.6618': attribute type 21 has an invalid length. [ 1164.833411][T25516] netlink: 'syz.2.6621': attribute type 21 has an invalid length. [ 1164.841310][T25516] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6621'. [ 1165.013318][T25524] netlink: 'syz.4.6626': attribute type 11 has an invalid length. [ 1165.042863][T25524] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6626'. [ 1165.134376][T25521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1166.837194][T25564] netlink: 'syz.1.6642': attribute type 1 has an invalid length. [ 1168.748826][T25614] netlink: 'syz.4.6655': attribute type 11 has an invalid length. [ 1168.758956][T25614] netlink: 'syz.4.6655': attribute type 2 has an invalid length. [ 1168.779813][T25614] netlink: 126196 bytes leftover after parsing attributes in process `syz.4.6655'. [ 1168.801302][T25615] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6655'. [ 1171.598516][T25621] netlink: 'syz.2.6657': attribute type 21 has an invalid length. [ 1171.674427][T25621] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6657'. [ 1171.734234][T25626] netlink: 'syz.4.6661': attribute type 33 has an invalid length. [ 1171.782109][T25626] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1172.313000][T25643] netlink: 'syz.1.6668': attribute type 10 has an invalid length. [ 1173.236455][T25656] netlink: 'syz.2.6671': attribute type 10 has an invalid length. [ 1173.273610][T25656] device syz_tun entered promiscuous mode [ 1173.416273][T25667] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6672'. [ 1173.484495][T25667] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1174.042941][T25687] netlink: 'syz.0.6679': attribute type 1 has an invalid length. [ 1175.567653][T25712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.575015][T25712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.781592][T25718] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1176.699168][T25746] netlink: 'syz.4.6702': attribute type 1 has an invalid length. [ 1176.822034][T25747] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.6701'. [ 1176.831487][T25747] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.6701'. [ 1176.902098][T25747] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.6701'. [ 1177.102572][T25758] FAULT_INJECTION: forcing a failure. [ 1177.102572][T25758] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.154015][T25758] CPU: 1 PID: 25758 Comm: syz.1.6706 Not tainted syzkaller #0 [ 1177.161557][T25758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.171630][T25758] Call Trace: [ 1177.174945][T25758] [ 1177.177890][T25758] dump_stack_lvl+0x188/0x24e [ 1177.182594][T25758] ? show_regs_print_info+0x12/0x12 [ 1177.187815][T25758] ? load_image+0x410/0x410 [ 1177.192344][T25758] ? verify_lock_unused+0x140/0x140 [ 1177.197590][T25758] should_fail_ex+0x390/0x4c0 [ 1177.202300][T25758] should_failslab+0x5/0x20 [ 1177.206844][T25758] slab_pre_alloc_hook+0x59/0x300 [ 1177.211898][T25758] kmem_cache_alloc+0x56/0x2f0 [ 1177.216679][T25758] ? skb_clone+0x1e7/0x370 [ 1177.221128][T25758] skb_clone+0x1e7/0x370 [ 1177.225395][T25758] __netlink_deliver_tap+0x3e4/0x7e0 [ 1177.230705][T25758] ? netlink_deliver_tap+0x2e/0x1b0 [ 1177.235942][T25758] netlink_deliver_tap+0x19c/0x1b0 [ 1177.241080][T25758] netlink_unicast+0x777/0x920 [ 1177.245880][T25758] netlink_sendmsg+0x8ad/0xbd0 [ 1177.250668][T25758] ? netlink_getsockopt+0x550/0x550 [ 1177.255891][T25758] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1177.261471][T25758] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1177.266777][T25758] ? security_socket_sendmsg+0x7c/0xa0 [ 1177.272264][T25758] ? netlink_getsockopt+0x550/0x550 [ 1177.277501][T25758] ____sys_sendmsg+0x5ed/0x9a0 [ 1177.282294][T25758] ? __sys_sendmsg_sock+0x30/0x30 [ 1177.287335][T25758] ? __import_iovec+0x306/0x510 [ 1177.292246][T25758] ? import_iovec+0x6f/0xa0 [ 1177.296787][T25758] ___sys_sendmsg+0x2a2/0x360 [ 1177.301487][T25758] ? __sys_sendmsg+0x2a0/0x2a0 [ 1177.306284][T25758] ? ktime_get+0x7b/0x270 [ 1177.310647][T25758] __se_sys_sendmsg+0x1c3/0x2b0 [ 1177.315514][T25758] ? perf_trace_preemptirq_template+0x268/0x320 [ 1177.321803][T25758] ? __x64_sys_sendmsg+0x80/0x80 [ 1177.326857][T25758] ? lockdep_hardirqs_on+0x94/0x140 [ 1177.332117][T25758] do_syscall_64+0x4c/0xa0 [ 1177.336565][T25758] ? clear_bhb_loop+0x60/0xb0 [ 1177.341275][T25758] ? clear_bhb_loop+0x60/0xb0 [ 1177.345976][T25758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1177.351899][T25758] RIP: 0033:0x7f5af8f9e159 [ 1177.356332][T25758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.375978][T25758] RSP: 002b:00007f5af9e4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1177.384422][T25758] RAX: ffffffffffffffda RBX: 00007f5af9225fa0 RCX: 00007f5af8f9e159 [ 1177.392441][T25758] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1177.400459][T25758] RBP: 00007f5af9e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.408462][T25758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.416457][T25758] R13: 00007f5af9226038 R14: 00007f5af9225fa0 R15: 00007ffe0355ea78 [ 1177.424464][T25758] [ 1177.442505][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.448866][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.548814][T25761] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6707'. [ 1177.608696][T25758] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 1177.659347][T25766] netlink: 'syz.2.6709': attribute type 2 has an invalid length. [ 1177.675476][T25766] netlink: 'syz.2.6709': attribute type 1 has an invalid length. [ 1177.684679][T25766] netlink: 'syz.2.6709': attribute type 4 has an invalid length. [ 1177.727997][T25766] netlink: 'syz.2.6709': attribute type 6 has an invalid length. [ 1177.745467][T25766] netlink: 'syz.2.6709': attribute type 7 has an invalid length. [ 1177.792391][T25766] netlink: 'syz.2.6709': attribute type 5 has an invalid length. [ 1177.828755][T25766] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1178.194646][T25778] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6714'. [ 1178.235215][T25780] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.6715'. [ 1178.636639][T25791] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6717'. [ 1178.718125][T25791] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1179.478166][T25813] FAULT_INJECTION: forcing a failure. [ 1179.478166][T25813] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.510637][T25813] CPU: 1 PID: 25813 Comm: syz.1.6726 Not tainted syzkaller #0 [ 1179.518173][T25813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1179.528274][T25813] Call Trace: [ 1179.531596][T25813] [ 1179.534564][T25813] dump_stack_lvl+0x188/0x24e [ 1179.539287][T25813] ? show_regs_print_info+0x12/0x12 [ 1179.544523][T25813] ? load_image+0x410/0x410 [ 1179.549080][T25813] ? __might_sleep+0xd0/0xd0 [ 1179.553710][T25813] ? __lock_acquire+0x7c40/0x7c40 [ 1179.558783][T25813] should_fail_ex+0x390/0x4c0 [ 1179.563520][T25813] should_failslab+0x5/0x20 [ 1179.568067][T25813] slab_pre_alloc_hook+0x59/0x300 [ 1179.573155][T25813] ? kvmalloc_node+0x6c/0x180 [ 1179.577888][T25813] __kmem_cache_alloc_node+0x4f/0x270 [ 1179.583303][T25813] ? kvmalloc_node+0x6c/0x180 [ 1179.588023][T25813] __kmalloc_node+0xa2/0x240 [ 1179.592683][T25813] kvmalloc_node+0x6c/0x180 [ 1179.597254][T25813] bpf_test_run_xdp_live+0x206/0x1a90 [ 1179.602675][T25813] ? 