last executing test programs: 28m26.902012834s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x8040) r3 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93424fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406020000f8ff0e002900", 0x24}, {&(0x7f0000000080)="e46c0000", 0x4}, {&(0x7f00000001c0)="22903e", 0x3}], 0x3}, 0x40042) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002", 0x1f}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfe33) 28m26.241622719s ago: executing program 4 (id=19): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x1, 0xa}, 0x400, 0x0, 0xc2ba, 0x6, 0x4000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000004000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xfff9, 0x6}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8, 0x0, 0x1000000}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28m25.762128549s ago: executing program 4 (id=21): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3fffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d21, 0x28461, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8005}, 0xb041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x9, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, r0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8970, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x5}, 0x50) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x3, 0x4b, &(0x7f0000000300)=""/75, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x4, 0x0, 0xbd}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000880)=[{0x5, 0x4, 0xa, 0xc}, {0x2, 0x3, 0xa, 0x6}], 0x10, 0x7}, 0x94) gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000004ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034015b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7cae2cd0a2782d2230fe4bf9865de0d1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e2a5a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf04e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa55e979e03337707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4450c43e93b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088a848e088fb00000000002177fbac141516e000030a94070203b180008902020000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 48.618476674s ago: executing program 3 (id=8401): socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2120) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 46.910108212s ago: executing program 0 (id=8402): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00Za', @ANYRES32=0x0], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.674067298s ago: executing program 6 (id=8403): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="03b2", 0x2}], 0x1}, 0xa) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, 0x0, 0x37}, 0x40011013) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xa0000000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r3}, 0x8) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) close(r4) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8) 43.606527386s ago: executing program 3 (id=8407): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffeff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x17e) 41.956341342s ago: executing program 6 (id=8408): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2812], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd353f36e203b8a90ac1", 0x2a}, {&(0x7f0000002480)="5390cd8012b4ec070d6c35199c8d74cf9597cd3bd808315fc24e45e6b3f98610ebe52844a12338d584b70a21bf0aceaad610fc88c25b0f4d2983110fcdcc1fb6890cb36d6f7c99a579f613a23ef19dd504c5066db60b90809a6a97b7532a78ecddafee4b6273d55e35135835", 0x6c}], 0x2}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000002c0)="00fed392461a6209ce954e56d2c599b45eb491abd973bab2ba6ac2f0bacf2a868d6bf8901b8aa3feb25293d276974e0d771991150bd353ec5b10e04aea16af3268b011e880b3c529b5fc7bb080c63808e5725161b11aff43ad77aa65a33d5cecae230175c1cd6071e809ec83e403881a215655abcfcd994b7b7e0886ee650a338f6767353533dee9eb7a1b6011ca4b9c2088c362ef95f302bc25618a0640a70fc140dac3eaade972c21b75fca1879708d5133ae5f9f7ada6daad4f26d661853ac89a1ec7da6748f69909363c05eb6149e954c0a285c6fd743b9aeae82359899c7de8f9fa17fde9eee07b0b"}, 0x20) r5 = socket$kcm(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', 0x0, 0x8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000090000000100000006480200", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c53688e200afa989de555edbde", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unlink(&(0x7f0000000200)='./cgroup\x00') syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 41.06406653s ago: executing program 0 (id=8409): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_config_ext, 0x10c012, 0x89, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702003008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000600000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee238915339de7bf13fd3701b", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.498669792s ago: executing program 3 (id=8413): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080014000100000080000000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000180)="00f2565242fb0963a3bdb03926a27d5d41342721e5cc2217a94bc2e8cf268491c726a01bf8c7dd8c497f3719cd94476298db64295efbdd8312822de64afa9819bbd39994ed114495702063744c021703ca1fbba350ef7190b6cfeac6933f1a8d018238a96fae9b373313ded01d19b65c775c210139fa30d0af91e757198aa095bda404605f24ce13cfc4fa5643ccb023ef29332fb47eba34e9792f61daef501f8eb64978b9d334f0a81e8694691e8be9555bb0cf1aab3a8f5614aba23b4527dc89684b4ea0b69c592f129ac4ff20b7a474baa0bd46ae8ba7f6edf3e5f5b1f2b8ad4ccf", 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100), 0x4) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x1f, &(0x7f00000000c0), 0xd8) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f", 0xc}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487", @ANYRES32, @ANYRES8=r5], 0xfe33) r6 = socket$kcm(0x28, 0x1, 0x0) close(r6) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="05"], 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) 36.300307106s ago: executing program 1 (id=8414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x11, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 36.13861774s ago: executing program 0 (id=8415): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x100080, 0x7fffffffffffffff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200fff6440000200100008080"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @fwd={0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x54}, 0x28) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x31, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2", 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="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", 0x120}], 0x1}, 0x14) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7f}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x6, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 35.895146814s ago: executing program 2 (id=8416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x8, 0x0, 0x0}}, 0x10) 34.380597619s ago: executing program 1 (id=8417): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x8, 0xf, 0x0, 0x1, 0xb69}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="3c00eaff33000b12d25a80648c2594f90124fc60100c034004000000002000119215a2281cf6b809f2db60490d20a735b16b6a4479b406db26a57b35", 0x3c}], 0x1}, 0x0) 34.25861619s ago: executing program 2 (id=8418): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="03b2", 0x2}], 0x1}, 0xa) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, 0x0, 0x37}, 0x40011013) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xa0000000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r3}, 0x8) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) close(r4) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8) 34.024278776s ago: executing program 6 (id=8419): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00Za', @ANYRES32=0x0], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.5680127s ago: executing program 1 (id=8420): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="14fff00022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 31.850742506s ago: executing program 6 (id=8421): bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd304, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x27, 0x1}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000640)=@ringbuf, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2cb4e, r1}, 0x90) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, 0x0, 0x20000094) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117300000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 31.804860137s ago: executing program 2 (id=8422): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x100, 0xc}, 0x0, 0x0, 0x0, 0x3, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e1208001e007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e406dcdf51c4000000e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000043c7ff04368cf4e7050000008af860e6cd3701a7eb1a519b702bc2ebbb7fdeb6f14ef9d8ae1c5ac6cf30a160a4e8af379a206c408fd31c65d7025f53ea197d1e3ea3778a4b8360914ada8f6a3167be17d49dd2f000"/114, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1}, 0x0, 0x5, r1, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/26], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='cpu\t>0&&\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)='>', 0x1}, {&(0x7f0000000680)="04ff5c22b9ce8153e98da61841de1e77f098d3e91b5acc20f0f1948a5061c8e8be7e7a747df2164e5af33600b6070d8320930006bfe72aa299ee131ef4017848c76758bb93587490046fd8a99d6d5ccfe1ae7ec184dee938643a9b4be334bcaecc8a66f8daaba70890f27101ccf1d9edfc9889484bbb5dbeabb6256bf7de0dbb65bb24a728265ec0a64c8bea85bd7b1002ed5a624e406a3018730d6b685a1d50ff5ff77f", 0xa4}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="1c001000000000000000000000000000b8270af8abff4b4111bc39f85535d400ad7b92032a8c35bf84fc87f5d2aa70f47d6ea43f0e2c8fee1d9d2dafaab3d1a14171e0e3f939da1112060026b6be497aded0737846f36188dc420d66e12c91a1974d9c78e391f7f1568d3fa0254ee19e36b545d6e7473b7d4a", @ANYRES32=r9, @ANYBLOB="e3a2e40fa13f88ded39c0cf08ed9416216aa0a04e2282eb5edab4d2154e73c678a259fb90b8d8ab2cbedafd2bb67c34086fec938c2c0af2b924401471b57ad75f84e158ae99cfcef3fa0b5729ea848e74b06b3dfd72213312bc3e265f30dc6e9bf25b6b08eb49a5b3fec29164f0f03502f83aa0de65a068d1834aa3670522d6307829ed4ecd7450b935b68bea7f7f62890d526fcd7b851be582280696482bb3fb333a204", @ANYRES32=r5, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRESOCT=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES8=0x0, @ANYRES32=r7, @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) perf_event_open(0x0, r9, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 30.806638028s ago: executing program 1 (id=8423): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffeff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x17e) 29.525287527s ago: executing program 2 (id=8424): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x600300) 29.358996781s ago: executing program 3 (id=8425): socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x5744935563dc5412) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x74000000}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg(r3, &(0x7f0000001a00)={&(0x7f0000001380)=@vsock, 0x80, &(0x7f0000001880)=[{&(0x7f0000001480)=""/241, 0xffe3}], 0x1, &(0x7f0000001900)=""/241, 0xf1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x83000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 28.95104648s ago: executing program 0 (id=8426): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000780), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xaa050000}, 0x810) 28.579586026s ago: executing program 6 (id=8427): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1, 0x0, 0x0, 0xf0ff}, 0x0) 28.42600331s ago: executing program 1 (id=8428): bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r0, 0x0, 0xfeffffffffffffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:* rmc'], 0x9) 27.545014789s ago: executing program 2 (id=8429): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="3800020029000b05d25a806f8c6394f90424fc602f9818000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000840)={&(0x7f00000000c0)=@rc={0x1f, @none, 0x69}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)="2a9b922f192ac7afd8fb7ac79838a84e54d9e725dcb06f0a315e29c3907c646e1decfb03624e3b758e5042734b2f839b96b9c97b0f303b0244f4e182e10957310bb2c5e4549abed066ae4134fe1d179358553ee31776f252a13fe857b714b1c5820c62a9a47455440d98ea61197568bedf69e7d064d0c1bc1bb8087d3683b368e77fb116e9071088b60a3c79b84090", 0x8f}, {&(0x7f0000000200)="6182f27ecc63bc41707e8294c3112e5907d3ffd9adfcd294dd89745768924161dff59fc82eb13e0d79479ba551a96df89d9c780215b8f2044812a9520e31958a4ecdf0509685088467a8e55745f3b2eefcc802f96a9ec1c4c708aad38195ec6fe857aeed95068b06705dbe2fe7d35fda1c60090be818e7003928170025176f75c6fece567adc2099", 0x88}, {&(0x7f00000002c0)="c5b5faaf523b97f7a0bb86386326db906d3c228131db8104bdd5ca8e3fbcb4eb032c0d9b475d8fa4ebb67f16c4eea8e19c0458ed07aee79655cb29ee0e5a60325b24274c496732aacfa9240b6e5a94d1", 0x50}, {&(0x7f0000000340)="2d6d6b37b05fa649d9a2022819a927484376d9ae6040af78d023f90de27c5230ae9a2c33ec14e0c6096ebc2a4ec189cd2f6736b82219f20ac44c52ec872283c3d63e7826", 0x44}, {&(0x7f00000003c0)="79d11e0583be1855d3a83c06aff7d3810d9b0922db4439c49e37f90ec2124e4434829a3d5dab7a663d48abdc57260f5128d03a2ba15caa1488fe6ae01412bc658602e72129367b6d1049d8e026c904ff073e81879773220e1af3b8cb64cb25d0e600c9c238631a12a0e8cbc203513051165c78fb3b6a3de9f1592e61705f5d3481dfc2de6a521a38bb44043596ebbd9d0de5ca7c96c80386205b3948867312", 0x9f}, {&(0x7f0000000480)="59e15fe23e2c2ff47f37c8125d05a42568d6f398dba97901346f44e31adada823432ea1036ba19312871ce85ebd5349a1b164e579c45be010cf1e9de9b43f36db2a5db1739ae5de3737e81ceaae447754aa2bb476555e2226e4b4d2e156c934aaca30a0039e706d039e81c9b", 0x6c}, {&(0x7f0000000500)="12bb801ff827d7343d8f0d6b7fb8909dc6a387595ef7a1ac1de90ff7c923d6fa3fbf14f69d3b0fdcc5aa2ecfd5f3720e6941b8ae361fbb42e2053de0edbfb8381ae07096819f0eaf7129cd7feef7b63d15b7c9233dc5cc7b1290544466e1dec3eb49dc6c8b714ba82b3798b354e8b55a9ac421e192af309cdf55f66369c9fbf545a7ca883ed3af252b2c5ce48480c3291456283bc5b0d7e6fb789952915c2b4f94a582f86007569ca4ba7e051f", 0xad}, {&(0x7f00000005c0)="3ed50526b94dd559cc3dcc67e49ea1123ea910c3584c593b4b0daa758b5bb6637356cf0151", 0x25}, {&(0x7f0000000600)="055f9c95d4951b5ab85b5a87781c919b65925b14d69ad4d256d0abd5166c8da12b89a1f51dd8397702a4417555fc7d15733c70997c41ece84f14e499c820701aaa173d6eac2f3161c1bfb169d6b02850464a1dfb0baae9df69fbe962b726083f43fc6250e8c8fd365abc2d40d1bae392815a2c8baa8d39895620632fafd673b6eb78d8c4537005514737920d5c0163037520536792aa15605e28a687e6f1ae9453078ebec2a5108694c6667d8ba7382e06c06a0920ce50fddd67d00104abe3f9fd0b5225e8838802ab9bee9c5dd4caca9ec6dc657762432b1957dee51272a83f", 0xe0}], 0x9, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x2fd}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) ioctl$TUNSETOFFLOAD(r1, 0x40047440, 0x110c230004) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000a40)={'veth0_virt_wifi\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x1, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000a00), 0xe4) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8", 0x66}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64a}, 0x200}, 0x0, 0x2, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="9f6a283eb6c49119a8abf6ef660537090000180000000000000018000093080000000100000080000000020000000030004000"], &(0x7f00000008c0)=""/89, 0x33, 0x59, 0x1, 0x4}, 0x28) 26.719088697s ago: executing program 1 (id=8430): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000340)) r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000721d430a", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000270000000007000018010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300004000000025000000060000009c23000000000000b503000001000000"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9d}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8903, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000680), &(0x7f0000000700)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000200)="ba"}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="1400000016000b63d25a73b02886188a33f7cbb4", 0x14}], 0x1}, 0x4044) close(0xffffffffffffffff) 26.192382109s ago: executing program 0 (id=8431): socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_clone(0x10000000, &(0x7f0000000040)="ddeacfd60ffd2156ad7d2246ee92e3fe5a914d51c14ddcafbf1b50fe63785aa1526f27e37ac5d81a61d9d0dce57b4a4580a2b4f3a502989cc7354392970ae1612f3beb90949fc3ca17fbf6c77928857ed32c6d04258e5652bc1b18d71dac", 0x5e, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="10919cc4510e944c378441f109b7271357ad9831345d133145cad0914987f85c2b7fa869f2098380205c03e8704a476dfe85cc655190d8248bf9019c29888a161b19c1e6da62ee56f7cd65642ab3eb9c60874799c4f2f2da6bbdcd11") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110c230055) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 26.000729614s ago: executing program 6 (id=8432): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0xb6, 0x9, 0xfffffffd}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1d, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x42b}, {&(0x7f0000000740)="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", 0x248}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20, 0x5000000}, 0x4080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r6, 0x40047440, 0x110c230000) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f848430000005e140602000000000e002800100000000280000012", 0x2d}], 0x1}, 0x0) 25.343057179s ago: executing program 3 (id=8433): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006006dd000000000180900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r4, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r5 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, &(0x7f0000000380), 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 24.948126758s ago: executing program 2 (id=8434): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote, 0xf5ffffff}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) 1.808675849s