last executing test programs: 21.824529484s ago: executing program 3 (id=14853): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS \x00'}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)={'c', ' *:* ', 'rm\x00'}, 0x9) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0x16, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, &(0x7f0000001ac0), 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.716267167s ago: executing program 3 (id=14855): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000200021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20.960141414s ago: executing program 3 (id=14860): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000a00)={'wlan1\x00', @random}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000038000511d25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 20.623784482s ago: executing program 3 (id=14864): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000840)=ANY=[], 0x101d0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=r2, 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010005fb0a0002000a0ada1b40d8030000", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 20.403537197s ago: executing program 3 (id=14866): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000090072b8d983435ca132d33683dd3f0e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x4000001) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000000000001002300ffffff7f0044000014000000000000001035c5000d0000000703ba00000000002a2d704a4486548d11e92c06d000"/72], 0x30}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x9, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x8) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r6 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 20.111567154s ago: executing program 3 (id=14870): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='bridge0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="4a00000004080000000000f0dffae50000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f00000001c0)=""/18, 0x0, 0x12, 0x80, 0x2da}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b003a020800465c00002354bfffffff7972e56820ebeb1b00e7ff80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x4, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 18.963713509s ago: executing program 1 (id=14874): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300)=0xffffffffffffffff, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb7}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) 18.361111803s ago: executing program 1 (id=14879): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS \x00'}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)={'c', ' *:* ', 'rm\x00'}, 0x9) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0x16, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x7, 0x0, &(0x7f0000001ac0)="5df0552b6738b4", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.391962315s ago: executing program 1 (id=14882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x42002}, 0x50) 16.656453622s ago: executing program 1 (id=14893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x31, 0x0, &(0x7f0000000400)="3e7657cd5ae01d038031b14d1db240613a770925c1ddbe0b261ad4cf9ce014831d7746bcefb93e02d02a24bc08f2e5f326", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x42002}, 0x50) 15.892410069s ago: executing program 1 (id=14886): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d083f0a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 15.056365748s ago: executing program 1 (id=14890): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="00000018007a770000000084000000000100"/40], 0x28}, 0x880) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xcc, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x1f76a, 0x6f5f, 0x8000, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xd5, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xf}, 0x11d802, 0xac5d, 0x9, 0x0, 0x9, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000940)={'veth1_to_hsr\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc0189436, &(0x7f00000005c0)=0x400000001) 6.964541362s ago: executing program 2 (id=14930): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 6.17335944s ago: executing program 2 (id=14934): r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000003403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 5.320964659s ago: executing program 2 (id=14928): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r2, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 4.349634511s ago: executing program 32 (id=14870): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='bridge0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="4a00000004080000000000f0dffae50000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f00000001c0)=""/18, 0x0, 0x12, 0x80, 0x2da}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b003a020800465c00002354bfffffff7972e56820ebeb1b00e7ff80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x4, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 4.257574774s ago: executing program 0 (id=14932): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000004850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 3.804316524s ago: executing program 2 (id=14935): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x50) 3.307720345s ago: executing program 0 (id=14937): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40354, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xe, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffefffffffff, r1, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x51, 0x8, 0x5d, 0x7, 0x0, 0x1, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0xe}, 0xc3a, 0x1000000005, 0xffffffff, 0x0, 0x6, 0x2, 0xa7d7, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x40000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3ab882, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r7], 0x12) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000340)="78cafb73fc02010700000000ef02258f2e440a", 0x13}], 0x2}, 0x4000000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000800000079b92b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x800000000000000, 0xfffffffffffffffa}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.307344265s ago: executing program 4 (id=14938): r0 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x101, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x1, 0x451, 0x16ac, 0x209, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x40004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') socket$kcm(0x10, 0x2, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x144540f2249c4cec) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f0000000080), 0x4) r3 = getpid() sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x20}, 0x4040800) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) socketpair(0x1, 0x2, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r4}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.994896132s ago: executing program 2 (id=14939): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x51}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'full', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x7e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8943, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c00e020022003505d25a806f8c6394f95524fc60040011001c45bf30835a0a7403004700000037153e370248018000f01700d1bd", 0x34}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000000003000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r8, &(0x7f0000004640)={&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x2, 0x0, 0x3, 0x2}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)="00f1d72bc200d2b24f39b5295ce9be6064e9f9011f403aed788fc0de9622786341f55f126dde48284523241c5384ef012053da72bfaccc26da1d0cf54a80e502f0f21b45cb88d7c1d0376df185572aaf03fc115956273dc9c5e253b260a08e246b19db45598f1d54cacd38520a0f0cd9c17b2191643c99204a283b16a00a97c7c00a77469b68b380c8e6205fa91981bee09e8eeff5", 0x95}, {&(0x7f0000000940)="08c97fac41db41ff3a380839467a62c5144644d8056251e46d057cdf1c70653370ab76c7c214827edc36d66da1a6e28fd9b69221c29289eb672f91e2bcab78ed729c4e6582cddeefa3c5cd0cc4db9d6a6318661e0e6e7e71330f2d538f17459fa10e22ddf1f3dea55bddd00961ab5c967bb329f66b29840548702403622f80b37d72c51bf480ef9b8de9b8e6756b52e6234f4ebf1383cd6be2877118a55f", 0x9e}, {&(0x7f0000000a00)="563da0afd77969d9a4a689e910cd792a7f6e5e5cb0214405ef62bfbbfdb890e552c19149aca756f98cbeb0bfeaa3c5f9cb8eba", 0x33}], 0x3, &(0x7f0000002280)=[{0xf0, 0x29, 0x8f, "93f544646d83775b5f31f1ecd9d3f2342f963b2bb115a2991dcf8e4703ea871b02164b1114002c2ce717df4f5a378638c1f3a18bb19c6aa014b45ecafbfa61b843d57fa66a89f64801ea30460a0cd785089a25213f5c852da58fe0d7b9fe5586b1aeda8f9ff07e90bbd7bd60eaaafcef28c837919856ff26aa9298bda858c3c92130349da143ee490e0866c2c0b3b875cff33211d6c09ea2d11a35d85fc05d70d9807ae77e81f2550bbbb8b13478397b38010e03657f5bf3589d913a77e04ae6ae557e1d44325e20ce2572f39fd4881e9ce75013cb60b16880e485a934"}, {0x1010, 0x29, 0x1, "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"}, {0x78, 0x10b, 0x5, "2e7fb1ba0286cd80d6c252d3fd3aef9465916ec80fcc3a55528e1e2225a97a712cbb34d0e2a895bb0f1a7beb00cf64084678968e6caa8a0c86d9f67d6822c535920527e81765c0d8fcc3ab99755983737fcb303d636988f4369ec4ccb63acbed6691544ebdf1eb5e"}, {0x40, 0x104, 0x1, "1ad789b68dd813a2789eda267f793759116395b150019b76f4f9c35086f22dbaa566943077b1eabcff8c3d08507d21"}, {0x68, 0x0, 0x5, "c871306bf0e1f1551f6e4345a717bc45c503828cb31f446b3236a79acbb5c5db0edd40412a5f13ec7ccf566ed73363997280da716249abedf28d8eac14536f745dd2d195be1779ba293a959c99c948e4c7f6f22b00bf3a"}, {0x30, 0x10e, 0x9, "6be6d568fb5d6969efab5390181ed940c5ef1bd3cc521f2dfc083e4fdc"}, {0xf8, 0x0, 0x4, "21c8cf20501fa7bdf4372baff372e3a03d0d567a00001fc2a3ede45be2ae2338659f992022cd7f00417f0e13884a464f33cfe2e8fc295cbdba2d4946e71e482715f48f435c67ee5d49b0104e3aa21bbb779caa1a2bad04cc17c5c8824600abaed45ca5dc07c9b6e1e50d5717429dc49c6bb978f73add77f16ffdc7e9b3d9ae53aaa43df9eb53c2bd2177dd360431a990a4c8c62dfb1e7c10b67c789f8876ed7b67fa0c354f1089fd39dce3ba8733ccb69eea9804bbb742cbf23aaed9b2ce2b5b99b9c9989caefe641c85e00ee38a8ed7fdbb06f0cfd82d97cdee0453672d4f16158a7afeca2c"}, {0x60, 0x104, 0x9, "7bc60eb36958d2e6f3c449b71a65a7414a0d18e82fe4d90ead58afa5d7c81e824f72c5f25a399ae18ed150248b9f3d856e5afb2b21d2eb2ac270554d8a625fdd3bec6c1af6e42053fe7b6fa37819b80f"}, {0x1010, 0x116, 0xe0c, "09be8a4a5376e2d95e18141895b238a9272226b6a005a48135398afd144b2894c5391c7ed9ca754f563e90ca960dce0100d5426c2dd8a243a7aac9b550442dfc109c8f9cd445aefaa048d139a0344b811a5a559e419d971aeaddfcf2d6e2875110194a0ed1c60583c08a63d6e741d9324bce6249ee77b6cf09fb8b2bfbc954ba04bcb43c31c0c2a8bbe5f61079d46b7f2c1c294a3677efeadd93f186e01a4d938148c1229896e1d5bf0be853098e91203df7966521418b3580664524287daf532e3c9ba695443748820a2a813b96df983d78ad5a8ff403e2c656c843508c5f789a96ee224c41634484dfdc3c22f35dbc46a4dc186d87fd3e2d3e405ebe4ce50b2f8cfc12768b67806247307d991e8974e0d8dedb6afa33d61189c8088b785375b77e9d27b7bfc7486f19956dac38848d335f5a3f4b59cbb6cf65521815dd5c01d1e3be3e968a965c71f1f0b0d3986c43f19fdfeb03c2a3f7abb0970bdbbbefc31dc475814c456aaee0b36042f282915cadb6f652d787a8ea9017a1a573acde44ecc3c69c26666925ccd0e43e04a91cff5e41b59f8ff37de420991cfa4123641048f34a2569b288a66655327afcce95b58e8d7d103222931bb2a2c67087d5452f0bd5fb511c630c7e702e40f8f254d8490cf7d4375494a854cd62190e0bc96ddd5343697d32bd8cd1d1caaa2f719fa274021595b94e5d25614f97a73f6d3043d983555745703f6ef10377f65ac4668d2f1947752cf6509914d811ec0745b7a1d8e7a5cb391505dcc2a862ae53a8c8fec1cfb2a9befaa2ea8ab8c5661fcf0b16bf79a07950246cacca313e08ca32cdecbb02db1bfac9de0a79c018ac625327b175027cea3262e59b0110c0c92cbe146517e5447b1587f0c79fe76ab1748e1a165796ca34cf1d4cd7ff2920e238b241addf1a2e30f474c8aa10d09586358332a62c9beedd89e53dee1e2df2d3bc2e8da57f6b9d918bc300cd73846248095d841fa6ced99b4fd738a553a51679aeb1600890fe6d1eeac8d3331579fb593bc1470edd05c13405f7173d633ac47293e277499af97d8e9ff422a76964c2518a4abe3323bcc3372e4f3032e46c38ebb0cdfe5181d01abb7986fc75ee57489b1ed874babb6cb4ed0a702e981b1f0393279d254fde5194005a2e18e7a21971a5fee007409857bed4f6ff5ee66e69940189122cc85d6456b9e7d821aad908729dc71617d91b47ffee9185315e6cc0f0954681dc9b914ee157552d95bcac8bd8c954a511891c95826c32d44e3837b87dd85dac12a84ab6f0098028e803a6647c39f7150f437ec2d96dc67f0a251b02c0465acdef7598cc7bdae04b883599cec4fdaf781e50c243e01fded12daeae26e4a53a8beee1cd5cc42b73d67f23366a47bbec5a90a5f454c50a455032f9ffe65e395ee5dd476d1eba60c3f975fb5dfd56beb4b74787918d44a3f8527cc90ebe973d4e58df73c1b13ad46950e24be58733a87286132e5c57cc6bd8dc937be51c98418e72b0bdc6b340eb429f1983667d38119ef10a02a322ba113318bae9b96dc3a0169e827b43aeed78235424bf360511d46fba56064cb3bb9b29274612ae50fecd622ea447f262bc2be4e11e45367eacf7dbfd22b58237191a6c5a0958640f392c711da3d359cf3f4067d4bed9f1fd1f9ca769c3d222eb30412decd5b235e56d466bc402cb465addd337a48983e534af239a817e647814b7ae3cc6e78a455a97f1bcc3de363507bef5a6ce99cd9619d8593355a1457798919448c0ad7f4c564c7f6e2e086fc02385b97f0efa42c9956c93bd908b0ae35bfc434601e893294fd012ed415cc6f22f1ed066f81fef4d7006a09ad27886429a4d89aca1f635f0fb00e15ad38ea42cca76b634ac10a9f4e176d302d5818dc287e846e35adc7dbd2af0cbf3163aa4fc21b05a0655bf234e7bbe4dead5d1a53807e51bc75386092c6ef1c2a16e0bd8d6666e3422269d346af7ec1da5d6e860b3a750c79c137a3a643911d494004d0006163774488542ab71d5b4380c785e3c2b18a43640c6bb2d4285fea9afd431203678a418194f97afbba783355d839e1e1245486f586803f544d6caf5a4761c10b3596b0cdbd28294161e23ec96ce4cfaccb774f1caf407d18513f1350646feecfc68a112bc31c454e4c99043957d72863299914c39893315458adcc660ac0623d75e35dd8fce378161ed4d7f8b0b921f09d24efca293a7ce163116412b89b445e306c5c0602cc52ca037b6ed3cea7983f9f1d4bb0766a50f90521bd4b8e01ceeac7ce8ac4058563a7a13e9a4823b9dcc3241c4a8ac821fcde2e5b90ca6ca48925772dc4e6baa9f6c905f166448b49c672fa3d24711b6a1825102387a905694af14f4929367b596e1b89d4bb0c59f03f122c1286a8c036efb193576cbd68ef3a2ea1890c78a6585f13354596e6306da7ed3f214ce3f60624600b975e56302ca9080cf712d5077ae3a74f0cda5f3c72c9e47cc74d866e42ae7a3504a940a3aa1a6ca0bf8dcc589cdf8cea5b0989fc91821d72da9cfff91e3f939510ffb089748b8e10f6cc8f1c20d184af4ad7647df117e378e0d71a476597ddcf9df0a436942c727c8c8f4cb3b603ee7ee8a4a97cdce2bdd749b0e810dab1283edb7251c445a39a77eab53c901a96fa5fce6d86544ea0049a9c02ead28eb7f8a4b26d6e6df0190fb51112aa1cc726c3ee98553df1e518b2da4fc88f061e0906791417037d759c932a65906f3215f9664c8d63b5011e45637fc3b76ed4433540ca8693fc60044ff12d31b2ec04c26bc76d88261a0a8342ba9cf33571b116eb2602416fbdc6edfb1e4422736f4dd94cc3decd71abc4c627e37d1970d40cbb1137485c462a640c833b57f41bc5da8909cbd5889570c6876ccbe6e4239a281b6107ecd4e606cd0e94f9a7b45c21e96409ea1bd876d7ea6b55bfd297ec431f4b851ef14e952ec64efc4d7a39ae944270a709bffe676d890640e7f9bb992e9d30de652d824909096b9cb937f87573f45628fdb13304ca38ecb8cd238cbe4ddfd17eef981c346856b67c15f7f874ffde5aa4d6dd8cbb2e278fe0b63494eb3be499a899e542ab0dc93643491f2655cb4b68e80c71e7f7d5bb05a52bb0662616d9931efe97f9d8f1b6d0090d320a87bcf437fad68f64dec7a63cc7640d67cc8b1df1a08a22fe4292ce93b8c9e861e9f02ba7eff1176885fb078d60e54b78938ec965fe6cf7666687150fb7772ca64ffc3d7ad69b1bf358a02a931ebf4dde9cec0cca3a9d133235fe6ff0b61e44e36cd9e2773e965d83bb267464fbc41ae4a852280dc405816a2ea6f4937362b6f57cf3ce02f2c42bdb9dc1a190237914b7c00ce6f0eadc0e693f0b07a362e1a78777f1bb7ccdb8c0370c35aa9b791f83d4f86e9233e9ce1ea0f39e3ec47ac9c3e01bca7eb1661e2a7f70b2697ea9f4f6cf02bc5576286474ce30e1b244025d32b3e1aef1f878178299ec27eabbf42a82d01e66a60c8116d7f449bc1b5e901d0665a2b621609d6eccf5802d3056d4a3a934e56a4bbc309f88fcc34cb7bf4c8c852001e94244c59f12783c4487d7468309a0e0f00e24ae69152e7c036094209b5aebd7d5a4c2dc4aea5b1b77a55a73373ae415143f62cb9121afffc8b46a943be100caa1ae6891a815495c4081b2bb53017a651de0dd9d30e7bd4172146f834ff68e53e62b74d1a2d30315f37d2c86f07c37d989bedf4a3b2071f601de24cb8b6d208d9a95f0bcb05493ea0592746f49c5cb11901d1c84ba8db63dd9443f9510c3eff6e1c2ac2e05968588ee0994745d61a0332b15f3d0575ccf9e46f165bc242ea563552d0c7fe852ec3bb9e7f33c0c18dbd27edfc06d9599cba2f58377653c22f84402cccefa3259ecbe72a8c41bc3a9c4b37297a050258b016dd6e3bc7ccc9c1e24c3b4e0830e2c341afacc98757121606be672eadebad1cd86058adb1065b95f7c3c58f63120410d04271915bfd0f170f2b178b3c16434b35cc247ae67a531c291095c2a494af6006795f58bdea1a3bd8bd8a35ee2b4a667ec1ad43a7c93b4fb6a80c5d0ceb4a97db8590f7554ceb88a1d2d5c29e1c909498a2af334a3b3a6cc240704857a562e892210a4fcd4196a0a1c8a64c09ddff29a924a064882a43d22a4f4174bb2d23e38dcb24e3003bff56c322eff96b1af7fb53c8d818cf73b42dea3f13e08c7fc22fa913fe724ded0ebfeb24a4617d88e4191e7335d4ad4d38380cd9dfb9d892ddca6014d90fc86e9111b56e636b69d18e34d8aed37238defb3b59f2233fdbe8a950bb3c7459da1738baeda8a39ed5507dc5d25dd4edee5a835030f5deeeaf25144cde560b18ef5a335c7c62238da1d09149ac91f75b932c6369437242206229e59b4e08d291c4200ea272cdcb58cc9d237c94d1f55420853c1a596de2d78ee053cd2bc63e22abd8644a5eb78a56439e3e3157128fd2000afaa906fc1f02864cc2414b12f85666bee97bbe05379c016ac061e41d68b3928c51a24abbaf2f678a3294edb240cb19b942e924085d1b48c9a9f8fbae111c17ffa4e59526da3c13984b285a8a9ba087d73631c5852d08843e87e18fc7f64a2a03c016989483b02d83d223b9789b7cc94aaaea520daba704806d40a7f458d261d5ad9080d298254bc239e6c3b9481bb80ff8fe6e0a52604451b5a3352a52d01b1d018eef40786b9c5a7e408170dc07adafe741781df2e4c809c2cf7c378d816cb28ab89da82f1330c66f5d30d71e3917cdc9afa16cec4723bbd9fb79bd44995d8ee2f1eeae1bd489ae61652c419b7cab339c42d9c09b8fc23cfc2b2e8473f028076e5b0d2347ed6947af0e73c9a3ebcf10210ad41e885b18c998f80d6f8dded1bada128b53c8dc31b1cac6db4476259eacc72a60d5f19d5bb1f1b1569bf5e7955508f991306569079261847d8ca66668038845b76be87859a32ce3cb0abde5dbc143f87235ce85ade62619039916c38bc0a461df3fe18c8e2dad7b4759dd23a70c1dd439948267d42864fb0bcbd8580d612c71b36fcc034042bd8daf9bd1178e6c3ce33e81ebdee007805eb7339ca0be29dcecb393a2f6f381749db4b7448a55e5e8f41a57d7ca76a5d322e3554756f0fdc44026011398e4befb480c044a5717120822a2c4abc82fcd0b9437ed161eb09648d099924cf124067433c2012e89d72e84cc38b7af4bb5d789db81399c634b5c63eabe31b1e8befb915ba06b243618337a647c163eea84fe65e700df0051ffdf5c4de056ac9479542e5f98d19897abdac7219742ac7f7dae7f1d7894bda1bffa9f66b11c87a90846c4b8960c5fa77163ac8f41d66e6fc51ce578f6c46124a3c43c01fdaad2d0ef6d480a376c4da950dd63ef1d8e6f4817c0c19a2e8725f6dce9f541dd97b0ca307e2160aa1de7f058b146c2978dacdf9c8c6b18174a3b59eec49e02696c896f1c67e91025ad7dc7a47e4075803743cf7ac6a42e154f330ed5ffcf3b01c5ffdc4be4e67a173b27a82c9d8e4413bf275f5a1ea5be01541f02661011772df425f019e47041bf8abe313cb124381012fde84ba346f6a39f08db39be6ffdea2b9b775478a605120fbb0816d5140193ed45e2ae2e58c133bea53c04e1e21cd0685e61a65ef9dea444795ee0e2d04bfbfc2b3543dbb95aa0334d43ca471da1e133d26ebb7ad9ada1eb85e6a92d56ad8af80af0f0b75438823af82fb8926d80adc93287395d14f2e883a332de7ed6c855c5870381b934244ead91eb561707c3c40e2ccafa09721735236fbb4ce4e387714300b75d92029eed518350f3e0f7"}], 0x23b8}, 0x24000004) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x2, 0x4, 0x7, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x13, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x3, 0x7, 0x0, 0xffffffffffffffd4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x61, &(0x7f0000000180)=""/97, 0x41100, 0x40, '\x00', r7, 0x25, r9, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xc, 0x9, 0xffff6fb7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[r10, 0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x1, 0x7, 0xa}, {0x4, 0x3, 0xd, 0x1}, {0x3, 0x1, 0x6, 0x7}, {0x2, 0x4, 0x1, 0x8}, {0x4, 0x2, 0x3, 0x6eee7bb0242466de}], 0x10, 0x4}, 0x94) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x40}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r14, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r16}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x91, &(0x7f0000000280)=""/145, 0x41000, 0x12, '\x00', r7, 0x25, r11, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x9, 0x401, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b40)=[r12, r13, 0x1, r14, r16, r12, r15, r14, r12, r15], &(0x7f0000000540)=[{0x1, 0x4, 0x3, 0xb}, {0x1, 0x2, 0x8, 0x1}, {0x1, 0x5, 0xf, 0xc}, {0x1, 0x1, 0xf, 0x5}, {0x4, 0x5, 0xc, 0x9}, {0x1, 0x2, 0x3, 0x2}, {0x0, 0x4, 0x3, 0x7}], 0x10, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r4}) 2.551722002s ago: executing program 4 (id=14940): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000b80000a1bc0001000000fff000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb79105000000001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x90) 2.139613242s ago: executing program 0 (id=14941): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000004850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r3}, 0x38) 2.137540212s ago: executing program 4 (id=14942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x49, 0x0, &(0x7f0000000400)="3e7657cd5ae01d038031b14d1db240613a770925c1ddbe0b261ad4cf9ce014831d7746bcefb93e02d02a24bc08f2e5f32627ab5a7a9b490c6e1333152a1872e5b8743920fc006c6e44", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x42002}, 0x50) 1.77086691s ago: executing program 0 (id=14943): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r2, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 1.677817362s ago: executing program 4 (id=14944): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000021", 0x5}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000021", 0x5}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x28, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xe, 0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x11) 1.499880766s ago: executing program 2 (id=14945): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0400000008000000000000800006000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.165302624s ago: executing program 4 (id=14946): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000004850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 549.030968ms ago: executing program 0 (id=14947): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35a, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffc}, {0x90010022}]}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce00e72000080ff008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 141.939277ms ago: executing program 0 (id=14948): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 0s ago: executing program 4 (id=14949): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10c006, 0xac5d, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000a80)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x3, 0x0, 0x8, 0x4, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) close(0x3) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xc8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES64=r3], 0x48) kernel console output (not intermixed with test programs): 93][T12660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2561.271461][T12660] R13: 00007f74f0c26038 R14: 00007f74f0c25fa0 R15: 00007ffee69d2518 [ 2561.279457][T12660] [ 2561.778128][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2561.787851][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2561.804149][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2561.865020][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2561.873011][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2561.880420][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2562.363862][T12690] FAULT_INJECTION: forcing a failure. [ 2562.363862][T12690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2562.381510][T12666] chnl_net:caif_netlink_parms(): no params data found [ 2562.400188][T12690] CPU: 0 PID: 12690 Comm: syz.3.12991 Not tainted syzkaller #0 [ 2562.407776][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2562.417843][T12690] Call Trace: [ 2562.421135][T12690] [ 2562.424086][T12690] dump_stack_lvl+0x188/0x24e [ 2562.428874][T12690] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2562.435069][T12690] ? show_regs_print_info+0x12/0x12 [ 2562.440298][T12690] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2562.446491][T12690] ? dump_stack+0x5/0x12 [ 2562.450762][T12690] should_fail_ex+0x390/0x4c0 [ 2562.455466][T12690] _copy_from_user+0x2c/0x170 [ 2562.460165][T12690] ___sys_recvmsg+0x170/0x590 [ 2562.464874][T12690] ? __sys_recvmsg+0x2a0/0x2a0 [ 2562.469667][T12690] ? lock_chain_count+0x20/0x20 [ 2562.474550][T12690] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2562.480735][T12690] __x64_sys_recvmsg+0x20d/0x2e0 [ 2562.485697][T12690] ? ___sys_recvmsg+0x590/0x590 [ 2562.490589][T12690] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2562.496510][T12690] do_syscall_64+0x4c/0xa0 [ 2562.500946][T12690] ? clear_bhb_loop+0x60/0xb0 [ 2562.505639][T12690] ? clear_bhb_loop+0x60/0xb0 [ 2562.510315][T12690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2562.516203][T12690] RIP: 0033:0x7f996f99de59 [ 2562.520617][T12690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2562.540307][T12690] RSP: 002b:00007f997091e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2562.548717][T12690] RAX: ffffffffffffffda RBX: 00007f996fc25fa0 RCX: 00007f996f99de59 [ 2562.556684][T12690] RDX: 0000000000002082 RSI: 0000200000000300 RDI: 0000000000000005 [ 2562.564648][T12690] RBP: 00007f997091e090 R08: 0000000000000000 R09: 0000000000000000 [ 2562.572623][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2562.580586][T12690] R13: 00007f996fc26038 R14: 00007f996fc25fa0 R15: 00007ffd3e2d7c68 [ 2562.588580][T12690] [ 2562.736937][T12666] bridge0: port 1(bridge_slave_0) entered blocking state [ 2562.752428][T12666] bridge0: port 1(bridge_slave_0) entered disabled state [ 2562.770795][T12666] device bridge_slave_0 entered promiscuous mode [ 2562.785706][T12666] bridge0: port 2(bridge_slave_1) entered blocking state [ 2562.795495][T12666] bridge0: port 2(bridge_slave_1) entered disabled state [ 2562.804053][T12666] device bridge_slave_1 entered promiscuous mode [ 2562.890340][T12666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2562.934797][T12666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2563.042382][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12997'. [ 2563.082814][T12709] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12997'. [ 2563.126508][T12666] team0: Port device team_slave_0 added [ 2563.152030][T12666] team0: Port device team_slave_1 added [ 2563.185628][T12712] netlink: 22 bytes leftover after parsing attributes in process `syz.4.12999'. [ 2563.197084][T12715] netlink: 'syz.4.12999': attribute type 21 has an invalid length. [ 2563.215776][T12715] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12999'. [ 2563.409416][T12666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2563.434120][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2563.506595][T12666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2563.584411][ T6259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2563.657023][T12666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2563.678169][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2563.723788][T12666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2563.841712][ T6259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2563.912474][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 2564.019935][ T6259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2564.126368][T12666] device hsr_slave_0 entered promiscuous mode [ 2564.232150][T12666] device hsr_slave_1 entered promiscuous mode [ 2564.276872][T12666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2564.297557][T12666] Cannot create hsr debugfs directory [ 2564.379050][ T6259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2564.733443][ T6259] device 0 left promiscuous mode [ 2565.982529][T23195] Bluetooth: hci1: command 0x041b tx timeout [ 2566.782567][T23195] Bluetooth: hci0: command 0x0406 tx timeout [ 2568.070260][T23195] Bluetooth: hci1: command 0x040f tx timeout [ 2568.238400][T12789] netlink: 'syz.4.13024': attribute type 1 has an invalid length. [ 2568.246533][T12789] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.13024'. [ 2568.682962][T12793] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2568.765178][T12798] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13027'. [ 2569.380458][T12809] device syzkaller0 entered promiscuous mode [ 2570.097771][T12666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2570.152513][T23195] Bluetooth: hci1: command 0x0419 tx timeout [ 2570.702784][ T872] wlan1: Trigger new scan to find an IBSS to join [ 2570.937912][T12829] netlink: 'syz.4.13034': attribute type 29 has an invalid length. [ 2573.743234][ T6262] wlan1: Trigger new scan to find an IBSS to join [ 2573.933921][T12666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2573.945218][T12829] netlink: 'syz.4.13034': attribute type 29 has an invalid length. [ 2573.960484][T12666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2573.988755][T12666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2574.305616][T12666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2574.328678][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2574.337821][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2574.353504][T12666] 8021q: adding VLAN 0 to HW filter on device team0 [ 2574.433830][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2574.461419][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2574.484133][ T872] bridge0: port 1(bridge_slave_0) entered blocking state [ 2574.491267][ T872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2574.506736][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2574.525088][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2574.537375][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2574.549521][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 2574.556700][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2574.634349][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2574.693374][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2574.737100][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2574.771719][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2574.810025][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2574.833420][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2574.877028][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2574.927239][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2575.025583][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2575.164416][T12871] netlink: 'syz.1.13046': attribute type 10 has an invalid length. [ 2575.781826][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2575.793319][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2575.853687][T12666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2576.485188][T12889] delete_channel: no stack [ 2576.702469][ T6261] wlan1: Trigger new scan to find an IBSS to join [ 2577.270004][ T6259] device hsr_slave_0 left promiscuous mode [ 2577.351999][ T6259] device hsr_slave_1 left promiscuous mode [ 2577.361865][ T6259] device bridge_slave_0 left promiscuous mode [ 2577.413795][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 2577.479503][ T6259] device veth0_vlan left promiscuous mode [ 2577.640733][ T872] wlan1: Creating new IBSS network, BSSID 8a:99:20:84:66:b7 [ 2579.366507][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2579.382498][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2579.397956][T12666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2579.472971][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2579.495863][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2579.553472][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2579.568512][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2579.580493][T12666] device veth0_vlan entered promiscuous mode [ 2579.595936][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2579.620185][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2579.657659][T12666] device veth1_vlan entered promiscuous mode [ 2579.728008][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2579.747897][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2579.783762][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2579.807280][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2579.840268][T12666] device veth0_macvtap entered promiscuous mode [ 2579.865156][T12666] device veth1_macvtap entered promiscuous mode [ 2580.809705][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2580.820472][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.836917][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2580.849724][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.859929][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2580.870669][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.887688][T12666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2580.908243][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2580.919996][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2580.930680][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2580.942151][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2580.974372][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2581.002969][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.016837][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2581.028459][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.039011][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2581.049711][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.070825][T12666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2581.099503][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2581.128153][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2581.139286][T12666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.153589][T12666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.163413][T12666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.172110][T12666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.335320][ T6267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2581.355692][ T6267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2581.371860][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2581.420459][ T6259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2581.443242][ T6259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2581.462606][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2581.798900][ T6259] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2581.805112][ T6267] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2581.941241][T13021] delete_channel: no stack [ 2581.958551][T13021] delete_channel: no stack [ 2582.512715][T13020] delete_channel: no stack [ 2582.960556][T13040] netlink: 'syz.3.13093': attribute type 29 has an invalid length. [ 2583.076717][T23195] Bluetooth: hci4: ISO packet for unknown connection handle 6 [ 2583.961494][T13061] mac80211_hwsim hwsim95 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2584.829947][T13068] netlink: 'syz.4.13104': attribute type 29 has an invalid length. [ 2584.849515][T13068] netlink: 'syz.4.13104': attribute type 29 has an invalid length. [ 2584.869575][T13068] netlink: 'syz.4.13104': attribute type 29 has an invalid length. [ 2587.208032][T13123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13120'. [ 2590.318209][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.324778][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.816622][T13156] netlink: 176 bytes leftover after parsing attributes in process `syz.0.13134'. [ 2593.929489][T13176] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13138'. [ 2594.766677][T13212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13152'. [ 2595.131724][T13225] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.13155'. [ 2595.167958][T13225] net_ratelimit: 3256 callbacks suppressed [ 2595.167975][T13225] netlink: zone id is out of range [ 2595.252091][T13225] netlink: zone id is out of range [ 2595.289193][T13225] netlink: zone id is out of range [ 2595.316413][T13225] netlink: zone id is out of range [ 2595.353593][T13225] netlink: zone id is out of range [ 2595.376575][T13225] netlink: zone id is out of range [ 2595.382143][T13225] netlink: zone id is out of range [ 2595.462291][T13225] netlink: zone id is out of range [ 2595.475303][T13225] netlink: zone id is out of range [ 2595.497147][T13225] netlink: zone id is out of range [ 2596.756311][T13262] netlink: 'syz.4.13170': attribute type 10 has an invalid length. [ 2596.792694][T13262] netlink: 55 bytes leftover after parsing attributes in process `syz.4.13170'. [ 2598.812410][T13269] FAULT_INJECTION: forcing a failure. [ 2598.812410][T13269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2598.842370][T13269] CPU: 1 PID: 13269 Comm: syz.3.13172 Not tainted syzkaller #0 [ 2598.849972][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2598.860037][T13269] Call Trace: [ 2598.863325][T13269] [ 2598.866266][T13269] dump_stack_lvl+0x188/0x24e [ 2598.870968][T13269] ? show_regs_print_info+0x12/0x12 [ 2598.876187][T13269] ? load_image+0x410/0x410 [ 2598.880714][T13269] ? __lock_acquire+0x7c40/0x7c40 [ 2598.885767][T13269] should_fail_ex+0x390/0x4c0 [ 2598.890466][T13269] _copy_from_user+0x2c/0x170 [ 2598.895166][T13269] csum_and_copy_from_iter+0x492/0x1380 [ 2598.900762][T13269] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 2598.906437][T13269] ip_generic_getfrag+0x150/0x2e0 [ 2598.911486][T13269] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 2598.916358][T13269] ? raw6_getfrag+0xe6/0x300 [ 2598.920964][T13269] ? __alloc_skb+0x4e6/0x7d0 [ 2598.925568][T13269] ? skb_put+0x10e/0x200 [ 2598.929831][T13269] __ip6_append_data+0x2ee1/0x3e30 [ 2598.934984][T13269] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 2598.940297][T13269] ? ip6_setup_cork+0xff0/0xff0 [ 2598.945168][T13269] ? ip6_setup_cork+0xa4a/0xff0 [ 2598.950046][T13269] ip6_append_data+0x1c8/0x3d0 [ 2598.954833][T13269] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 2598.960138][T13269] rawv6_sendmsg+0x1221/0x1710 [ 2598.964932][T13269] ? compat_rawv6_ioctl+0x60/0x60 [ 2598.969989][T13269] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2598.976414][T13269] ? aa_sock_msg_perm+0x94/0x150 [ 2598.981370][T13269] ? inet_sendmsg+0x7a/0x2a0 [ 2598.985978][T13269] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2598.991272][T13269] ? inet_send_prepare+0x250/0x250 [ 2598.996407][T13269] ____sys_sendmsg+0x5ed/0x9a0 [ 2599.001200][T13269] ? __sys_sendmsg_sock+0x30/0x30 [ 2599.006245][T13269] ? __import_iovec+0x306/0x510 [ 2599.011118][T13269] ? import_iovec+0x6f/0xa0 [ 2599.015643][T13269] ___sys_sendmsg+0x2a2/0x360 [ 2599.020340][T13269] ? __sys_sendmsg+0x2a0/0x2a0 [ 2599.025140][T13269] ? __lock_acquire+0x7c40/0x7c40 [ 2599.030204][T13269] __se_sys_sendmsg+0x1c3/0x2b0 [ 2599.035083][T13269] ? __x64_sys_sendmsg+0x80/0x80 [ 2599.040053][T13269] ? lockdep_hardirqs_on+0x94/0x140 [ 2599.045265][T13269] do_syscall_64+0x4c/0xa0 [ 2599.049697][T13269] ? clear_bhb_loop+0x60/0xb0 [ 2599.054387][T13269] ? clear_bhb_loop+0x60/0xb0 [ 2599.059082][T13269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2599.064992][T13269] RIP: 0033:0x7f996f99de59 [ 2599.069419][T13269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2599.089039][T13269] RSP: 002b:00007f997091e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2599.097470][T13269] RAX: ffffffffffffffda RBX: 00007f996fc25fa0 RCX: 00007f996f99de59 [ 2599.105460][T13269] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 2599.113444][T13269] RBP: 00007f997091e090 R08: 0000000000000000 R09: 0000000000000000 [ 2599.121432][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2599.129415][T13269] R13: 00007f996fc26038 R14: 00007f996fc25fa0 R15: 00007ffd3e2d7c68 [ 2599.137414][T13269] [ 2599.464196][T13286] netlink: 'syz.4.13180': attribute type 29 has an invalid length. [ 2599.539689][T13288] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.13181'. [ 2599.553157][T13286] netlink: 'syz.4.13180': attribute type 29 has an invalid length. [ 2599.979879][T13300] netlink: 'syz.2.13186': attribute type 10 has an invalid length. [ 2599.998428][T13300] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 2600.064876][T13299] delete_channel: no stack [ 2600.549258][T13320] netlink: 'syz.1.13194': attribute type 29 has an invalid length. [ 2600.604016][T13320] netlink: 'syz.1.13194': attribute type 29 has an invalid length. [ 2600.624049][T13323] netlink: 'syz.1.13194': attribute type 29 has an invalid length. [ 2600.692385][T13320] netlink: 'syz.1.13194': attribute type 29 has an invalid length. [ 2600.760112][T13326] netlink: 'syz.0.13196': attribute type 29 has an invalid length. [ 2600.782475][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13196'. [ 2600.827089][T13326] netlink: 'syz.0.13196': attribute type 29 has an invalid length. [ 2600.882537][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13196'. [ 2600.965477][T13331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13196'. [ 2601.239941][T13336] sctp: [Deprecated]: syz.1.13210 (pid 13336) Use of int in maxseg socket option. [ 2601.239941][T13336] Use struct sctp_assoc_value instead [ 2601.984010][T13354] validate_nla: 1 callbacks suppressed [ 2601.984026][T13354] netlink: 'syz.0.13207': attribute type 49 has an invalid length. [ 2602.186099][T13354] netlink: 'syz.0.13207': attribute type 49 has an invalid length. [ 2602.498846][T13364] device syzkaller0 entered promiscuous mode [ 2603.442085][T13390] netlink: 'syz.2.13214': attribute type 29 has an invalid length. [ 2603.481326][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13214'. [ 2603.743147][ T888] wlan1: Trigger new scan to find an IBSS to join [ 2607.498513][T13390] netlink: 'syz.2.13214': attribute type 29 has an invalid length. [ 2607.507169][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13214'. [ 2607.516493][T13391] netlink: 'syz.2.13214': attribute type 16 has an invalid length. [ 2607.525227][T13391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13214'. [ 2607.649274][T13402] netlink: 'syz.3.13222': attribute type 28 has an invalid length. [ 2607.671739][T13400] netlink: 'syz.0.13231': attribute type 3 has an invalid length. [ 2607.680266][T13400] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13231'. [ 2607.744975][ T6261] wlan1: Trigger new scan to find an IBSS to join [ 2607.822975][T13402] netlink: 'syz.3.13222': attribute type 10 has an invalid length. [ 2608.022321][T13416] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.13226'. [ 2608.421038][T13429] netlink: 'syz.4.13232': attribute type 17 has an invalid length. [ 2608.441289][T13429] netlink: 148 bytes leftover after parsing attributes in process `syz.4.13232'. [ 2608.712939][T13174] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2609.069679][T13441] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.13234'. [ 2609.324507][T13446] netlink: 'syz.4.13236': attribute type 29 has an invalid length. [ 2609.352100][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13236'. [ 2609.396345][T13449] netlink: 'syz.4.13236': attribute type 16 has an invalid length. [ 2609.435237][T13449] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13236'. [ 2609.458060][T13446] netlink: 'syz.4.13236': attribute type 29 has an invalid length. [ 2609.474910][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13236'. [ 2609.549745][T13452] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13239'. [ 2609.568411][T13452] net_ratelimit: 3542 callbacks suppressed [ 2609.568427][T13452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2609.629508][T13454] netlink: 'syz.0.13238': attribute type 28 has an invalid