0xffffffffa00041c0 [ 1179.606866][T25813] ? text_poke_copy+0x7b/0x90 [ 1179.611590][T25813] ? 0xffffffffa00041c0 [ 1179.615835][T25813] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1179.621799][T25813] ? xdp_convert_md_to_buff+0x330/0x330 [ 1179.627416][T25813] ? rcu_is_watching+0x11/0xa0 [ 1179.632265][T25813] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1179.638452][T25813] ? lockdep_hardirqs_on+0x94/0x140 [ 1179.643704][T25813] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1179.649991][T25813] ? bpf_prog_test_run_xdp+0x733/0xf80 [ 1179.655554][T25813] bpf_prog_test_run_xdp+0x757/0xf80 [ 1179.660930][T25813] ? __lock_acquire+0x7c40/0x7c40 [ 1179.666026][T25813] ? dev_put+0x80/0x80 [ 1179.670166][T25813] ? dev_put+0x80/0x80 [ 1179.674291][T25813] bpf_prog_test_run+0x31c/0x390 [ 1179.679290][T25813] __sys_bpf+0x62b/0x780 [ 1179.683578][T25813] ? bpf_link_show_fdinfo+0x380/0x380 [ 1179.689008][T25813] ? lock_chain_count+0x20/0x20 [ 1179.693901][T25813] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1179.699962][T25813] __x64_sys_bpf+0x78/0x90 [ 1179.704430][T25813] do_syscall_64+0x4c/0xa0 [ 1179.708895][T25813] ? clear_bhb_loop+0x60/0xb0 [ 1179.713613][T25813] ? clear_bhb_loop+0x60/0xb0 [ 1179.718326][T25813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.724263][T25813] RIP: 0033:0x7f5af8f9e159 [ 1179.728710][T25813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.748381][T25813] RSP: 002b:00007f5af9e4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1179.756844][T25813] RAX: ffffffffffffffda RBX: 00007f5af9225fa0 RCX: 00007f5af8f9e159 [ 1179.764860][T25813] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1179.772864][T25813] RBP: 00007f5af9e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.780867][T25813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.788867][T25813] R13: 00007f5af9226038 R14: 00007f5af9225fa0 R15: 00007ffe0355ea78 [ 1179.796895][T25813] [ 1180.175673][T25825] nr0: port 1(hsr0) entered blocking state [ 1180.208947][T25825] nr0: port 1(hsr0) entered disabled state [ 1180.258433][T25825] device hsr0 entered promiscuous mode [ 1180.348039][T25826] nr0: port 1(hsr0) entered blocking state [ 1180.354132][T25826] nr0: port 1(hsr0) entered forwarding state [ 1181.016796][T25838] netlink: 2050 bytes leftover after parsing attributes in process `syz.3.6733'. [ 1181.361284][T25855] netlink: 'syz.1.6739': attribute type 1 has an invalid length. [ 1183.525439][T25909] netlink: 'syz.4.6759': attribute type 2 has an invalid length. [ 1183.585400][T25909] netlink: 'syz.4.6759': attribute type 1 has an invalid length. [ 1183.634336][T25909] netlink: 'syz.4.6759': attribute type 4 has an invalid length. [ 1183.691997][T25909] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1184.481829][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 1184.635339][T25920] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6763'. [ 1185.238999][T25930] netlink: 'syz.2.6768': attribute type 23 has an invalid length. [ 1185.312651][T25930] netlink: 'syz.2.6768': attribute type 23 has an invalid length. [ 1185.359432][T25930] netlink: 'syz.2.6768': attribute type 23 has an invalid length. [ 1185.444835][T25951] netlink: 'syz.4.6773': attribute type 10 has an invalid length. [ 1185.666091][T25951] team0: Port device geneve1 added [ 1185.773223][T25930] netlink: 'syz.2.6768': attribute type 23 has an invalid length. [ 1186.255461][T25967] device wlan1 entered promiscuous mode [ 1186.282516][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1186.570745][T25967] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1186.833309][T25979] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6780'. [ 1187.750454][T26001] netlink: 'syz.2.6788': attribute type 2 has an invalid length. [ 1187.779497][T26007] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6791'. [ 1187.844030][T26001] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6788'. [ 1187.896028][T26008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1187.904860][T26008] IPv6: NLM_F_CREATE should be set when creating new route [ 1187.913471][T26008] IPv6: NLM_F_CREATE should be set when creating new route [ 1187.922872][T26008] IPv6: NLM_F_CREATE should be set when creating new route [ 1188.018271][T26015] netlink: 'syz.3.6790': attribute type 2 has an invalid length. [ 1188.091120][T26015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1188.330467][T26017] netlink: 'syz.4.6793': attribute type 39 has an invalid length. [ 1188.857755][T26032] netlink: 'syz.4.6798': attribute type 21 has an invalid length. [ 1188.911239][T26032] netlink: 'syz.4.6798': attribute type 1 has an invalid length. [ 1188.925397][T26030] netlink: 'syz.2.6797': attribute type 21 has an invalid length. [ 1188.945267][T26030] netlink: 'syz.2.6797': attribute type 6 has an invalid length. [ 1188.960139][T26030] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6797'. [ 1189.009215][T26024] netlink: 'syz.1.6795': attribute type 10 has an invalid length. [ 1189.494715][T26041] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.6801'. [ 1189.507063][T26041] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.6801'. [ 1189.543064][T26041] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.6801'. [ 1190.534136][T26062] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6810'. [ 1190.615843][T26062] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1190.717234][T26067] device syzkaller0 entered promiscuous mode [ 1191.219110][T26085] netlink: 'syz.2.6821': attribute