ago: executing program 34 (id=8431): socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_clone(0x10000000, &(0x7f0000000040)="ddeacfd60ffd2156ad7d2246ee92e3fe5a914d51c14ddcafbf1b50fe63785aa1526f27e37ac5d81a61d9d0dce57b4a4580a2b4f3a502989cc7354392970ae1612f3beb90949fc3ca17fbf6c77928857ed32c6d04258e5652bc1b18d71dac", 0x5e, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="10919cc4510e944c378441f109b7271357ad9831345d133145cad0914987f85c2b7fa869f2098380205c03e8704a476dfe85cc655190d8248bf9019c29888a161b19c1e6da62ee56f7cd65642ab3eb9c60874799c4f2f2da6bbdcd11") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110c230055) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.808450579s ago: executing program 35 (id=8430): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000340)) r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000721d430a", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000270000000007000018010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300004000000025000000060000009c23000000000000b503000001000000"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9d}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8903, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000680), &(0x7f0000000700)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000200)="ba"}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="1400000016000b63d25a73b02886188a33f7cbb4", 0x14}], 0x1}, 0x4044) close(0xffffffffffffffff) 1.083416555s ago: executing program 36 (id=8432): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0xb6, 0x9, 0xfffffffd}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1d, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x42b}, {&(0x7f0000000740)="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", 0x248}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20, 0x5000000}, 0x4080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r6, 0x40047440, 0x110c230000) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f848430000005e140602000000000e002800100000000280000012", 0x2d}], 0x1}, 0x0) 1.083370575s ago: executing program 37 (id=8434): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote, 0xf5ffffff}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) 0s ago: executing program 38 (id=8433): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006006dd000000000180900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r4, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r5 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, &(0x7f0000000380), 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [T27160] device syzkaller0 entered promiscuous mode [ 1412.181502][T27190] delete_channel: no stack [ 1414.338463][T27233] netlink: 'syz.1.6853': attribute type 8 has an invalid length. [ 1414.353331][T27233] netlink: 'syz.1.6853': attribute type 1 has an invalid length. [ 1414.364914][T27233] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.6853'. [ 1417.181779][T27227] netlink: 'syz.2.6850': attribute type 10 has an invalid length. [ 1417.195354][T27227] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6850'. [ 1417.454739][T27239] delete_channel: no stack [ 1418.671723][T27233] netlink: 'syz.1.6853': attribute type 39 has an invalid length. [ 1423.573893][T27325] netlink: 'syz.6.6879': attribute type 39 has an invalid length. [ 1424.172966][T27339] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1424.225798][T27339] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1424.506856][T27345] netlink: 'syz.0.6885': attribute type 3 has an invalid length. [ 1424.565893][T27345] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6885'. [ 1424.912655][T27359] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.6897'. [ 1424.964053][T27359] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1425.706443][T27377] device syzkaller0 entered promiscuous mode [ 1427.981416][T27417] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6903'. [ 1428.063794][T27417] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1428.414231][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.420654][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.494475][ T4274] Bluetooth: hci5: command 0x0406 tx timeout [ 1432.733532][T27425] netlink: 'syz.1.6907': attribute type 39 has an invalid length. [ 1433.364754][T27451] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1433.964394][T27439] netlink: 'syz.3.6911': attribute type 17 has an invalid length. [ 1433.985029][T27451] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1434.005417][T27451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.025517][T27451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.040078][T27451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.057534][T27451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.069272][T27451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.093191][T27451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.133212][T27451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.182665][T27451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.210423][T27451] device batadv_slave_1 entered promiscuous mode [ 1434.330506][T27457] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.6916'. [ 1434.417938][T27457] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1435.157336][T27472] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1435.580736][T27485] device syzkaller0 entered promiscuous mode [ 1436.767914][T27503] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.6930'. [ 1436.778774][T27503] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1440.650903][T27504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.658585][T27504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.667994][T27504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1440.675624][T27504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.846226][T27523] mac80211_hwsim hwsim52 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1440.959217][T27550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1440.988241][T27550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1441.016829][T27551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1441.266837][T27555] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.6943'. [ 1441.365092][T27555] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1441.851337][T27575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1441.858709][T27575] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1442.407515][T27584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6951'. [ 1442.782326][T27576] device syzkaller0 entered promiscuous mode [ 1442.824693][T27578] netlink: 'syz.0.6949': attribute type 10 has an invalid length. [ 1442.930417][T27578] device virt_wifi0 entered promiscuous mode [ 1442.950483][T27578] team0: Port device virt_wifi0 added [ 1443.875121][T27612] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6960'. [ 1443.913317][T27612] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1445.310094][T27651] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1445.360963][T27651] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1447.832439][T27611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.841152][T27611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.851706][T27611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.893331][T27611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1448.036002][T27630] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1448.059341][T27656] netlink: 'syz.1.6975': attribute type 41 has an invalid length. [ 1448.098004][T27659] netlink: 'syz.3.6976': attribute type 21 has an invalid length. [ 1448.113424][T27659] netlink: 'syz.3.6976': attribute type 1 has an invalid length. [ 1448.121244][T27659] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6976'. [ 1448.751696][T27682] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.6984'. [ 1448.787803][T27682] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1449.529581][T27690] device syzkaller0 entered promiscuous mode [ 1450.669202][T27727] netlink: 'syz.6.6998': attribute type 3 has an invalid length. [ 1450.682294][T27727] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.6998'. [ 1452.024012][ T6062] wlan1: Trigger new scan to find an IBSS to join [ 1452.897809][T27711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1452.905419][T27711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1452.913946][T27711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1452.921384][T27711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.000048][T27712] netlink: 'syz.3.6991': attribute type 10 has an invalid length. [ 1453.011643][T27712] device virt_wifi0 entered promiscuous mode [ 1453.024834][T27712] team0: Port device virt_wifi0 added [ 1453.033965][T27732] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.6999'. [ 1453.045686][T27732] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1453.136486][T27725] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1454.232907][T27770] netlink: 'syz.6.7011': attribute type 10 has an invalid length. [ 1454.290115][T27770] team0: Port device virt_wifi0 added [ 1454.340944][T27772] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7012'. [ 1454.351281][T27772] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1454.393169][T27758] device syzkaller0 entered promiscuous mode [ 1454.458292][T27774] netlink: 'syz.0.7013': attribute type 3 has an invalid length. [ 1454.467045][T27774] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7013'. [ 1455.053550][ T46] wlan1: Trigger new scan to find an IBSS to join [ 1455.946575][T11163] wlan1: Creating new IBSS network, BSSID 9e:f7:63:28:7f:51 [ 1456.013644][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 1457.053425][ T6062] wlan1: Trigger new scan to find an IBSS to join [ 1459.812607][T27816] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7026'. [ 1459.843001][T27816] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1460.014715][T11166] wlan1: Trigger new scan to find an IBSS to join [ 1460.908214][T27844] netlink: 'syz.6.7036': attribute type 3 has an invalid length. [ 1460.924636][T27842] device syzkaller0 entered promiscuous mode [ 1460.932616][T27844] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7036'. [ 1460.956972][ T46] wlan1: Creating new IBSS network, BSSID 6a:63:f8:45:94:20 [ 1461.688628][T27861] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7041'. [ 1461.733361][T27861] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1463.328639][T27877] FAULT_INJECTION: forcing a failure. [ 1463.328639][T27877] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.352190][T27877] CPU: 1 PID: 27877 Comm: syz.6.7048 Not tainted syzkaller #0 [ 1463.359733][T27877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1463.369836][T27877] Call Trace: [ 1463.373155][T27877] [ 1463.376124][T27877] dump_stack_lvl+0x188/0x24e [ 1463.380866][T27877] ? show_regs_print_info+0x12/0x12 [ 1463.386153][T27877] ? load_image+0x410/0x410 [ 1463.390717][T27877] ? verify_lock_unused+0x140/0x140 [ 1463.395990][T27877] should_fail_ex+0x390/0x4c0 [ 1463.400739][T27877] should_failslab+0x5/0x20 [ 1463.405295][T27877] slab_pre_alloc_hook+0x59/0x300 [ 1463.410384][T27877] kmem_cache_alloc+0x56/0x2f0 [ 1463.415189][T27877] ? skb_clone+0x1e7/0x370 [ 1463.419676][T27877] skb_clone+0x1e7/0x370 [ 1463.424023][T27877] __netlink_deliver_tap+0x3e4/0x7e0 [ 1463.429373][T27877] ? netlink_deliver_tap+0x2e/0x1b0 [ 1463.434630][T27877] netlink_deliver_tap+0x19c/0x1b0 [ 1463.439784][T27877] netlink_unicast+0x777/0x920 [ 1463.444593][T27877] netlink_sendmsg+0x8ad/0xbd0 [ 1463.449398][T27877] ? netlink_getsockopt+0x550/0x550 [ 1463.454639][T27877] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1463.460246][T27877] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1463.465555][T27877] ? security_socket_sendmsg+0x7c/0xa0 [ 1463.471045][T27877] ? netlink_getsockopt+0x550/0x550 [ 1463.476376][T27877] ____sys_sendmsg+0x5ed/0x9a0 [ 1463.481206][T27877] ? __sys_sendmsg_sock+0x30/0x30 [ 1463.486275][T27877] ? __import_iovec+0x306/0x510 [ 1463.491165][T27877] ? import_iovec+0x6f/0xa0 [ 1463.495735][T27877] ___sys_sendmsg+0x2a2/0x360 [ 1463.500452][T27877] ? __sys_sendmsg+0x2a0/0x2a0 [ 1463.505266][T27877] ? __lock_acquire+0x7c40/0x7c40 [ 1463.510357][T27877] __se_sys_sendmsg+0x1c3/0x2b0 [ 1463.515254][T27877] ? __x64_sys_sendmsg+0x80/0x80 [ 1463.520249][T27877] ? lockdep_hardirqs_on+0x94/0x140 [ 1463.525477][T27877] do_syscall_64+0x4c/0xa0 [ 1463.529962][T27877] ? clear_bhb_loop+0x60/0xb0 [ 1463.534674][T27877] ? clear_bhb_loop+0x60/0xb0 [ 1463.539391][T27877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1463.545321][T27877] RIP: 0033:0x7fcf5619de99 [ 1463.549861][T27877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.569694][T27877] RSP: 002b:00007fcf543f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1463.578570][T27877] RAX: ffffffffffffffda RBX: 00007fcf56425fa0 RCX: 00007fcf5619de99 [ 1463.586842][T27877] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1463.594854][T27877] RBP: 00007fcf543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.602859][T27877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.610881][T27877] R13: 00007fcf56426038 R14: 00007fcf56425fa0 R15: 00007fffb7a8faf8 [ 1463.618909][T27877] [ 1464.372060][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1464.382417][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1464.391186][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1464.413813][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1464.432331][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1464.443682][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1466.083649][T27883] netlink: 'syz.6.7051': attribute type 25 has an invalid length. [ 1466.091675][T27883] netlink: 'syz.6.7051': attribute type 28 has an invalid length. [ 1466.113646][T27894] netlink: 'syz.2.7054': attribute type 10 has an invalid length. [ 1466.121654][T27894] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1466.278748][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.448763][T27900] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7056'. [ 1466.472893][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.503409][T13437] Bluetooth: hci1: command 0x0409 tx timeout [ 1466.523490][T27900] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1466.656463][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.918171][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.951649][T27889] chnl_net:caif_netlink_parms(): no params data found [ 1467.049663][T27919] netlink: 'syz.6.7062': attribute type 29 has an invalid length. [ 1467.093292][T27919] netlink: 'syz.6.7062': attribute type 3 has an invalid length. [ 1467.101101][T27919] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7062'. [ 1467.264906][T27889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.272701][T27889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.281556][T27889] device bridge_slave_0 entered promiscuous mode [ 1467.310978][T27889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.318720][T27889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.327740][T27889] device bridge_slave_1 entered promiscuous mode [ 1467.441983][T27889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.513487][T27889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.583283][T13437] Bluetooth: hci1: command 0x041b tx timeout [ 1468.960174][T27889] team0: Port device team_slave_0 added [ 1469.049880][T27889] team0: Port device team_slave_1 added [ 1469.256473][T27964] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.7072'. [ 1469.276437][T27889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.283256][T27964] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1469.298750][T27889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1469.381606][T27889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.582371][T27889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.642535][T27889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1469.716503][T27889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1469.751144][T27973] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7084'. [ 1469.772227][T27973] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1470.038301][T27889] device hsr_slave_0 entered promiscuous mode [ 1470.076237][T27889] device hsr_slave_1 entered promiscuous mode [ 1470.102093][T27889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1470.172539][T27889] Cannot create hsr debugfs directory [ 1470.653168][T13437] Bluetooth: hci1: command 0x040f tx timeout [ 1470.962534][T27998] device syzkaller0 entered promiscuous mode [ 1471.465431][T28012] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7088'. [ 1471.518543][T28012] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1472.740471][T13437] Bluetooth: hci1: command 0x0419 tx timeout [ 1473.505497][T28061] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7099'. [ 1473.515164][T28061] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1475.882750][T28024] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7090'. [ 1476.045743][T28019] device syzkaller0 entered promiscuous mode [ 1476.814910][T28093] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7109'. [ 1476.854631][T28093] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1480.471061][T28100] device syzkaller0 entered promiscuous mode [ 1480.877534][T28137] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7121'. [ 1480.901221][T28137] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1482.833580][T28153] delete_channel: no stack [ 1482.840096][T28153] delete_channel: no stack [ 1483.561005][T28165] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7132'. [ 1483.597521][T28165] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1486.011419][ T6070] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1487.225140][ T46] device team0 left promiscuous mode [ 1487.233228][ T46] device team_slave_0 left promiscuous mode [ 1487.247096][ T46] device team_slave_1 left promiscuous mode [ 1487.255337][ T46] device geneve1 left