length. [ 2611.744716][ T6259] wlan1: Trigger new scan to find an IBSS to join [ 2612.341722][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2612.349235][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2612.406030][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2612.413468][T13486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2612.422798][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2612.429933][T13486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2612.579008][T13486] team0: Port device bridge0 added [ 2612.727421][T13501] validate_nla: 2 callbacks suppressed [ 2612.727465][T13501] netlink: 'syz.3.13256': attribute type 10 has an invalid length. [ 2612.754220][T13501] device hsr0 entered promiscuous mode [ 2612.794570][T13503] netlink: 'syz.2.13257': attribute type 28 has an invalid length. [ 2612.825558][ T872] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2613.101605][T13513] FAULT_INJECTION: forcing a failure. [ 2613.101605][T13513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2613.115746][T13513] CPU: 1 PID: 13513 Comm: syz.3.13260 Not tainted syzkaller #0 [ 2613.123323][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2613.133392][T13513] Call Trace: [ 2613.136685][T13513] [ 2613.139627][T13513] dump_stack_lvl+0x188/0x24e [ 2613.144334][T13513] ? show_regs_print_info+0x12/0x12 [ 2613.149550][T13513] ? load_image+0x410/0x410 [ 2613.154071][T13513] ? __lock_acquire+0x7c40/0x7c40 [ 2613.159114][T13513] ? snprintf+0xe5/0x140 [ 2613.163369][T13513] should_fail_ex+0x390/0x4c0 [ 2613.168067][T13513] _copy_to_user+0x2c/0x130 [ 2613.172584][T13513] simple_read_from_buffer+0xe3/0x150 [ 2613.177978][T13513] proc_fail_nth_read+0x1a6/0x220 [ 2613.183020][T13513] ? proc_fault_inject_write+0x310/0x310 [ 2613.188677][T13513] ? fsnotify_perm+0x248/0x550 [ 2613.193453][T13513] ? proc_fault_inject_write+0x310/0x310 [ 2613.199110][T13513] vfs_read+0x2db/0x960 [ 2613.203290][T13513] ? kernel_read+0x1e0/0x1e0 [ 2613.207898][T13513] ? __fget_files+0x28/0x460 [ 2613.212504][T13513] ? __fget_files+0x3fc/0x460 [ 2613.217204][T13513] ? __fdget_pos+0x2ae/0x360 [ 2613.221806][T13513] ? ksys_read+0x70/0x260 [ 2613.226152][T13513] ksys_read+0x14d/0x260 [ 2613.230406][T13513] ? vfs_write+0x9a0/0x9a0 [ 2613.234827][T13513] ? lockdep_hardirqs_on+0x94/0x140 [ 2613.240031][T13513] do_syscall_64+0x4c/0xa0 [ 2613.244444][T13513] ? clear_bhb_loop+0x60/0xb0 [ 2613.249114][T13513] ? clear_bhb_loop+0x60/0xb0 [ 2613.253783][T13513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2613.259672][T13513] RIP: 0033:0x7f996f95e68e [ 2613.264082][T13513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2613.283680][T13513] RSP: 002b:00007f997091dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2613.292086][T13513] RAX: ffffffffffffffda RBX: 00007f997091e6c0 RCX: 00007f996f95e68e [ 2613.300050][T13513] RDX: 000000000000000f RSI: 00007f997091e0a0 RDI: 0000000000000008 [ 2613.308013][T13513] RBP: 00007f997091e090 R08: 0000000000000000 R09: 0000000000000000 [ 2613.316005][T13513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2613.323969][T13513] R13: 00007f996fc26038 R14: 00007f996fc25fa0 R15: 00007ffd3e2d7c68 [ 2613.331947][T13513] [ 2613.941971][T13516] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13261'. [ 2614.105585][T13528] netlink: 'syz.3.13266': attribute type 21 has an invalid length. [ 2614.114368][T13528] netlink: 'syz.3.13266': attribute type 6 has an invalid length. [ 2614.137515][T13528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13266'. [ 2614.345926][T13540] netlink: 'syz.3.13269': attribute type 10 has an invalid length. [ 2614.691122][T13540] netlink: 55 bytes leftover after parsing attributes in process `syz.3.13269'. [ 2614.702578][ T6259] wlan1: Trigger new scan to find an IBSS to join [ 2614.995180][T13550] netlink: 'syz.3.13273': attribute type 29 has an invalid length. [ 2615.003722][T13546] netlink: 'syz.2.13271': attribute type 10 has an invalid length. [ 2615.026020][T13546] device hsr0 entered promiscuous mode [ 2615.068157][T13546] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2615.097024][T13546] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2615.130090][T13546] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2615.157270][T13546] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2615.182688][T13550] netlink: 'syz.3.13273': attribute type 29 has an invalid length. [ 2615.205243][T13551] netlink: 'syz.3.13273': attribute type 29 has an invalid length. [ 2615.222162][T13555] netlink: 'syz.1.13274': attribute type 28 has an invalid length. [ 2615.391646][T13555] team0: Device veth1_vlan failed to register rx_handler [ 2615.415045][T13558] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13275'. [ 2615.591649][T13563] device hsr0 entered promiscuous mode [ 2615.650834][ T6261] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2615.950037][T13582] device syzkaller0 entered promiscuous mode [ 2616.233597][T13591] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.13287'. [ 2622.393124][T13603] validate_nla: 5 callbacks suppressed [ 2622.393152][T13603] netlink: 'syz.0.13289': attribute type 4 has an invalid length. [ 2622.410624][T13596] netlink: 'syz.1.13298': attribute type 29 has an invalid length. [ 2622.432007][T13603] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13289'. [ 2622.450433][T13601] netlink: 'syz.2.13299': attribute type 21 has an invalid length. [ 2622.475646][T13604] netlink: 'syz.4.13288': attribute type 28 has an invalid length. [ 2622.494125][T13596] netlink: 'syz.1.13298': attribute type 29 has an invalid length. [ 2622.521361][T13606] netlink: 'syz.1.13298': attribute type 29 has an invalid length. [ 2622.580189][T13609] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13290'. [ 2622.609708][T13604] netlink: 'syz.4.13288': attribute type 10 has an invalid length. [ 2622.821345][T13604] team0: Device veth1_vlan is already a lower device of the team interface [ 2623.111970][T13621] FAULT_INJECTION: forcing a failure. [ 2623.111970][T13621] name failslab, interval 1, probability 0, space 0, times 0 [ 2623.155775][T13621] CPU: 1 PID: 13621 Comm: syz.3.13294 Not tainted syzkaller #0 [ 2623.163377][T13621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2623.173449][T13621] Call Trace: [ 2623.176733][T13621] [ 2623.179670][T13621] dump_stack_lvl+0x188/0x24e [ 2623.184367][T13621] ? show_regs_print_info+0x12/0x12 [ 2623.189580][T13621] ? load_image+0x410/0x410 [ 2623.194102][T13621] ? __might_sleep+0xd0/0xd0 [ 2623.198712][T13621] ? __lock_acquire+0x7c40/0x7c40 [ 2623.203761][T13621] should_fail_ex+0x390/0x4c0 [ 2623.208457][T13621] should_failslab+0x5/0x20 [ 2623.212968][T13621] slab_pre_alloc_hook+0x59/0x300 [ 2623.218007][T13621] ? __get_vm_area_node+0x122/0x330 [ 2623.223230][T13621] __kmem_cache_alloc_node+0x4f/0x270 [ 2623.228629][T13621] ? __get_vm_area_node+0x122/0x330 [ 2623.233845][T13621] kmalloc_node_trace+0x22/0xe0 [ 2623.238721][T13621] __get_vm_area_node+0x122/0x330 [ 2623.243762][T13621] __vmalloc_node_range+0x357/0x1380 [ 2623.249059][T13621] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2623.254638][T13621] ? aa_get_newest_label+0xf9/0x5b0 [ 2623.259849][T13621] ? free_vm_area+0x50/0x50 [ 2623.264367][T13621] ? end_current_label_crit_section+0x170/0x170 [ 2623.270622][T13621] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2623.276793][T13621] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2623.282352][T13621] __vmalloc+0x76/0x80 [ 2623.286432][T13621] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2623.291992][T13621] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2623.297375][T13621] ? bpf_prog_alloc+0x13/0x1b0 [ 2623.302149][T13621] bpf_prog_alloc+0x1c/0x1b0 [ 2623.306749][T13621] bpf_prog_load+0x7d4/0x1530 [ 2623.311446][T13621] ? map_freeze+0x390/0x390 [ 2623.315972][T13621] ? __might_fault+0xa6/0x120 [ 2623.320668][T13621] ? __might_fault+0xa6/0x120 [ 2623.325349][T13621] ? __might_fault+0xc2/0x120 [ 2623.330028][T13621] ? __might_fault+0xa6/0x120 [ 2623.334709][T13621] ? bpf_lsm_bpf+0x5/0x10 [ 2623.339052][T13621] ? security_bpf+0x7a/0xa0 [ 2623.343563][T13621] __sys_bpf+0x5b8/0x780 [ 2623.347824][T13621] ? bpf_link_show_fdinfo+0x380/0x380 [ 2623.353215][T13621] ? lock_chain_count+0x20/0x20 [ 2623.358080][T13621] __x64_sys_bpf+0x78/0x90 [ 2623.362505][T13621] do_syscall_64+0x4c/0xa0 [ 2623.367017][T13621] ? clear_bhb_loop+0x60/0xb0 [ 2623.371704][T13621] ? clear_bhb_loop+0x60/0xb0 [ 2623.376402][T13621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2623.382301][T13621] RIP: 0033:0x7f996f99de59 [ 2623.386724][T13621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2623.406426][T13621] RSP: 002b:00007f99708fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2623.414844][T13621] RAX: ffffffffffffffda RBX: 00007f996fc26090 RCX: 00007f996f99de59 [ 2623.422821][T13621] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 2623.430800][T13621] RBP: 00007f99708fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2623.438774][T13621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2623.446746][T13621] R13: 00007f996fc26128 R14: 00007f996fc26090 R15: 00007ffd3e2d7c68 [ 2623.454740][T13621] [ 2623.469697][T13621] syz.3.13294: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2623.495169][T13621] CPU: 0 PID: 13621 Comm: syz.3.13294 Not tainted syzkaller #0 [ 2623.502769][T13621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2623.508656][T13631] delete_channel: no stack [ 2623.512820][T13621] Call Trace: [ 2623.512832][T13621] [ 2623.512839][T13621] dump_stack_lvl+0x188/0x24e [ 2623.512866][T13621] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2623.512887][T13621] ? show_regs_print_info+0x12/0x12 [ 2623.512907][T13621] ? load_image+0x410/0x410 [ 2623.512926][T13621] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2623.512943][T13621] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2623.527485][T13624] netlink: 'syz.0.13295': attribute type 3 has an invalid length. [ 2623.528204][T13621] warn_alloc+0x242/0x330 [ 2623.528237][T13621] ? __get_vm_area_node+0x122/0x330 [ 2623.574445][T13621] ? zone_watermark_ok_safe+0x270/0x270 [ 2623.579997][T13621] ? rcu_is_watching+0x11/0xa0 [ 2623.584761][T13621] ? __get_vm_area_node+0x318/0x330 [ 2623.589957][T13621] __vmalloc_node_range+0x37c/0x1380 [ 2623.595342][T13621] ? aa_get_newest_label+0xf9/0x5b0 [ 2623.600533][T13621] ? free_vm_area+0x50/0x50 [ 2623.605029][T13621] ? end_current_label_crit_section+0x170/0x170 [ 2623.611264][T13621] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2623.617410][T13621] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2623.622950][T13621] __vmalloc+0x76/0x80 [ 2623.627011][T13621] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2623.632553][T13621] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2623.637918][T13621] ? bpf_prog_alloc+0x13/0x1b0 [ 2623.642683][T13621] bpf_prog_alloc+0x1c/0x1b0 [ 2623.647266][T13621] bpf_prog_load+0x7d4/0x1530 [ 2623.651960][T13621] ? map_freeze+0x390/0x390 [ 2623.656456][T13621] ? __might_fault+0xa6/0x120 [ 2623.661130][T13621] ? __might_fault+0xa6/0x120 [ 2623.665798][T13621] ? __might_fault+0xc2/0x120 [ 2623.670466][T13621] ? __might_fault+0xa6/0x120 [ 2623.675132][T13621] ? bpf_lsm_bpf+0x5/0x10 [ 2623.679453][T13621] ? security_bpf+0x7a/0xa0 [ 2623.683952][T13621] __sys_bpf+0x5b8/0x780 [ 2623.688188][T13621] ? bpf_link_show_fdinfo+0x380/0x380 [ 2623.693562][T13621] ? lock_chain_count+0x20/0x20 [ 2623.698409][T13621] __x64_sys_bpf+0x78/0x90 [ 2623.702823][T13621] do_syscall_64+0x4c/0xa0 [ 2623.707234][T13621] ? clear_bhb_loop+0x60/0xb0 [ 2623.711907][T13621] ? clear_bhb_loop+0x60/0xb0 [ 2623.716574][T13621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2623.722459][T13621] RIP: 0033:0x7f996f99de59 [ 2623.726862][T13621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2623.746476][T13621] RSP: 002b:00007f99708fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2623.754887][T13621] RAX: ffffffffffffffda RBX: 00007f996fc26090 RCX: 00007f996f99de59 [ 2623.762852][T13621] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 2623.770813][T13621] RBP: 00007f99708fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2623.778777][T13621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2623.786742][T13621] R13: 00007f996fc26128 R14: 00007f996fc26090 R15: 00007ffd3e2d7c68 [ 2623.794721][T13621] [ 2623.800676][T13624] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13295'. [ 2623.818726][T13621] Mem-Info: [ 2623.823535][T13621] active_anon:16243 inactive_anon:0 isolated_anon:0 [ 2623.823535][T13621] active_file:25695 inactive_file:40954 isolated_file:0 [ 2623.823535][T13621] unevictable:768 dirty:226 writeback:0 [ 2623.823535][T13621] slab_reclaimable:21628 slab_unreclaimable:97107 [ 2623.823535][T13621] mapped:31543 shmem:1361 pagetables:628 [ 2623.823535][T13621] sec_pagetables:0 bounce:0 [ 2623.823535][T13621] kernel_misc_reclaimable:0 [ 2623.823535][T13621] free:1294876 free_pcp:10664 free_cma:0 [ 2623.872083][T13621] Node 0 active_anon:64972kB inactive_anon:0kB active_file:102780kB inactive_file:163608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126172kB dirty:904kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10172kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no [ 2623.909769][T13621] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2623.929359][T13624] netlink: 'syz.0.13295': attribute type 10 has an invalid length. [ 2623.947708][T13621] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2624.055664][T13621] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 2624.091723][T13621] Node 0 DMA32 free:1263436kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:64672kB inactive_anon:0kB active_file:102780kB inactive_file:163608kB unevictable:1536kB writepending:704kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:27072kB local_pcp:7808kB free_cma:0kB [ 2624.165637][T13621] lowmem_reserve[]: 0 0 1 1 1 [ 2624.170695][T13621] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 2624.315024][T13621] lowmem_reserve[]: 0 0 0 0 0 [ 2624.320080][T13621] Node 1 Normal free:3900696kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18368kB local_pcp:9248kB free_cma:0kB [ 2624.366505][T13645] netlink: 'syz.2.13304': attribute type 21 has an invalid length. [ 2624.405891][T13645] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13304'. [ 2624.415456][T13621] lowmem_reserve[]: 0 0 0 0 0 [ 2624.420423][T13621] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2624.451656][T13645] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13304'. [ 2624.460868][T13621] Node 0 DMA32: 2433*4kB (UE) 1817*8kB (UM) 1482*16kB (UME) 855*32kB (UME) 1016*64kB (UME) 506*128kB (UME) 202*256kB (UME) 162*512kB (UM) 86*1024kB (UME) 22*2048kB (UM) 193*4096kB (UM) = 1263436kB [ 2624.490645][T13621] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 2624.558911][T13621] Node 1 Normal: 230*4kB (UME) 50*8kB (UME) 31*16kB (UME) 26*32kB (UE) 25*64kB (UME) 11*128kB (UME) 3*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3900696kB [ 2624.607860][T13621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2624.629262][T13621] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2624.648095][T13621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2624.659174][T13621] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2624.674194][T13621] 68010 total pagecache pages [ 2624.689276][T13621] 0 pages in swap cache [ 2624.746958][T13621] Free swap = 124996kB [ 2624.790383][T13621] Total swap = 124996kB [ 2624.819568][T13621] 2097051 pages RAM [ 2624.844754][T13621] 0 pages HighMem/MovableOnly [ 2624.882322][T13621] 415222 pages reserved [ 2624.886713][T13621] 0 pages cma reserved [ 2627.766290][T13658] netlink: 10 bytes leftover after parsing attributes in process `syz.4.13309'. [ 2628.214852][T13669] validate_nla: 4 callbacks suppressed [ 2628.214871][T13669] netlink: 'syz.3.13311': attribute type 3 has an invalid length. [ 2628.231945][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13314'. [ 2628.283618][T13676] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13314'. [ 2628.298623][T13669] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13311'. [ 2628.560113][T13660] netlink: 'syz.3.13311': attribute type 4 has an invalid length. [ 2628.659817][T13660] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13311'. [ 2628.776288][T13691] netlink: 'syz.4.13318': attribute type 3 has an invalid length. [ 2628.824410][T13691] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13318'. [ 2628.888623][T13693] netlink: 'syz.2.13320': attribute type 29 has an invalid length. [ 2628.916240][T13693] netlink: 'syz.2.13320': attribute type 29 has an invalid length. [ 2628.941352][T13695] netlink: 'syz.1.13322': attribute type 4 has an invalid length. [ 2628.961197][T13695] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13322'. [ 2629.009887][T13693] netlink: 'syz.2.13320': attribute type 29 has an invalid length. [ 2629.045911][T13697] netlink: 'syz.3.13321': attribute type 1 has an invalid length. [ 2629.092267][T13697] netlink: 'syz.3.13321': attribute type 1 has an invalid length. [ 2629.115360][T13697] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.13321'. [ 2629.303090][T13711] netlink: 'syz.1.13325': attribute type 4 has an invalid length. [ 2629.334720][T13711] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13325'. [ 2629.369794][T13709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13323'. [ 2632.135279][T13774] device lo entered promiscuous mode [ 2632.158931][T13774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2632.193132][T13777] mac80211_hwsim hwsim103 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2633.099438][T13802] __nla_validate_parse: 1 callbacks suppressed [ 2633.099476][T13802] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13358'. [ 2634.835497][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2634.873323][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2634.882548][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2634.891670][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2634.900827][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2634.909965][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2634.919190][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2634.928320][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2634.937479][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2636.580395][T13858] validate_nla: 8 callbacks suppressed [ 2636.580433][T13858] netlink: 'syz.2.13375': attribute type 4 has an invalid length. [ 2636.618601][T13858] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13375'. [ 2636.683950][T13860] netlink: 'syz.0.13378': attribute type 10 has an invalid length. [ 2636.753490][T13860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13378'. [ 2636.840971][T13860] device dummy0 entered promiscuous mode [ 2636.911183][T13860] bridge0: port 3(dummy0) entered blocking state [ 2636.934837][T13860] bridge0: port 3(dummy0) entered disabled state [ 2637.459699][T13885] netlink: 'syz.3.13388': attribute type 16 has an invalid length. [ 2637.529829][T13885] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13388'. [ 2638.009399][T13897] net_ratelimit: 3257 callbacks suppressed [ 2638.009438][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.095862][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.105263][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.114563][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.123917][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.133245][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.142527][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.151807][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.161092][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.170387][T13897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2638.342710][T13909] netlink: 'syz.4.13392': attribute type 2 has an invalid length. [ 2638.741831][ T6261] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2639.231975][T13923] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13399'. [ 2639.276702][T13927] netlink: 'syz.4.13400': attribute type 29 has an invalid length. [ 2639.293757][T13927] netlink: 'syz.4.13400': attribute type 29 has an invalid length. [ 2639.311627][T13927] netlink: 'syz.4.13400': attribute type 29 has an invalid length. [ 2639.320246][T13927] netlink: 'syz.4.13400': attribute type 29 has an invalid length. [ 2639.328858][T13927] netlink: 'syz.4.13400': attribute type 29 has an invalid length. [ 2639.881197][T13954] netlink: 'syz.4.13410': attribute type 4 has an invalid length. [ 2639.898511][T13954] netlink: 111908 bytes leftover after parsing attributes in process `syz.4.13410'. [ 2639.955278][T13954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13410'. [ 2640.092913][T13961] tun0: tun_chr_ioctl cmd 1074025681 [ 2641.567495][T13995] netlink: 111908 bytes leftover after parsing attributes in process `syz.1.13422'. [ 2641.587857][T13995] validate_nla: 4 callbacks suppressed [ 2641.587872][T13995] netlink: 'syz.1.13422': attribute type 25 has an invalid length. [ 2641.607178][T13995] netlink: 'syz.1.13422': attribute type 9 has an invalid length. [ 2641.626701][T13995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13422'. [ 2641.956197][T14004] netlink: 'syz.0.13426': attribute type 10 has an invalid length. [ 2642.008730][T14006] tun0: tun_chr_ioctl cmd 1074025681 [ 2642.324794][T14019] FAULT_INJECTION: forcing a failure. [ 2642.324794][T14019] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.389563][T14019] CPU: 