type 2 has an invalid length. [ 1192.020137][T26109] netlink: 'syz.4.6827': attribute type 2 has an invalid length. [ 1192.151888][T26109] __nla_validate_parse: 1 callbacks suppressed [ 1192.151905][T26109] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6827'. [ 1193.658346][T26131] validate_nla: 2 callbacks suppressed [ 1193.658378][T26131] netlink: 'syz.4.6835': attribute type 10 has an invalid length. [ 1193.890468][T26131] team0: Device wg1 is of different type [ 1195.138402][T26171] netlink: 'syz.3.6846': attribute type 2 has an invalid length. [ 1195.168618][T26171] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1195.716780][T26189] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1195.944513][T26189] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1196.051434][T26189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1196.075731][T26196] netlink: 'syz.1.6856': attribute type 17 has an invalid length. [ 1196.106765][T26196] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6856'. [ 1196.135822][T26191] netlink: 'syz.0.6853': attribute type 10 has an invalid length. [ 1196.305207][T26191] team0: Device wg1 is of different type [ 1196.463848][T26208] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1196.519397][T26208] : renamed from caif0 [ 1197.111486][T26226] netlink: 'syz.1.6868': attribute type 3 has an invalid length. [ 1197.163092][T26226] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6868'. [ 1197.325968][T26238] netlink: 'syz.0.6872': attribute type 4 has an invalid length. [ 1197.348833][T26238] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.6872'. [ 1197.729939][T26247] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.6876'. [ 1197.751344][T26245] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.6876'. [ 1197.783875][T26247] netlink: zone id is out of range [ 1197.806811][T26247] netlink: zone id is out of range [ 1197.862863][T26247] netlink: zone id is out of range [ 1197.868263][T26247] netlink: zone id is out of range [ 1197.881921][T26247] netlink: get zone limit has 8 unknown bytes [ 1197.929841][T26256] netlink: 'syz.3.6874': attribute type 10 has an invalid length. [ 1197.940081][T26258] netlink: 'syz.2.6877': attribute type 2 has an invalid length. [ 1197.989203][T26258] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.6877'. [ 1198.025205][T26256] team0: Device wg1 is of different type [ 1198.327675][T26264] netlink: 'syz.4.6881': attribute type 10 has an invalid length. [ 1198.409264][T26265] netlink: 'syz.4.6881': attribute type 3 has an invalid length. [ 1198.550383][T26265] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6881'. [ 1199.524805][T26281] ¥: port 1(team0) entered blocking state [ 1199.537782][T26281] ¥: port 1(team0) entered disabled state [ 1199.547984][T26281] device team0 entered promiscuous mode [ 1199.553985][T26281] device team_slave_0 entered promiscuous mode [ 1199.561540][T26281] device team_slave_1 entered promiscuous mode [ 1199.569357][T26281] device bridge0 entered promiscuous mode [ 1199.607574][T26282] netlink: 'syz.2.6888': attribute type 39 has an invalid length. [ 1199.876214][T26282] device hsr_slave_1 left promiscuous mode [ 1199.972492][T26299] netlink: 'syz.0.6892': attribute type 1 has an invalid length. [ 1199.983212][T26301] netlink: 'syz.1.6893': attribute type 33 has an invalid length. [ 1199.992322][T26301] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6893'. [ 1200.286865][T26314] FAULT_INJECTION: forcing a failure. [ 1200.286865][T26314] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.344077][T26314] CPU: 0 PID: 26314 Comm: syz.1.6898 Not tainted syzkaller #0 [ 1200.351625][T26314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1200.355599][T26310] device syzkaller0 entered promiscuous mode [ 1200.361697][T26314] Call Trace: [ 1200.361765][T26314] [ 1200.361775][T26314] dump_stack_lvl+0x188/0x24e [ 1200.361806][T26314] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1200.376409][T26312] netlink: 'syz.2.6895': attribute type 10 has an invalid length. [ 1200.378741][T26314] ? show_regs_print_info+0x12/0x12 [ 1200.378774][T26314] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1200.378817][T26314] should_fail_ex+0x390/0x4c0 [ 1200.378855][T26314] should_failslab+0x5/0x20 [ 1200.378877][T26314] slab_pre_alloc_hook+0x59/0x300 [ 1200.378906][T26314] ? sock_kmalloc+0x92/0xf0 [ 1200.423034][T26314] __kmem_cache_alloc_node+0x4f/0x270 [ 1200.428466][T26314] ? sock_kmalloc+0x92/0xf0 [ 1200.433011][T26314] __kmalloc+0xa3/0x240 [ 1200.437201][T26314] sock_kmalloc+0x92/0xf0 [ 1200.441563][T26314] do_ipv6_setsockopt+0x1c89/0x3c30 [ 1200.446800][T26314] ? sk_dst_reset+0xa0/0xa0 [ 1200.451330][T26314] ? perf_tp_event+0xa8e/0xc10 [ 1200.456124][T26314] ? __lock_acquire+0x1465/0x7c40 [ 1200.461171][T26314] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1200.467002][T26314] ? debug_objects_fill_pool+0x87/0x780 [ 1200.472608][T26314] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1200.478428][T26314] ? aa_label_sk_perm+0x501/0x6b0 [ 1200.483468][T26314] ? verify_lock_unused+0x140/0x140 [ 1200.488695][T26314] ? aa_sk_perm+0x950/0x950 [ 1200.493233][T26314] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1200.499259][T26314] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1200.505440][T26314] ? aa_af_perm+0x340/0x340 [ 1200.509964][T26314] ? __sanitizer_cov_trace_pc+0x58/0x60 [ 1200.515617][T26314] ? aa_sock_opt_perm+0x74/0x100 [ 1200.520588][T26314] ipv6_setsockopt+0x55/0x190 [ 1200.525335][T26314] ? sock_common_recvmsg+0x190/0x190 [ 1200.530660][T26314] __sys_setsockopt+0x2bf/0x3d0 [ 1200.535532][T26314] __x64_sys_setsockopt+0xb1/0xc0 [ 1200.540579][T26314] do_syscall_64+0x4c/0xa0 [ 1200.545016][T26314] ? clear_bhb_loop+0x60/0xb0 [ 1200.549713][T26314] ? clear_bhb_loop+0x60/0xb0 [ 1200.554416][T26314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1200.560338][T26314] RIP: 0033:0x7f5af8f9e159 [ 1200.564784][T26314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.584410][T26314] RSP: 002b:00007f5af9e4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1200.592843][T26314] RAX: ffffffffffffffda RBX: 00007f5af9225fa0 RCX: 00007f5af8f9e159 [ 1200.600836][T26314] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000007 [ 1200.608826][T26314] RBP: 00007f5af9e4b090 R08: 0000000000000004 R09: 0000000000000000 [ 1200.616861][T26314] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 1200.624857][T26314] R13: 