promiscuous mode [ 1487.261262][ T46] device hsr_slave_0 left promiscuous mode [ 1487.267798][ T46] device virt_wifi0 left promiscuous mode [ 1487.279307][ T46] : port 1(team0) entered disabled state [ 1487.316808][ T46] device veth1_macvtap left promiscuous mode [ 1487.333772][ T46] device veth0_macvtap left promiscuous mode [ 1487.594921][ T46] team0 (unregistering): Port device geneve1 removed [ 1487.789069][T28203] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.7144'. [ 1487.802940][T28203] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1489.918248][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.924790][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.038966][ T46] team0 (unregistering): Port device virt_wifi0 removed [ 1490.290341][ T46] team0 (unregistering): Port device hsr_slave_0 removed [ 1490.530727][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1490.630953][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1490.875043][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.945297][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.028586][ T6066] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1491.468585][ T46] bond0 (unregistering): Released all slaves [ 1491.587017][T28207] netlink: 'syz.1.7146': attribute type 10 has an invalid length. [ 1492.110329][T28232] netlink: 'syz.0.7153': attribute type 10 has an invalid length. [ 1492.141424][T28232] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 1492.259731][T28237] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7154'. [ 1492.283180][T28237] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1492.749557][T28227] device syzkaller0 entered promiscuous mode [ 1494.429394][T28293] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7166'. [ 1494.452377][T28293] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1497.344507][T27889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1497.369406][T28314] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7174'. [ 1497.405661][T27889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1497.429333][T27889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1497.481381][T27889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1497.641372][T28325] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7177'. [ 1497.702303][T28325] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1497.864104][T27889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.901730][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1497.932537][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1497.956309][T27889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.379011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1498.454957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1498.556850][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.564267][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.628947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1498.710285][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1498.737959][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1498.788858][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.796192][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.030097][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1499.213862][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1499.318419][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1499.329369][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1499.392148][T28349] netlink: 'syz.6.7183': attribute type 3 has an invalid length. [ 1499.464457][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1499.482660][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1499.545869][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1499.585349][T28351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.603604][T28351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.627078][T28351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.714762][T28351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.957471][T28360] netlink: 'syz.0.7187': attribute type 28 has an invalid length. [ 1499.982476][T11163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1500.000958][T11163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1500.041182][T11163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1500.098110][T11163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1500.136108][T27889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1500.324088][T28361] device syzkaller0 entered promiscuous mode [ 1500.418830][T28381] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7190'. [ 1500.533583][T28381] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1505.079131][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1505.095507][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1505.141379][T27889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1505.211752][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1505.244698][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1505.446084][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1505.462752][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1505.547346][T27889] device veth0_vlan entered promiscuous mode [ 1505.668768][T28441] netlink: 'syz.1.7209': attribute type 10 has an invalid length. [ 1505.759338][T28441] device hsr0 entered promiscuous mode [ 1505.834391][T28441] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1505.883025][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1505.915689][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1506.004747][T27889] device veth1_vlan entered promiscuous mode [ 1506.135160][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1506.167461][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1506.179030][T28451] netlink: 'syz.0.7212': attribute type 3 has an invalid length. [ 1506.204059][T28451] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7212'. [ 1506.221669][T27889] device veth0_macvtap entered promiscuous mode [ 1506.247529][T27889] device veth1_macvtap entered promiscuous mode [ 1506.352910][T27889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.434010][T27889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.446081][T27889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1506.476978][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1506.501968][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1506.549277][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1506.609866][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1506.694510][T27889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1506.706380][T27889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.750642][T27889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1506.812369][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1506.849492][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1506.897715][T27889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.933242][T27889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.957401][T27889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.997650][T27889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.233508][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.241853][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.296912][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1507.362611][ T6062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.401224][ T6062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.456740][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1509.249293][T28519] netlink: 'syz.6.7231': attribute type 3 has an invalid length. [ 1509.275104][T28519] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7231'. [ 1512.758204][T28581] netlink: 'syz.2.7251': attribute type 3 has an invalid length. [ 1512.780522][T28581] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7251'. [ 1512.858666][T28587] netlink: 'syz.0.7253': attribute type 3 has an invalid length. [ 1512.908749][T28587] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7253'. [ 1515.215978][T28643] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1515.654179][T28642] delete_channel: no stack [ 1515.739189][T28654] netlink: 'syz.0.7272': attribute type 3 has an invalid length. [ 1515.826019][T28654] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7272'. [ 1516.068103][T28668] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7275'. [ 1516.115527][T28668] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7275'. [ 1516.155078][T28670] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7275'. [ 1516.246764][T28668] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7275'. [ 1517.038754][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1517.417615][T28694] FAULT_INJECTION: forcing a failure. [ 1517.417615][T28694] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.438368][T28694] CPU: 0 PID: 28694 Comm: syz.6.7282 Not tainted syzkaller #0 [ 1517.445945][T28694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1517.456067][T28694] Call Trace: [ 1517.459413][T28694] [ 1517.462406][T28694] dump_stack_lvl+0x188/0x24e [ 1517.467171][T28694] ? sctp_sendmsg+0x1686/0x2940 [ 1517.472098][T28694] ? ___sys_sendmsg+0x2a2/0x360 [ 1517.477024][T28694] ? show_regs_print_info+0x12/0x12 [ 1517.482304][T28694] ? load_image+0x410/0x410 [ 1517.486918][T28694] should_fail_ex+0x390/0x4c0 [ 1517.491688][T28694] should_failslab+0x5/0x20 [ 1517.496257][T28694] slab_pre_alloc_hook+0x59/0x300 [ 1517.501357][T28694] ? sctp_add_bind_addr+0x89/0x350 [ 1517.506558][T28694] __kmem_cache_alloc_node+0x4f/0x270 [ 1517.512027][T28694] ? sctp_add_bind_addr+0x89/0x350 [ 1517.517229][T28694] kmalloc_trace+0x26/0xe0 [ 1517.521825][T28694] sctp_add_bind_addr+0x89/0x350 [ 1517.526859][T28694] sctp_copy_local_addr_list+0x317/0x4d0 [ 1517.532625][T28694] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1517.538431][T28694] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1517.544613][T28694] ? sctp_v4_is_any+0x31/0x50 [ 1517.549341][T28694] ? sctp_copy_one_addr+0x93/0x660 [ 1517.554503][T28694] sctp_bind_addr_copy+0xaf/0x3c0 [ 1517.559573][T28694] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1517.565956][T28694] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1517.571295][T28694] ? __sctp_connect+0xd80/0xd80 [ 1517.576197][T28694] ? __local_bh_enable_ip+0x136/0x1c0 [ 1517.581605][T28694] ? _local_bh_enable+0xa0/0xa0 [ 1517.586487][T28694] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1517.592336][T28694] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1517.598207][T28694] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1517.603786][T28694] ? security_sctp_bind_connect+0x85/0xb0 [ 1517.609555][T28694] sctp_sendmsg+0x1686/0x2940 [ 1517.614497][T28694] ? sctp_getsockopt+0x8a0/0x8a0 [ 1517.619737][T28694] ? __might_fault+0xa6/0x120 [ 1517.624561][T28694] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1517.631101][T28694] ? aa_sock_msg_perm+0x94/0x150 [ 1517.636196][T28694] ? inet_sendmsg+0x7a/0x2a0 [ 1517.640829][T28694] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1517.646175][T28694] ? inet_send_prepare+0x250/0x250 [ 1517.651331][T28694] ____sys_sendmsg+0x5ed/0x9a0 [ 1517.656154][T28694] ? __sys_sendmsg_sock+0x30/0x30 [ 1517.661217][T28694] ? __import_iovec+0x306/0x510 [ 1517.666122][T28694] ? import_iovec+0x6f/0xa0 [ 1517.670671][T28694] ___sys_sendmsg+0x2a2/0x360 [ 1517.675397][T28694] ? __sys_sendmsg+0x2a0/0x2a0 [ 1517.680233][T28694] ? __lock_acquire+0x7c40/0x7c40 [ 1517.685347][T28694] __se_sys_sendmsg+0x1c3/0x2b0 [ 1517.690253][T28694] ? __x64_sys_sendmsg+0x80/0x80 [ 1517.695282][T28694] ? lockdep_hardirqs_on+0x94/0x140 [ 1517.700531][T28694] do_syscall_64+0x4c/0xa0 [ 1517.704993][T28694] ? clear_bhb_loop+0x60/0xb0 [ 1517.709713][T28694] ? clear_bhb_loop+0x60/0xb0 [ 1517.714456][T28694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1517.720425][T28694] RIP: 0033:0x7fcf5619de99 [ 1517.724908][T28694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.744576][T28694] RSP: 002b:00007fcf543f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1517.753039][T28694] RAX: ffffffffffffffda RBX: 00007fcf56425fa0 RCX: 00007fcf5619de99 [ 1517.761051][T28694] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 1517.769063][T28694] RBP: 00007fcf543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.777179][T28694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.785203][T28694] R13: 00007fcf56426038 R14: 00007fcf56425fa0 R15: 00007fffb7a8faf8 [ 1517.793269][T28694] [ 1518.110752][T28709] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1518.532213][T28714] netlink: 'syz.6.7288': attribute type 3 has an invalid length. [ 1518.543420][T28714] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7288'. [ 1520.505731][T28772] netlink: 'syz.2.7306': attribute type 25 has an invalid length. [ 1520.523290][T28772] netlink: 'syz.2.7306': attribute type 9 has an invalid length. [ 1520.531108][T28772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7306'. [ 1520.568426][T28771] netlink: 'syz.3.7305': attribute type 3 has an invalid length. [ 1520.576978][T28771] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7305'. [ 1522.146058][T28809] netlink: 'syz.1.7318': attribute type 5 has an invalid length. [ 1522.670696][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1522.794403][T28830] FAULT_INJECTION: forcing a failure. [ 1522.794403][T28830] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.810115][T28830] CPU: 1 PID: 28830 Comm: syz.1.7326 Not tainted syzkaller #0 [ 1522.817662][T28830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1522.827985][T28830] Call Trace: [ 1522.831358][T28830] [ 1522.834354][T28830] dump_stack_lvl+0x188/0x24e [ 1522.839120][T28830] ? show_regs_print_info+0x12/0x12 [ 1522.844392][T28830] ? load_image+0x410/0x410 [ 1522.848956][T28830] ? __might_sleep+0xd0/0xd0 [ 1522.853645][T28830] ? __lock_acquire+0x7c40/0x7c40 [ 1522.858738][T28830] should_fail_ex+0x390/0x4c0 [ 1522.863490][T28830] should_failslab+0x5/0x20 [ 1522.868035][T28830] slab_pre_alloc_hook+0x59/0x300 [ 1522.873118][T28830] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1522.878885][T28830] __kmem_cache_alloc_node+0x4f/0x270 [ 1522.884336][T28830] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1522.890028][T28830] __kmalloc_node+0xa2/0x240 [ 1522.894682][T28830] memcg_alloc_slab_cgroups+0x81/0x120 [ 1522.900226][T28830] slab_post_alloc_hook+0xba/0x490 [ 1522.905401][T28830] kmem_cache_alloc_node+0x1ad/0x310 [ 1522.910758][T28830] ? __alloc_skb+0xf9/0x7d0 [ 1522.915347][T28830] __alloc_skb+0xf9/0x7d0 [ 1522.919760][T28830] alloc_skb_with_frags+0xa7/0x710 [ 1522.925021][T28830] ? trace_call_bpf+0xbf/0x6b0 [ 1522.929861][T28830] sock_alloc_send_pskb+0x87f/0x9a0 [ 1522.935150][T28830] ? sock_kzfree_s+0x50/0x50 [ 1522.939797][T28830] ? aa_sk_perm+0x950/0x950 [ 1522.944470][T28830] queue_oob+0xef/0x540 [ 1522.948679][T28830] ? __might_sleep+0xd0/0xd0 [ 1522.953318][T28830] ? scm_stat_add+0xc0/0xc0 [ 1522.957874][T28830] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 1522.964100][T28830] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 1522.970405][T28830] unix_stream_sendmsg+0x8d2/0xa70 [ 1522.975584][T28830] ? aa_af_perm+0x340/0x340 [ 1522.980132][T28830] ? __might_fault+0xa6/0x120 [ 1522.984857][T28830] ? unix_show_fdinfo+0x2c0/0x2c0 [ 1522.989922][T28830] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1522.996395][T28830] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1523.001995][T28830] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1523.007323][T28830] ? security_socket_sendmsg+0x7c/0xa0 [ 1523.012920][T28830] ? unix_show_fdinfo+0x2c0/0x2c0 [ 1523.017993][T28830] ____sys_sendmsg+0x5ed/0x9a0 [ 1523.022850][T28830] ? __sys_sendmsg_sock+0x30/0x30 [ 1523.027918][T28830] ? __import_iovec+0x306/0x510 [ 1523.032838][T28830] ? import_iovec+0x6f/0xa0 [ 1523.037404][T28830] ___sys_sendmsg+0x2a2/0x360 [ 1523.042149][T28830] ? __sys_sendmsg+0x2a0/0x2a0 [ 1523.047469][T28830] ? __lock_acquire+0x7c40/0x7c40 [ 1523.052665][T28830] __se_sys_sendmsg+0x1c3/0x2b0 [ 1523.057592][T28830] ? ct_nmi_exit+0x145/0x1c0 [ 1523.062237][T28830] ? __x64_sys_sendmsg+0x80/0x80 [ 1523.067276][T28830] ? lockdep_hardirqs_on+0x94/0x140 [ 1523.072529][T28830] do_syscall_64+0x4c/0xa0 [ 1523.077023][T28830] ? clear_bhb_loop+0x60/0xb0 [ 1523.081747][T28830] ? clear_bhb_loop+0x60/0xb0 [ 1523.086475][T28830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1523.092423][T28830] RIP: 0033:0x7f355639de99 [ 1523.096885][T28830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.116559][T28830] RSP: 002b:00007f3557299028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1523.125027][T28830] RAX: ffffffffffffffda RBX: 00007f3556625fa0 RCX: 00007f355639de99 [ 1523.133039][T28830] RDX: 0000000000001001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1523.141058][T28830] RBP: 00007f3557299090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.149065][T28830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.157079][T28830] R13: 00007f3556626038 R14: 00007f3556625fa0 R15: 00007ffd96150a08 [ 1523.165147][T28830] [ 1523.398715][T28826] netlink: 'syz.6.7325': attribute type 3 has an invalid length. [ 1523.418423][T28826] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7325'. [ 1526.837261][T28873] netlink: 'syz.2.7340': attribute type 3 has an invalid length. [ 1526.855641][T28873] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7340'. [ 1527.921167][T28897] FAULT_INJECTION: forcing a failure. [ 1527.921167][T28897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.944535][T28897] CPU: 0 PID: 28897 Comm: syz.2.7351 Not tainted syzkaller #0 [ 1527.952094][T28897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1527.962223][T28897] Call Trace: [ 1527.965545][T28897] [ 1527.968523][T28897] dump_stack_lvl+0x188/0x24e [ 1527.973304][T28897] ? show_regs_print_info+0x12/0x12 [ 1527.978651][T28897] ? load_image+0x410/0x410 [ 1527.983303][T28897] ? __lock_acquire+0x7c40/0x7c40 [ 1527.988392][T28897] should_fail_ex+0x390/0x4c0 [ 1527.993227][T28897] strncpy_from_user+0x32/0x340 [ 