1 PID: 14019 Comm: syz.0.13430 Not tainted syzkaller #0 [ 2642.397159][T14019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2642.407225][T14019] Call Trace: [ 2642.410506][T14019] [ 2642.413614][T14019] dump_stack_lvl+0x188/0x24e [ 2642.418312][T14019] ? show_regs_print_info+0x12/0x12 [ 2642.423520][T14019] ? load_image+0x410/0x410 [ 2642.428031][T14019] ? __might_sleep+0xd0/0xd0 [ 2642.432628][T14019] ? __lock_acquire+0x7c40/0x7c40 [ 2642.437680][T14019] should_fail_ex+0x390/0x4c0 [ 2642.442369][T14019] should_failslab+0x5/0x20 [ 2642.446880][T14019] slab_pre_alloc_hook+0x59/0x300 [ 2642.451918][T14019] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 2642.458344][T14019] __kmem_cache_alloc_node+0x4f/0x270 [ 2642.463730][T14019] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 2642.470153][T14019] __kmalloc+0xa3/0x240 [ 2642.474322][T14019] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 2642.480579][T14019] ? lock_chain_count+0x20/0x20 [ 2642.485445][T14019] ? xdp_convert_buff_to_md+0x200/0x200 [ 2642.491013][T14019] ? __fget_files+0x28/0x460 [ 2642.495614][T14019] ? __fget_files+0x3fc/0x460 [ 2642.500313][T14019] ? xdp_convert_buff_to_md+0x200/0x200 [ 2642.505866][T14019] bpf_prog_test_run+0x31c/0x390 [ 2642.510839][T14019] __sys_bpf+0x62b/0x780 [ 2642.515105][T14019] ? bpf_link_show_fdinfo+0x380/0x380 [ 2642.520502][T14019] ? lock_chain_count+0x20/0x20 [ 2642.525364][T14019] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2642.531366][T14019] __x64_sys_bpf+0x78/0x90 [ 2642.535799][T14019] do_syscall_64+0x4c/0xa0 [ 2642.540230][T14019] ? clear_bhb_loop+0x60/0xb0 [ 2642.544921][T14019] ? clear_bhb_loop+0x60/0xb0 [ 2642.549708][T14019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2642.555618][T14019] RIP: 0033:0x7f781e79de59 [ 2642.560055][T14019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2642.579678][T14019] RSP: 002b:00007f781f66a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2642.588105][T14019] RAX: ffffffffffffffda RBX: 00007f781ea25fa0 RCX: 00007f781e79de59 [ 2642.596086][T14019] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 2642.604067][T14019] RBP: 00007f781f66a090 R08: 0000000000000000 R09: 0000000000000000 [ 2642.612048][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2642.620036][T14019] R13: 00007f781ea26038 R14: 00007f781ea25fa0 R15: 00007fff77c82438 [ 2642.628048][T14019] [ 2644.300154][T14049] netlink: 'syz.4.13439': attribute type 15 has an invalid length. [ 2644.333491][T14049] netlink: 'syz.4.13439': attribute type 7 has an invalid length. [ 2644.358579][T14049] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13439'. [ 2644.695288][T14055] netlink: 'syz.3.13441': attribute type 10 has an invalid length. [ 2644.789637][T14055] team0: Port device wlan1 added [ 2644.835761][T14059] tun0: tun_chr_ioctl cmd 1074025681 [ 2645.320324][T14081] netlink: 'syz.3.13451': attribute type 22 has an invalid length. [ 2645.344369][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13451'. [ 2646.556371][T14096] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.13456'. [ 2646.716748][T14098] netlink: 'syz.1.13457': attribute type 10 has an invalid length. [ 2646.745151][T14098] device wlan1 left promiscuous mode [ 2646.834345][T14098] device wlan1 entered promiscuous mode [ 2646.891389][T14098] team0: Port device wlan1 added [ 2646.948987][T14106] tun0: tun_chr_ioctl cmd 1074025681 [ 2647.168496][T14115] netlink: 'syz.3.13464': attribute type 29 has an invalid length. [ 2647.202556][T14115] netlink: 'syz.3.13464': attribute type 29 has an invalid length. [ 2647.220808][T14119] netlink: 'syz.2.13463': attribute type 10 has an invalid length. [ 2647.319186][T14119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2647.355707][T14119] team0: Port device batadv0 added [ 2647.361599][T14115] netlink: 'syz.3.13464': attribute type 29 has an invalid length. [ 2648.067973][T14136] device veth1_macvtap left promiscuous mode [ 2648.141945][T14137] netlink: 'syz.2.13471': attribute type 21 has an invalid length. [ 2648.153662][T14137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13471'. [ 2648.893803][T14154] netlink: 'syz.2.13476': attribute type 10 has an invalid length. [ 2649.124467][T14154] team0: Port device wlan1 added [ 2649.520555][T14163] netlink: 'syz.3.13479': attribute type 29 has an invalid length. [ 2649.554302][T14163] netlink: 'syz.3.13479': attribute type 29 has an invalid length. [ 2649.603451][T14164] netlink: 'syz.3.13479': attribute type 29 has an invalid length. [ 2650.702553][T13174] wlan1: Trigger new scan to find an IBSS to join [ 2651.744487][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.750856][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.751751][T13174] wlan1: Trigger new scan to find an IBSS to join [ 2651.971591][T14182] device veth1_macvtap left promiscuous mode [ 2652.065618][T14182] netlink: 'syz.4.13488': attribute type 21 has an invalid length. [ 2652.098560][T14182] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13488'. [ 2652.340721][T14195] netlink: 'syz.2.13493': attribute type 29 has an invalid length. [ 2652.409427][T14188] netlink: 'syz.0.13491': attribute type 10 has an invalid length. [ 2652.463993][T14195] netlink: 'syz.2.13493': attribute type 29 has an invalid length. [ 2652.478978][T14198] netlink: 'syz.2.13493': attribute type 29 has an invalid length. [ 2653.747122][ T6267] wlan1: Trigger new scan to find an IBSS to join [ 2655.337012][ T6259] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2655.411383][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2655.666229][T14214] syz.3.13499[14214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2655.666939][T14214] syz.3.13499[14214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2655.837463][T14219] tap0: tun_chr_ioctl cmd 2147767517 [ 2655.899252][T14223] netlink: 'syz.0.13497': attribute type 3 has an invalid length. [ 2655.954784][T14223] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13497'. [ 2656.314108][T14235] device veth1_macvtap left promiscuous mode [ 2656.363713][T14236] netlink: 'syz.3.13506': attribute type 21 has an invalid length. [ 2656.416944][T14236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13506'. [ 2656.571249][T14242] netlink: 'syz.4.13509': attribute type 29 has an invalid length. [ 2656.603287][T14242] netlink: 'syz.4.13509': attribute type 29 has an invalid length. [ 2656.739176][T14245] netlink: 'syz.4.13509': attribute type 29 has an invalid length. [ 2657.742760][ T6259] wlan1: Trigger new scan to find an IBSS to join [ 2659.846181][ T872] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2659.894103][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2660.997347][T14286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13524'. [ 2661.001863][T14285] netlink: 'syz.1.13523': attribute type 10 has an invalid length. [ 2661.025769][T14285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13523'. [ 2661.042959][T14286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13524'. [ 2661.099941][T14291] netlink: 'syz.4.13525': attribute type 29 has an invalid length. [ 2661.152366][T14291] netlink: 'syz.4.13525': attribute type 29 has an invalid length. [ 2661.310912][T14292] netlink: 'syz.4.13525': attribute type 29 has an invalid length. [ 2665.769765][T14330] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13536'. [ 2665.960759][T14334] netlink: 'syz.4.13540': attribute type 29 has an invalid length. [ 2666.046018][T14334] netlink: 'syz.4.13540': attribute type 29 has an invalid length. [ 2666.058582][T14336] netlink: 'syz.4.13540': attribute type 29 has an invalid length. [ 2666.360743][T14341] netlink: 'syz.3.13544': attribute type 10 has an invalid length. [ 2666.375880][T14341] netlink: 55 bytes leftover after parsing attributes in process `syz.3.13544'. [ 2666.729908][T14349] netlink: 'syz.3.13548': attribute type 10 has an invalid length. [ 2666.923062][T23195] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 2667.026953][T14362] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.13553'. [ 2667.575379][T14369] netlink: 'syz.4.13556': attribute type 29 has an invalid length. [ 2667.603525][T14369] netlink: 'syz.4.13556': attribute type 29 has an invalid length. [ 2667.619959][T14369] netlink: 'syz.4.13556': attribute type 29 has an invalid length. [ 2668.675494][T14377] netlink: 'syz.2.13560': attribute type 10 has an invalid length. [ 2668.689995][T14378] netlink: 'syz.1.13569': attribute type 29 has an invalid length. [ 2668.705550][T14377] netlink: 55 bytes leftover after parsing attributes in process `syz.2.13560'. [ 2668.891689][T14378] netlink: 'syz.1.13569': attribute type 29 has an invalid length. [ 2669.831981][T14399] device veth0_vlan left promiscuous mode [ 2669.845090][T14399] device veth0_vlan entered promiscuous mode [ 2669.874632][T14399] team0: Device veth0_vlan failed to register rx_handler [ 2670.685320][T14418] tipc: Started in network mode [ 2670.708585][T14418] tipc: Node identity 9215a268, cluster identity 4711 [ 2670.776633][T14418] tipc: Node number set to 2450891368 [ 2671.213584][T14428] validate_nla: 5 callbacks suppressed [ 2671.213600][T14428] netlink: 'syz.1.13577': attribute type 29 has an invalid length. [ 2671.233854][T14431] netlink: 'syz.0.13576': attribute type 10 has an invalid length. [ 2671.256114][T14431] netlink: 55 bytes leftover after parsing attributes in process `syz.0.13576'. [ 2671.517035][T14428] netlink: 'syz.1.13577': attribute type 29 has an invalid length. [ 2671.537583][T14432] netlink: 'syz.1.13577': attribute type 29 has an invalid length. [ 2672.512055][T14451] netlink: 'syz.2.13587': attribute type 10 has an invalid length. [ 2672.720066][T14451] device veth0_vlan left promiscuous mode [ 2672.804945][T14451] device veth0_vlan entered promiscuous mode [ 2672.861770][T14451] team0: Device veth0_vlan failed to register rx_handler [ 2673.090954][T14460] netlink: 'syz.4.13592': attribute type 2 has an invalid length. [ 2673.124569][T14460] netlink: 'syz.4.13592': attribute type 8 has an invalid length. [ 2673.139918][T14460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13592'. [ 2673.379234][T14475] netlink: 'syz.2.13596': attribute type 29 has an invalid length. [ 2673.390546][T14475] netlink: 'syz.2.13596': attribute type 29 has an invalid length. [ 2673.401371][T14475] netlink: 'syz.2.13596': attribute type 29 has an invalid length. [ 2674.435152][T14497] device wlan1 entered promiscuous mode [ 2674.547055][T14500] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13607'. [ 2674.574287][T14501] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.13606'. [ 2675.436623][T14521] netlink: 188 bytes leftover after parsing attributes in process `syz.3.13616'. [ 2675.794730][T14533] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.13621'. [ 2676.783090][ T6262] wlan1: Trigger new scan to find an IBSS to join [ 2677.179929][T14570] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13636'. [ 2677.206740][T14572] validate_nla: 14 callbacks suppressed [ 2677.206756][T14572] netlink: 'syz.2.13637': attribute type 33 has an invalid length. [ 2677.233480][T14572] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13637'. [ 2677.262734][T14572] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 2677.395421][T14579] netlink: 'syz.3.13639': attribute type 29 has an invalid length. [ 2677.414958][T14580] netlink: 'syz.0.13640': attribute type 46 has an invalid length. [ 2677.426409][T14579] netlink: 'syz.3.13639': attribute type 29 has an invalid length. [ 2677.438755][T14576] netlink: 'syz.4.13638': attribute type 29 has an invalid length. [ 2677.448998][T14580] netlink: 'syz.0.13640': attribute type 46 has an invalid length. [ 2677.601743][T14576] netlink: 'syz.4.13638': attribute type 29 has an invalid length. [ 2677.621585][T14584] netlink: 'syz.4.13638': attribute type 29 has an invalid length. [ 2677.650958][T14579] device wlan1 entered promiscuous mode [ 2677.712762][T14583] netlink: 'syz.3.13639': attribute type 3 has an invalid length. [ 2677.912818][T14583] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.13639'. [ 2678.231567][T14594] netlink: 'syz.3.13639': attribute type 29 has an invalid length. [ 2678.569895][T14599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13644'. [ 2679.981579][T14623] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.13655'. [ 2680.085838][T14629] device wlan1 entered promiscuous mode [ 2680.161529][T14629] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.13658'. [ 2680.400014][T14642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13662'. [ 2680.702449][ T6267] wlan1: Trigger new scan to find an IBSS to join [ 2681.647968][T13174] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2681.703838][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2682.578058][T14697] validate_nla: 13 callbacks suppressed [ 2682.578077][T14697] netlink: 'syz.0.13682': attribute type 29 has an invalid length. [ 2682.591161][T14691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2682.663541][T14691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2682.696265][T14691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2682.703761][ T6259] wlan1: Trigger new scan to find an IBSS to join [ 2682.802887][T14691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2683.274943][T14697] netlink: 'syz.0.13682': attribute type 29 has an invalid length. [ 2683.313376][T14700] netlink: 'syz.0.13682': attribute type 29 has an invalid length. [ 2683.770348][T14722] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.13693'. [ 2683.802612][T14722] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2684.545516][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 2684.825572][T14741] netlink: 'syz.2.13700': attribute type 29 has an invalid length. [ 2684.906943][T14741] netlink: 'syz.2.13700': attribute type 29 has an invalid length. [ 2685.030839][T14750] netlink: 'syz.3.13703': attribute type 27 has an invalid length. [ 2685.072491][T14750] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13703'. [ 2685.096936][T14745] net_ratelimit: 6522 callbacks suppressed [ 2685.096983][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.237204][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.247484][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.257058][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.267094][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.277305][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.287015][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.296985][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.307225][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.317363][T14745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2685.438763][ T6267] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2685.742684][T13174] wlan1: Trigger new scan to find an IBSS to join [ 2685.908950][T14744] netlink: 'syz.2.13700': attribute type 29 has an invalid length. [ 2685.922475][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2685.930127][T14748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2685.947494][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2685.972324][T14748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2686.270965][T14762] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13707'. [ 2686.317396][T14762] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2687.018007][T14782] netlink: 'syz.4.13715': attribute type 29 has an invalid length. [ 2687.053542][T14782] netlink: 'syz.4.13715': attribute type 29 has an invalid length. [ 2687.072773][T14783] netlink: 'syz.4.13715': attribute type 29 has an invalid length. [ 2687.597799][T14795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2687.626417][T14795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2687.685052][T14795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2687.718122][T14795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2687.951192][T14795] team0: Port device batadv0 removed [ 2688.012866][T14803] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13724'. [ 2688.023319][T14803] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2688.161703][T14813] validate_nla: 4 callbacks suppressed [ 2688.161719][T14813] netlink: 'syz.3.13729': attribute type 29 has an invalid length. [ 2688.207920][T14813] netlink: 'syz.3.13729': attribute type 29 has an invalid length. [ 2688.231042][T14818] netlink: 'syz.3.13729': attribute type 29 has an invalid length. [ 2688.702566][ T888] wlan1: Trigger new scan to find an IBSS to join [ 2689.274138][T14839] netlink: 'syz.1.13740': attribute type 2 has an invalid length. [ 2689.294119][T14839] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13740'. [ 2689.694505][ T888] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2689.702108][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2689.729049][T14849] netlink: 'syz.4.13744': attribute type 29 has an invalid length. [ 2689.831969][T14849] netlink: 'syz.4.13744': attribute type 29 has an invalid length. [ 2689.866336][T14850] netlink: 'syz.4.13744': attribute type 29 has an invalid length. [ 2689.936648][ T6262] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2690.013082][T14852] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13743'. [ 2690.046366][T14852] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2690.701975][T14873] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13756'. [ 2690.858314][T14873] netlink: 'syz.2.13756': attribute type 19 has an invalid length. [ 2690.908163][T14874] netlink: 'syz.4.13755': attribute type 4 has an invalid length. [ 2690.918495][T14874] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13755'. [ 2691.261062][T14885] netlink: 'syz.3.13760': attribute type 29 has an invalid length. [ 2691.446080][T14893] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.13764'. [ 2691.458308][T14893] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2692.048975][T14901] FAULT_INJECTION: forcing a failure. [ 2692.048975][T14901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2692.096082][T14901] CPU: 1 PID: 14901 Comm: syz.0.13768 Not tainted syzkaller #0 [ 2692.103680][T14901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2692.113740][T14901] Call Trace: [ 2692.117032][T14901] [ 2692.117175][T14904] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.13769'. [ 2692.119956][T14901] dump_stack_lvl+0x188/0x24e [ 2692.119992][T14901] ? show_regs_print_info+0x12/0x12 [ 2692.139237][T14901] ? load_image+0x410/0x410 [ 2692.143768][T14901] ? __lock_acquire+0x7c40/0x7c40 [ 2692.148821][T14901] ? snprintf+0xe5/0x140 [ 2692.153086][T14901] should_fail_ex+0x390/0x4c0 [ 2692.157787][T14901] _copy_to_user+0x2c/0x130 [ 2692.162303][T14901] simple_read_from_buffer+0xe3/0x150 [ 2692.167695][T14901] proc_fail_nth_read+0x1a6/0x220 [ 2692.172743][T14901] ? proc_fault_inject_write+0x310/0x310 [ 2692.178438][T14901] ? fsnotify_perm+0x248/0x550 [ 2692.183240][T14901] ? proc_fault_inject_write+0x310/0x310 [ 2692.188891][T14901] vfs_read+0x2db/0x960 [ 2692.193076][T14901] ? kernel_read+0x1e0/0x1e0 [ 2692.197772][T14901] ? __fget_files+0x28/0x460 [ 2692.202369][T14901] ? __fget_files+0x3fc/0x460 [ 2692.207071][T14901] ? __fdget_pos+0x2ae/0x360 [ 2692.211661][T14901] ? ksys_read+0x70/0x260 [ 2692.215996][T14901] ksys_read+0x14d/0x260 [ 2692.220242][T14901] ? vfs_write+0x9a0/0x9a0 [ 2692.224658][T14901] ? lockdep_hardirqs_on+0x94/0x140 [ 2692.229850][T14901] do_syscall_64+0x4c/0xa0 [ 2692.234266][T14901] ? clear_bhb_loop+0x60/0xb0 [ 2692.238935][T14901] ? clear_bhb_loop+0x60/0xb0 [ 2692.243611][T14901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2692.249520][T14901] RIP: 0033:0x7f781e75e68e [ 2692.253939][T14901] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2692.273535][T14901] RSP: 002b:00007f781f669fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2692.281946][T14901] RAX: ffffffffffffffda RBX: 00007f781f66a6c0 RCX: 00007f781e75e68e [ 2692.289921][T14901] RDX: 000000000000000f RSI: 00007f781f66a0a0 RDI: 0000000000000004 [ 2692.297885][T14901] RBP: 00007f781f66a090 R08: 0000000000000000 R09: 0000000000000000 [ 2692.305855][T14901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2692.313827][T14901] R13: 00007f781ea26038 R14: 00007f781ea25fa0 R15: 00007fff77c82438 [ 2692.321801][T14901] [ 2696.755637][T14925] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13775'. [ 2696.782929][T14925] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2696.909429][T14933] validate_nla: 2 callbacks suppressed [ 2696.909445][T14933] netlink: 'syz.3.13778': attribute type 29 has an invalid length. [ 2697.020288][T14933] netlink: 'syz.3.13778': attribute type 29 has an invalid length. [ 2697.049890][T14935] netlink: 'syz.3.13778': attribute type 29 has an invalid length. [ 2697.403172][T14942] FAULT_INJECTION: forcing a failure. [ 2697.403172][T14942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2697.426424][T14942] CPU: 0 PID: 14942 Comm: syz.3.13781 Not tainted syzkaller #0 [ 2697.434007][T14942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2697.444073][T14942] Call Trace: [ 2697.447366][T14942] [ 2697.450312][T14942] dump_stack_lvl+0x188/0x24e [ 2697.455022][T14942] ? show_regs_print_info+0x12/0x12 [ 2697.460247][T14942] ? load_image+0x410/0x410 [ 2697.464772][T14942] ? __lock_acquire+0x7c40/0x7c40 [ 2697.469818][T14942] ? snprintf+0xe5/0x140 [ 2697.474077][T14942] should_fail_ex+0x390/0x4c0 [ 2697.478782][T14942] _copy_to_user+0x2c/0x130 [ 2697.483397][T14942] simple_read_from_buffer+0xe3/0x150 [ 