00007f5af9226038 R14: 00007f5af9225fa0 R15: 00007ffe0355ea78 [ 1200.632872][T26314] [ 1200.730429][T26322] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6900'. [ 1200.799909][T26312] team0: Device wg1 is of different type [ 1201.104879][T26320] netlink: 'syz.1.6898': attribute type 1 has an invalid length. [ 1201.142446][T26317] netlink: 'syz.4.6899': attribute type 1 has an invalid length. [ 1203.110220][T26332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6902'. [ 1203.123208][T26332] : renamed from caif0 [ 1203.128625][T26338] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.6903'. [ 1203.613243][T26358] netlink: 'syz.2.6910': attribute type 10 has an invalid length. [ 1204.485360][T26378] netlink: 'syz.0.6914': attribute type 9 has an invalid length. [ 1204.501800][T26378] netlink: 668 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1204.526401][T26378] netlink: 'syz.0.6914': attribute type 3 has an invalid length. [ 1204.545000][T26378] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1205.388505][T26387] netlink: 'syz.4.6917': attribute type 17 has an invalid length. [ 1205.430531][T26387] netlink: 'syz.4.6917': attribute type 16 has an invalid length. [ 1205.449522][T26387] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6917'. [ 1205.537435][T26391] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1206.513226][T26414] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6923'. [ 1206.544980][T26418] netlink: 'syz.1.6924': attribute type 11 has an invalid length. [ 1206.560892][T26418] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6924'. [ 1206.733048][T26417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.846924][T26414] device hsr_slave_0 left promiscuous mode [ 1206.922725][T26414] device hsr_slave_1 left promiscuous mode [ 1207.209177][T26428] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6925'. [ 1207.229124][T26429] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6925'. [ 1208.143013][T26446] device syzkaller0 entered promiscuous mode [ 1208.916254][T26474] __nla_validate_parse: 1 callbacks suppressed [ 1208.916317][T26474] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.6938'. [ 1210.690453][T26471] FAULT_INJECTION: forcing a failure. [ 1210.690453][T26471] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.711782][T26471] CPU: 0 PID: 26471 Comm: syz.3.6937 Not tainted syzkaller #0 [ 1210.719298][T26471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1210.729401][T26471] Call Trace: [ 1210.732711][T26471] [ 1210.735676][T26471] dump_stack_lvl+0x188/0x24e [ 1210.740436][T26471] ? show_regs_print_info+0x12/0x12 [ 1210.745675][T26471] ? load_image+0x410/0x410 [ 1210.750225][T26471] ? __lock_acquire+0x7c40/0x7c40 [ 1210.755289][T26471] ? __rwlock_init+0x140/0x140 [ 1210.760091][T26471] should_fail_ex+0x390/0x4c0 [ 1210.764810][T26471] should_failslab+0x5/0x20 [ 1210.769344][T26471] slab_pre_alloc_hook+0x59/0x300 [ 1210.774412][T26471] ? __mutex_lock+0x3ba/0xae0 [ 1210.779150][T26471] ? mpls_rtm_newroute+0x68/0xb50 [ 1210.784376][T26471] __kmem_cache_alloc_node+0x4f/0x270 [ 1210.789771][T26471] ? rtnetlink_rcv_msg+0x80d/0xfb0 [ 1210.794907][T26471] ? mpls_rtm_newroute+0x68/0xb50 [ 1210.799988][T26471] kmalloc_trace+0x26/0xe0 [ 1210.804424][T26471] mpls_rtm_newroute+0x68/0xb50 [ 1210.809306][T26471] ? nla_get_labels+0x750/0x750 [ 1210.814182][T26471] rtnetlink_rcv_msg+0x863/0xfb0 [ 1210.819185][T26471] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1210.824316][T26471] ? rtnetlink_bind+0x80/0x80 [ 1210.829011][T26471] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1210.835009][T26471] ? __lock_acquire+0x7c40/0x7c40 [ 1210.840082][T26471] ? lock_chain_count+0x20/0x20 [ 1210.844956][T26471] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1210.850878][T26471] ? lockdep_hardirqs_on+0x94/0x140 [ 1210.856095][T26471] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1210.862008][T26471] ? _raw_spin_unlock+0x40/0x40 [ 1210.866885][T26471] ? __dev_queue_xmit+0x1d84/0x3810 [ 1210.872118][T26471] ? rcu_preempt_deferred_qs_irqrestore+0x827/0xbd0 [ 1210.878770][T26471] ? rcu_read_unlock_special+0x510/0x510 [ 1210.884435][T26471] ? rcu_read_unlock_special+0xf9/0x510 [ 1210.889998][T26471] ? rcu_read_unlock_special+0xf9/0x510 [ 1210.895570][T26471] netlink_rcv_skb+0x1ef/0x440 [ 1210.900350][T26471] ? rtnetlink_bind+0x80/0x80 [ 1210.905059][T26471] ? netlink_ack+0x1160/0x1160 [ 1210.909842][T26471] ? __rcu_read_unlock+0x78/0xd0 [ 1210.914798][T26471] ? netlink_deliver_tap+0x2e/0x1b0 [ 1210.920016][T26471] netlink_unicast+0x7ad/0x920 [ 1210.924808][T26471] netlink_sendmsg+0x8ad/0xbd0 [ 1210.929609][T26471] ? netlink_getsockopt+0x550/0x550 [ 1210.934832][T26471] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1210.940406][T26471] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1210.945706][T26471] ? security_socket_sendmsg+0x7c/0xa0 [ 1210.951182][T26471] ? netlink_getsockopt+0x550/0x550 [ 1210.956424][T26471] ____sys_sendmsg+0x5ed/0x9a0 [ 1210.961223][T26471] ? __sys_sendmsg_sock+0x30/0x30 [ 1210.966266][T26471] ? __import_iovec+0x306/0x510 [ 1210.971150][T26471] ? import_iovec+0x6f/0xa0 [ 1210.975674][T26471] ___sys_sendmsg+0x2a2/0x360 [ 1210.980369][T26471] ? __sys_sendmsg+0x2a0/0x2a0 [ 1210.985202][T26471] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1210.990957][T26471] __se_sys_sendmsg+0x1c3/0x2b0 [ 1210.995830][T26471] ? __x64_sys_sendmsg+0x80/0x80 [ 1211.000820][T26471] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1211.006775][T26471] do_syscall_64+0x4c/0xa0 [ 1211.011220][T26471] ? clear_bhb_loop+0x60/0xb0 [ 1211.015919][T26471] ? clear_bhb_loop+0x60/0xb0 [ 1211.020645][T26471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1211.026562][T26471] RIP: 0033:0x7fe911d9e159 [ 1211.031001][T26471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.050647][T26471] RSP: 002b:00007fe912ccb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.059137][T26471] RAX: ffffffffffffffda RBX: 00007fe912025fa0 RCX: 00007fe911d9e159 [ 1211.067125][T26471] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1211.075120][T26471] RBP: 00007fe912ccb090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.083119][T26471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.091124][T26471] R13: 00007fe912026038 R14: 00007fe912025fa0 R15: 00007ffde6993728 [ 1211.099122][T26471] [ 1211.117923][T26474] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1211.159423][T26482] ip6tnl0: mtu greater than device maximum [ 1211.166750][T26474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1211.203104][T26474] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1211.428858][T26490] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.6944'. [ 1211.491185][T26489] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.6944'. [ 1212.048548][T26509] netlink: 'syz.1.6950': attribute type 11 has an invalid length. [ 1212.103139][T26509] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1212.170636][T26506] netlink: 'syz.1.6950': attribute type 11 has an invalid length. [ 1212.189055][T26506] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1212.205644][T26518] netlink: 'syz.2.6952': attribute type 2 has an invalid length. [ 1212.283120][T26503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.415930][T26551] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6960'. [ 1215.436571][T26551] device hsr_slave_0 left promiscuous mode [ 1215.449970][T26551] device hsr_slave_1 left promiscuous mode [ 1216.469161][T26575] netlink: 'syz.3.6972': attribute type 7 has an invalid length. [ 1216.519153][T26579] netlink: 'syz.0.6970': attribute type 39 has an invalid length. [ 1218.384344][T26611] netlink: 'syz.3.6983': attribute type 6 has an invalid length. [ 1218.414918][T26611] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6983'. [ 1218.444716][T26614] netlink: 'syz.0.6985': attribute type 7 has an invalid length. [ 1218.543851][T26611] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6983'. [ 1218.571853][T26624] netlink: 'syz.3.6983': attribute type 2 has an invalid length. [ 1218.586892][T26611] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1218.632067][T26624] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6983'. [ 1218.684570][T26611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1218.998864][T26638] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6991'. [ 1219.111922][T26638] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.6991'. [ 1219.853080][T26662] netlink: 'syz.1.6998': attribute type 11 has an invalid length. [ 1219.904903][T26662] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6998'. [ 1220.268875][T26675] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.7002'. [ 1220.322226][ T4291] Bluetooth: hci6: command 0x0406 tx timeout [ 1220.970238][T26672] netlink: 'syz.1.7001': attribute type 7 has an invalid length. [ 1222.315630][T26715] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7014'. [ 1222.375891][T26718] netlink: 'syz.2.7015': attribute type 7 has an invalid length. [ 1222.798484][T26732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7019'. [ 1223.024794][T26740] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7021'. [ 1223.273366][T26747] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7024'. [ 1223.990266][T26755] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7029'. [ 1224.582526][T26784] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7040'. [ 1224.618822][T26784] netlink: 'syz.1.7040': attribute type 2 has an invalid length. [ 1224.634135][T26784] netlink: 'syz.1.7040': attribute type 4 has an invalid length. [ 1224.656389][T26784] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7040'. [ 1226.700791][T26846] netlink: 'syz.0.7061': attribute type 11 has an invalid length. [ 1226.744200][T26847] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.7064'. [ 1226.774932][T26846] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7061'. [ 1226.855829][T26837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.906088][T26850] netlink: 'syz.2.7065': attribute type 33 has an invalid length. [ 1226.941868][T26850] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7065'. [ 1227.296705][T26863] netlink: 'syz.0.7068': attribute type 10 has an invalid length. [ 1227.341637][T26863] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1227.624699][T26872] FAULT_INJECTION: forcing a failure. [ 1227.624699][T26872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.652569][T26872] CPU: 1 PID: 26872 Comm: syz.4.7072 Not tainted syzkaller #0 [ 1227.660104][T26872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1227.670265][T26872] Call Trace: [ 1227.673597][T26872] [ 1227.676588][T26872] dump_stack_lvl+0x188/0x24e [ 1227.681318][T26872] ? show_regs_print_info+0x12/0x12 [ 1227.686577][T26872] ? load_image+0x410/0x410 [ 1227.691148][T26872] ? __lock_acquire+0x7c40/0x7c40 [ 1227.696226][T26872] should_fail_ex+0x390/0x4c0 [ 1227.700936][T26872] _copy_from_user+0x2c/0x170 [ 1227.705726][T26872] copy_from_sockptr+0x69/0x80 [ 1227.710534][T26872] do_ipv6_setsockopt+0x1d0b/0x3c30 [ 1227.715758][T26872] ? tracing_gen_ctx_irq_test+0x60/0x150 [ 1227.721426][T26872] ? sk_dst_reset+0xa0/0xa0 [ 1227.725956][T26872] ? perf_swevent_event+0x1c6/0x570 [ 1227.731190][T26872] ? perf_tp_event+0xa8e/0xc10 [ 1227.735989][T26872] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1227.741859][T26872] ? mark_lock+0x94/0x320 [ 1227.746239][T26872] ? aa_label_sk_perm+0x501/0x6b0 [ 1227.751286][T26872] ? verify_lock_unused+0x140/0x140 [ 1227.756530][T26872] ? aa_sk_perm+0x950/0x950 [ 1227.761082][T26872] ? perf_trace_preemptirq_template+0x268/0x320 [ 1227.767363][T26872] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1227.773380][T26872] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1227.779554][T26872] ? lockdep_hardirqs_on+0x94/0x140 [ 1227.784775][T26872] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1227.790962][T26872] ipv6_setsockopt+0x55/0x190 [ 1227.795667][T26872] ? sock_common_recvmsg+0x190/0x190 [ 1227.800980][T26872] __sys_setsockopt+0x2bf/0x3d0 [ 1227.805853][T26872] __x64_sys_setsockopt+0xb1/0xc0 [ 1227.810903][T26872] do_syscall_64+0x4c/0xa0 [ 1227.815340][T26872] ? clear_bhb_loop+0x60/0xb0 [ 1227.820035][T26872] ? clear_bhb_loop+0x60/0xb0 [ 1227.824763][T26872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1227.830682][T26872] RIP: 0033:0x7fac3f99e159 [ 1227.835116][T26872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.854744][T26872] RSP: 002b:00007fac408cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1227.863175][T26872] RAX: ffffffffffffffda RBX: 00007fac3fc25fa0 RCX: 00007fac3f99e159 [ 1227.871163][T26872] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000007 [ 1227.879149][T26872] RBP: 00007fac408cf090 R08: 0000000000000004 R09: 0000000000000000 [ 1227.887140][T26872] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 