1527.998140][T28897] bpf_prog_load+0x200/0x1530 [ 1528.002894][T28897] ? map_freeze+0x390/0x390 [ 1528.007460][T28897] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1528.013679][T28897] ? lockdep_hardirqs_on+0x94/0x140 [ 1528.018942][T28897] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 1528.024463][T28897] ? bpf_lsm_bpf+0x5/0x10 [ 1528.028839][T28897] ? security_bpf+0x7a/0xa0 [ 1528.033448][T28897] __sys_bpf+0x5b8/0x780 [ 1528.037781][T28897] ? bpf_link_show_fdinfo+0x380/0x380 [ 1528.043232][T28897] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1528.049545][T28897] __x64_sys_bpf+0x78/0x90 [ 1528.054032][T28897] do_syscall_64+0x4c/0xa0 [ 1528.058516][T28897] ? clear_bhb_loop+0x60/0xb0 [ 1528.063250][T28897] ? clear_bhb_loop+0x60/0xb0 [ 1528.067986][T28897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1528.073935][T28897] RIP: 0033:0x7f70ea59de99 [ 1528.078396][T28897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.098152][T28897] RSP: 002b:00007f70eb525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1528.106695][T28897] RAX: ffffffffffffffda RBX: 00007f70ea825fa0 RCX: 00007f70ea59de99 [ 1528.114742][T28897] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1528.122794][T28897] RBP: 00007f70eb525090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.130911][T28897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.139135][T28897] R13: 00007f70ea826038 R14: 00007f70ea825fa0 R15: 00007ffe09430d98 [ 1528.147468][T28897] [ 1530.580796][T28918] -: renamed from syzkaller0 [ 1531.472238][T28935] device syzkaller0 entered promiscuous mode [ 1532.983124][T11163] wlan1: Trigger new scan to find an IBSS to join [ 1534.658454][T28950] netlink: 'syz.1.7367': attribute type 39 has an invalid length. [ 1534.667017][T28952] netlink: 'syz.2.7368': attribute type 10 has an invalid length. [ 1534.678171][T28952] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7368'. [ 1534.994365][T28972] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1536.138955][T28998] netlink: 'syz.0.7386': attribute type 4 has an invalid length. [ 1536.184193][T28998] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.7386'. [ 1536.334840][T29006] netlink: 'syz.2.7389': attribute type 3 has an invalid length. [ 1536.342701][T29006] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1536.405705][T29013] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7391'. [ 1536.432223][T29013] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1536.984962][ T6068] wlan1: Trigger new scan to find an IBSS to join [ 1537.127995][T29023] netlink: 'syz.2.7395': attribute type 4 has an invalid length. [ 1537.184845][T29023] netlink: 'syz.2.7395': attribute type 8 has an invalid length. [ 1537.284375][T29023] netlink: 109560 bytes leftover after parsing attributes in process `syz.2.7395'. [ 1537.327112][T29025] netlink: 'syz.1.7396': attribute type 3 has an invalid length. [ 1537.365798][T29025] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7396'. [ 1538.449792][T29052] netlink: 'syz.0.7404': attribute type 8 has an invalid length. [ 1538.488883][T29052] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1538.504554][T29055] netlink: 'syz.0.7404': attribute type 13 has an invalid length. [ 1538.512490][T29055] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1538.577001][T29055] syz_tun: refused to change device tx_queue_len [ 1538.590448][T29055] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1538.617659][T29056] netlink: 'syz.1.7405': attribute type 10 has an invalid length. [ 1538.662450][T29056] bridge0: port 3(team0) entered disabled state [ 1538.702236][T29056] device team0 left promiscuous mode [ 1538.708136][T29056] device team_slave_0 left promiscuous mode [ 1538.716155][T29056] device team_slave_1 left promiscuous mode [ 1538.722967][T29056] bridge0: port 3(team0) entered disabled state [ 1538.737993][T29056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.768085][T29056] bond0: (slave team0): Enslaving as an active interface with an up link [ 1538.984865][ T6068] wlan1: Creating new IBSS network, BSSID 5a:c6:69:e4:78:bc [ 1539.449310][T29069] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7411'. [ 1539.708699][T29078] validate_nla: 2 callbacks suppressed [ 1539.708735][T29078] netlink: 'syz.0.7414': attribute type 3 has an invalid length. [ 1539.726014][T29078] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7414'. [ 1539.860365][T29080] netlink: 'syz.2.7416': attribute type 3 has an invalid length. [ 1539.890831][T29080] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7416'. [ 1541.171398][T29119] netlink: 'syz.0.7428': attribute type 10 has an invalid length. [ 1541.203202][T29119] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7428'. [ 1541.531203][T29137] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7435'. [ 1541.908488][T29146] netlink: 'syz.0.7439': attribute type 3 has an invalid length. [ 1541.999525][T29146] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7439'. [ 1542.607616][T29169] netlink: 'syz.6.7444': attribute type 3 has an invalid length. [ 1542.616283][T29169] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7444'. [ 1542.759483][T29175] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7446'. [ 1544.514116][T29205] netlink: 'syz.2.7458': attribute type 3 has an invalid length. [ 1544.522563][T29205] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7458'. [ 1545.117376][T29225] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7464'. [ 1545.235217][T29228] netlink: 'syz.1.7465': attribute type 39 has an invalid length. [ 1545.363859][T29233] netlink: 'syz.2.7467': attribute type 10 has an invalid length. [ 1545.644322][T29233] team0: Device vxcan1 is of different type [ 1545.852150][T29242] netlink: 'syz.0.7471': attribute type 13 has an invalid length. [ 1546.028049][T29249] netlink: 'syz.0.7471': attribute type 2 has an invalid length. [ 1546.084826][T29249] netlink: 'syz.0.7471': attribute type 2 has an invalid length. [ 1550.831866][T29319] device syzkaller0 entered promiscuous mode [ 1551.128466][T29326] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1551.308101][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.314570][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.065112][T29352] netlink: 'syz.2.7509': attribute type 3 has an invalid length. [ 1553.084246][T29352] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7509'. [ 1553.386708][T29357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7513'. [ 1556.921868][T29344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7507'. [ 1556.944921][T29357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7513'. [ 1557.778092][T29377] netlink: 'syz.0.7518': attribute type 10 has an invalid length. [ 1557.829837][T29377] device vxcan1 entered promiscuous mode [ 1557.840085][T29377] team0: Device vxcan1 is of different type [ 1557.972186][T29392] netlink: 'syz.6.7523': attribute type 2 has an invalid length. [ 1557.983317][T29392] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7523'. [ 1558.054582][T29399] netlink: 'syz.2.7526': attribute type 3 has an invalid length. [ 1558.065814][T29399] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7526'. [ 1558.234016][T29407] netlink: 'syz.2.7526': attribute type 2 has an invalid length. [ 1558.345508][T29407] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.7526'. [ 1559.033972][T29427] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.7529'. [ 1560.219918][T29449] netlink: 'syz.6.7538': attribute type 10 has an invalid length. [ 1563.184968][T29518] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 1563.355394][T29520] netlink: 'syz.0.7563': attribute type 28 has an invalid length. [ 1564.542011][T29548] FAULT_INJECTION: forcing a failure. [ 1564.542011][T29548] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.576906][T29548] CPU: 0 PID: 29548 Comm: syz.1.7573 Not tainted syzkaller #0 [ 1564.584834][T29548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1564.594950][T29548] Call Trace: [ 1564.598373][T29548] [ 1564.601349][T29548] dump_stack_lvl+0x188/0x24e [ 1564.606112][T29548] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1564.612352][T29548] ? show_regs_print_info+0x12/0x12 [ 1564.617618][T29548] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1564.623940][T29548] should_fail_ex+0x390/0x4c0 [ 1564.628699][T29548] should_failslab+0x5/0x20 [ 1564.633254][T29548] slab_pre_alloc_hook+0x59/0x300 [ 1564.638443][T29548] ? bpf_test_init+0x9f/0x140 [ 1564.643182][T29548] __kmem_cache_alloc_node+0x4f/0x270 [ 1564.648640][T29548] ? bpf_test_init+0x9f/0x140 [ 1564.653391][T29548] __kmalloc+0xa3/0x240 [ 1564.657637][T29548] bpf_test_init+0x9f/0x140 [ 1564.662190][T29548] bpf_prog_test_run_xdp+0x488/0xf80 [ 1564.667525][T29548] ? __lock_acquire+0x7c40/0x7c40 [ 1564.672633][T29548] ? dev_put+0x80/0x80 [ 1564.676761][T29548] ? dev_put+0x80/0x80 [ 1564.680906][T29548] bpf_prog_test_run+0x31c/0x390 [ 1564.685904][T29548] __sys_bpf+0x62b/0x780 [ 1564.690213][T29548] ? bpf_link_show_fdinfo+0x380/0x380 [ 1564.695664][T29548] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1564.701890][T29548] __x64_sys_bpf+0x78/0x90 [ 1564.706382][T29548] do_syscall_64+0x4c/0xa0 [ 1564.710849][T29548] ? clear_bhb_loop+0x60/0xb0 [ 1564.715605][T29548] ? clear_bhb_loop+0x60/0xb0 [ 1564.720333][T29548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1564.726275][T29548] RIP: 0033:0x7f355639de99 [ 1564.730729][T29548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.750483][T29548] RSP: 002b:00007f3557299028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1564.759051][T29548] RAX: ffffffffffffffda RBX: 00007f3556625fa0 RCX: 00007f355639de99 [ 1564.767107][T29548] RDX: 0000000000000011 RSI: 0000200000000600 RDI: 000000000000000a [ 1564.775676][T29548] RBP: 00007f3557299090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.783726][T29548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.791757][T29548] R13: 00007f3556626038 R14: 00007f3556625fa0 R15: 00007ffd96150a08 [ 1564.799804][T29548] [ 1565.746098][T29578] netlink: 'syz.2.7585': attribute type 6 has an invalid length. [ 1565.859059][T29578] netlink: 'syz.2.7585': attribute type 10 has an invalid length. [ 1565.909907][T29578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7585'. [ 1565.956601][T29578] device dummy0 entered promiscuous mode [ 1566.207931][T29578] bridge0: port 3(dummy0) entered blocking state [ 1566.247019][T29578] bridge0: port 3(dummy0) entered disabled state [ 1566.512351][T29578] bridge0: port 3(dummy0) entered blocking state [ 1566.519344][T29578] bridge0: port 3(dummy0) entered forwarding state [ 1566.749342][T29591] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7589'. [ 1567.152217][T29601] netlink: 'syz.3.7593': attribute type 3 has an invalid length. [ 1567.169927][T29602] netlink: 'syz.2.7592': attribute type 1 has an invalid length. [ 1567.190725][T29601] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7593'. [ 1567.209463][T29602] netlink: 'syz.2.7592': attribute type 3 has an invalid length. [ 1567.259825][T29601] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.7593'. [ 1567.276624][T29602] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7592'. [ 1569.052288][T29639] netlink: 'syz.6.7605': attribute type 6 has an invalid length. [ 1569.414699][T29642] netlink: 'syz.6.7605': attribute type 10 has an invalid length. [ 1569.535776][T29642] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7605'. [ 1569.598707][T29642] device dummy0 entered promiscuous mode [ 1569.626529][T29642] bridge0: port 3(dummy0) entered blocking state [ 1569.652694][T29642] bridge0: port 3(dummy0) entered disabled state [ 1569.691930][T29642] bridge0: port 3(dummy0) entered blocking state [ 1569.698698][T29642] bridge0: port 3(dummy0) entered forwarding state [ 1570.465963][T29666] netlink: 'syz.1.7615': attribute type 39 has an invalid length. [ 1570.495416][T29666] device macvlan0 entered promiscuous mode [ 1570.557094][T29671] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.7617'. [ 1570.630897][T29673] netlink: 'syz.6.7616': attribute type 10 has an invalid length. [ 1570.641103][T29671] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1571.407378][T29685] netlink: 'syz.6.7621': attribute type 25 has an invalid length. [ 1571.443594][T29685] netlink: 'syz.6.7621': attribute type 28 has an invalid length. [ 1571.859703][T29692] netlink: 'syz.1.7623': attribute type 6 has an invalid length. [ 1572.025365][T29692] netlink: 'syz.1.7623': attribute type 10 has an invalid length. [ 1572.064185][T29692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7623'. [ 1572.144826][T29692] device dummy0 entered promiscuous mode [ 1572.190070][T29700] netlink: 'syz.2.7628': attribute type 3 has an invalid length. [ 1572.191115][T29692] bridge0: port 3(dummy0) entered blocking state [ 1572.210773][T29692] bridge0: port 3(dummy0) entered disabled state [ 1572.255551][T29700] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7628'. [ 1572.321979][T29692] bridge0: port 3(dummy0) entered blocking state [ 1572.330977][T29692] bridge0: port 3(dummy0) entered forwarding state [ 1572.572417][T29711] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7632'. [ 1572.618483][T29711] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1575.518638][T29756] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7646'. [ 1575.528334][T29756] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1578.063969][T29791] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7658'. [ 1578.094940][T29791] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1579.598256][T29826] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7671'. [ 1579.693765][T29826] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1580.968526][T29855] netlink: 'syz.0.7682': attribute type 12 has an invalid length. [ 1581.018537][T29855] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7682'. [ 1581.111632][T29859] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7684'. [ 1581.183208][T29859] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1582.066481][T29875] netlink: 'syz.3.7690': attribute type 11 has an invalid length. [ 1582.084522][T29875] netlink: 'syz.3.7690': attribute type 11 has an invalid length. [ 1582.138956][T29875] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7690'. [ 1582.452006][T29891] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.7697'. [ 1582.543280][T29891] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1586.415198][T29916] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1586.602167][T29916] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1589.166904][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 1589.602855][T29945] device syzkaller0 entered promiscuous mode [ 1589.867626][T29956] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7722'. [ 1589.877633][T29956] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1594.804943][T29996] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.7733'. [ 1594.815932][T29996] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1596.154277][T29988] device syzkaller0 entered promiscuous mode [ 1596.193746][T29998] netlink: 'syz.2.7734': attribute type 21 has an invalid length. [ 1596.201742][T29998] netlink: 'syz.2.7734': attribute type 7 has an invalid length. [ 1597.538624][T30034] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7744'. [ 1597.551072][T30034] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1606.944355][T30032] netlink: 'syz.2.7743': attribute type 10 has an invalid length. [ 1606.952946][T30032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7743'. [ 1606.981308][T30032] team0: Port device geneve0 added [ 1607.179016][T30067] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.7755'. [ 1607.239294][T30067] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1607.300948][T30074] netlink: 'syz.3.7758': attribute type 10 has an invalid length. [ 1607.349397][T30074] device veth1_macvtap left promiscuous mode [ 1608.129388][T30098] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.7765'. [ 1608.173187][T30098] openvswitch: netlink: Key type 386 is out of range max 32 [ 1608.723076][T30110] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.7767'. [ 1608.761240][T30115] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7770'. [ 1608.812046][T30115] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1609.940184][T30147] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7782'. [ 1609.970488][T30147] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1609.984435][T30148] netlink: 'syz.2.7780': attribute type 10 has an invalid length. [ 1609.992498][T30148] device hsr0 entered promiscuous mode [ 1610.014108][T30148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1610.034810][T30148] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1610.117518][T30153] netlink: 'syz.3.7784': attribute type 3 has an invalid length. [ 1610.146137][T30153] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7784'. [ 1610.209311][T30153] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.7784'. [ 1610.702382][T30180] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.7795'. [ 1610.750149][T30180] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1611.952011][T30204] netlink: 'syz.1.7805': attribute type 13 has an invalid length. [ 1611.976388][T30204] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7805'. [ 1612.288472][T30204] erspan0: refused to change device tx_queue_len [ 1612.446629][T30214] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7807'. [ 1612.472843][T30214] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1612.661801][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.668231][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.141903][T30241] netlink: 'syz.3.7817': attribute type 25 has an invalid length. [ 1613.170820][T30241] netlink: 'syz.3.7817': attribute type 5 has an invalid length. [ 1613.237234][T30241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7817'. [ 1613.592740][T30247] netlink: 'syz.2.7820': attribute type 25 has an invalid length. [ 1613.612737][T30247] netlink: 