2697.488788][T14942] proc_fail_nth_read+0x1a6/0x220 [ 2697.493837][T14942] ? proc_fault_inject_write+0x310/0x310 [ 2697.499494][T14942] ? fsnotify_perm+0x248/0x550 [ 2697.504281][T14942] ? proc_fault_inject_write+0x310/0x310 [ 2697.509944][T14942] vfs_read+0x2db/0x960 [ 2697.514128][T14942] ? kernel_read+0x1e0/0x1e0 [ 2697.518743][T14942] ? __fget_files+0x28/0x460 [ 2697.523365][T14942] ? __fget_files+0x3fc/0x460 [ 2697.528066][T14942] ? __fdget_pos+0x2ae/0x360 [ 2697.532660][T14942] ? ksys_read+0x70/0x260 [ 2697.536992][T14942] ksys_read+0x14d/0x260 [ 2697.541234][T14942] ? vfs_write+0x9a0/0x9a0 [ 2697.545653][T14942] ? lockdep_hardirqs_on+0x94/0x140 [ 2697.550851][T14942] do_syscall_64+0x4c/0xa0 [ 2697.555267][T14942] ? clear_bhb_loop+0x60/0xb0 [ 2697.559940][T14942] ? clear_bhb_loop+0x60/0xb0 [ 2697.564613][T14942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2697.570499][T14942] RIP: 0033:0x7f996f95e68e [ 2697.574913][T14942] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2697.594516][T14942] RSP: 002b:00007f997091dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2697.602929][T14942] RAX: ffffffffffffffda RBX: 00007f997091e6c0 RCX: 00007f996f95e68e [ 2697.610897][T14942] RDX: 000000000000000f RSI: 00007f997091e0a0 RDI: 0000000000000008 [ 2697.618868][T14942] RBP: 00007f997091e090 R08: 0000000000000000 R09: 0000000000000000 [ 2697.626836][T14942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2697.634817][T14942] R13: 00007f996fc26038 R14: 00007f996fc25fa0 R15: 00007ffd3e2d7c68 [ 2697.642821][T14942] [ 2697.743202][T14944] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.13785'. [ 2698.464267][T14969] mac80211_hwsim hwsim95 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2698.506863][T14971] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.13790'. [ 2698.518206][T14971] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2698.624889][T14973] netlink: 'syz.0.13792': attribute type 29 has an invalid length. [ 2698.811668][T14973] netlink: 'syz.0.13792': attribute type 29 has an invalid length. [ 2698.830401][T14974] netlink: 'syz.0.13792': attribute type 29 has an invalid length. [ 2699.351477][T14997] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.13801'. [ 2699.574267][T15004] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13805'. [ 2699.606692][T15004] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2699.771888][T15014] netlink: 'syz.0.13808': attribute type 29 has an invalid length. [ 2699.856757][T15014] netlink: 'syz.0.13808': attribute type 29 has an invalid length. [ 2699.977294][T15015] netlink: 'syz.0.13808': attribute type 29 has an invalid length. [ 2701.126713][T15046] netlink: 'syz.3.13823': attribute type 29 has an invalid length. [ 2701.186966][T15048] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.13821'. [ 2704.856134][T15086] validate_nla: 2 callbacks suppressed [ 2704.856149][T15086] netlink: 'syz.0.13835': attribute type 29 has an invalid length. [ 2704.934251][T15086] netlink: 'syz.0.13835': attribute type 29 has an invalid length. [ 2704.944807][T15092] netlink: 'syz.0.13835': attribute type 29 has an invalid length. [ 2706.079317][T15115] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13847'. [ 2706.113710][T15115] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2706.176334][T15115] net_ratelimit: 3256 callbacks suppressed [ 2706.176368][T15115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2706.354478][T15128] netlink: 'syz.4.13852': attribute type 29 has an invalid length. [ 2706.394720][T15128] netlink: 'syz.4.13852': attribute type 29 has an invalid length. [ 2706.513717][T15129] netlink: 'syz.4.13852': attribute type 29 has an invalid length. [ 2707.359115][T15149] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.13860'. [ 2707.389773][T15149] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2707.858503][T15158] device syzkaller0 entered promiscuous mode [ 2707.974674][T15164] netlink: 'syz.0.13865': attribute type 29 has an invalid length. [ 2711.648181][ T888] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2713.191464][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.197916][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.437811][T15164] netlink: 'syz.0.13865': attribute type 29 has an invalid length. [ 2713.451114][T15180] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13869'. [ 2713.470891][T15180] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2713.489164][T15180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2713.515044][T15192] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13875'. [ 2713.563519][T15192] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2714.193109][T15220] netlink: 'syz.3.13885': attribute type 10 has an invalid length. [ 2714.590122][T15229] netlink: 'syz.1.13888': attribute type 29 has an invalid length. [ 2716.455927][ T6262] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2717.339127][T15222] netlink: 'syz.0.13886': attribute type 21 has an invalid length. [ 2717.349509][T15225] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13887'. [ 2717.367755][T15225] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2717.380816][T15225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2717.396523][T15229] netlink: 'syz.1.13888': attribute type 29 has an invalid length. [ 2717.409261][T15235] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13891'. [ 2717.436443][T15235] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2717.777025][T15243] device syzkaller0 entered promiscuous mode [ 2718.347031][T15267] netlink: 'syz.4.13904': attribute type 29 has an invalid length. [ 2719.731777][ T888] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2720.214173][T15267] netlink: 'syz.4.13904': attribute type 29 has an invalid length. [ 2720.226775][T15270] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.13905'. [ 2720.243415][T15270] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2720.527213][T15282] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13906'. [ 2720.575156][T15282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2720.960197][ T6262] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2721.115247][T15298] netlink: 'syz.0.13917': attribute type 29 has an invalid length. [ 2721.144045][T15298] netlink: 'syz.0.13917': attribute type 29 has an invalid length. [ 2721.166519][T15300] netlink: 'syz.0.13917': attribute type 29 has an invalid length. [ 2721.313487][T15302] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13918'. [ 2721.345313][T15302] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2722.549495][T15335] netlink: 'syz.4.13930': attribute type 29 has an invalid length. [ 2723.362862][T15335] netlink: 'syz.4.13930': attribute type 29 has an invalid length. [ 2723.381566][T15336] netlink: 'syz.4.13930': attribute type 29 has an invalid length. [ 2723.576203][T15340] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13933'. [ 2723.614986][T15340] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2723.674014][T15342] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.13934'. [ 2723.734099][T15342] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2725.707150][T15371] netlink: 'syz.1.13945': attribute type 29 has an invalid length. [ 2725.737059][T15371] netlink: 'syz.1.13945': attribute type 29 has an invalid length. [ 2725.790586][T15374] netlink: 'syz.1.13945': attribute type 29 has an invalid length. [ 2726.254558][T15382] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.13947'. [ 2726.281725][T15382] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2726.301567][T15380] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.13948'. [ 2726.322406][T15380] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2726.428746][T15388] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13950'. [ 2726.462671][T15388] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2727.349146][T15422] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13963'. [ 2727.394841][T15422] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2727.466919][T15424] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13965'. [ 2727.486037][T15424] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2727.876190][T15432] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.13966'. [ 2727.912648][T15432] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2728.257363][T15450] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13978'. [ 2728.309573][T15450] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2728.583668][T15458] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13980'. [ 2728.609335][T15458] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2729.074146][T15485] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.13991'. [ 2729.093537][T15485] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2730.291783][T15511] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.14000'. [ 2730.432638][T15520] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2730.574984][T15527] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2731.096695][T15543] mac80211_hwsim hwsim95 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2731.563525][T15547] __nla_validate_parse: 4 callbacks suppressed [ 2731.563546][T15547] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14016'. [ 2731.704772][T15556] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14019'. [ 2731.776825][T15556] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2732.767707][T15571] netlink: 'syz.3.14026': attribute type 29 has an invalid length. [ 2732.782161][T15570] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.14025'. [ 2732.800599][T15570] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2732.818088][T15571] netlink: 'syz.3.14026': attribute type 29 has an invalid length. [ 2732.836264][T15576] netlink: 'syz.3.14026': attribute type 29 has an invalid length. [ 2732.866804][T15575] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14034'. [ 2732.912338][T15575] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2733.020988][T15578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14027'. [ 2733.056033][T15578] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14027'. [ 2733.087824][T15578] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2733.178834][ T6262] bridge0: port 3(team0) entered disabled state [ 2733.876943][T15604] netlink: 'syz.2.14038': attribute type 29 has an invalid length. [ 2733.915954][T15604] netlink: 'syz.2.14038': attribute type 29 has an invalid length. [ 2733.936333][T15609] netlink: 'syz.2.14038': attribute type 29 has an invalid length. [ 2734.016192][T15608] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14039'. [ 2734.065667][T15608] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2734.307451][T15621] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14043'. [ 2734.354277][T15621] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2735.673037][T15667] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14061'. [ 2735.695563][T15667] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2736.621606][T15698] FAULT_INJECTION: forcing a failure. [ 2736.621606][T15698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2736.676873][T15698] CPU: 1 PID: 15698 Comm: syz.1.14069 Not tainted syzkaller #0 [ 2736.684513][T15698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2736.694591][T15698] Call Trace: [ 2736.697882][T15698] [ 2736.700830][T15698] dump_stack_lvl+0x188/0x24e [ 2736.705532][T15698] ? show_regs_print_info+0x12/0x12 [ 2736.710756][T15698] ? load_image+0x410/0x410 [ 2736.715294][T15698] ? __lock_acquire+0x7c40/0x7c40 [ 2736.720348][T15698] ? ktime_get+0x7b/0x270 [ 2736.724711][T15698] should_fail_ex+0x390/0x4c0 [ 2736.729414][T15698] _copy_from_user+0x2c/0x170 [ 2736.734110][T15698] __sys_bpf+0x2ea/0x780 [ 2736.738381][T15698] ? bpf_link_show_fdinfo+0x380/0x380 [ 2736.743792][T15698] ? lock_chain_count+0x20/0x20 [ 2736.748684][T15698] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2736.754695][T15698] __x64_sys_bpf+0x78/0x90 [ 2736.759140][T15698] do_syscall_64+0x4c/0xa0 [ 2736.763576][T15698] ? clear_bhb_loop+0x60/0xb0 [ 2736.768269][T15698] ? clear_bhb_loop+0x60/0xb0 [ 2736.772963][T15698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2736.778876][T15698] RIP: 0033:0x7f74f099de59 [ 2736.783399][T15698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2736.803027][T15698] RSP: 002b:00007f74eebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2736.811477][T15698] RAX: ffffffffffffffda RBX: 00007f74f0c25fa0 RCX: 00007f74f099de59 [ 2736.819461][T15698] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2736.827447][T15698] RBP: 00007f74eebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2736.835436][T15698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2736.843425][T15698] R13: 00007f74f0c26038 R14: 00007f74f0c25fa0 R15: 00007ffee69d2518 [ 2736.851519][T15698] [ 2737.489119][T15713] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.14075'. [ 2737.540123][T15713] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2737.560589][T15717] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14077'. [ 2737.582407][T15717] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2737.809956][ T4278] Bluetooth: hci1: ISO packet for unknown connection handle 28 [ 2737.811107][T15731] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.14083'. [ 2738.575949][T15754] delete_channel: no stack [ 2738.607274][T15755] netlink: 'syz.4.14094': attribute type 3 has an invalid length. [ 2738.613109][T15756] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.14093'. [ 2738.636840][T15755] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14094'. [ 2738.673736][T15756] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2738.700738][T15758] netlink: 'syz.4.14094': attribute type 25 has an invalid length. [ 2738.720941][T15758] netlink: 'syz.4.14094': attribute type 3 has an invalid length. [ 2738.754200][T15760] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.14095'. [ 2738.767919][T15760] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2739.108039][T15769] netlink: 'syz.3.14099': attribute type 9 has an invalid length. [ 2739.125606][T15769] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.14099'. [ 2739.196672][T15769] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.14099'. [ 2739.275462][T15769] netlink: 63355 bytes leftover after parsing attributes in process `syz.3.14099'. [ 2739.578141][T15791] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14107'. [ 2739.604156][T15791] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2740.489918][T15809] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2740.790126][T15822] netlink: 'syz.4.14118': attribute type 10 has an invalid length. [ 2740.790502][T15821] FAULT_INJECTION: forcing a failure. [ 2740.790502][T15821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2740.853478][T15821] CPU: 1 PID: 15821 Comm: syz.3.14119 Not tainted syzkaller #0 [ 2740.861166][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2740.871246][T15821] Call Trace: [ 2740.874544][T15821] [ 2740.877493][T15821] dump_stack_lvl+0x188/0x24e [ 2740.882203][T15821] ? show_regs_print_info+0x12/0x12 [ 2740.887426][T15821] ? load_image+0x410/0x410 [ 2740.891957][T15821] ? __lock_acquire+0x7c40/0x7c40 [ 2740.897009][T15821] should_fail_ex+0x390/0x4c0 [ 2740.901715][T15821] _copy_from_user+0x2c/0x170 [ 2740.906417][T15821] csum_and_copy_from_iter+0x492/0x1380 [ 2740.912001][T15821] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 2740.917673][T15821] ip_generic_getfrag+0x150/0x2e0 [ 2740.922728][T15821] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 2740.927604][T15821] ? raw6_getfrag+0xe6/0x300 [ 2740.932221][T15821] ? __alloc_skb+0x4e6/0x7d0 [ 2740.936838][T15821] ? skb_put+0x10e/0x200 [ 2740.941110][T15821] __ip6_append_data+0x2ee1/0x3e30 [ 2740.946278][T15821] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 2740.951601][T15821] ? ip6_setup_cork+0xff0/0xff0 [ 2740.956486][T15821] ? ip6_setup_cork+0xa4a/0xff0 [ 2740.961370][T15821] ip6_append_data+0x1c8/0x3d0 [ 2740.966171][T15821] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 2740.971485][T15821] rawv6_sendmsg+0x1221/0x1710 [ 2740.976293][T15821] ? compat_rawv6_ioctl+0x60/0x60 [ 2740.981377][T15821] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2740.987831][T15821] ? aa_sock_msg_perm+0x94/0x150 [ 2740.992804][T15821] ? inet_sendmsg+0x7a/0x2a0 [ 2740.997423][T15821] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2741.002724][T15821] ? inet_send_prepare+0x250/0x250 [ 2741.007861][T15821] ____sys_sendmsg+0x5ed/0x9a0 [ 2741.012657][T15821] ? __sys_sendmsg_sock+0x30/0x30 [ 2741.017699][T15821] ? __import_iovec+0x306/0x510 [ 2741.022564][T15821] ? import_iovec+0x6f/0xa0 [ 2741.027070][T15821] ___sys_sendmsg+0x2a2/0x360 [ 2741.031752][T15821] ? __sys_sendmsg+0x2a0/0x2a0 [ 2741.036536][T15821] ? __lock_acquire+0x7c40/0x7c40 [ 2741.041582][T15821] __se_sys_sendmsg+0x1c3/0x2b0 [ 2741.046431][T15821] ? __x64_sys_sendmsg+0x80/0x80 [ 2741.051381][T15821] ? lockdep_hardirqs_on+0x94/0x140 [ 2741.056576][T15821] do_syscall_64+0x4c/0xa0 [ 2741.061249][T15821] ? clear_bhb_loop+0x60/0xb0 [ 2741.065924][T15821] ? clear_bhb_loop+0x60/0xb0 [ 2741.070597][T15821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2741.076486][T15821] RIP: 0033:0x7f996f99de59 [ 2741.080898][T15821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2741.100585][T15821] RSP: 002b:00007f997091e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2741.108994][T15821] RAX: ffffffffffffffda RBX: 00007f996fc25fa0 RCX: 00007f996f99de59 [ 2741.116960][T15821] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 2741.124925][T15821] RBP: 00007f997091e090 R08: 0000000000000000 R09: 0000000000000000 [ 2741.132889][T15821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2741.140852][T15821] R13: 00007f996fc26038 R14: 00007f996fc25fa0 R15: 00007ffd3e2d7c68 [ 2741.148837][T15821] [ 2741.260434][T15828] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2741.961441][T15850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2742.020620][T15850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2742.059113][T15850] bond0 (unregistering): Released all slaves [ 2742.098526][T15857] netlink: 'syz.4.14134': attribute type 10 has an invalid length. [ 2742.111061][T15856] delete_channel: no stack [ 2742.332926][T15872] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2743.005039][T15886] netlink: 'syz.0.14146': attribute type 29 has an invalid length. [ 2743.057193][T15886] netlink: 'syz.0.14146': attribute type 29 has an invalid length. [ 2743.146989][T15897] netlink: 'syz.0.14146': attribute type 29 has an invalid length. [ 2743.212977][T15898] netlink: 'syz.0.14146': attribute type 29 has an invalid length. [ 2743.242392][T15901] __nla_validate_parse: 6 callbacks suppressed [ 2743.242412][T15901] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14151'. [ 2743.302565][T15901] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2743.868290][T15907] sctp: [Deprecated]: syz.2.14154 (pid 15907) Use of int in maxseg socket option. [ 2743.868290][T15907] Use struct sctp_assoc_value instead [ 2744.095826][T15911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14157'. [ 2744.679512][T15938] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14165'. [ 2744.691707][T15938] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2745.674478][T15973] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14179'. [ 2745.698757][T15973] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2745.892579][T15980] netlink: 'syz.4.14182': attribute type 3 has an invalid length. [ 2745.900904][T15980] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14182'. [ 2747.009795][T16017] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14195'. [ 2747.039120][T16017] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2747.224132][T16025] netlink: 'syz.2.14199': attribute type 4 has an invalid length. [ 2747.240099][T16025] netlink: 'syz.2.14199': attribute type 15 has an invalid length. [ 2747.283053][T16022] netlink: 'syz.0.14196': attribute type 3 has an invalid length. [ 2747.348588][T16022] netlink: 'syz.0.14196': attribute type 181 has an invalid length. [ 2747.364565][T16032] FAULT_INJECTION: forcing a failure. [ 2747.364565][T16032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2747.379816][ T911] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2747.410490][T16032] CPU: 1 PID: 16032 Comm: syz.1.14200 Not tainted syzkaller #0 [ 2747.418259][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2747.428334][T16032] Call Trace: [ 2747.431648][T16032] [ 2747.434944][T16032] dump_stack_lvl+0x188/0x24e [ 2747.439655][T16032] ? show_regs_print_info+0x12/0x12 [ 2747.445398][T16032] ? load_image+0x410/0x410 [ 2747.449928][T16032] ? __lock_acquire+0x7c40/0x7c40 [ 2747.454980][T16032] should_fail_ex+0x390/0x4c0 [ 2747.459668][T16032] _copy_from_user+0x2c/0x170 [ 2747.464348][T16032] ___sys_sendmsg+0x1c3/0x360 [ 2747.469030][T16032] ? __sys_sendmsg+0x2a0/0x2a0 [ 2747.473810][T16032] ? __lock_acquire+0x7c40/0x7c40 [ 2747.478857][T16032] __se_sys_sendmsg+0x1c3/0x2b0 [ 2747.483712][T16032] ? ct_nmi_exit+0x145/0x1c0 [ 2747.488301][T16032] ? __x64_sys_sendmsg+0x80/0x80 [ 2747.493258][T16032] ? lockdep_hardirqs_on+0x94/0x140 [ 2747.498450][T16032] do_syscall_64+0x4c/0xa0 [ 2747.502886][T16032] ? clear_bhb_loop+0x60/0xb0 [ 2747.507559][T16032] ? clear_bhb_loop+0x60/0xb0 [ 2747.512238][T16032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2747.518127][T16032] RIP: 0033:0x7f74f099de59 [ 