1227.895131][T26872] R13: 00007fac3fc26038 R14: 00007fac3fc25fa0 R15: 00007ffc26abaad8 [ 1227.903135][T26872] [ 1227.982098][T26872] netlink: 'syz.4.7072': attribute type 1 has an invalid length. [ 1228.215701][T26887] netlink: 'syz.1.7077': attribute type 1 has an invalid length. [ 1228.266207][T26887] netlink: 'syz.1.7077': attribute type 1 has an invalid length. [ 1228.343900][T26887] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7077'. [ 1229.029313][T26911] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.7084'. [ 1229.046575][T26913] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7087'. [ 1229.101227][T26915] netlink: 'syz.4.7088': attribute type 16 has an invalid length. [ 1229.143754][T26915] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7088'. [ 1229.671521][T26924] netlink: 'syz.4.7090': attribute type 10 has an invalid length. [ 1229.866716][T26940] netlink: 'syz.1.7095': attribute type 10 has an invalid length. [ 1229.884756][T26940] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7095'. [ 1230.059140][T26944] netlink: 'syz.4.7096': attribute type 17 has an invalid length. [ 1230.072152][T26944] netlink: 'syz.4.7096': attribute type 16 has an invalid length. [ 1230.088947][T26944] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7096'. [ 1230.196875][T26947] netlink: 'syz.0.7098': attribute type 11 has an invalid length. [ 1230.220802][T26947] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7098'. [ 1230.260579][T26947] FAULT_INJECTION: forcing a failure. [ 1230.260579][T26947] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.280930][T26947] CPU: 1 PID: 26947 Comm: syz.0.7098 Not tainted syzkaller #0 [ 1230.288467][T26947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1230.298561][T26947] Call Trace: [ 1230.301888][T26947] [ 1230.304837][T26947] dump_stack_lvl+0x188/0x24e [ 1230.309546][T26947] ? show_regs_print_info+0x12/0x12 [ 1230.314762][T26947] ? load_image+0x410/0x410 [ 1230.319303][T26947] ? __lock_acquire+0x7c40/0x7c40 [ 1230.324370][T26947] should_fail_ex+0x390/0x4c0 [ 1230.329078][T26947] should_failslab+0x5/0x20 [ 1230.333604][T26947] slab_pre_alloc_hook+0x59/0x300 [ 1230.338659][T26947] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1230.344240][T26947] __kmem_cache_alloc_node+0x4f/0x270 [ 1230.349635][T26947] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1230.355200][T26947] __kmalloc+0xa3/0x240 [ 1230.359382][T26947] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1230.364785][T26947] ? __fget_files+0x28/0x460 [ 1230.369444][T26947] ? __fget_files+0x3fc/0x460 [ 1230.374160][T26947] ? cpu_online+0xa0/0xa0 [ 1230.378516][T26947] bpf_prog_test_run+0x31c/0x390 [ 1230.383489][T26947] __sys_bpf+0x62b/0x780 [ 1230.387763][T26947] ? bpf_link_show_fdinfo+0x380/0x380 [ 1230.393175][T26947] ? lock_chain_count+0x20/0x20 [ 1230.398064][T26947] __x64_sys_bpf+0x78/0x90 [ 1230.402511][T26947] do_syscall_64+0x4c/0xa0 [ 1230.406952][T26947] ? clear_bhb_loop+0x60/0xb0 [ 1230.411651][T26947] ? clear_bhb_loop+0x60/0xb0 [ 1230.416352][T26947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1230.422300][T26947] RIP: 0033:0x7f0bb8d9e159 [ 1230.426736][T26947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.446371][T26947] RSP: 002b:00007f0bb9d24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1230.454810][T26947] RAX: ffffffffffffffda RBX: 00007f0bb9025fa0 RCX: 00007f0bb8d9e159 [ 1230.462799][T26947] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 1230.470797][T26947] RBP: 00007f0bb9d24090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.478799][T26947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.486796][T26947] R13: 00007f0bb9026038 R14: 00007f0bb9025fa0 R15: 00007fff75008668 [ 1230.494808][T26947] [ 1230.542754][T26946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.906558][T26959] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7103'. [ 1231.199712][T26964] netlink: 'syz.3.7106': attribute type 21 has an invalid length. [ 1231.265345][T26970] netlink: 'syz.2.7107': attribute type 11 has an invalid length. [ 1231.290196][T26970] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7107'. [ 1231.303558][T26966] netlink: 'syz.3.7106': attribute type 21 has an invalid length. [ 1231.589159][T26969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.873695][T27016] netlink: 'syz.3.7120': attribute type 2 has an invalid length. [ 1232.888560][T27016] netlink: 'syz.3.7120': attribute type 1 has an invalid length. [ 1232.902621][T27016] netlink: 'syz.3.7120': attribute type 4 has an invalid length. [ 1232.925453][T27016] netlink: 'syz.3.7120': attribute type 6 has an invalid length. [ 1232.945841][T27016] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.7120'. [ 1234.328783][T27057] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.7133'. [ 1234.394375][T27057] netlink: zone id is out of range [ 1234.461365][T27057] netlink: zone id is out of range [ 1234.467058][T27057] netlink: zone id is out of range [ 1234.482019][T27057] netlink: zone id is out of range [ 1234.490825][T27057] netlink: zone id is out of range [ 1234.508136][T27057] netlink: zone id is out of range [ 1234.523862][T27057] netlink: zone id is out of range [ 1234.535922][T27057] netlink: zone id is out of range [ 1234.552575][T27057] netlink: zone id is out of range [ 1234.568489][T27057] netlink: zone id is out of range [ 1234.588697][T27060] FAULT_INJECTION: forcing a failure. [ 1234.588697][T27060] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.658348][T27060] CPU: 1 PID: 27060 Comm: syz.2.7134 Not tainted syzkaller #0 [ 1234.665981][T27060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1234.676075][T27060] Call Trace: [ 1234.679396][T27060] [ 1234.682357][T27060] dump_stack_lvl+0x188/0x24e [ 1234.687095][T27060] ? show_regs_print_info+0x12/0x12 [ 1234.692344][T27060] ? load_image+0x410/0x410 [ 1234.696900][T27060] ? __might_sleep+0xd0/0xd0 [ 1234.701538][T27060] ? __lock_acquire+0x7c40/0x7c40 [ 1234.706607][T27060] should_fail_ex+0x390/0x4c0 [ 1234.711327][T27060] should_failslab+0x5/0x20 [ 1234.715850][T27060] slab_pre_alloc_hook+0x59/0x300 [ 1234.720895][T27060] ? kvmalloc_node+0x6c/0x180 [ 1234.725597][T27060] __kmem_cache_alloc_node+0x4f/0x270 [ 1234.731006][T27060] ? kvmalloc_node+0x6c/0x180 [ 1234.735702][T27060] __kmalloc_node+0xa2/0x240 [ 1234.740321][T27060] kvmalloc_node+0x6c/0x180 [ 1234.744845][T27060] page_pool_create+0x1e7/0x5c0 [ 1234.749800][T27060] bpf_test_run_xdp_live+0x220/0x1a90 [ 1234.755203][T27060] ? 