'syz.2.7820': attribute type 5 has an invalid length. [ 1613.626114][T30247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7820'. [ 1613.723764][T30254] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7823'. [ 1613.754270][T30254] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1614.076033][T30262] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.7826'. [ 1614.276821][T30268] device syzkaller0 entered promiscuous mode [ 1615.519624][T30297] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7836'. [ 1615.543553][T30297] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1615.854892][T30314] netlink: 26 bytes leftover after parsing attributes in process `syz.1.7833'. [ 1616.348524][T30298] delete_channel: no stack [ 1618.710295][T30337] FAULT_INJECTION: forcing a failure. [ 1618.710295][T30337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1618.799526][T30337] CPU: 0 PID: 30337 Comm: syz.6.7846 Not tainted syzkaller #0 [ 1618.807097][T30337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1618.817379][T30337] Call Trace: [ 1618.820709][T30337] [ 1618.823696][T30337] dump_stack_lvl+0x188/0x24e [ 1618.828457][T30337] ? show_regs_print_info+0x12/0x12 [ 1618.833832][T30337] ? load_image+0x410/0x410 [ 1618.838402][T30337] ? __lock_acquire+0x7c40/0x7c40 [ 1618.843492][T30337] ? lockdep_hardirqs_on+0x94/0x140 [ 1618.848788][T30337] should_fail_ex+0x390/0x4c0 [ 1618.853549][T30337] _copy_from_user+0x2c/0x170 [ 1618.858286][T30337] __sys_bpf+0x2ea/0x780 [ 1618.862587][T30337] ? bpf_link_show_fdinfo+0x380/0x380 [ 1618.868043][T30337] ? lock_chain_count+0x20/0x20 [ 1618.873041][T30337] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1618.879107][T30337] __x64_sys_bpf+0x78/0x90 [ 1618.883593][T30337] do_syscall_64+0x4c/0xa0 [ 1618.888069][T30337] ? clear_bhb_loop+0x60/0xb0 [ 1618.892832][T30337] ? clear_bhb_loop+0x60/0xb0 [ 1618.897578][T30337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1618.903617][T30337] RIP: 0033:0x7fcf5619de99 [ 1618.908079][T30337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.927960][T30337] RSP: 002b:00007fcf543f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1618.936760][T30337] RAX: ffffffffffffffda RBX: 00007fcf56425fa0 RCX: 00007fcf5619de99 [ 1618.945436][T30337] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 1618.953689][T30337] RBP: 00007fcf543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1618.961920][T30337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.969981][T30337] R13: 00007fcf56426038 R14: 00007fcf56425fa0 R15: 00007fffb7a8faf8 [ 1618.978050][T30337] [ 1621.186828][T30361] netlink: 'syz.1.7848': attribute type 10 has an invalid length. [ 1622.141704][T30361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.344230][T30361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.389170][T30361] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1622.492407][T30388] device syzkaller0 entered promiscuous mode [ 1627.133364][T30425] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.7865'. [ 1628.470896][T30488] netlink: 'syz.2.7887': attribute type 29 has an invalid length. [ 1628.481577][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1628.491502][T30488] netlink: 'syz.2.7887': attribute type 29 has an invalid length. [ 1628.509401][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1628.774632][T30494] FAULT_INJECTION: forcing a failure. [ 1628.774632][T30494] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.801849][T30494] CPU: 1 PID: 30494 Comm: syz.6.7889 Not tainted syzkaller #0 [ 1628.809414][T30494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1628.819525][T30494] Call Trace: [ 1628.822847][T30494] [ 1628.825825][T30494] dump_stack_lvl+0x188/0x24e [ 1628.830545][T30494] ? show_regs_print_info+0x12/0x12 [ 1628.835886][T30494] ? load_image+0x410/0x410 [ 1628.840448][T30494] ? __might_sleep+0xd0/0xd0 [ 1628.845189][T30494] ? __lock_acquire+0x7c40/0x7c40 [ 1628.850405][T30494] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1628.856435][T30494] should_fail_ex+0x390/0x4c0 [ 1628.861150][T30494] should_failslab+0x5/0x20 [ 1628.865725][T30494] slab_pre_alloc_hook+0x59/0x300 [ 1628.870792][T30494] ? lockdep_hardirqs_on+0x94/0x140 [ 1628.876115][T30494] ? __get_vm_area_node+0x122/0x330 [ 1628.881348][T30494] __kmem_cache_alloc_node+0x4f/0x270 [ 1628.886760][T30494] ? __get_vm_area_node+0x122/0x330 [ 1628.891996][T30494] kmalloc_node_trace+0x22/0xe0 [ 1628.896902][T30494] __get_vm_area_node+0x122/0x330 [ 1628.902080][T30494] __vmalloc_node_range+0x357/0x1380 [ 1628.907423][T30494] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1628.913133][T30494] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1628.918907][T30494] ? aa_get_newest_label+0xf9/0x5b0 [ 1628.924140][T30494] ? free_vm_area+0x50/0x50 [ 1628.928680][T30494] ? end_current_label_crit_section+0x170/0x170 [ 1628.934954][T30494] ? __lock_acquire+0x7c40/0x7c40 [ 1628.940105][T30494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1628.946323][T30494] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1628.951926][T30494] __vmalloc+0x76/0x80 [ 1628.956026][T30494] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1628.961608][T30494] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1628.967015][T30494] ? bpf_prog_alloc+0x13/0x1b0 [ 1628.971821][T30494] bpf_prog_alloc+0x1c/0x1b0 [ 1628.976455][T30494] bpf_prog_load+0x7d4/0x1530 [ 1628.981347][T30494] ? map_freeze+0x390/0x390 [ 1628.985890][T30494] ? __might_fault+0xa6/0x120 [ 1628.990599][T30494] ? __might_fault+0xa6/0x120 [ 1628.995333][T30494] ? __might_fault+0xc2/0x120 [ 1629.000145][T30494] ? __might_fault+0xa6/0x120 [ 1629.004879][T30494] ? bpf_lsm_bpf+0x5/0x10 [ 1629.009250][T30494] ? security_bpf+0x7a/0xa0 [ 1629.013796][T30494] __sys_bpf+0x5b8/0x780 [ 1629.018077][T30494] ? bpf_link_show_fdinfo+0x380/0x380 [ 1629.023506][T30494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1629.029966][T30494] __x64_sys_bpf+0x78/0x90 [ 1629.034428][T30494] do_syscall_64+0x4c/0xa0 [ 1629.038898][T30494] ? clear_bhb_loop+0x60/0xb0 [ 1629.043607][T30494] ? clear_bhb_loop+0x60/0xb0 [ 1629.048412][T30494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1629.054351][T30494] RIP: 0033:0x7fcf5619de99 [ 1629.058899][T30494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.078721][T30494] RSP: 002b:00007fcf543f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1629.087172][T30494] RAX: ffffffffffffffda RBX: 00007fcf56425fa0 RCX: 00007fcf5619de99 [ 1629.095359][T30494] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1629.103649][T30494] RBP: 00007fcf543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.111914][T30494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.120016][T30494] R13: 00007fcf56426038 R14: 00007fcf56425fa0 R15: 00007fffb7a8faf8 [ 1629.128229][T30494] [ 1629.199878][T30505] device lo entered promiscuous mode [ 1629.285088][T30494] syz.6.7889: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1629.348647][T30497] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.7890'. [ 1629.463474][T30494] CPU: 0 PID: 30494 Comm: syz.6.7889 Not tainted syzkaller #0 [ 1629.471044][T30494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1629.481158][T30494] Call Trace: [ 1629.484606][T30494] [ 1629.487579][T30494] dump_stack_lvl+0x188/0x24e [ 1629.492321][T30494] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1629.498793][T30494] ? show_regs_print_info+0x12/0x12 [ 1629.504056][T30494] ? load_image+0x410/0x410 [ 1629.508616][T30494] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1629.515088][T30494] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1629.521647][T30494] warn_alloc+0x242/0x330 [ 1629.526019][T30494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1629.532210][T30494] ? zone_watermark_ok_safe+0x270/0x270 [ 1629.537827][T30494] ? __get_vm_area_node+0x318/0x330 [ 1629.543723][T30494] __vmalloc_node_range+0x37c/0x1380 [ 1629.549138][T30494] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1629.555102][T30494] ? aa_get_newest_label+0xf9/0x5b0 [ 1629.560446][T30494] ? free_vm_area+0x50/0x50 [ 1629.565168][T30494] ? end_current_label_crit_section+0x170/0x170 [ 1629.571462][T30494] ? __lock_acquire+0x7c40/0x7c40 [ 1629.576696][T30494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1629.583088][T30494] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1629.588706][T30494] __vmalloc+0x76/0x80 [ 1629.592981][T30494] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1629.598945][T30494] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1629.604509][T30494] ? bpf_prog_alloc+0x13/0x1b0 [ 1629.609514][T30494] bpf_prog_alloc+0x1c/0x1b0 [ 1629.614458][T30494] bpf_prog_load+0x7d4/0x1530 [ 1629.619192][T30494] ? map_freeze+0x390/0x390 [ 1629.623740][T30494] ? __might_fault+0xa6/0x120 [ 1629.628724][T30494] ? __might_fault+0xa6/0x120 [ 1629.633609][T30494] ? __might_fault+0xc2/0x120 [ 1629.638324][T30494] ? __might_fault+0xa6/0x120 [ 1629.643041][T30494] ? bpf_lsm_bpf+0x5/0x10 [ 1629.647416][T30494] ? security_bpf+0x7a/0xa0 [ 1629.651980][T30494] __sys_bpf+0x5b8/0x780 [ 1629.656267][T30494] ? bpf_link_show_fdinfo+0x380/0x380 [ 1629.661786][T30494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1629.668099][T30494] __x64_sys_bpf+0x78/0x90 [ 1629.672546][T30494] do_syscall_64+0x4c/0xa0 [ 1629.677089][T30494] ? clear_bhb_loop+0x60/0xb0 [ 1629.681799][T30494] ? clear_bhb_loop+0x60/0xb0 [ 1629.686598][T30494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1629.692610][T30494] RIP: 0033:0x7fcf5619de99 [ 1629.697140][T30494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.716793][T30494] RSP: 002b:00007fcf543f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1629.725255][T30494] RAX: ffffffffffffffda RBX: 00007fcf56425fa0 RCX: 00007fcf5619de99 [ 1629.733259][T30494] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1629.741521][T30494] RBP: 00007fcf543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.749648][T30494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.757645][T30494] R13: 00007fcf56426038 R14: 00007fcf56425fa0 R15: 00007fffb7a8faf8 [ 1629.765662][T30494] [ 1629.870501][T30494] Mem-Info: [ 1629.875414][T30494] active_anon:9524 inactive_anon:0 isolated_anon:0 [ 1629.875414][T30494] active_file:21819 inactive_file:40561 isolated_file:0 [ 1629.875414][T30494] unevictable:768 dirty:229 writeback:0 [ 1629.875414][T30494] slab_reclaimable:21731 slab_unreclaimable:97017 [ 1629.875414][T30494] mapped:29988 shmem:1385 pagetables:757 [ 1629.875414][T30494] sec_pagetables:0 bounce:0 [ 1629.875414][T30494] kernel_misc_reclaimable:0 [ 1629.875414][T30494] free:1307922 free_pcp:11312 free_cma:0 [ 1630.205381][T30494] Node 0 active_anon:38028kB inactive_anon:0kB active_file:87276kB inactive_file:162040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119972kB dirty:932kB writeback:0kB shmem:4004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10796kB pagetables:3140kB sec_pagetables:0kB all_unreclaimable? no [ 1630.411752][T30494] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1630.491989][T30494] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1630.562257][T30494] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1630.575632][T30494] Node 0 DMA32 free:1321184kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:38028kB inactive_anon:0kB active_file:87276kB inactive_file:162040kB unevictable:1536kB writepending:932kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:23544kB local_pcp:14544kB free_cma:0kB [ 1630.671775][T30494] lowmem_reserve[]: 0 0 1 1 1 [ 1630.681458][T30494] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1630.793044][T30494] lowmem_reserve[]: 0 0 0 0 0 [ 1630.797936][T30494] Node 1 Normal free:3895060kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22288kB local_pcp:9572kB free_cma:0kB [ 1631.001374][T30494] lowmem_reserve[]: 0 0 0 0 0 [ 1631.021643][T30494] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1631.043171][T30494] Node 0 DMA32: 1568*4kB (UME) 2506*8kB (UME) 2833*16kB (UME) 1646*32kB (UME) 1225*64kB (UME) 472*128kB (UME) 221*256kB (UME) 108*512kB (UME) 54*1024kB (UM) 29*2048kB (UM) 203*4096kB (UM) = 1321184kB [ 1631.073406][T30494] Node 0 Normal: 5*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1631.088416][T30494] Node 1 Normal: 235*4kB (UME) 53*8kB (UME) 36*16kB (UME) 32*32kB (UME) 12*64kB (UM) 9*128kB (UME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895060kB [ 1631.109893][T30494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1631.120852][T30494] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1631.133666][T30494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1631.145043][T30494] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1631.156126][T30494] 63765 total pagecache pages [ 1631.160918][T30494] 0 pages in swap cache [ 1631.171054][T30494] Free swap = 124996kB [ 1631.181164][T30494] Total swap = 124996kB [ 1631.188012][T30494] 2097051 pages RAM [ 1631.192080][T30494] 0 pages HighMem/MovableOnly [ 1631.198528][T30494] 415222 pages reserved [ 1631.202950][T30494] 0 pages cma reserved [ 1632.953896][T30534] tap0: tun_chr_ioctl cmd 1074025680 [ 1632.971845][T30538] netlink: 'syz.6.7904': attribute type 10 has an invalid length. [ 1632.980419][T30538] netlink: 55 bytes leftover after parsing attributes in process `syz.6.7904'. [ 1633.197893][T30544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7905'. [ 1633.847358][T30540] tap0: tun_chr_ioctl cmd 1074025677 [ 1633.853471][T30540] tap0: linktype set to 805 [ 1633.871106][T30552] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7909'. [ 1634.056817][T30553] device syzkaller0 entered promiscuous mode [ 1634.502411][T30573] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7914'. [ 1635.331069][T30589] syz.3.7920[30589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1635.331277][T30589] syz.3.7920[30589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1635.442761][T30591] netlink: 'syz.6.7921': attribute type 3 has an invalid length. [ 1635.473663][T30591] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7921'. [ 1635.682931][T30595] netlink: 'syz.2.7922': attribute type 4 has an invalid length. [ 1635.691421][T30595] netlink: 'syz.2.7922': attribute type 8 has an invalid length. [ 1635.700006][T30595] netlink: 109560 bytes leftover after parsing attributes in process `syz.2.7922'. [ 1636.006233][T30604] netlink: 'syz.2.7924': attribute type 11 has an invalid length. [ 1636.031709][T30604] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7924'. [ 1636.758676][T30598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1640.076271][ T6070] tipc: Subscription rejected, illegal request [ 1640.172235][T30637] netlink: 'syz.3.7934': attribute type 2 has an invalid length. [ 1640.272271][T30637] netlink: 'syz.3.7934': attribute type 8 has an invalid length. [ 1640.360015][T30637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7934'. [ 1640.487856][T30639] netlink: 'syz.2.7935': attribute type 3 has an invalid length. [ 1640.676778][T30639] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7935'. [ 1640.882784][T30641] device veth1_macvtap left promiscuous mode [ 1640.906117][T30636] syz.2.7935[30636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1640.906970][T30636] syz.2.7935[30636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1641.118258][T30649] netlink: 'syz.1.7940': attribute type 11 has an invalid length. [ 1641.174985][T30647] FAULT_INJECTION: forcing a failure. [ 1641.174985][T30647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.195232][T30647] CPU: 1 PID: 30647 Comm: syz.0.7939 Not tainted syzkaller #0 [ 1641.202768][T30647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1641.206870][T30649] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7940'. [ 1641.212844][T30647] Call Trace: [ 1641.212857][T30647] [ 1641.228435][T30647] dump_stack_lvl+0x188/0x24e [ 1641.233169][T30647] ? show_regs_print_info+0x12/0x12 [ 1641.238420][T30647] ? load_image+0x410/0x410 [ 1641.242975][T30647] ? __might_fault+0xa6/0x120 [ 1641.247742][T30647] should_fail_ex+0x390/0x4c0 [ 1641.252567][T30647] copyin+0x1b/0x120 [ 1641.256530][T30647] _copy_from_iter+0x447/0x1130 [ 1641.261454][T30647] ? copyout_mc+0x110/0x110 [ 1641.266100][T30647] ? __virt_addr_valid+0x188/0x540 [ 1641.271271][T30647] ? __virt_addr_valid+0x188/0x540 [ 1641.276449][T30647] ? __virt_addr_valid+0x467/0x540 [ 1641.281613][T30647] ? __phys_addr_symbol+0x2b/0x70 [ 1641.286691][T30647] ? __check_object_size+0x4f6/0xa70 [ 1641.292021][T30647] netlink_sendmsg+0x755/0xbd0 [ 1641.296874][T30647] ? netlink_getsockopt+0x550/0x550 [ 1641.302160][T30647] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1641.307786][T30647] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1641.313113][T30647] ? security_socket_sendmsg+0x7c/0xa0 [ 1641.318623][T30647] ? netlink_getsockopt+0x550/0x550 [ 1641.323875][T30647] ____sys_sendmsg+0x5ed/0x9a0 [ 1641.328704][T30647] ? __sys_sendmsg_sock+0x30/0x30 [ 1641.333776][T30647] ? __import_iovec+0x306/0x510 [ 1641.338773][T30647] ? import_iovec+0x6f/0xa0 [ 1641.343334][T30647] ___sys_sendmsg+0x2a2/0x360 [ 1641.348070][T30647] ? __sys_sendmsg+0x2a0/0x2a0 [ 1641.352948][T30647] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1641.358771][T30647] __se_sys_sendmsg+0x1c3/0x2b0 [ 1641.363679][T30647] ? __x64_sys_sendmsg+0x80/0x80 [ 1641.368684][T30647] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1641.374633][T30647] do_syscall_64+0x4c/0xa0 [ 1641.379101][T30647] ? clear_bhb_loop+0x60/0xb0 [ 1641.383833][T30647] ? clear_bhb_loop+0x60/0xb0 [ 1641.388565][T30647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1641.394516][T30647] RIP: 0033:0x7f0dfb99de99 [ 1641.398983][T30647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.399257][T30648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.418613][T30647] RSP: 002b:00007f0dfc79c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1641.418666][T30647] RAX: ffffffffffffffda RBX: 00007f0dfbc25fa0 RCX: 00007f0dfb99de99 [ 1641.418682][T30647] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000009 [ 1641.418694][T30647] RBP: 