2747.522538][T16032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2747.542140][T16032] RSP: 002b:00007f74eebf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2747.550663][T16032] RAX: ffffffffffffffda RBX: 00007f74f0c25fa0 RCX: 00007f74f099de59 [ 2747.558719][T16032] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2747.566686][T16032] RBP: 00007f74eebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2747.574654][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2747.582636][T16032] R13: 00007f74f0c26038 R14: 00007f74f0c25fa0 R15: 00007ffee69d2518 [ 2747.590617][T16032] [ 2747.612381][T16035] netlink: 'syz.2.14201': attribute type 29 has an invalid length. [ 2747.630797][T16035] netlink: 'syz.2.14201': attribute type 29 has an invalid length. [ 2747.775799][T16037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2747.818903][T16037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2748.067475][T16045] netlink: 'syz.2.14206': attribute type 21 has an invalid length. [ 2748.301375][ T911] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2748.511117][T16062] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14212'. [ 2748.541303][T16062] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2748.812084][T16073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14215'. [ 2749.859043][T16090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14222'. [ 2751.878100][T16090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14222'. [ 2751.888506][T16098] netlink: 'syz.2.14225': attribute type 10 has an invalid length. [ 2751.902820][T16098] bridge0: port 2(bridge_slave_1) entered disabled state [ 2751.910076][T16098] bridge0: port 1(bridge_slave_0) entered disabled state [ 2751.965861][T16101] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14226'. [ 2751.992891][T16101] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2752.053794][ T6261] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2752.383894][T16122] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14232'. [ 2752.534719][T16125] FAULT_INJECTION: forcing a failure. [ 2752.534719][T16125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2752.548611][T16125] CPU: 0 PID: 16125 Comm: syz.3.14234 Not tainted syzkaller #0 [ 2752.556194][T16125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2752.566279][T16125] Call Trace: [ 2752.569579][T16125] [ 2752.572531][T16125] dump_stack_lvl+0x188/0x24e [ 2752.577237][T16125] ? show_regs_print_info+0x12/0x12 [ 2752.582464][T16125] ? load_image+0x410/0x410 [ 2752.586992][T16125] ? __lock_acquire+0x7c40/0x7c40 [ 2752.592052][T16125] should_fail_ex+0x390/0x4c0 [ 2752.596758][T16125] _copy_from_user+0x2c/0x170 [ 2752.601468][T16125] __sys_bpf+0x2ea/0x780 [ 2752.605831][T16125] ? bpf_link_show_fdinfo+0x380/0x380 [ 2752.611246][T16125] ? lock_chain_count+0x20/0x20 [ 2752.616143][T16125] __x64_sys_bpf+0x78/0x90 [ 2752.620590][T16125] do_syscall_64+0x4c/0xa0 [ 2752.625034][T16125] ? clear_bhb_loop+0x60/0xb0 [ 2752.629735][T16125] ? clear_bhb_loop+0x60/0xb0 [ 2752.634441][T16125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2752.640349][T16125] RIP: 0033:0x7f996f99de59 [ 2752.644770][T16125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2752.664373][T16125] RSP: 002b:00007f997091e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2752.672782][T16125] RAX: ffffffffffffffda RBX: 00007f996fc25fa0 RCX: 00007f996f99de59 [ 2752.680748][T16125] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2752.688718][T16125] RBP: 00007f997091e090 R08: 0000000000000000 R09: 0000000000000000 [ 2752.696709][T16125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2752.704678][T16125] R13: 00007f996fc26038 R14: 00007f996fc25fa0 R15: 00007ffd3e2d7c68 [ 2752.712663][T16125] [ 2752.836638][T16129] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14236'. [ 2753.965937][T16145] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14241'. [ 2754.010084][T16145] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2754.448305][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14243'. [ 2755.156295][T16174] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14254'. [ 2755.187184][T16174] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2755.199766][T16177] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14253'. [ 2755.214772][T16177] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2755.610345][T16185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14257'. [ 2756.277921][T16202] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.14264'. [ 2756.531179][T16207] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.14266'. [ 2756.554460][T16207] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2756.707509][T16212] delete_channel: no stack [ 2757.295434][T16229] netlink: 172 bytes leftover after parsing attributes in process `syz.0.14274'. [ 2757.570405][T16240] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.14280'. [ 2757.590676][T16240] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2757.719340][T16243] netlink: 'syz.1.14281': attribute type 21 has an invalid length. [ 2757.753877][T16243] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14281'. [ 2757.789364][T16243] netlink: 'syz.1.14281': attribute type 4 has an invalid length. [ 2758.496539][T16270] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2758.886380][T16290] netlink: 'syz.2.14299': attribute type 3 has an invalid length. [ 2758.910377][T16290] netlink: 'syz.2.14299': attribute type 4 has an invalid length. [ 2759.040746][T16296] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2759.047661][T16296] syzkaller1: linktype set to 0 [ 2759.094272][T16300] netlink: 'syz.2.14303': attribute type 3 has an invalid length. [ 2759.102961][T16300] __nla_validate_parse: 7 callbacks suppressed [ 2759.102976][T16300] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.14303'. [ 2759.141981][T16302] netlink: 'syz.4.14304': attribute type 4 has an invalid length. [ 2759.150436][T16302] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.14304'. [ 2759.290069][T16306] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14306'. [ 2759.300091][T16306] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2759.321899][T16307] delete_channel: no stack [ 2759.613926][T16320] netlink: 'syz.1.14313': attribute type 4 has an invalid length. [ 2759.646205][T16320] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14313'. [ 2759.734183][T16332] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14317'. [ 2759.804898][T16337] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.14319'. [ 2759.823806][T16337] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2759.931097][T16347] netlink: 'syz.4.14323': attribute type 29 has an invalid length. [ 2759.940215][T16347] netlink: 'syz.4.14323': attribute type 29 has an invalid length. [ 2759.956064][T16347] netlink: 'syz.4.14323': attribute type 29 has an invalid length. [ 2760.317955][T16362] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14329'. [ 2760.329175][T16362] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14329'. [ 2760.339791][T16362] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14329'. [ 2760.351080][T16362] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14329'. [ 2760.847180][T16373] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2760.905338][T16375] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2760.952266][T16381] device wlan1 left promiscuous mode [ 2761.490334][T16410] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2761.704621][T16416] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2761.725336][T16416] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2761.737999][T16416] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2762.916641][T16469] validate_nla: 4 callbacks suppressed [ 2762.916681][T16469] netlink: 'syz.2.14373': attribute type 2 has an invalid length. [ 2763.026867][T16469] device 0 entered promiscuous mode [ 2763.627421][T16497] netlink: 'syz.3.14383': attribute type 2 has an invalid length. [ 2763.672647][T16499] netlink: 'syz.1.14385': attribute type 29 has an invalid length. [ 2763.685435][T16499] netlink: 'syz.1.14385': attribute type 29 has an invalid length. [ 2763.699242][T16499] netlink: 'syz.1.14385': attribute type 29 has an invalid length. [ 2763.712751][T16499] netlink: 'syz.1.14385': attribute type 29 has an invalid length. [ 2764.068175][T16507] netlink: 'syz.3.14389': attribute type 10 has an invalid length. [ 2764.355720][T16507] team0: Device vxcan1 is of different type [ 2764.623575][T16522] netlink: 'syz.0.14394': attribute type 4 has an invalid length. [ 2764.632914][T16522] __nla_validate_parse: 6 callbacks suppressed [ 2764.632931][T16522] netlink: 111908 bytes leftover after parsing attributes in process `syz.0.14394'. [ 2764.669795][T16524] netlink: 'syz.0.14394': attribute type 25 has an invalid length. [ 2764.679339][T16524] netlink: 'syz.0.14394': attribute type 9 has an invalid length. [ 2764.697257][T16524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14394'. [ 2764.707677][ T888] wlan1: Trigger new scan to find an IBSS to join [ 2765.609595][T16550] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14402'. [ 2765.648005][T16550] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2765.804538][T16559] FAULT_INJECTION: forcing a failure. [ 2765.804538][T16559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2765.823240][T16559] CPU: 0 PID: 16559 Comm: syz.0.14406 Not tainted syzkaller #0 [ 2765.830834][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2765.840907][T16559] Call Trace: [ 2765.844201][T16559] [ 2765.847154][T16559] dump_stack_lvl+0x188/0x24e [ 2765.851853][T16559] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2765.858027][T16559] ? show_regs_print_info+0x12/0x12 [ 2765.863256][T16559] ? load_image+0x410/0x410 [ 2765.867794][T16559] should_fail_ex+0x390/0x4c0 [ 2765.872501][T16559] _copy_from_user+0x2c/0x170 [ 2765.877200][T16559] bpf_prog_test_run_flow_dissector+0x27d/0x640 [ 2765.883473][T16559] ? xdp_convert_buff_to_md+0x200/0x200 [ 2765.889042][T16559] ? __fget_files+0x28/0x460 [ 2765.893658][T16559] ? __fget_files+0x3fc/0x460 [ 2765.898365][T16559] ? xdp_convert_buff_to_md+0x200/0x200 [ 2765.902920][T16556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14405'. [ 2765.903917][T16559] bpf_prog_test_run+0x31c/0x390 [ 2765.917990][T16559] __sys_bpf+0x62b/0x780 [ 2765.922263][T16559] ? bpf_link_show_fdinfo+0x380/0x380 [ 2765.927683][T16559] ? lock_chain_count+0x20/0x20 [ 2765.932550][T16559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2765.938553][T16559] __x64_sys_bpf+0x78/0x90 [ 2765.942970][T16559] do_syscall_64+0x4c/0xa0 [ 2765.947379][T16559] ? clear_bhb_loop+0x60/0xb0 [ 2765.952051][T16559] ? clear_bhb_loop+0x60/0xb0 [ 2765.956724][T16559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2765.962611][T16559] RIP: 0033:0x7f781e79de59 [ 2765.967018][T16559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2765.986616][T16559] RSP: 002b:00007f781f66a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2765.995022][T16559] RAX: ffffffffffffffda RBX: 00007f781ea25fa0 RCX: 00007f781e79de59 [ 2766.002983][T16559] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 2766.010945][T16559] RBP: 00007f781f66a090 R08: 0000000000000000 R09: 0000000000000000 [ 2766.018910][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2766.026964][T16559] R13: 00007f781ea26038 R14: 00007f781ea25fa0 R15: 00007fff77c82438 [ 2766.034939][T16559] [ 2767.014782][T16567] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14409'. [ 2767.408713][T16589] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.14417'. [ 2767.440210][T16589] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2767.744257][ T6261] wlan1: Trigger new scan to find an IBSS to join [ 2768.422629][T16614] delete_channel: no stack [ 2768.591374][T16626] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.14429'. [ 2768.613726][T16626] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2768.670840][T13174] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2768.924046][T16634] validate_nla: 4 callbacks suppressed [ 2768.924064][T16634] netlink: 'syz.4.14434': attribute type 10 has an invalid length. [ 2769.147683][T16642] netlink: 'syz.4.14437': attribute type 1 has an invalid length. [ 2769.167973][T16642] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14437'. [ 2769.641298][T16662] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.14443'. [ 2769.691678][T16662] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2769.731414][T16655] netlink: 'syz.0.14441': attribute type 2 has an invalid length. [ 2769.757317][T16655] netlink: 'syz.0.14441': attribute type 8 has an invalid length. [ 2769.771618][T16655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14441'. [ 2769.793781][T16665] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14442'. [ 2769.963791][T16674] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14447'. [ 2770.211684][T16684] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.14450'. [ 2770.453973][T16693] netlink: 'syz.3.14454': attribute type 2 has an invalid length. [ 2770.461849][T16693] netlink: 'syz.3.14454': attribute type 8 has an invalid length. [ 2770.518437][T16693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14454'. [ 2770.596647][T16695] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14455'. [ 2770.621652][T16695] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2771.091784][T16699] netlink: 'syz.3.14456': attribute type 1 has an invalid length. [ 2771.102401][T16699] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14456'. [ 2771.622981][T16697] netlink: 'syz.4.14457': attribute type 2 has an invalid length. [ 2771.634562][T16697] netlink: 'syz.4.14457': attribute type 8 has an invalid length. [ 2771.652463][T16697] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14457'. [ 2772.169431][T16736] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.14468'. [ 2772.184438][T16737] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.14469'. [ 2772.203619][T16737] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2772.913394][T16752] netlink: 'syz.1.14478': attribute type 1 has an invalid length. [ 2773.336099][T16766] team0: Port device team_slave_0 removed [ 2773.973370][T16799] netlink: 'syz.2.14493': attribute type 10 has an invalid length. [ 2773.987652][T16799] bridge0: port 3(team0) entered blocking state [ 2773.996157][T16799] bridge0: port 3(team0) entered disabled state [ 2774.184966][T16799] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2774.624505][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.630850][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.886537][T16826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2774.937728][T16826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2774.947082][T16826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2774.956481][T16826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2774.965857][T16826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2774.975258][T16826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2774.984586][T16826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2774.993939][T16826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2775.003294][T16826] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2775.219517][T16837] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2775.350736][T16839] netlink: 'syz.3.14508': attribute type 2 has an invalid length. [ 2775.359215][T16839] __nla_validate_parse: 5 callbacks suppressed [ 2775.359232][T16839] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14508'. [ 2775.858236][T16842] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14509'. [ 2775.877513][ T4278] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 2775.878548][T16843] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14510'. [ 2776.078605][T16850] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14523'. [ 2776.107071][T16850] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2776.429143][T16871] mac80211_hwsim hwsim91 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2776.440905][T16873] netlink: 'syz.2.14522': attribute type 33 has an invalid length. [ 2776.449201][T16873] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14522'. [ 2776.458532][T16873] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2776.636375][T16877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14525'. [ 2776.871263][T16888] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14529'. [ 2776.882606][T16888] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2778.703823][ T888] wlan1: Trigger new scan to find an IBSS to join [ 2780.603412][T16918] FAULT_INJECTION: forcing a failure. [ 2780.603412][T16918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2780.631959][T16918] CPU: 0 PID: 16918 Comm: syz.4.14540 Not tainted syzkaller #0 [ 2780.639565][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2780.649647][T16918] Call Trace: [ 2780.652951][T16918] [ 2780.655900][T16918] dump_stack_lvl+0x188/0x24e [ 2780.660600][T16918] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2780.666785][T16918] ? show_regs_print_info+0x12/0x12 [ 2780.672023][T16918] ? load_image+0x410/0x410 [ 2780.676564][T16918] should_fail_ex+0x390/0x4c0 [ 2780.677825][T16923] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.14542'. [ 2780.681255][T16918] _copy_from_user+0x2c/0x170 [ 2780.681282][T16918] ___sys_sendmsg+0x1c3/0x360 [ 2780.681312][T16918] ? __sys_sendmsg+0x2a0/0x2a0 [ 2780.681341][T16918] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2780.681376][T16918] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2780.681401][T16918] ? lockdep_hardirqs_on+0x94/0x140 [ 2780.681431][T16918] ? __se_sys_sendmsg+0xee/0x2b0 [ 2780.681454][T16918] ? kasan_check_range+0x84/0x290 [ 2780.719541][T16923] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2780.722019][T16918] __se_sys_sendmsg+0x1c3/0x2b0 [ 2780.722054][T16918] ? __x64_sys_sendmsg+0x80/0x80 [ 2780.722091][T16918] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2780.722114][T16918] do_syscall_64+0x4c/0xa0 [ 2780.722133][T16918] ? clear_bhb_loop+0x60/0xb0 [ 2780.722152][T16918] ? clear_bhb_loop+0x60/0xb0 [ 2780.722174][T16918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2780.722194][T16918] RIP: 0033:0x7f988e39de59 [ 2780.722213][T16918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2780.722228][T16918] RSP: 002b:00007f988f29e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2780.722251][T16918] RAX: ffffffffffffffda RBX: 00007f988e625fa0 RCX: 00007f988e39de59 [ 2780.722265][T16918] RDX: 0000000000000011 RSI: 0000200000000a40 RDI: 0000000000000006 [ 2780.722278][T16918] RBP: 00007f988f29e090 R08: 0000000000000000 R09: 0000000000000000 [ 2780.722290][T16918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2780.722301][T16918] R13: 00007f988e626038 R14: 00007f988e625fa0 R15: 00007ffff9957a48 [ 2780.722330][T16918] [ 2781.560676][T16942] netlink: 'syz.2.14548': attribute type 3 has an invalid length. [ 2781.597185][T16942] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.14548'. [ 2781.704309][T16948] netlink: 'syz.1.14549': attribute type 16 has an invalid length. [ 2781.735346][T16948] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14549'. [ 2781.858661][T16952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2781.865978][T16952] IPv6: NLM_F_CREATE should be set when creating new route [ 2781.873317][T16952] IPv6: NLM_F_CREATE should be set when creating new route [ 2781.880560][T16952] IPv6: NLM_F_CREATE should be set when creating new route [ 2781.975810][T16952] IPv6: NLM_F_CREATE should be specified when creating new route [ 2781.995267][T16952] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14551'. [ 2782.702515][T13174] wlan1: Trigger new scan to find an IBSS to join [ 2783.763088][T13174] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2783.927590][T16958] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14554'. [ 2784.304930][T16974] netlink: 'syz.1.14558': attribute type 29 has an invalid length. [ 2784.397853][T16975] FAULT_INJECTION: forcing a failure. [ 2784.397853][T16975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2784.413017][T16975] CPU: 0 PID: 16975 Comm: syz.1.14558 Not tainted syzkaller #0 [ 2784.420627][T16975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2784.430720][T16975] Call Trace: [ 2784.434031][T16975] [ 2784.436996][T16975] dump_stack_lvl+0x188/0x24e [ 2784.441731][T16975] ? show_regs_print_info+0x12/0x12 [ 2784.446978][T16975] ? load_image+0x410/0x410 [ 2784.451531][T16975] ? __lock_acquire+0x7c40/0x7c40 [ 2784.456588][T16975] ? perf_trace_lock+0xf8/0x390 [ 2784.461495][T16975] should_fail_ex+0x390/0x4c0 [ 2784.466227][T16975] _copy_from_user+0x2c/0x170 [ 2784.470952][T16975] ___sys_recvmsg+0x170/0x590 [ 2784.475685][T16975] ? __sys_recvmsg+0x2a0/0x2a0 [ 2784.480499][T16975] ? trace_call_bpf+0xbf/0x6b0 [ 2784.485313][T16975] ? trace_call_bpf+0x5d6/0x6b0 [ 2784.490330][T16975] ? __fget_files+0x3fc/0x460 [ 2784.495092][T16975] __x64_sys_recvmsg+0x20d/0x2e0 [ 2784.500067][T16975] ? perf_trace_preemptirq_template+0x268/0x320 [ 2784.506350][T16975] ? ___sys_recvmsg+0x590/0x590 [ 2784.511295][T16975] ? lockdep_hardirqs_on+0x94/0x140 [ 2784.516541][T16975] do_syscall_64+0x4c/0xa0 [ 2784.520990][T16975] ? clear_bhb_loop+0x60/0xb0 [ 2784.525697][T16975] ? clear_bhb_loop+0x60/0xb0 [ 2784.530413][T16975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2784.536339][T16975] RIP: 0033:0x7f74f099de59 [ 2784.540791][T16975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2784.560432][T16975] RSP: 