0xffffffffa00041c0 [ 1234.759373][T27060] ? text_poke_copy+0x7b/0x90 [ 1234.764079][T27060] ? 0xffffffffa00041c0 [ 1234.768249][T27060] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1234.774166][T27060] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1234.780336][T27060] ? xdp_convert_md_to_buff+0x330/0x330 [ 1234.785924][T27060] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1234.792199][T27060] ? bpf_test_init+0x119/0x140 [ 1234.796991][T27060] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1234.802477][T27060] bpf_prog_test_run_xdp+0x757/0xf80 [ 1234.807782][T27060] ? __lock_acquire+0x7c40/0x7c40 [ 1234.812832][T27060] ? dev_put+0x80/0x80 [ 1234.816931][T27060] ? dev_put+0x80/0x80 [ 1234.821027][T27060] bpf_prog_test_run+0x31c/0x390 [ 1234.826015][T27060] __sys_bpf+0x62b/0x780 [ 1234.830284][T27060] ? bpf_link_show_fdinfo+0x380/0x380 [ 1234.835696][T27060] ? lock_chain_count+0x20/0x20 [ 1234.840584][T27060] __x64_sys_bpf+0x78/0x90 [ 1234.845031][T27060] do_syscall_64+0x4c/0xa0 [ 1234.849467][T27060] ? clear_bhb_loop+0x60/0xb0 [ 1234.854163][T27060] ? clear_bhb_loop+0x60/0xb0 [ 1234.858875][T27060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1234.864789][T27060] RIP: 0033:0x7f700959e159 [ 1234.869220][T27060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.888840][T27060] RSP: 002b:00007f700a448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1234.897302][T27060] RAX: ffffffffffffffda RBX: 00007f7009825fa0 RCX: 00007f700959e159 [ 1234.905294][T27060] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1234.913276][T27060] RBP: 00007f700a448090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.921274][T27060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.929291][T27060] R13: 00007f7009826038 R14: 00007f7009825fa0 R15: 00007fffebce7578 [ 1234.937297][T27060] [ 1235.376744][T27060] page_pool_create() gave up with errno -12 [ 1235.689240][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 1235.713821][T27089] validate_nla: 2 callbacks suppressed [ 1235.713859][T27089] netlink: 'syz.4.7146': attribute type 2 has an invalid length. [ 1235.814562][T27089] netlink: 'syz.4.7146': attribute type 1 has an invalid length. [ 1235.859429][T27089] netlink: 'syz.4.7146': attribute type 4 has an invalid length. [ 1235.904443][T27089] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.7146'. [ 1236.812273][ T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 1236.820264][ T28] Not tainted syzkaller #0 [ 1236.855749][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1236.888970][ T28] task:rcu_tasks_kthre state:D stack:27952 pid:12 ppid:2 flags:0x00004000 [ 1236.908468][ T28] Call Trace: [ 1236.912138][ T28] [ 1236.918589][ T28] __schedule+0x107f/0x4030 [ 1236.927486][ T28] ? perf_trace_lock+0xf8/0x390 [ 1236.953341][ T28] ? trace_event_raw_event_lock+0x230/0x230 [ 1236.959412][ T28] ? release_firmware_map_entry+0x187/0x187 [ 1237.038616][ T28] schedule+0xb9/0x180 [ 1237.050506][ T28] schedule_timeout+0xbd/0x2d0 [ 1237.060723][ T28] ? console_conditional_schedule+0x40/0x40 [ 1237.078494][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1237.091710][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 1237.098696][ T28] ? lock_chain_count+0x20/0x20 [ 1237.103964][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1237.119360][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1237.126744][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1237.132435][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1237.137813][ T28] ? wait_for_completion+0x26f/0x590 [ 1237.148023][ T28] wait_for_completion+0x2c2/0x590 [ 1237.157829][ T28] ? io_schedule+0xd0/0xd0 [ 1237.165835][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1237.177998][ T28] ? debug_object_active_state+0x6b/0x380 [ 1237.190031][ T28] __synchronize_srcu+0x2b3/0x350 [ 1237.199773][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1237.210416][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 1237.220829][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 1237.230139][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1237.252024][ T28] ? synchronize_srcu+0x18f/0x1b0 [ 1237.263068][ T28] rcu_tasks_wait_gp+0x49f/0xac0 [ 1237.275195][ T28] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 1237.286486][ T28] ? lock_chain_count+0x20/0x20 [ 1237.297223][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1237.311564][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1237.322999][ T28] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 1237.334300][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1237.347223][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1237.359299][ T28] rcu_tasks_one_gp+0xd27/0xef0 [ 1237.370367][ T28] ? rcu_tasks_one_gp+0xe5/0xef0 [ 1237.381384][ T28] rcu_tasks_kthread+0x6e/0x90 [ 1237.393843][ T28] kthread+0x29d/0x330 [ 1237.403038][ T28] ? rcu_tasks_postgp+0x10/0x10 [ 1237.415094][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1237.426301][ T28] ret_from_fork+0x1f/0x30 [ 1237.436912][ T28] [ 1237.443871][ T28] [ 1237.443871][ T28] Showing all locks held in the system: [ 1237.463628][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1237.490849][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1237.518653][ T28] 1 lock held by rcu_tasks_trace/13: [ 1237.532376][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1237.561384][ T28] 1 lock held by khungtaskd/28: [ 1237.574762][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1237.599989][ T28] 4 locks held by kworker/u4:2/33: [ 1237.614654][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1237.641139][ T28] #1: ffffc90000a9fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1237.668716][ T28] #2: ffffffff8dd48210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1237.704250][ T28] #3: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1237.736510][ T28] 2 locks held by getty/4029: [ 1237.750399][ T28] #0: ffff88814d3f0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1237.778835][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1237.807488][ T28] 2 locks held by kworker/0:3/17602: [ 1237.822199][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1237.851014][ T28] #1: ffffc90006887d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1237.883259][ T28] 2 locks held by kworker/u4:19/18122: [ 1237.888905][ T28] 1 lock held by syz.1.7077/26889: [ 1237.902782][ T28] 2 locks held by syz.2.7116/27017: [ 1237.917252][ T28] 3 locks held by syz.1.7142/27081: [ 1237.931855][ T28] 2 locks held by syz.0.7147/27095: [ 1237.945461][ T28] 1 lock held by syz.3.7152/27112: [ 1237.961058][ T28] #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1237.985960][ T28] 2 locks held by syz.3.7152/27113: [ 1238.001615][ T28] #0: ffffffff8dd575c8 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 1238.031850][ T28] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1238.056022][ T28] [ 1238.062702][ T28] ============================================= [ 1238.062702][ T28] [ 1238.080410][ T28] NMI backtrace for cpu 0 [ 1238.084801][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1238.092019][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1238.102099][ T28] Call Trace: [ 1238.105402][ T28] [ 1238.108353][ T28] dump_stack_lvl+0x188/0x24e [ 1238.113059][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 1238.118461][ T28] ? show_regs_print_info+0x12/0x12 [ 1238.123698][ T28] ? load_image+0x410/0x410 [ 1238.128248][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1238.132981][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 1238.138123][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1238.143105][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1238.149283][ T28] ? _printk+0xda/0x130 [ 1238.153461][ T28] ? load_image+0x410/0x410 [ 1238.157989][ T28] ? load_image+0x410/0x410 [ 1238.162521][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1238.168607][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1238.174769][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1238.180771][ T28] watchdog+0xf0e/0xf50 [ 1238.184969][ T28] ? watchdog+0x1ed/0xf50 [ 1238.189333][ T28] kthread+0x29d/0x330 [ 1238.193419][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1238.198472][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1238.203084][ T28] ret_from_fork+0x1f/0x30 [ 1238.207535][ T28] [ 1238.211168][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1238.216511][ C1] NMI backtrace for cpu 1 [ 1238.216521][ C1] CPU: 1 PID: 5953 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1238.216538][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1238.216549][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1238.216686][ C1] RIP: 0010:stack_trace_consume_entry+0x10b/0x270 [ 1238.216713][ C1] Code: 8d 3c cb 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 1a 4c 89 ff 48 89 f3 49 89 d4 4c 89 c5 e8 1e 9d 62 00 49 89 e8 4c 89 e2 48 89 de <49> 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 2f 01 00 00 41 3b [ 1238.216727][ C1] RSP: 0018:ffffc900040a76f8 EFLAGS: 00000246 [ 1238.216741][ C1] RAX: 1ffff92000814f16 RBX: ffffc900040a7890 RCX: 0000000080000000 [ 1238.216754][ C1] RDX: dffffc0000000000 RSI: ffffffff8618b3bf RDI: ffffc900040a7800 [ 1238.216767][ C1] RBP: 1ffff92000814f02 R08: ffffc900040a7810 R09: 0000000000000004 [ 1238.216779][ C1] R10: dffffc0000000000 R11: fffff52000814ef5 R12: 0000000000000000 [ 1238.216790][ C1] R13: 1ffff92000814f01 R14: ffffc900040a7808 R15: ffffc900040a78b0 [ 1238.216803][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1238.216817][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1238.216830][ C1] CR2: 0000001b31c23ffc CR3: 000000000c88e000 CR4: 00000000003506e0 [ 1238.216845][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1238.216855][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1238.216867][ C1] Call Trace: [ 1238.216872][ C1] [ 1238.216878][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 1238.216907][ C1] ? stack_trace_save+0xf0/0xf0 [ 1238.216928][ C1] arch_stack_walk+0x100/0x140 [ 1238.216963][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 1238.216991][ C1] stack_trace_save+0xa6/0xf0 [ 1238.217013][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 1238.217040][ C1] ? memset+0x1e/0x40 [ 1238.217056][ C1] kasan_set_track+0x4b/0x70 [ 1238.217079][ C1] ? kasan_set_track+0x4b/0x70 [ 1238.217100][ C1] ? __kasan_kmalloc+0x8e/0xa0 [ 1238.217123][ C1] ? __kmalloc_node_track_caller+0xb0/0x240 [ 1238.217150][ C1] ? __alloc_skb+0x226/0x7d0 [ 1238.217195][ C1] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1238.217216][ C1] __kasan_kmalloc+0x8e/0xa0 [ 1238.217241][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 1238.217266][ C1] __kmalloc_node_track_caller+0xb0/0x240 [ 1238.217295][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 1238.217319][ C1] __alloc_skb+0x226/0x7d0 [ 1238.217338][ C1] nsim_dev_trap_report_work+0x24f/0xa80 [ 1238.217372][ C1] ? process_one_work+0x7b4/0x1160 [ 1238.217393][ C1] process_one_work+0x8ab/0x1160 [ 1238.217423][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1238.217443][ C1] ? _raw_spin_lock_irq+0x86/0xf0 [ 1238.217470][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1238.217494][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1238.217520][ C1] ? wq_worker_running+0x97/0x190 [ 1238.217538][ C1] worker_thread+0xaf5/0x12a0 [ 1238.217588][ C1] kthread+0x29d/0x330 [ 1238.217602][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1238.217620][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1238.217637][ C1] ret_from_fork+0x1f/0x30 [ 1238.217668][ C1] [ 1238.563238][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1238.570262][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1238.577502][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1238.587626][ T28] Call Trace: [ 1238.590935][ T28] [ 1238.593897][ T28] dump_stack_lvl+0x188/0x24e [ 1238.598613][ T28] ? memcpy+0x3c/0x60 [ 1238.602650][ T28] ? show_regs_print_info+0x12/0x12 [ 1238.607897][ T28] ? load_image+0x410/0x410 [ 1238.612458][ T28] panic+0x2d3/0x710 [ 1238.616383][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1238.622057][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1238.626586][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1238.632166][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1238.638351][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1238.644525][ T28] watchdog+0xf4d/0xf50 [ 1238.648702][ T28] ? watchdog+0x1ed/0xf50 [ 1238.653050][ T28] kthread+0x29d/0x330 [ 1238.657152][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1238.662202][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1238.666816][ T28] ret_from_fork+0x1f/0x30 [ 1238.671278][ T28] [ 1238.674894][ T28] Kernel Offset: disabled [ 1238.679236][ T28] Rebooting in 86400 seconds..