00007f0dfc79c090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.418707][T30647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.418719][T30647] R13: 00007f0dfbc26038 R14: 00007f0dfbc25fa0 R15: 00007ffc33207698 [ 1641.418749][T30647] [ 1642.798744][T30690] FAULT_INJECTION: forcing a failure. [ 1642.798744][T30690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1642.815342][T30690] CPU: 1 PID: 30690 Comm: syz.1.7954 Not tainted syzkaller #0 [ 1642.822882][T30690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1642.833080][T30690] Call Trace: [ 1642.836399][T30690] [ 1642.839369][T30690] dump_stack_lvl+0x188/0x24e [ 1642.844125][T30690] ? show_regs_print_info+0x12/0x12 [ 1642.849384][T30690] ? load_image+0x410/0x410 [ 1642.853941][T30690] ? __lock_acquire+0x7c40/0x7c40 [ 1642.859026][T30690] ? lockdep_hardirqs_on+0x94/0x140 [ 1642.864296][T30690] should_fail_ex+0x390/0x4c0 [ 1642.869116][T30690] _copy_from_user+0x2c/0x170 [ 1642.873840][T30690] __sys_bpf+0x2ea/0x780 [ 1642.878138][T30690] ? bpf_link_show_fdinfo+0x380/0x380 [ 1642.883571][T30690] ? lock_chain_count+0x20/0x20 [ 1642.888467][T30690] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1642.894510][T30690] __x64_sys_bpf+0x78/0x90 [ 1642.899149][T30690] do_syscall_64+0x4c/0xa0 [ 1642.903656][T30690] ? clear_bhb_loop+0x60/0xb0 [ 1642.908386][T30690] ? clear_bhb_loop+0x60/0xb0 [ 1642.913127][T30690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1642.919111][T30690] RIP: 0033:0x7f355639de99 [ 1642.923569][T30690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.943315][T30690] RSP: 002b:00007f3557299028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1642.951774][T30690] RAX: ffffffffffffffda RBX: 00007f3556625fa0 RCX: 00007f355639de99 [ 1642.959774][T30690] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1642.967771][T30690] RBP: 00007f3557299090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.975765][T30690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.983762][T30690] R13: 00007f3556626038 R14: 00007f3556625fa0 R15: 00007ffd96150a08 [ 1642.991791][T30690] [ 1643.052687][T30693] netlink: 'syz.0.7955': attribute type 11 has an invalid length. [ 1643.071240][T30693] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7955'. [ 1643.464062][T20495] syzkaller0: tun_net_xmit 76 [ 1643.469207][T20495] syzkaller0: tun_net_xmit 48 [ 1643.496617][T20839] syzkaller0: tun_net_xmit 76 [ 1643.505045][T30699] syzkaller0: create flow: hash 4276856112 index 1 [ 1643.920318][T20495] syzkaller0: tun_net_xmit 76 [ 1643.966106][T20495] syzkaller0: tun_net_xmit 76 [ 1643.972488][T30692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1644.946302][T30698] syzkaller0: delete flow: hash 4276856112 index 1 [ 1649.367599][T30727] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1649.377160][T30727] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1649.387056][T30727] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1649.956099][T30767] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1650.526581][T30794] netlink: 'syz.1.7992': attribute type 10 has an invalid length. [ 1650.544549][T30794] team0: Device hsr_slave_0 failed to register rx_handler [ 1651.283363][T30814] netlink: 'syz.2.7999': attribute type 10 has an invalid length. [ 1651.317721][T30814] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.7999'. [ 1653.505985][T30838] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.8009'. [ 1653.574338][T30838] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1656.631787][T30860] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8018'. [ 1656.684118][T30860] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8018'. [ 1656.898192][T30864] netlink: 'syz.0.8019': attribute type 3 has an invalid length. [ 1656.941118][T30864] netlink: 'syz.0.8019': attribute type 1 has an invalid length. [ 1656.966641][T30864] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.8019'. [ 1657.387274][T30870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8016'. [ 1658.041159][T30873] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.8021'. [ 1658.112192][T30873] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1663.728896][T30944] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1663.735867][T30944] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1665.068769][T30954] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.8049'. [ 1666.138445][T30966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8054'. [ 1666.439683][T30966] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.8054'. [ 1666.523499][T30968] netlink: 'syz.0.8054': attribute type 21 has an invalid length. [ 1666.531681][T30968] netlink: 'syz.0.8054': attribute type 1 has an invalid length. [ 1666.554838][T30968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8054'. [ 1669.427696][T30984] netlink: 130960 bytes leftover after parsing attributes in process `syz.3.8060'. [ 1672.953244][T31013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1673.688062][T31027] netlink: 'syz.6.8073': attribute type 27 has an invalid length. [ 1674.090824][T31027] bond0: (slave bond_slave_0): Releasing backup interface [ 1674.112332][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.119134][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.270245][T31052] netlink: 'syz.0.8080': attribute type 1 has an invalid length. [ 1676.348905][T31052] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.8080'. [ 1678.860471][T31067] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8086'. [ 1679.250535][T31071] netlink: 'syz.3.8088': attribute type 3 has an invalid length. [ 1679.371900][T31071] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8088'. [ 1679.411397][T31072] netlink: 'syz.1.8087': attribute type 25 has an invalid length. [ 1679.476493][T31072] netlink: 'syz.1.8087': attribute type 28 has an invalid length. [ 1679.671167][T31074] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8099'. [ 1681.450044][T31096] netlink: 'syz.6.8096': attribute type 10 has an invalid length. [ 1681.854976][T31096] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1685.998488][T31120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.120261][ T6068] tipc: Subscription rejected, illegal request [ 1690.121667][T31117] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8102'. [ 1690.147907][T31137] netlink: 'syz.6.8107': attribute type 10 has an invalid length. [ 1690.160234][T31137] device syz_tun entered promiscuous mode [ 1690.188756][T31137] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1690.563629][T31170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8116'. [ 1690.689953][T31164] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8126'. [ 1691.168389][T31184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8133'. [ 1691.337484][ T4304] tipc: Subscription rejected, illegal request [ 1691.923537][T31202] netlink: 'syz.3.8127': attribute type 21 has an invalid length. [ 1692.154334][T31209] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.8130'. [ 1692.178074][T31202] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.8127'. [ 1692.499924][T31209] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1693.040887][T31218] netlink: 'syz.6.8131': attribute type 25 has an invalid length. [ 1693.090449][T31218] netlink: 'syz.6.8131': attribute type 28 has an invalid length. [ 1693.188295][T31225] netlink: 'syz.0.8144': attribute type 27 has an invalid length. [ 1693.196589][T31225] netlink: 'syz.0.8144': attribute type 4 has an invalid length. [ 1693.208768][T31225] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8144'. [ 1693.226160][T31223] netlink: 'syz.2.8135': attribute type 4 has an invalid length. [ 1693.234719][T31223] netlink: 109796 bytes leftover after parsing attributes in process `syz.2.8135'. [ 1693.409524][T31228] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8134'. [ 1693.567206][T31232] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.8137'. [ 1693.619984][T31232] netlink: zone id is out of range [ 1693.665804][T31232] netlink: zone id is out of range [ 1693.715843][T31232] netlink: zone id is out of range [ 1693.740883][T31232] netlink: get zone limit has 8 unknown bytes [ 1693.756789][ T6070] tipc: Subscription rejected, illegal request [ 1693.862218][T31244] netlink: 'syz.3.8141': attribute type 10 has an invalid length. [ 1693.892801][T31244] device team0 entered promiscuous mode [ 1693.917034][T31244] device team_slave_0 entered promiscuous mode [ 1693.923852][T31244] device team_slave_1 entered promiscuous mode [ 1693.931001][T31244] bridge0: port 3(team0) entered blocking state [ 1693.940280][T31244] bridge0: port 3(team0) entered disabled state [ 1693.949812][T31244] bridge0: port 3(team0) entered blocking state [ 1693.956377][T31244] bridge0: port 3(team0) entered forwarding state [ 1695.189545][T31263] __nla_validate_parse: 2 callbacks suppressed [ 1695.189662][T31263] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8148'. [ 1695.747701][T11166] tipc: Subscription rejected, illegal request [ 1695.760281][T31282] FAULT_INJECTION: forcing a failure. [ 1695.760281][T31282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1695.843476][T31282] CPU: 1 PID: 31282 Comm: syz.3.8154 Not tainted syzkaller #0 [ 1695.851150][T31282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1695.861284][T31282] Call Trace: [ 1695.864643][T31282] [ 1695.867639][T31282] dump_stack_lvl+0x188/0x24e [ 1695.872408][T31282] ? show_regs_print_info+0x12/0x12 [ 1695.877695][T31282] ? load_image+0x410/0x410 [ 1695.882316][T31282] ? __lock_acquire+0x7c40/0x7c40 [ 1695.887459][T31282] should_fail_ex+0x390/0x4c0 [ 1695.892233][T31282] _copy_from_user+0x2c/0x170 [ 1695.896969][T31282] iovec_from_user+0x143/0x360 [ 1695.901802][T31282] __import_iovec+0x6c/0x510 [ 1695.906486][T31282] import_iovec+0x6f/0xa0 [ 1695.910878][T31282] ___sys_sendmsg+0x252/0x360 [ 1695.915626][T31282] ? __sys_sendmsg+0x2a0/0x2a0 [ 1695.920491][T31282] ? __lock_acquire+0x7c40/0x7c40 [ 1695.925625][T31282] __se_sys_sendmsg+0x1c3/0x2b0 [ 1695.930646][T31282] ? __x64_sys_sendmsg+0x80/0x80 [ 1695.935734][T31282] ? lockdep_hardirqs_on+0x94/0x140 [ 1695.941000][T31282] do_syscall_64+0x4c/0xa0 [ 1695.945559][T31282] ? clear_bhb_loop+0x60/0xb0 [ 1695.950315][T31282] ? clear_bhb_loop+0x60/0xb0 [ 1695.955130][T31282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1695.961242][T31282] RIP: 0033:0x7f1a4cf9de99 [ 1695.965707][T31282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.985465][T31282] RSP: 002b:00007f1a4def4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1695.993958][T31282] RAX: ffffffffffffffda RBX: 00007f1a4d225fa0 RCX: 00007f1a4cf9de99 [ 1696.001973][T31282] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1696.010001][T31282] RBP: 00007f1a4def4090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.018014][T31282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.026023][T31282] R13: 00007f1a4d226038 R14: 00007f1a4d225fa0 R15: 00007ffd7ebb5828 [ 1696.034076][T31282] [ 1696.660888][T31309] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8160'. [ 1699.141816][T31313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.924844][ T6070] tipc: Subscription rejected, illegal request [ 1700.947375][T31348] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1701.359574][T31365] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.8177'. [ 1702.219140][ T6066] tipc: Subscription rejected, illegal request [ 1704.364980][T31364] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8180'. [ 1704.375242][T31368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.544055][T31388] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8188'. [ 1704.608978][T31392] netlink: 'syz.2.8190': attribute type 10 has an invalid length. [ 1704.624061][T31386] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8188'. [ 1704.765845][ T6070] tipc: Subscription rejected, illegal request [ 1704.854010][ T6070] tipc: Subscription rejected, illegal request [ 1704.919730][T31390] device syzkaller0 entered promiscuous mode [ 1706.087755][T31423] netlink: 'syz.3.8201': attribute type 2 has an invalid length. [ 1706.107732][T31423] netlink: 'syz.3.8201': attribute type 1 has an invalid length. [ 1706.115752][T31423] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.8201'. [ 1706.527061][T31435] FAULT_INJECTION: forcing a failure. [ 1706.527061][T31435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.540802][T31435] CPU: 1 PID: 31435 Comm: syz.3.8204 Not tainted syzkaller #0 [ 1706.548320][T31435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1706.558411][T31435] Call Trace: [ 1706.561727][T31435] [ 1706.564684][T31435] dump_stack_lvl+0x188/0x24e [ 1706.569404][T31435] ? show_regs_print_info+0x12/0x12 [ 1706.574685][T31435] ? load_image+0x410/0x410 [ 1706.579266][T31435] ? __lock_acquire+0x7c40/0x7c40 [ 1706.584344][T31435] should_fail_ex+0x390/0x4c0 [ 1706.589073][T31435] _copy_from_user+0x2c/0x170 [ 1706.593781][T31435] __sys_bpf+0x2ea/0x780 [ 1706.598059][T31435] ? bpf_link_show_fdinfo+0x380/0x380 [ 1706.603482][T31435] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1706.609686][T31435] __x64_sys_bpf+0x78/0x90 [ 1706.614140][T31435] do_syscall_64+0x4c/0xa0 [ 1706.618601][T31435] ? clear_bhb_loop+0x60/0xb0 [ 1706.623395][T31435] ? clear_bhb_loop+0x60/0xb0 [ 1706.628102][T31435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1706.634028][T31435] RIP: 0033:0x7f1a4cf9de99 [ 1706.638467][T31435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.658110][T31435] RSP: 002b:00007f1a4def4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1706.666637][T31435] RAX: ffffffffffffffda RBX: 00007f1a4d225fa0 RCX: 00007f1a4cf9de99 [ 1706.674635][T31435] RDX: 0000000000000048 RSI: 0000200000000b40 RDI: 0000000000000005 [ 1706.682720][T31435] RBP: 00007f1a4def4090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.690801][T31435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.698800][T31435] R13: 00007f1a4d226038 R14: 00007f1a4d225fa0 R15: 00007ffd7ebb5828 [ 1706.706906][T31435] [ 1707.394240][ T6065] tipc: Subscription rejected, illegal request [ 1707.858624][ T6066] tipc: Subscription rejected, illegal request [ 1708.738778][T31413] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8198'. [ 1708.748596][T31424] netlink: 'syz.0.8200': attribute type 21 has an invalid length. [ 1708.773153][T31424] netlink: 'syz.0.8200': attribute type 6 has an invalid length. [ 1708.780964][T31424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8200'. [ 1709.094256][T31462] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1709.214351][T31462] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1709.900374][T31469] netlink: 'syz.6.8217': attribute type 21 has an invalid length. [ 1709.957953][T31474] netlink: 'syz.2.8219': attribute type 13 has an invalid length. [ 1709.966871][T31474] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.8219'. [ 1709.995914][T31469] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1710.098626][ T4304] tipc: Subscription rejected, illegal request [ 1710.295425][T31484] device lo left promiscuous mode [ 1710.409076][T31479] cgroup: fork rejected by pids controller in /syz6 [ 1711.131713][T31487] Q6`Ҙ: renamed from lo [ 1711.184712][T31490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8225'. [ 1711.519659][T31599] netlink: 'syz.2.8229': attribute type 10 has an invalid length. [ 1711.739794][T25466] bond0: (slave syz_tun): Releasing backup interface [ 1713.449324][ T4304] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.582939][T31628] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8241'. [ 1713.770633][ T4304] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.948968][ T4304] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.892330][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1714.909591][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1714.918658][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1714.927874][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1714.938953][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1714.947222][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1715.006719][T31653] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.8246'. [ 1715.171154][T31661] netlink: 'syz.1.8246': attribute type 21 has an invalid length. [ 1715.241656][T31661] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8246'. [ 1716.349447][T31693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8255'. [ 1716.774790][T31656] chnl_net:caif_netlink_parms(): no params data found [ 1716.906799][T31706] netlink: 'syz.1.8259': attribute type 21 has an invalid length. [ 1716.982645][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 1717.275710][ T4304] device hsr_slave_0 left promiscuous mode [ 1717.301290][ T4304] device hsr_slave_1 left promiscuous mode [ 1717.351016][ T4304] bridge0: port 3(dummy0) entered disabled state [ 1717.371049][ T4304] device bridge_slave_1 left promiscuous mode [ 1717.402678][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.474644][ T4304] device bridge_slave_0 left promiscuous mode [ 1717.481143][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.380882][ T4304] team0 (unregistering): Port device virt_wifi0 removed [ 1719.054049][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 1719.154087][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 1719.228290][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 1719.295471][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1719.519722][T31757] FAULT_INJECTION: forcing a failure. [ 1719.519722][T31757] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.533972][T31757] CPU: 1 PID: 31757 Comm: syz.1.8277 Not tainted syzkaller #0 [ 1719.541518][T31757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1719.551631][T31757] Call Trace: [ 1719.554983][T31757] [ 1719.558004][T31757] dump_stack_lvl+0x188/0x24e [ 1719.562790][T31757] ? show_regs_print_info+0x12/0x12 [ 1719.568083][T31757] ? load_image+0x410/0x410 [ 1719.572820][T31757] ? __might_sleep+0xd0/0xd0 [ 1719.577479][T31757] ? __lock_acquire+0x7c40/0x7c40 [ 1719.582693][T31757] should_fail_ex+0x390/0x4c0 [ 