002b:00007f74eebd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2784.568892][T16975] RAX: ffffffffffffffda RBX: 00007f74f0c26090 RCX: 00007f74f099de59 [ 2784.576897][T16975] RDX: 0000000040012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 2784.584900][T16975] RBP: 00007f74eebd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2784.592899][T16975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2784.600895][T16975] R13: 00007f74f0c26128 R14: 00007f74f0c26090 R15: 00007ffee69d2518 [ 2784.608944][T16975] [ 2785.864636][T16963] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14555'. [ 2785.882198][T16963] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2785.889100][T16974] netlink: 'syz.1.14558': attribute type 29 has an invalid length. [ 2786.208734][T16979] netlink: 'syz.2.14560': attribute type 29 has an invalid length. [ 2786.239496][T16979] netlink: 'syz.2.14560': attribute type 29 has an invalid length. [ 2786.271040][T16979] netlink: 'syz.2.14560': attribute type 29 has an invalid length. [ 2786.578489][T16992] netlink: 'syz.3.14565': attribute type 3 has an invalid length. [ 2786.600613][T16992] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.14565'. [ 2786.651538][T16999] netlink: 'syz.4.14567': attribute type 16 has an invalid length. [ 2786.673007][T16999] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14567'. [ 2786.686676][T17001] netlink: 'syz.1.14568': attribute type 21 has an invalid length. [ 2786.699899][T17001] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14568'. [ 2787.083188][T17007] netlink: 'syz.2.14570': attribute type 29 has an invalid length. [ 2787.110607][T17007] netlink: 'syz.2.14570': attribute type 29 has an invalid length. [ 2787.131288][T17007] netlink: 'syz.2.14570': attribute type 29 has an invalid length. [ 2787.140079][T17009] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.14571'. [ 2787.166966][T17009] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2788.161581][T17033] FAULT_INJECTION: forcing a failure. [ 2788.161581][T17033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2788.183766][T17033] CPU: 0 PID: 17033 Comm: syz.3.14579 Not tainted syzkaller #0 [ 2788.191350][T17033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2788.201400][T17033] Call Trace: [ 2788.204669][T17033] [ 2788.207585][T17033] dump_stack_lvl+0x188/0x24e [ 2788.212263][T17033] ? show_regs_print_info+0x12/0x12 [ 2788.217468][T17033] ? load_image+0x410/0x410 [ 2788.221957][T17033] ? __lock_acquire+0x7c40/0x7c40 [ 2788.226976][T17033] ? perf_trace_lock+0xf8/0x390 [ 2788.231832][T17033] should_fail_ex+0x390/0x4c0 [ 2788.236534][T17033] _copy_from_user+0x2c/0x170 [ 2788.241308][T17033] ___sys_recvmsg+0x170/0x590 [ 2788.246068][T17033] ? __sys_recvmsg+0x2a0/0x2a0 [ 2788.250850][T17033] ? __fget_files+0x3fc/0x460 [ 2788.255546][T17033] __x64_sys_recvmsg+0x20d/0x2e0 [ 2788.260497][T17033] ? ct_nmi_exit+0x145/0x1c0 [ 2788.265093][T17033] ? ___sys_recvmsg+0x590/0x590 [ 2788.269950][T17033] ? lockdep_hardirqs_on+0x94/0x140 [ 2788.275148][T17033] do_syscall_64+0x4c/0xa0 [ 2788.279560][T17033] ? clear_bhb_loop+0x60/0xb0 [ 2788.284242][T17033] ? clear_bhb_loop+0x60/0xb0 [ 2788.288926][T17033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2788.294824][T17033] RIP: 0033:0x7f996f99de59 [ 2788.299236][T17033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2788.318839][T17033] RSP: 002b:00007f997091e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2788.327332][T17033] RAX: ffffffffffffffda RBX: 00007f996fc25fa0 RCX: 00007f996f99de59 [ 2788.335296][T17033] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000a [ 2788.343260][T17033] RBP: 00007f997091e090 R08: 0000000000000000 R09: 0000000000000000 [ 2788.351222][T17033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2788.359186][T17033] R13: 00007f996fc26038 R14: 00007f996fc25fa0 R15: 00007ffd3e2d7c68 [ 2788.367162][T17033] [ 2788.414937][T17038] netlink: 'syz.4.14580': attribute type 3 has an invalid length. [ 2788.448354][T17038] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14580'. [ 2788.480128][T17044] netlink: 'syz.1.14583': attribute type 28 has an invalid length. [ 2788.508626][T17044] netlink: 'syz.1.14583': attribute type 4 has an invalid length. [ 2788.518805][T17044] netlink: 136 bytes leftover after parsing attributes in process `syz.1.14583'. [ 2788.577349][T17048] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.14585'. [ 2788.595216][T17048] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2788.970949][T17060] netlink: 'syz.2.14589': attribute type 2 has an invalid length. [ 2789.048890][T17060] device 1 entered promiscuous mode [ 2789.911878][T17069] netlink: 168 bytes leftover after parsing attributes in process `syz.3.14591'. [ 2790.806315][T17098] FAULT_INJECTION: forcing a failure. [ 2790.806315][T17098] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.828167][T17098] CPU: 0 PID: 17098 Comm: syz.4.14602 Not tainted syzkaller #0 [ 2790.835761][T17098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2790.845830][T17098] Call Trace: [ 2790.849120][T17098] [ 2790.852066][T17098] dump_stack_lvl+0x188/0x24e [ 2790.856766][T17098] ? show_regs_print_info+0x12/0x12 [ 2790.861983][T17098] ? load_image+0x410/0x410 [ 2790.866504][T17098] ? __lock_acquire+0x7c40/0x7c40 [ 2790.871547][T17098] ? trace_event_raw_event_lock+0x230/0x230 [ 2790.877460][T17098] should_fail_ex+0x390/0x4c0 [ 2790.882153][T17098] should_failslab+0x5/0x20 [ 2790.886664][T17098] slab_pre_alloc_hook+0x59/0x300 [ 2790.891702][T17098] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 2790.897268][T17098] __kmem_cache_alloc_node+0x4f/0x270 [ 2790.903008][T17098] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 2790.908564][T17098] __kmalloc+0xa3/0x240 [ 2790.912744][T17098] bpf_prog_test_run_skb+0x23e/0x18e0 [ 2790.918133][T17098] ? __fget_files+0x28/0x460 [ 2790.922744][T17098] ? __fget_files+0x3fc/0x460 [ 2790.927454][T17098] ? cpu_online+0xa0/0xa0 [ 2790.931799][T17098] bpf_prog_test_run+0x31c/0x390 [ 2790.936756][T17098] __sys_bpf+0x62b/0x780 [ 2790.941016][T17098] ? bpf_link_show_fdinfo+0x380/0x380 [ 2790.946424][T17098] ? lock_chain_count+0x20/0x20 [ 2790.951295][T17098] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2790.957306][T17098] __x64_sys_bpf+0x78/0x90 [ 2790.962178][T17098] do_syscall_64+0x4c/0xa0 [ 2790.966616][T17098] ? clear_bhb_loop+0x60/0xb0 [ 2790.971307][T17098] ? clear_bhb_loop+0x60/0xb0 [ 2790.976025][T17098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2790.981933][T17098] RIP: 0033:0x7f988e39de59 [ 2790.986367][T17098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2791.005991][T17098] RSP: 002b:00007f988f29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2791.007961][T17102] device syzkaller0 entered promiscuous mode [ 2791.014407][T17098] RAX: ffffffffffffffda RBX: 00007f988e625fa0 RCX: 00007f988e39de59 [ 2791.014423][T17098] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2791.014435][T17098] RBP: 00007f988f29e090 R08: 0000000000000000 R09: 0000000000000000 [ 2791.014446][T17098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2791.014456][T17098] R13: 00007f988e626038 R14: 00007f988e625fa0 R15: 00007ffff9957a48 [ 2791.014483][T17098] [ 2792.709719][T17131] validate_nla: 1 callbacks suppressed [ 2792.709734][T17131] netlink: 'syz.0.14611': attribute type 1 has an invalid length. [ 2792.742350][T17131] netlink: 'syz.0.14611': attribute type 2 has an invalid length. [ 2792.752523][T17131] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14611'. [ 2795.173608][T17133] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2795.182981][T17141] netlink: 'syz.2.14615': attribute type 25 has an invalid length. [ 2795.191029][T17141] netlink: 'syz.2.14615': attribute type 3 has an invalid length. [ 2795.336793][T17154] netlink: 'syz.1.14619': attribute type 10 has an invalid length. [ 2795.360752][T17154] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14619'. [ 2797.707153][T17175] netlink: 'syz.1.14627': attribute type 21 has an invalid length. [ 2797.715298][T17175] netlink: 'syz.1.14627': attribute type 4 has an invalid length. [ 2797.874524][T17178] device syzkaller0 entered promiscuous mode [ 2797.889522][T17184] mac80211_hwsim hwsim95 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2799.081870][T17207] delete_channel: no stack [ 2800.710172][T17208] netlink: 'syz.2.14636': attribute type 10 has an invalid length. [ 2800.718257][T17208] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 2800.811349][T17225] netlink: 'syz.2.14641': attribute type 4 has an invalid length. [ 2800.825968][T17225] netlink: 'syz.2.14641': attribute type 15 has an invalid length. [ 2801.534437][T17251] netlink: 'syz.4.14653': attribute type 10 has an invalid length. [ 2801.554149][T17251] team0: Device bridge0 is up. Set it down before adding it as a team port [ 2801.574494][T17250] netlink: 'syz.3.14652': attribute type 10 has an invalid length. [ 2801.598216][T17248] delete_channel: no stack [ 2801.656250][T17256] FAULT_INJECTION: forcing a failure. [ 2801.656250][T17256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2801.692172][T17256] CPU: 0 PID: 17256 Comm: syz.0.14645 Not tainted syzkaller #0 [ 2801.699770][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2801.709855][T17256] Call Trace: [ 2801.713146][T17256] [ 2801.716089][T17256] dump_stack_lvl+0x188/0x24e [ 2801.720793][T17256] ? show_regs_print_info+0x12/0x12 [ 2801.726021][T17256] ? load_image+0x410/0x410 [ 2801.730554][T17256] ? __lock_acquire+0x7c40/0x7c40 [ 2801.735631][T17256] should_fail_ex+0x390/0x4c0 [ 2801.740330][T17256] _copy_from_user+0x2c/0x170 [ 2801.745028][T17256] iovec_from_user+0x143/0x360 [ 2801.749822][T17256] __import_iovec+0x6c/0x510 [ 2801.754447][T17256] import_iovec+0x6f/0xa0 [ 2801.758804][T17256] ___sys_sendmsg+0x252/0x360 [ 2801.763538][T17256] ? __sys_sendmsg+0x2a0/0x2a0 [ 2801.768329][T17256] ? __lock_acquire+0x7c40/0x7c40 [ 2801.773384][T17256] __se_sys_sendmsg+0x1c3/0x2b0 [ 2801.778244][T17256] ? __x64_sys_sendmsg+0x80/0x80 [ 2801.783201][T17256] ? lockdep_hardirqs_on+0x94/0x140 [ 2801.788406][T17256] do_syscall_64+0x4c/0xa0 [ 2801.792839][T17256] ? clear_bhb_loop+0x60/0xb0 [ 2801.797528][T17256] ? clear_bhb_loop+0x60/0xb0 [ 2801.802223][T17256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2801.808126][T17256] RIP: 0033:0x7f781e79de59 [ 2801.812549][T17256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2801.832164][T17256] RSP: 002b:00007f781f66a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2801.840582][T17256] RAX: ffffffffffffffda RBX: 00007f781ea25fa0 RCX: 00007f781e79de59 [ 2801.848553][T17256] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2801.856529][T17256] RBP: 00007f781f66a090 R08: 0000000000000000 R09: 0000000000000000 [ 2801.864506][T17256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2801.872482][T17256] R13: 00007f781ea26038 R14: 00007f781ea25fa0 R15: 00007fff77c82438 [ 2801.880471][T17256] [ 2801.903488][T17263] netlink: 'syz.4.14654': attribute type 10 has an invalid length. [ 2801.932191][T17263] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14654'. [ 2801.958261][T17263] netlink: 'syz.4.14654': attribute type 10 has an invalid length. [ 2802.018535][T17265] FAULT_INJECTION: forcing a failure. [ 2802.018535][T17265] name failslab, interval 1, probability 0, space 0, times 0 [ 2802.030288][T17263] team0: Port device wlan1 added [ 2802.044860][T17265] CPU: 1 PID: 17265 Comm: syz.2.14656 Not tainted syzkaller #0 [ 2802.052458][T17265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2802.062536][T17265] Call Trace: [ 2802.065831][T17265] [ 2802.068775][T17265] dump_stack_lvl+0x188/0x24e [ 2802.073475][T17265] ? show_regs_print_info+0x12/0x12 [ 2802.078781][T17265] ? load_image+0x410/0x410 [ 2802.083307][T17265] ? __lock_acquire+0x7c40/0x7c40 [ 2802.088373][T17265] should_fail_ex+0x390/0x4c0 [ 2802.090771][T17258] netlink: 'syz.4.14654': attribute type 10 has an invalid length. [ 2802.093060][T17265] should_failslab+0x5/0x20 [ 2802.093081][T17265] slab_pre_alloc_hook+0x59/0x300 [ 2802.093103][T17265] ? bpf_test_init+0x9f/0x140 [ 2802.115172][T17265] __kmem_cache_alloc_node+0x4f/0x270 [ 2802.115425][T17258] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2802.120555][T17265] ? bpf_test_init+0x9f/0x140 [ 2802.133804][T17265] __kmalloc+0xa3/0x240 [ 2802.137971][T17265] bpf_test_init+0x9f/0x140 [ 2802.142471][T17265] bpf_prog_test_run_xdp+0x488/0xf80 [ 2802.147747][T17265] ? __lock_acquire+0x7c40/0x7c40 [ 2802.152781][T17265] ? dev_put+0x80/0x80 [ 2802.156873][T17265] ? dev_put+0x80/0x80 [ 2802.160934][T17265] bpf_prog_test_run+0x31c/0x390 [ 2802.165877][T17265] __sys_bpf+0x62b/0x780 [ 2802.170120][T17265] ? bpf_link_show_fdinfo+0x380/0x380 [ 2802.175498][T17265] ? lock_chain_count+0x20/0x20 [ 2802.180358][T17265] __x64_sys_bpf+0x78/0x90 [ 2802.184781][T17265] do_syscall_64+0x4c/0xa0 [ 2802.189194][T17265] ? clear_bhb_loop+0x60/0xb0 [ 2802.193866][T17265] ? clear_bhb_loop+0x60/0xb0 [ 2802.198538][T17265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2802.204426][T17265] RIP: 0033:0x7fe31f99de59 [ 2802.208835][T17265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2802.228429][T17265] RSP: 002b:00007fe31dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2802.236834][T17265] RAX: ffffffffffffffda RBX: 00007fe31fc25fa0 RCX: 00007fe31f99de59 [ 2802.244798][T17265] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2802.252768][T17265] RBP: 00007fe31dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2802.260729][T17265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2802.268712][T17265] R13: 00007fe31fc26038 R14: 00007fe31fc25fa0 R15: 00007ffe46ac19a8 [ 2802.276690][T17265] [ 2802.902342][T17283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2802.910011][T17283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2803.630120][T17283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2803.649347][T17283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2803.853830][T17300] netlink: 'syz.0.14666': attribute type 10 has an invalid length. [ 2803.922791][T17299] delete_channel: no stack [ 2804.007351][T17310] syz.4.14669[17310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2804.007455][T17310] syz.4.14669[17310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2804.264949][T17315] delete_channel: no stack [ 2804.782530][ T6261] wlan1: Trigger new scan to find an IBSS to join [ 2805.030025][T17349] netlink: 'syz.3.14685': attribute type 21 has an invalid length. [ 2805.131300][T17349] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14685'. [ 2805.404606][T17349] netlink: 'syz.3.14685': attribute type 4 has an invalid length. [ 2805.654097][T17349] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14685'. [ 2806.562658][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14695'. [ 2806.606076][T17384] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14695'. [ 2806.793023][ T6261] wlan1: Trigger new scan to find an IBSS to join [ 2807.359762][T17394] netlink: 'syz.0.14699': attribute type 3 has an invalid length. [ 2807.463798][T17394] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14699'. [ 2807.547207][T17396] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.14700'. [ 2807.705563][T17399] netlink: 'syz.3.14701': attribute type 4 has an invalid length. [ 2807.752345][T17399] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14701'. [ 2807.822739][T17407] netlink: 'syz.0.14704': attribute type 3 has an invalid length. [ 2807.840871][T17407] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14704'. [ 2808.236371][T17417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14709'. [ 2808.306421][T17421] netlink: 'syz.3.14708': attribute type 4 has an invalid length. [ 2808.352359][T17421] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14708'. [ 2809.743111][T13174] wlan1: Trigger new scan to find an IBSS to join [ 2810.665994][ T6261] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2811.747771][ T31] wlan1: Trigger new scan to find an IBSS to join [ 2812.466285][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2812.781002][ T31] wlan1: Creating new IBSS network, BSSID 3a:6f:40:06:02:17 [ 2813.004166][T17474] netlink: 'syz.4.14724': attribute type 4 has an invalid length. [ 2813.184373][T17489] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.14728'. [ 2814.031150][T17509] netlink: 'syz.4.14738': attribute type 16 has an invalid length. [ 2814.052550][T17509] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14738'. [ 2814.867822][T17551] netlink: 'syz.4.14755': attribute type 29 has an invalid length. [ 2814.886576][T17551] netlink: 'syz.4.14755': attribute type 29 has an invalid length. [ 2814.906786][T17551] netlink: 'syz.4.14755': attribute type 29 has an invalid length. [ 2814.920193][T17551] netlink: 'syz.4.14755': attribute type 29 has an invalid length. [ 2814.936248][T17551] netlink: 'syz.4.14755': attribute type 29 has an invalid length. [ 2815.135878][T17555] netlink: 'syz.2.14758': attribute type 4 has an invalid length. [ 2815.150622][T17555] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14758'. [ 2815.178003][T17557] netlink: 'syz.0.14759': attribute type 46 has an invalid length. [ 2815.198421][T17557] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14759'. [ 2816.702302][ T888] wlan1: Trigger new scan to find an IBSS to join [ 2817.296241][T17564] netlink: 'syz.3.14761': attribute type 3 has an invalid length. [ 2817.322313][T17564] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.14761'. [ 2817.385197][T17566] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14771'. [ 2817.630464][T17572] netlink: 111908 bytes leftover after parsing attributes in process `syz.1.14764'. [ 2817.679688][T17577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14764'. [ 2818.299205][T17586] validate_nla: 3 callbacks suppressed [ 2818.299292][T17586] netlink: 'syz.1.14767': attribute type 16 has an invalid length. [ 2818.352812][T17586] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14767'. [ 2818.996337][T17602] netlink: 'syz.4.14775': attribute type 27 has an invalid length. [ 2819.151988][T17613] netlink: 'syz.4.14778': attribute type 3 has an invalid length. [ 2819.162006][T17613] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14778'. [ 2819.179732][T17608] netlink: 'syz.1.14774': attribute type 4 has an invalid length. [ 2819.308261][T17611] tap0: tun_chr_ioctl cmd 1074025675 [ 2819.316911][T17611] tap0: persist enabled [ 2819.384304][T17623] netlink: 'syz.3.14781': attribute type 46 has an invalid length. [ 2819.393331][T17623] netlink: 55 bytes leftover after parsing attributes in process `syz.3.14781'. [ 2819.473755][T17625] netlink: 'syz.0.14782': attribute type 16 has an invalid length. [ 2819.502479][T17625] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14782'. [ 2819.752523][ T888] wlan1: Trigger new scan to find an IBSS to join [ 2819.859479][T17636] netlink: 'syz.2.14785': attribute type 15 has an invalid length. [ 2819.886184][T17636] netlink: 'syz.2.14785': attribute type 7 has an invalid length. [ 2819.902271][T17636] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14785'. [ 2820.137128][T17640] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14788'. [ 2820.559184][T17649] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2820.654684][T17649] syzkaller1: linktype set to 0 [ 2822.228845][T17665] netlink: 'syz.3.14794': attribute type 10 has an invalid length. [ 2822.702250][ T888] wlan1: Trigger new scan to find an IBSS to join [ 2822.707249][T17679] netlink: 'syz.0.14797': attribute type 4 has an invalid length. [ 2822.768945][T17681] netlink: 55 bytes leftover after parsing attributes in process `syz.4.14800'. [ 2823.590564][T17693] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.14804'. [ 2823.622676][ T888] wlan1: Creating new IBSS network, BSSID 26:5d:14:be:24:4f [ 2823.653485][T17693] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.14804'. [ 2823.710211][T17698] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14806'. [ 2826.268154][T17729] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.14814'. [ 2826.501567][T17731] mac80211_hwsim hwsim95 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2826.623835][T17739] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14815'. [ 2826.636036][T17741] validate_nla: 1 callbacks suppressed [ 2826.637509][T17741] netlink: 'syz.4.14819': attribute type 4 has an invalid length. [ 2826.674517][T17741] netlink: 111908 bytes leftover after parsing attributes in process `syz.4.14819'. [ 2826.765378][T17739] team0: Port device team_slave_0 removed [ 2826.868158][T17741] netlink: 'syz.4.14819': attribute type 25 has an invalid length. [ 2826.888513][T17741] netlink: 'syz.4.14819': attribute type 9 has an invalid length. [ 2826.908037][T17741] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14819'. [ 2827.141553][T17753] netlink: 'syz.1.14822': attribute type 4 has an invalid length. [ 2827.162457][T17753] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14822'. [ 2827.180273][T17757] syz.3.14824[17757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2827.180816][T17757] syz.3.14824[17757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2827.985335][T17779] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14830'. [ 2828.643088][T17787] netlink: 'syz.4.14833': attribute type 10 has an invalid length. [ 2828.651066][T17787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14833'. [ 2828.833516][T17787] device team0 entered promiscuous mode [ 2828.863697][T17787] device team_slave_0 entered promiscuous mode [ 2828.911505][T17787] device team_slave_1 entered promiscuous mode [ 2828.942927][T17787] device macvlan0 entered promiscuous mode [ 2828.949287][T17787] device wlan1 entered promiscuous mode [ 2829.021412][T17787] bridge0: port 3(team0) entered blocking state [ 2829.075201][T17787] bridge0: port 3(team0) entered disabled state [ 2829.146534][T17787] bridge0: port 3(team0) entered blocking state [ 2829.153112][T17787] bridge0: port 3(team0) entered forwarding state [ 2830.030870][T17804] netlink: 'syz.0.14837': attribute type 4 has an invalid length. [ 2830.205761][T17804] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14837'. [ 2830.687526][T17815] netlink: 'syz.1.14845': attribute type 33 has an invalid length. [ 2830.712268][T17815] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14845'. [ 2831.124459][T17826] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14849'. [ 2831.299339][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14852'. [ 2832.314528][T17857] netlink: 'syz.3.14860': attribute type 2 has an invalid length. [ 2832.342126][T17857] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14860'. [ 2833.063957][T17873] device bridge_slave_1 left promiscuous mode [ 2833.070866][T17873] bridge0: port 2(bridge_slave_1) entered disabled state [ 2833.234258][T17873] device bridge_slave_0 left promiscuous mode [ 2833.243166][T17873] bridge0: port 1(bridge_slave_0) entered disabled state [ 2833.549571][T17873] team0: Port device bridge0 removed [ 2833.767658][T17883] bridge0: port 2(bridge_slave_1) entered disabled state [ 2833.776708][T17883] bridge0: port 1(bridge_slave_0) entered disabled state [ 2835.107059][T17895] bridge0: port 2(bridge_slave_1) entered disabled state [ 2835.114647][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 2835.820934][T17906] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.14880'. [ 2835.931108][T17906] net_ratelimit: 3259 callbacks suppressed [ 2835.931144][T17906] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2836.108016][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.114453][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 2838.965064][T17943] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 2838.995732][T17943] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 2839.032926][T17943] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 2840.072637][T23195] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2840.083848][T23195] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2840.093109][T23195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2840.108791][T23195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2840.119445][T23195] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2840.128204][T23195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2840.145611][T17954] FAULT_INJECTION: forcing a failure. [ 2840.145611][T17954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2840.195104][T17943] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 2840.231009][T17954] CPU: 0 PID: 17954 Comm: syz.4.14898 Not tainted syzkaller #0 [ 2840.238620][T17954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2840.248692][T17954] Call Trace: [ 2840.252058][T17954] [ 2840.255122][T17954] dump_stack_lvl+0x188/0x24e [ 2840.259836][T17954] ? show_regs_print_info+0x12/0x12 [ 2840.265073][T17954] ? load_image+0x410/0x410 [ 2840.269605][T17954] ? __lock_acquire+0x7c40/0x7c40 [ 2840.274661][T17954] should_fail_ex+0x390/0x4c0 [ 2840.279367][T17954] _copy_from_user+0x2c/0x170 [ 2840.284089][T17954] iovec_from_user+0x143/0x360 [ 2840.288878][T17954] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2840.295063][T17954] __import_iovec+0x6c/0x510 [ 2840.299675][T17954] ? import_iovec+0x55/0xa0 [ 2840.304195][T17954] import_iovec+0x6f/0xa0 [ 2840.308516][T17954] ___sys_sendmsg+0x252/0x360 [ 2840.313203][T17954] ? __sys_sendmsg+0x2a0/0x2a0 [ 2840.318033][T17954] __se_sys_sendmsg+0x1c3/0x2b0 [ 2840.322916][T17954] ? __x64_sys_sendmsg+0x80/0x80 [ 2840.327894][T17954] do_syscall_64+0x4c/0xa0 [ 2840.332333][T17954] ? clear_bhb_loop+0x60/0xb0 [ 2840.337030][T17954] ? clear_bhb_loop+0x60/0xb0 [ 2840.341735][T17954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2840.347647][T17954] RIP: 0033:0x7f988e39de59 [ 2840.352092][T17954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2840.371716][T17954] RSP: 002b:00007f988f29e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2840.380157][T17954] RAX: ffffffffffffffda RBX: 00007f988e625fa0 RCX: 00007f988e39de59 [ 2840.388147][T17954] RDX: 0000000000000011 RSI: 0000200000000a40 RDI: 0000000000000006 [ 2840.396150][T17954] RBP: 00007f988f29e090 R08: 0000000000000000 R09: 0000000000000000 [ 2840.404138][T17954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2840.412229][T17954] R13: 00007f988e626038 R14: 00007f988e625fa0 R15: 00007ffff9957a48 [ 2840.420236][T17954] [ 2840.755416][T17963] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.14899'. [ 2840.782464][T17963] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2841.197643][T17956] chnl_net:caif_netlink_parms(): no params data found [ 2842.233128][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 2843.237039][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 2843.256715][T17956] bridge0: port 1(bridge_slave_0) entered disabled state [ 2843.268837][T17956] device bridge_slave_0 entered promiscuous mode [ 2843.355005][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 2843.364828][T17956] bridge0: port 2(bridge_slave_1) entered disabled state [ 2843.373611][T17956] device bridge_slave_1 entered promiscuous mode [ 2843.389105][T17982] netlink: 'syz.0.14904': attribute type 21 has an invalid length. [ 2843.866754][T17956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2843.958338][T17452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2844.009937][T17956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2844.167978][T17452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2844.197868][T17956] team0: Port device team_slave_0 added [ 2844.218354][T17956] team0: Port device team_slave_1 added [ 2844.248395][T17956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2844.269857][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2844.307385][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 2844.321740][T17956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2844.425781][T17452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2844.520415][T17956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2844.527855][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2844.565862][T17956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2844.611224][T17452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2844.680532][T17956] device hsr_slave_0 entered promiscuous mode [ 2844.690276][T17956] device hsr_slave_1 entered promiscuous mode [ 2844.701501][T17956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2844.711829][T17956] Cannot create hsr debugfs directory [ 2846.382286][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 2846.472022][T18041] netlink: 'syz.0.14922': attribute type 29 has an invalid length. [ 2846.521252][T18041] netlink: 'syz.0.14922': attribute type 29 has an invalid length. [ 2846.641016][T18042] netlink: 'syz.0.14922': attribute type 29 has an invalid length. [ 2847.251587][T17956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2847.324378][T17956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2847.425969][T18057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14934'. [ 2847.948194][T17956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2848.028250][T17956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2848.464240][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 2849.249014][T17956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2850.467086][T17452] team0: Port device wlan1 removed [ 2850.567938][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2850.587861][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2850.667511][T23195] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2850.682707][T23195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2850.686041][T17956] 8021q: adding VLAN 0 to HW filter on device team0 [ 2850.696847][T32218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2850.706722][T23195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2850.715739][T23195] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2850.723761][T23195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2851.249234][T18103] syzkaller0: refused to change device tx_queue_len [ 2851.371264][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2851.414836][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2851.535325][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 2851.542616][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2851.654161][T17452] device hsr_slave_0 left promiscuous mode [ 2851.673896][T17452] device hsr_slave_1 left promiscuous mode [ 2851.709395][T17452] bridge0: port 3(team0) entered disabled state [ 2851.746477][T17452] bridge0: port 2(bridge_slave_1) entered disabled state [ 2851.794735][T17452] device bridge_slave_0 left promiscuous mode [ 2851.835350][T17452] bridge0: port 1(bridge_slave_0) entered disabled state [ 2852.786408][T23195] Bluetooth: hci3: command 0x0409 tx timeout [ 2853.673828][ T31] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2854.057333][T17452] device team_slave_1 left promiscuous mode [ 2854.066764][T17452] team0 (unregistering): Port device team_slave_1 removed [ 2854.129668][T17452] device team_slave_0 left promiscuous mode [ 2854.139624][T17452] team0 (unregistering): Port device team_slave_0 removed [ 2854.810817][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2854.820344][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2854.830051][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2854.841345][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 2854.848546][ T6262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2854.862930][T23195] Bluetooth: hci3: command 0x041b tx timeout [ 2854.937005][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2854.964248][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2855.054038][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2855.124782][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2855.179476][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2855.223795][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2855.266199][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2855.305678][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2855.386626][T17956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2855.464943][T17956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2855.508180][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2855.564698][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2855.616706][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2856.470624][T18107] chnl_net:caif_netlink_parms(): no params data found [ 2856.716298][T18107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2856.723565][T18107] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.731939][T18107] device bridge_slave_0 entered promiscuous mode [ 2856.746726][T18107] bridge0: port 2(bridge_slave_1) entered blocking state [ 2856.796587][T18107] bridge0: port 2(bridge_slave_1) entered disabled state [ 2856.872216][T18107] device bridge_slave_1 entered promiscuous mode [ 2856.964530][T23195] Bluetooth: hci3: command 0x040f tx timeout [ 2857.010056][T18107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2857.045366][T18107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2857.130584][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2857.152042][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2857.195225][T17956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2857.260734][T18107] team0: Port device team_slave_0 added [ 2857.305013][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2857.333087][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2857.351372][T18107] team0: Port device team_slave_1 added [ 2857.402447][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2857.424402][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2857.444737][T17956] device veth0_vlan entered promiscuous mode [ 2857.492799][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2857.501829][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2857.525766][T17956] device veth1_vlan entered promiscuous mode [ 2857.556499][T18107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2857.568998][T18107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.625371][T18107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2857.665205][T18107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2857.695529][T18107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.757509][T18107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2857.805302][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2857.836418][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2857.844893][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2857.869024][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2857.896948][T17956] device veth0_macvtap entered promiscuous mode [ 2857.957195][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2857.969191][T17956] device veth1_macvtap entered promiscuous mode [ 2858.036478][T18107] device hsr_slave_0 entered promiscuous mode [ 2858.068880][T18107] device hsr_slave_1 entered promiscuous mode [ 2858.171315][T17956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2858.195347][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2858.207307][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2858.245300][T17956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2858.272841][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2858.286843][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2858.310457][T17956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2858.332700][T17956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2858.341527][T17956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2858.365366][T17956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2858.636451][ T888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2858.660283][ T888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2858.726156][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2858.795828][T13174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2858.828484][T13174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2858.852528][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2858.954896][T18107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2859.001953][T18107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2859.039224][T23195] Bluetooth: hci3: command 0x0419 tx timeout [ 2859.049207][T18107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2859.114902][T18107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2859.384560][T18107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2859.432790][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2859.441499][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2859.460808][T18107] 8021q: adding VLAN 0 to HW filter on device team0 [ 2859.485824][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2859.508518][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2859.533293][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 2859.540432][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2859.607414][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2859.618893][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2859.650167][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2859.679054][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 2859.686237][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2859.717406][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2859.733723][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2859.776866][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2859.810503][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2859.833542][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2859.869823][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2859.908086][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2859.918796][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2859.943908][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2859.963699][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2859.996614][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2860.020816][T18107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2860.888318][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2860.905282][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2860.927600][T18107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2861.513118][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2861.522745][T17452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2861.558882][T18107] device veth0_vlan entered promiscuous mode [ 2861.580679][T18107] device veth1_vlan entered promiscuous mode [ 2861.658504][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2861.669972][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2861.679185][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2861.689755][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2861.730323][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2861.747220][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2861.767348][T18107] device veth0_macvtap entered promiscuous mode [ 2861.789829][T18107] device veth1_macvtap entered promiscuous mode [ 2861.864484][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2861.876468][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2861.892170][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2861.900519][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2861.928361][T18107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2861.938933][T18107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2861.974532][T18107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2861.983518][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2862.002987][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2862.019384][T18107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2862.033914][T18107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.048561][T18107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2862.057916][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2862.071136][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2862.085879][T18107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.098085][T18107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.118957][T18107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.128073][T18107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.239209][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2862.256123][T13174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2862.274512][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2862.286695][ T872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2862.307626][T13174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2862.317154][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2864.119415][T13174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2864.198147][T13174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2864.256377][T13174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2864.295775][T13174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2865.156124][T13174] team0: Port device wlan1 removed [ 2865.311361][T13174] device hsr_slave_0 left promiscuous mode [ 2865.318734][T13174] device hsr_slave_1 left promiscuous mode [ 2865.327400][T13174] device bridge_slave_1 left promiscuous mode [ 2865.333741][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 2865.345880][T13174] device bridge_slave_0 left promiscuous mode [ 2865.352327][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 2865.778706][T13174] team0 (unregistering): Port device team_slave_1 removed [ 2884.697508][ T6262] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2897.504559][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.510874][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 2915.622413][ T6262] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2946.649578][ T6262] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2958.954621][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.960941][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 2966.152167][T23195] Bluetooth: hci2: command 0x0406 tx timeout [ 2976.392173][T23195] Bluetooth: hci3: command 0x0406 tx timeout [ 2977.676861][T17452] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3008.703936][T17452] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3020.384570][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.390881][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3039.628859][T17452] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3070.655777][ T872] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3081.823812][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.830139][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3101.683475][ T31] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3132.710342][ T872] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3143.263808][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.270124][ T1275] ieee802154 phy1 wpan1: encryption failed: -22