1719.587551][T31757] should_failslab+0x5/0x20 [ 1719.592145][T31757] slab_pre_alloc_hook+0x59/0x300 [ 1719.597548][T31757] ? lockdep_hardirqs_on+0x94/0x140 [ 1719.602959][T31757] kmem_cache_alloc_node+0x5a/0x310 [ 1719.608632][T31757] ? __alloc_skb+0xf9/0x7d0 [ 1719.613215][T31757] __alloc_skb+0xf9/0x7d0 [ 1719.617594][T31757] __ip6_append_data+0x2b5e/0x3e30 [ 1719.622764][T31757] ? inet6_sk+0xe0/0xe0 [ 1719.627070][T31757] ? ip6_setup_cork+0xff0/0xff0 [ 1719.631953][T31757] ? ip6_setup_cork+0xa4a/0xff0 [ 1719.636842][T31757] ip6_append_data+0x1c8/0x3d0 [ 1719.641648][T31757] ? inet6_sk+0xe0/0xe0 [ 1719.645850][T31757] ping_v6_sendmsg+0xdab/0x1170 [ 1719.650740][T31757] ? ping_v6_pre_connect+0x30/0x30 [ 1719.655882][T31757] ? ct_irq_exit_irqson+0x113/0x170 [ 1719.661121][T31757] ? __local_bh_enable_ip+0x136/0x1c0 [ 1719.666560][T31757] ? lockdep_hardirqs_on+0x94/0x140 [ 1719.671798][T31757] ? _local_bh_enable+0xa0/0xa0 [ 1719.676683][T31757] ? do_raw_spin_unlock+0x11d/0x230 [ 1719.681911][T31757] ? inet_sendmsg+0x109/0x2a0 [ 1719.686626][T31757] ? inet_sendmsg+0x109/0x2a0 [ 1719.691426][T31757] ? inet_send_prepare+0x250/0x250 [ 1719.696943][T31757] ____sys_sendmsg+0x5ed/0x9a0 [ 1719.701828][T31757] ? __sys_sendmsg_sock+0x30/0x30 [ 1719.706899][T31757] ? __import_iovec+0x306/0x510 [ 1719.711796][T31757] ? import_iovec+0x6f/0xa0 [ 1719.716595][T31757] ___sys_sendmsg+0x2a2/0x360 [ 1719.721316][T31757] ? __sys_sendmsg+0x2a0/0x2a0 [ 1719.726133][T31757] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1719.731940][T31757] __se_sys_sendmsg+0x1c3/0x2b0 [ 1719.736971][T31757] ? __x64_sys_sendmsg+0x80/0x80 [ 1719.741973][T31757] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1719.747907][T31757] do_syscall_64+0x4c/0xa0 [ 1719.752387][T31757] ? clear_bhb_loop+0x60/0xb0 [ 1719.757101][T31757] ? clear_bhb_loop+0x60/0xb0 [ 1719.761827][T31757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1719.767780][T31757] RIP: 0033:0x7f355639de99 [ 1719.772227][T31757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.791968][T31757] RSP: 002b:00007f3557299028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1719.800862][T31757] RAX: ffffffffffffffda RBX: 00007f3556625fa0 RCX: 00007f355639de99 [ 1719.809180][T31757] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 1719.817184][T31757] RBP: 00007f3557299090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.826092][T31757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1719.834746][T31757] R13: 00007f3556626038 R14: 00007f3556625fa0 R15: 00007ffd96150a08 [ 1719.842862][T31757] [ 1720.098553][ T4304] bond0 (unregistering): Released all slaves [ 1720.255557][T31740] netlink: 'syz.3.8271': attribute type 25 has an invalid length. [ 1720.269419][T31740] netlink: 'syz.3.8271': attribute type 5 has an invalid length. [ 1720.277979][T31740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8271'. [ 1720.287629][T31743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8272'. [ 1720.435689][T31656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.451601][T31656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.499397][T31656] device bridge_slave_0 entered promiscuous mode [ 1720.654043][T31656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.661651][T31656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.717298][T31656] device bridge_slave_1 entered promiscuous mode [ 1720.809530][T31656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.864652][T31656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1721.052664][T31656] team0: Port device team_slave_0 added [ 1721.105147][T31656] team0: Port device team_slave_1 added [ 1721.135312][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 1721.231988][T31656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1721.266966][T31656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1721.383094][T31656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.663623][T31656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.670741][T31656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1721.766703][T31656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.815980][T31801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8292'. [ 1721.954267][T31656] device hsr_slave_0 entered promiscuous mode [ 1721.970929][T31656] device hsr_slave_1 entered promiscuous mode [ 1721.987014][T31656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1722.017170][T31656] Cannot create hsr debugfs directory [ 1722.626223][T31831] device syzkaller0 entered promiscuous mode [ 1723.110791][T31848] FAULT_INJECTION: forcing a failure. [ 1723.110791][T31848] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.143289][T31848] CPU: 0 PID: 31848 Comm: syz.2.8306 Not tainted syzkaller #0 [ 1723.150869][T31848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1723.161047][T31848] Call Trace: [ 1723.164393][T31848] [ 1723.167391][T31848] dump_stack_lvl+0x188/0x24e [ 1723.172161][T31848] ? sctp_sendmsg+0x1686/0x2940 [ 1723.177114][T31848] ? ___sys_sendmsg+0x2a2/0x360 [ 1723.182055][T31848] ? show_regs_print_info+0x12/0x12 [ 1723.187339][T31848] ? load_image+0x410/0x410 [ 1723.191975][T31848] should_fail_ex+0x390/0x4c0 [ 1723.196758][T31848] should_failslab+0x5/0x20 [ 1723.201332][T31848] slab_pre_alloc_hook+0x59/0x300 [ 1723.206442][T31848] ? sctp_add_bind_addr+0x89/0x350 [ 1723.211643][T31848] __kmem_cache_alloc_node+0x4f/0x270 [ 1723.217098][T31848] ? sctp_add_bind_addr+0x89/0x350 [ 1723.222291][T31848] kmalloc_trace+0x26/0xe0 [ 1723.226794][T31848] sctp_add_bind_addr+0x89/0x350 [ 1723.231829][T31848] sctp_copy_local_addr_list+0x317/0x4d0 [ 1723.237550][T31848] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1723.243358][T31848] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1723.249610][T31848] ? sctp_v4_is_any+0x31/0x50 [ 1723.254401][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 1723.254398][T31848] ? sctp_copy_one_addr+0x93/0x660 [ 1723.254494][T31848] sctp_bind_addr_copy+0xaf/0x3c0 [ 1723.270942][T31848] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1723.277378][T31848] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1723.282760][T31848] ? __sctp_connect+0xd80/0xd80 [ 1723.287692][T31848] ? __local_bh_enable_ip+0x136/0x1c0 [ 1723.293138][T31848] ? _local_bh_enable+0xa0/0xa0 [ 1723.298070][T31848] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1723.303966][T31848] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1723.309885][T31848] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1723.315509][T31848] ? security_sctp_bind_connect+0x85/0xb0 [ 1723.321319][T31848] sctp_sendmsg+0x1686/0x2940 [ 1723.326131][T31848] ? sctp_getsockopt+0x8a0/0x8a0 [ 1723.331246][T31848] ? __might_fault+0xa6/0x120 [ 1723.336009][T31848] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1723.342517][T31848] ? aa_sock_msg_perm+0x94/0x150 [ 1723.347556][T31848] ? inet_sendmsg+0x7a/0x2a0 [ 1723.352325][T31848] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1723.357771][T31848] ? inet_send_prepare+0x250/0x250 [ 1723.362976][T31848] ____sys_sendmsg+0x5ed/0x9a0 [ 1723.367867][T31848] ? __sys_sendmsg_sock+0x30/0x30 [ 1723.372964][T31848] ? __import_iovec+0x306/0x510 [ 1723.377934][T31848] ? import_iovec+0x6f/0xa0 [ 1723.382587][T31848] ___sys_sendmsg+0x2a2/0x360 [ 1723.387371][T31848] ? __sys_sendmsg+0x2a0/0x2a0 [ 1723.392291][T31848] ? __lock_acquire+0x7c40/0x7c40 [ 1723.397490][T31848] __se_sys_sendmsg+0x1c3/0x2b0 [ 1723.402525][T31848] ? __x64_sys_sendmsg+0x80/0x80 [ 1723.407631][T31848] ? lockdep_hardirqs_on+0x94/0x140 [ 1723.413271][T31848] do_syscall_64+0x4c/0xa0 [ 1723.417774][T31848] ? clear_bhb_loop+0x60/0xb0 [ 1723.422545][T31848] ? clear_bhb_loop+0x60/0xb0 [ 1723.427318][T31848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1723.433300][T31848] RIP: 0033:0x7f70ea59de99 [ 1723.437793][T31848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.457741][T31848] RSP: 002b:00007f70eb525028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1723.466251][T31848] RAX: ffffffffffffffda RBX: 00007f70ea825fa0 RCX: 00007f70ea59de99 [ 1723.474306][T31848] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 1723.482363][T31848] RBP: 00007f70eb525090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.490441][T31848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1723.498494][T31848] R13: 00007f70ea826038 R14: 00007f70ea825fa0 R15: 00007ffe09430d98 [ 1723.506613][T31848] [ 1726.753951][T31852] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8304'. [ 1726.770236][T31853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8304'. [ 1726.789042][T31858] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8308'. [ 1726.806453][T31865] netlink: 'syz.1.8311': attribute type 21 has an invalid length. [ 1726.823059][T31865] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8311'. [ 1727.059174][T31656] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1727.111433][T31656] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1727.126161][T31875] FAULT_INJECTION: forcing a failure. [ 1727.126161][T31875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1727.154697][T31656] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1727.182887][T31875] CPU: 0 PID: 31875 Comm: syz.1.8315 Not tainted syzkaller #0 [ 1727.190449][T31875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1727.200647][T31875] Call Trace: [ 1727.202458][T31656] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1727.203991][T31875] [ 1727.204004][T31875] dump_stack_lvl+0x188/0x24e [ 1727.204042][T31875] ? show_regs_print_info+0x12/0x12 [ 1727.223718][T31875] ? load_image+0x410/0x410 [ 1727.228279][T31875] ? __lock_acquire+0x7c40/0x7c40 [ 1727.233465][T31875] should_fail_ex+0x390/0x4c0 [ 1727.238223][T31875] strncpy_from_user+0x32/0x340 [ 1727.243151][T31875] bpf_prog_load+0x200/0x1530 [ 1727.247944][T31875] ? map_freeze+0x390/0x390 [ 1727.252510][T31875] ? lockdep_hardirqs_on+0x94/0x140 [ 1727.257781][T31875] ? kasan_check_range+0x84/0x290 [ 1727.262890][T31875] ? bpf_lsm_bpf+0x5/0x10 [ 1727.267317][T31875] ? security_bpf+0x7a/0xa0 [ 1727.271897][T31875] __sys_bpf+0x5b8/0x780 [ 1727.276216][T31875] ? bpf_link_show_fdinfo+0x380/0x380 [ 1727.281666][T31875] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1727.287910][T31875] __x64_sys_bpf+0x78/0x90 [ 1727.292402][T31875] do_syscall_64+0x4c/0xa0 [ 1727.296905][T31875] ? clear_bhb_loop+0x60/0xb0 [ 1727.301650][T31875] ? clear_bhb_loop+0x60/0xb0 [ 1727.306383][T31875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1727.312340][T31875] RIP: 0033:0x7f355639de99 [ 1727.316817][T31875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.336510][T31875] RSP: 002b:00007f3557299028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1727.345162][T31875] RAX: ffffffffffffffda RBX: 00007f3556625fa0 RCX: 00007f355639de99 [ 1727.353182][T31875] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 1727.361212][T31875] RBP: 00007f3557299090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.369235][T31875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.377243][T31875] R13: 00007f3556626038 R14: 00007f3556625fa0 R15: 00007ffd96150a08 [ 1727.385349][T31875] [ 1727.570142][T31889] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.8319'. [ 1727.626259][T31891] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.8319'. [ 1727.703977][T31656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1727.746011][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1727.766256][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1727.811136][T31656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.857019][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1727.881846][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1727.891115][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.898335][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1727.945418][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1727.964214][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1727.986536][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1728.006601][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.013824][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1728.061349][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1728.099680][T31897] netlink: 'syz.3.8320': attribute type 25 has an invalid length. [ 1728.117140][T31897] netlink: 'syz.3.8320': attribute type 9 has an invalid length. [ 1728.138510][T31897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1728.193253][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1728.208280][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1728.250445][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1728.302000][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1728.337760][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1728.365670][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1728.451354][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1728.472757][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1728.508717][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1728.602898][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1728.633545][T31656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1728.644436][T31912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8324'. [ 1728.819572][T31919] netlink: 'syz.0.8326': attribute type 5 has an invalid length. [ 1729.598507][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1729.637412][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1729.684593][T31656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1730.372382][T31964] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8338'. [ 1730.799563][T31967] netlink: 'syz.2.8336': attribute type 2 has an invalid length. [ 1731.059087][T31967] device 0 entered promiscuous mode [ 1731.155320][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1731.178404][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1731.286518][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1731.337214][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1731.356813][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1731.393986][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1731.429907][T31656] device veth0_vlan entered promiscuous mode [ 1731.525035][T31993] device syzkaller0 entered promiscuous mode [ 1731.556087][T31656] device veth1_vlan entered promiscuous mode [ 1735.546129][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.552593][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.449744][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1736.458245][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1736.466851][T32010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8351'. [ 1736.533342][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1736.554123][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1736.589341][T31656] device veth0_macvtap entered promiscuous mode [ 1736.609267][T31656] device veth1_macvtap entered promiscuous mode [ 1736.654198][T31656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1736.705651][T31656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.736356][T31656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1736.757327][T31656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.784352][T31656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1736.800057][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1736.822613][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1736.831356][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1736.847610][T28840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1736.878303][T31656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.908022][T31656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.920145][T31656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.946079][T31656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.970975][T31656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.001493][T31656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.014916][T31656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.037423][T31656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.061813][T31656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.192796][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1737.207823][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1737.267082][T32077] netlink: 'syz.0.8372': attribute type 1 has an invalid length. [ 1737.308987][T32077] netlink: 'syz.0.8372': attribute type 3 has an invalid length. [ 1737.326158][T32077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8372'. [ 1737.407043][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.459879][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.485938][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1737.538922][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.557815][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.585729][T11163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1738.479531][ T6070] tipc: Subscription rejected, illegal request [ 1738.730426][T32096] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8378'. [ 1739.342226][T32101] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8379'. [ 1740.029446][T32108] FAULT_INJECTION: forcing a failure. [ 1740.029446][T32108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.103633][T32108] CPU: 1 PID: 32108 Comm: syz.3.8383 Not tainted syzkaller #0 [ 1740.111188][T32108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1740.121307][T32108] Call Trace: [ 1740.124655][T32108] [ 1740.127634][T32108] dump_stack_lvl+0x188/0x24e [ 1740.132374][T32108] ? show_regs_print_info+0x12/0x12 [ 1740.137639][T32108] ? load_image+0x410/0x410 [ 1740.142191][T32108] ? __might_fault+0xa6/0x120 [ 1740.146931][T32108] should_fail_ex+0x390/0x4c0 [ 1740.151706][T32108] copyin+0x1b/0x120 [ 1740.155674][T32108] _copy_from_iter+0x559/0x1130 [ 1740.160597][T32108] ? copyout_mc+0x110/0x110 [ 1740.165286][T32108] ? __virt_addr_valid+0x188/0x540 [ 1740.170460][T32108] ? __virt_addr_valid+0x188/0x540 [ 1740.175716][T32108] ? __virt_addr_valid+0x467/0x540 [ 1740.180886][T32108] ? __phys_addr_symbol+0x2b/0x70 [ 1740.185963][T32108] ? __check_object_size+0x4f6/0xa70 [ 1740.191310][T32108] netlink_sendmsg+0x755/0xbd0 [ 1740.196182][T32108] ? netlink_getsockopt+0x550/0x550 [ 1740.201444][T32108] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1740.207049][T32108] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1740.212381][T32108] ? security_socket_sendmsg+0x7c/0xa0 [ 1740.217896][T32108] ? netlink_getsockopt+0x550/0x550 [ 1740.223155][T32108] ____sys_sendmsg+0x5ed/0x9a0 [ 1740.227983][T32108] ? __sys_sendmsg_sock+0x30/0x30 [ 1740.233560][T32108] ? __import_iovec+0x306/0x510 [ 1740.239212][T32108] ? import_iovec+0x6f/0xa0 [ 1740.243815][T32108] ___sys_sendmsg+0x2a2/0x360 [ 1740.248585][T32108] ? __sys_sendmsg+0x2a0/0x2a0 [ 1740.253460][T32108] __se_sys_sendmsg+0x1c3/0x2b0 [ 1740.258457][T32108] ? __x64_sys_sendmsg+0x80/0x80 [ 1740.263685][T32108] do_syscall_64+0x4c/0xa0 [ 1740.268192][T32108] ? clear_bhb_loop+0x60/0xb0 [ 1740.273117][T32108] ? clear_bhb_loop+0x60/0xb0 [ 1740.277942][T32108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1740.283886][T32108] RIP: 0033:0x7f1a4cf9de99 [ 1740.288347][T32108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.308181][T32108] RSP: 002b:00007f1a4def4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1740.316655][T32108] RAX: ffffffffffffffda RBX: 00007f1a4d225fa0 RCX: 00007f1a4cf9de99 [ 1740.325117][T32108] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000009 [ 1740.333146][T32108] RBP: 00007f1a4def4090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.341208][T32108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.349254][T32108] R13: 00007f1a4d226038 R14: 00007f1a4d225fa0 R15: 00007ffd7ebb5828 [ 1740.357384][T32108] [ 1740.855158][T32115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8384'. [ 1740.991869][T32118] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8384'. [ 1741.128995][T32120] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8384'. [ 1741.153672][T32120] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1741.272476][T32120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1742.155928][ T6070] tipc: Subscription rejected, illegal request [ 1744.657712][T32146] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8393'. [ 1746.077181][T32149] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1746.155668][T32149] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1746.201963][T32149] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 1746.226687][T32154] netlink: 'syz.1.8397': attribute type 39 has an invalid length. [ 1748.062409][T32164] bond0: (slave team0): Error: Slave device does not support XDP [ 1748.107009][T32167] FAULT_INJECTION: forcing a failure. [ 1748.107009][T32167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.244595][T32167] CPU: 1 PID: 32167 Comm: syz.6.8398 Not tainted syzkaller #0 [ 1748.252326][T32167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1748.262519][T32167] Call Trace: [ 1748.265842][T32167] [ 1748.268835][T32167] dump_stack_lvl+0x188/0x24e [ 1748.273587][T32167] ? show_regs_print_info+0x12/0x12 [ 1748.278873][T32167] ? load_image+0x410/0x410 [ 1748.283442][T32167] ? __lock_acquire+0x7c40/0x7c40 [ 1748.288528][T32167] ? snprintf+0xe5/0x140 [ 1748.292817][T32167] should_fail_ex+0x390/0x4c0 [ 1748.297559][T32167] _copy_to_user+0x2c/0x130 [ 1748.302115][T32167] simple_read_from_buffer+0xe3/0x150 [ 1748.307540][T32167] proc_fail_nth_read+0x1a6/0x220 [ 1748.312620][T32167] ? proc_fault_inject_write+0x310/0x310 [ 1748.318321][T32167] ? fsnotify_perm+0x248/0x550 [ 1748.323136][T32167] ? proc_fault_inject_write+0x310/0x310 [ 1748.328839][T32167] vfs_read+0x2db/0x960 [ 1748.333075][T32167] ? kernel_read+0x1e0/0x1e0 [ 1748.337849][T32167] ? __fget_files+0x28/0x460 [ 1748.342511][T32167] ? __fget_files+0x3fc/0x460 [ 1748.347266][T32167] ? __fdget_pos+0x2ae/0x360 [ 1748.351917][T32167] ? ksys_read+0x70/0x260 [ 1748.355196][T32164] netlink: 'syz.1.8399': attribute type 27 has an invalid length. [ 1748.356322][T32167] ksys_read+0x14d/0x260 [ 1748.368480][T32167] ? vfs_write+0x9a0/0x9a0 [ 1748.373002][T32167] ? lockdep_hardirqs_on+0x94/0x140 [ 1748.378258][T32167] do_syscall_64+0x4c/0xa0 [ 1748.382762][T32167] ? clear_bhb_loop+0x60/0xb0 [ 1748.387526][T32167] ? clear_bhb_loop+0x60/0xb0 [ 1748.392279][T32167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.398298][T32167] RIP: 0033:0x7ff1eef5e6ce [ 1748.402746][T32167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1748.422387][T32167] RSP: 002b:00007ff1efdeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1748.430858][T32167] RAX: ffffffffffffffda RBX: 00007ff1efdef6c0 RCX: 00007ff1eef5e6ce [ 1748.439036][T32167] RDX: 000000000000000f RSI: 00007ff1efdef0a0 RDI: 0000000000000006 [ 1748.447044][T32167] RBP: 00007ff1efdef090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.455046][T32167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.463041][T32167] R13: 00007ff1ef226128 R14: 00007ff1ef226090 R15: 00007ffffbe651d8 [ 1748.471054][T32167] [ 1748.994458][T32164] netlink: 'syz.1.8399': attribute type 2 has an invalid length. [ 1751.769054][ T6070] tipc: Subscription rejected, illegal request [ 1758.468048][T32202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8407'. [ 1759.507221][T32213] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8411'. [ 1761.101494][T32219] netlink: 'syz.1.8414': attribute type 3 has an invalid length. [ 1761.232740][T32219] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8414'. [ 1763.038174][ T4304] tipc: Subscription rejected, illegal request [ 1763.186263][T32225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8415'. [ 1763.834874][T32225] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8415'. [ 1765.547438][T32225] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8415'. [ 1765.691910][T32225] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1765.860396][T32225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1766.124912][T32246] netlink: 'syz.2.8422': attribute type 15 has an invalid length. [ 1766.167442][T32246] netlink: 'syz.2.8422': attribute type 7 has an invalid length. [ 1766.932603][T32250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8423'. [ 1768.818347][T32260] netlink: 'syz.6.8427': attribute type 10 has an invalid length. [ 1769.202185][T32260] team0: Device hsr_slave_0 failed to register rx_handler [ 1769.792690][T32265] netlink: 92148 bytes leftover after parsing attributes in process `syz.2.8429'. [ 1771.317672][T32273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1771.423205][T32273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.677251][T32273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1771.823662][T32273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1797.087300][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.094056][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.254154][ T126] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2655 jiffies s: 222665 root: 0x1/. [ 1798.348006][ T126] rcu: blocking rcu_node structures (internal RCU debug): [ 1798.393654][ T126] Sending NMI from CPU 1 to CPUs 0: [ 1798.399116][ C0] NMI backtrace for cpu 0 [ 1798.399130][ C0] CPU: 0 PID: 32268 Comm: syz.1.8430 Not tainted syzkaller #0 [ 1798.399147][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1798.399158][ C0] RIP: 0010:kasan_check_range+0xc/0x290 [ 1798.399191][ C0] Code: c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 <41> 57 41 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 [ 1798.399206][ C0] RSP: 0018:ffffc90000007390 EFLAGS: 00000002 [ 1798.399221][ C0] RAX: 1ffff11002e8e801 RBX: 000000000000030c RCX: ffffffff81845152 [ 1798.399234][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880174c2008 [ 1798.399246][ C0] RBP: ffff888017478810 R08: ffff8880174c200f R09: 1ffff11002e98401 [ 1798.399259][ C0] R10: dffffc0000000000 R11: ffffed1002e98402 R12: 1ffff11002e8f11f [ 1798.399272][ C0] R13: ffff8880174788a0 R14: dffffc0000000000 R15: ffff8880174c2008 [ 1798.399285][ C0] FS: 00007f35572996c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1798.399300][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1798.399311][ C0] CR2: 00007ff1efdced58 CR3: 000000013febb000 CR4: 00000000003506f0 [ 1798.399327][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 1798.399337][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1798.399348][ C0] Call Trace: [ 1798.399355][ C0] [ 1798.399363][ C0] rb_commit+0x532/0x750 [ 1798.399386][ C0] ring_buffer_unlock_commit+0x79/0x5f0 [ 1798.399407][ C0] trace_buffer_unlock_commit_regs+0x59/0x600 [ 1798.399433][ C0] trace_event_buffer_commit+0x21f/0x780 [ 1798.399460][ C0] trace_event_raw_event_bpf_trace_printk+0x163/0x230 [ 1798.399486][ C0] ? __traceiter_bpf_trace_printk+0xb0/0xb0 [ 1798.399519][ C0] ? bstr_printf+0x124/0xf10 [ 1798.399537][ C0] ? memcpy+0x3c/0x60 [ 1798.399553][ C0] ? bstr_printf+0xe18/0xf10 [ 1798.399571][ C0] trace_bpf_trace_printk+0x199/0x220 [ 1798.399590][ C0] bpf_trace_printk+0x13e/0x1c0 [ 1798.399615][ C0] ? bpf_probe_write_user+0xe0/0xe0 [ 1798.399650][ C0] bpf_prog_b1bcf1c1da0a8648+0x38/0x3c [ 1798.399667][ C0] trace_call_bpf+0x322/0x6b0 [ 1798.399691][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1798.399712][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1798.399737][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1798.399767][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1798.399803][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 1798.399828][ C0] ? irqentry_enter+0x33/0x50 [ 1798.399846][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1798.399871][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1798.399898][ C0] ? lock_chain_count+0x20/0x20 [ 1798.399921][ C0] ? irqentry_enter+0x33/0x50 [ 1798.399939][ C0] trace_hardirqs_off_finish+0x13f/0x180 [ 1798.399964][ C0] irqentry_enter+0x33/0x50 [ 1798.399980][ C0] sysvec_apic_timer_interrupt+0xa/0xc0 [ 1798.399998][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1798.400023][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 1798.400044][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 4f 57 1e f7 65 8b 05 50 08 c8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1798.400059][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 1798.400073][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 090115137d2fe600 [ 1798.400085][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 1798.400098][ C0] RBP: ffffc90000007b70 R08: ffffffff90b102bf R09: 1ffffffff2162057 [ 1798.400111][ C0] R10: dffffc0000000000 R11: fffffbfff2162058 R12: dffffc0000000000 [ 1798.400124][ C0] R13: 1ffff92000000f74 R14: ffffffff8dae5aa0 R15: 1ffff92000000f5c [ 1798.400147][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1798.400171][ C0] call_timer_fn+0x1ac/0x670 [ 1798.400188][ C0] ? dsp_cmx_receive+0x1380/0x1380 [ 1798.400239][ C0] ? call_timer_fn+0xcf/0x670 [ 1798.400256][ C0] ? __run_timers+0x810/0x810 [ 1798.400279][ C0] ? dsp_cmx_receive+0x1380/0x1380 [ 1798.400304][ C0] __run_timers+0x56c/0x810 [ 1798.400328][ C0] ? detach_timer+0x350/0x350 [ 1798.400354][ C0] run_timer_softirq+0x63/0xf0 [ 1798.400371][ C0] handle_softirqs+0x291/0x910 [ 1798.400391][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1798.400409][ C0] ? do_softirq+0x210/0x210 [ 1798.400426][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1798.400490][ C0] __irq_exit_rcu+0x13b/0x230 [ 1798.400513][ C0] ? irq_exit_rcu+0x20/0x20 [ 1798.400531][ C0] ? rcu_is_watching+0x11/0xa0 [ 1798.400558][ C0] irq_exit_rcu+0x5/0x20 [ 1798.400578][ C0] sysvec_irq_work+0x9d/0xc0 [ 1798.400604][ C0] [ 1798.400609][ C0] [ 1798.400615][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1798.400637][ C0] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 1798.400663][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 b5 cf 1f f7 e8 b0 99 4f f7 fb bf 01 00 00 00 25 ba ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 1798.400677][ C0] RSP: 0018:ffffc9000c6c75e0 EFLAGS: 00000282 [ 1798.400690][ C0] RAX: 090115137d2fe600 RBX: 0000000000000000 RCX: 090115137d2fe600 [ 1798.400703][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 1798.400715][ C0] RBP: ffffc9000c6c7680 R08: ffffffff8fa25008 R09: ffffffff8fa25018 [ 1798.400728][ C0] R10: ffffffff8fa25010 R11: ffffffff8fa25003 R12: 0000000000000000 [ 1798.400740][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920018d8ebc [ 1798.400761][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1798.400788][ C0] ? rcu_is_watching+0x11/0xa0 [ 1798.400814][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1798.400841][ C0] irqentry_exit+0x63/0x70 [ 1798.400856][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1798.400879][ C0] RIP: 0010:memcg_account_kmem+0x187/0x1c0 [ 1798.400930][ C0] Code: 80 00 00 00 75 1f 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 69 8a 55 08 41 f7 c6 00 02 00 00 75 b2 eb b1 e8 49 8a 55 08 <48> 81 44 24 18 c0 02 00 00 44 89 f8 45 85 ff 7e 0e 89 c6 48 8b 7c [ 1798.400943][ C0] RSP: 0018:ffffc9000c6c7740 EFLAGS: 00000206 [ 1798.400956][ C0] RAX: 090115137d2fe600 RBX: 0000000000000001 RCX: 090115137d2fe600 [ 1798.400968][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1798.400981][ C0] RBP: ffffc9000c6c7810 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 1798.400993][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: dffffc0000000000 [ 1798.401007][ C0] R13: 1ffff920018d8eec R14: 0000000000000a02 R15: 0000000000000001 [ 1798.401027][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1798.401061][ C0] ? try_charge_memcg+0x17c0/0x17c0 [ 1798.401084][ C0] ? percpu_ref_tryget+0x15/0x180 [ 1798.401106][ C0] ? percpu_ref_tryget+0x15/0x180 [ 1798.401130][ C0] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1798.401155][ C0] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1798.401181][ C0] obj_cgroup_charge+0x37c/0x620 [ 1798.401205][ C0] ? obj_cgroup_charge+0xe9/0x620 [ 1798.401225][ C0] ? mod_objcg_mlstate+0x320/0x320 [ 1798.401246][ C0] ? percpu_ref_tryget+0x15/0x180 [ 1798.401268][ C0] ? percpu_ref_tryget+0x15/0x180 [ 1798.401293][ C0] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1798.401318][ C0] slab_pre_alloc_hook+0x2e2/0x300 [ 1798.401340][ C0] kmem_cache_alloc+0x56/0x2f0 [ 1798.401357][ C0] ? __alloc_file+0x25/0x230 [ 1798.401377][ C0] __alloc_file+0x25/0x230 [ 1798.401394][ C0] alloc_empty_file+0x90/0x180 [ 1798.401412][ C0] alloc_file+0x5b/0x5f0 [ 1798.401431][ C0] alloc_file_pseudo+0x180/0x200 [ 1798.401449][ C0] ? alloc_empty_file_noaccount+0x80/0x80 [ 1798.401467][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1798.401490][ C0] anon_inode_getfd+0xc6/0x1b0 [ 1798.401550][ C0] bpf_prog_load+0x114d/0x1530 [ 1798.401580][ C0] ? map_freeze+0x390/0x390 [ 1798.401615][ C0] ? __sys_bpf+0x360/0x780 [ 1798.401639][ C0] __sys_bpf+0x5b8/0x780 [ 1798.401663][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 1798.401694][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1798.401723][ C0] __x64_sys_bpf+0x78/0x90 [ 1798.401747][ C0] do_syscall_64+0x4c/0xa0 [ 1798.401769][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1798.401791][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1798.401814][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1798.401836][ C0] RIP: 0033:0x7f355639de99 [ 1798.401850][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.401864][ C0] RSP: 002b:00007f3557299028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1798.401880][ C0] RAX: ffffffffffffffda RBX: 00007f3556625fa0 RCX: 00007f355639de99 [ 1798.401892][ C0] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1798.401903][ C0] RBP: 00007f3556433eaf R08: 0000000000000000 R09: 0000000000000000 [ 1798.401918][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1798.401928][ C0] R13: 00007f3556626038 R14: 00007f3556625fa0 R15: 00007ffd96150a08 [ 1798.401948][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1801.134041][ T4274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1801.147677][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1801.156244][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1801.165706][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1801.182856][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1801.190360][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1801.335044][ T4274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1801.354423][ T4274] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1801.365978][ T4274] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1801.375494][ T4274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1801.395381][ T4274] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1801.404486][ T4274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1803.079143][ T6070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.223476][T13437] Bluetooth: hci5: command 0x0409 tx timeout [ 1803.232208][ T6070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.343854][ T6070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.402334][ T6070] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.453341][ T4291] Bluetooth: hci6: command 0x0409 tx timeout [ 1803.547246][ T6070] device 0 left promiscuous mode [ 1805.093999][ T6070] device hsr_slave_0 left promiscuous mode [ 1805.100741][ T6070] device hsr_slave_1 left promiscuous mode [ 1805.110252][ T6070] bridge0: port 3(dummy0) entered disabled state [ 1805.118741][ T6070] device bridge_slave_1 left promiscuous mode [ 1805.125791][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.135028][ T6070] device bridge_slave_0 left promiscuous mode [ 1805.141310][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.170869][ T6070] device veth0_macvtap left promiscuous mode [ 1805.360684][ T6070] team0 (unregistering): Port device geneve0 removed [ 1805.698307][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 1805.753268][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 1805.805089][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.858356][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.338117][ T6070] bond0 (unregistering): Released all slaves