last executing test programs: 8.133278406s ago: executing program 1 (id=3587): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/157, 0xf}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001880)=""/4090, 0xc34}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f00000000c0)=""/108, 0x3d}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f00000002c0)=""/122, 0x71}], 0x7}, 0x100) 6.978144034s ago: executing program 1 (id=3592): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x1, 0x4, 0x677b, 0x24, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x200}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f00000004c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x1d, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x4, 0x5, 0xb}], 0x10, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 4.896749887s ago: executing program 0 (id=3605): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 4.707430106s ago: executing program 3 (id=3607): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 4.440370799s ago: executing program 3 (id=3610): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x2, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1, 0x0, 0x0, 0x8000000}, 0x80d1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffefe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.674657828s ago: executing program 3 (id=3613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000300, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x8, 0x8}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) (async) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) r6 = perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0xff, 0x24, 0x3, 0x4, 0x0, 0xdcb, 0x2008, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb990, 0x4, @perf_bp={&(0x7f0000000300), 0x4}, 0x4000, 0x400, 0x0, 0x1, 0x7c6b306a, 0x87d9, 0x7f, 0x0, 0xf6a6, 0x0, 0x554}, r3, 0x0, r3, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='cgroup.stat\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='cgroup.stat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0xa, 0x6, 0x0) (async) r7 = socket$kcm(0xa, 0x6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0x2, &(0x7f0000000040)=r9, 0x17) (async) setsockopt$sock_attach_bpf(r7, 0x10d, 0x2, &(0x7f0000000040)=r9, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100000009000000000000000000f8ff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1b, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000008a5500050000007c740300540000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x7fff, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1, r10, r1, r4], 0x0, 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1b, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000008a5500050000007c740300540000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x7fff, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1, r10, r1, r4], 0x0, 0x10, 0x9}, 0x94) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r11, 0x4, r0}, 0x10) 3.658548088s ago: executing program 1 (id=3614): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x100) 3.186644541s ago: executing program 1 (id=3616): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000900000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x72bd864b82156744}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r4}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r1) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0001300002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/253, 0x0, 0xfe, 0x60000000}, 0x50) 3.119825215s ago: executing program 3 (id=3617): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', r1, 0x4000, r0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@generic={0x11, "ce7ef4ea1355d8f545aee42b5acbdc9524fe2ec176c1153c01d99771bfd897cecb8cbe523162dabf06f016c2c808a8237222627b000414a4241b312255f0702bf805b88ee4caf25bead968f8082b7f76b2960271fd44f39f8506397716f7ceca7765fe48d9d52ad2458ef04c80b4875d69b6e2a62f2ca2799e1eb76bfa8c"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {0x0}, {&(0x7f0000000280)="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", 0x174}], 0x3}, 0x200400c4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000780)}, 0x202, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000540)=""/140, 0x8c}], 0x2}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x37, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) socketpair(0x23, 0x1, 0x79fc, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a3, 0x0) 3.064766068s ago: executing program 2 (id=3618): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709a60000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.748505313s ago: executing program 1 (id=3620): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2.466248927s ago: executing program 4 (id=3621): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x83, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r4}) 2.236718168s ago: executing program 1 (id=3622): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r0, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f1688dbddef9808d30420b6", 0xc2}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f3dca7c050000001960eb010018000000000000001a005b5500000000000f01000000000f00000000000000"], 0x0, 0x36, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[], 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89e0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x22}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x600086dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2002f00, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc004000202080003000300f9e707002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20044080) 2.236467629s ago: executing program 2 (id=3623): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="4bdd51e1bce081e244a92f554cd3224df62daebfa0bfa22b8b8a338c54f3a12cd6cf96dcd97e54a15256f887ef", 0x2d}], 0x1, &(0x7f0000000c00)=ANY=[], 0x208}, 0x40010) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0xa7c, r3}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) 2.202592201s ago: executing program 3 (id=3624): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x2, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffefe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.761096782s ago: executing program 4 (id=3625): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x18, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3e}, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006f87c09e8fe55a10a0015400100142603600e12080002000000040104001600400001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) 1.310791204s ago: executing program 0 (id=3626): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x100) 1.214405479s ago: executing program 2 (id=3627): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000500)='./file0\x00', r0}, 0x18) 1.213794239s ago: executing program 4 (id=3628): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.080973716s ago: executing program 0 (id=3630): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268a", 0x5f}], 0x2}, 0x24004880) 1.080208386s ago: executing program 3 (id=3631): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32, @ANYRESDEC, @ANYRESDEC=0x0], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000002040)="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", &(0x7f00000001c0)=""/134, &(0x7f0000000280)="3ae36d252024164ba3b3c8a33937679184f5f2610a224db75ca26d2eb4feb3e88a0f49457b220957f2bba1bf2496d084d7c4eccdeb8b3401e458eabfa13280fcafdf25b2a8059de499baa721a21645889d83c27d6125b8bee02436f1a3dc5155cf46fc7aceefbe3e18bb0b1b2ff6ec072c18dd526a50d7ddbbe5327132ef49ba2d85196bae9ab83e39d8", &(0x7f0000000340)="477e0c96f30dd5d92dec41458db7e182ae19712e95f8cef5d5a0d948bad6eadc4ae4cc18713bd51074318d5006ee426b79b3b4be5828d079149abb016cc614b9f955c55edfc86f3defb706445458ba508207bf2e515f99a2f324340a781a040bf975033c7b7289af915d3528fea80f68aab12d2317060550f4aba280b857baa3216cd801e22b6e7efd8336e60fb1c924350c3a675a1a6c72e4ab1a18f130ddf739cd400aabae510421b69b2031ebc6a4317ed341d0f9ff2ef4fbee127e57164595a4255bc62a9ec2280f963d8258f53f36842014b930e625035a6406", 0x3a, r0}, 0x38) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x80087, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0xa0000, 0x6, 0x0, 0x200, 0x85ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002000)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x81) perf_event_open$cgroup(&(0x7f0000001f80)={0x7, 0x80, 0xc4, 0xd, 0x40, 0xfe, 0x0, 0xf5d0, 0x100, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x2}, 0x100c40, 0x9, 0x100, 0x3, 0x1, 0x8000, 0x3, 0x0, 0x830e, 0x0, 0x8001}, r4, 0x0, r3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@raw=[@call={0x85, 0x0, 0x0, 0x459}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x0, 0x1, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffffc}], &(0x7f0000000540)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000580)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xa, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000600)=[r6, r0, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x1, 0x0, 0xc}, {0x0, 0x1, 0x9, 0x7}, {0x5, 0x4, 0x6, 0xc}, {0x4, 0x4, 0x7}, {0x1, 0x2, 0x7, 0xc}, {0x5, 0x1, 0x9, 0x3}, {0x4, 0x4, 0x7, 0x8}, {0x2, 0x2, 0x7, 0x8}, {0x2, 0x1, 0xe, 0x8}]}, 0x94) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) 1.032731078s ago: executing program 2 (id=3632): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.014457789s ago: executing program 4 (id=3633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44000090) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x7fff, 0xfa}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000007000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 953.352622ms ago: executing program 0 (id=3634): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x200000000000003, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0xc, 0x0, 0x0, 0x0, 0x5, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x2025, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000038000511d25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 784.77235ms ago: executing program 2 (id=3635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x4000, 0x1}, @exit, @ldst={0x1, 0x1, 0x3, 0x0, 0x1, 0x60}]}, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x41100, 0xa}, 0x94) 738.610203ms ago: executing program 4 (id=3636): syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x123081, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'ipvlan1\x00', @remote}) (async) close(0x4) 591.86932ms ago: executing program 2 (id=3637): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 480.628365ms ago: executing program 0 (id=3638): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0x1000000}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 414.899579ms ago: executing program 4 (id=3639): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 0s ago: executing program 0 (id=3640): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x18, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3e}, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006f87c09e8fe55a10a0015400100142603600e12080002000000040104001600400001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) kernel console output (not intermixed with test programs): 2.2224'. [ 336.606361][T10911] netlink: 'syz.1.2236': attribute type 10 has an invalid length. [ 336.742257][T10912] sctp: [Deprecated]: syz.1.2236 (pid 10912) Use of int in maxseg socket option. [ 336.742257][T10912] Use struct sctp_assoc_value instead [ 337.610770][T10936] netlink: 'syz.3.2246': attribute type 10 has an invalid length. [ 338.038384][T10936] sctp: [Deprecated]: syz.3.2246 (pid 10936) Use of int in maxseg socket option. [ 338.038384][T10936] Use struct sctp_assoc_value instead [ 340.704026][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2259'. [ 341.152328][T10979] netlink: 'syz.2.2260': attribute type 10 has an invalid length. [ 341.571155][T10988] netlink: 'syz.1.2264': attribute type 10 has an invalid length. [ 341.654309][T10990] netlink: 'syz.2.2265': attribute type 10 has an invalid length. [ 341.840114][T10997] netlink: 'syz.4.2267': attribute type 21 has an invalid length. [ 341.997991][T11001] netlink: 'syz.3.2270': attribute type 10 has an invalid length. [ 342.214882][T11014] FAULT_INJECTION: forcing a failure. [ 342.214882][T11014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.240521][T11014] CPU: 0 PID: 11014 Comm: syz.1.2276 Not tainted syzkaller #0 [ 342.248024][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.258096][T11014] Call Trace: [ 342.261384][T11014] [ 342.264324][T11014] dump_stack_lvl+0x188/0x24e [ 342.269035][T11014] ? show_regs_print_info+0x12/0x12 [ 342.274257][T11014] ? load_image+0x400/0x400 [ 342.278779][T11014] ? __lock_acquire+0x7d10/0x7d10 [ 342.283833][T11014] should_fail_ex+0x399/0x4d0 [ 342.288531][T11014] _copy_from_user+0x2c/0x170 [ 342.289412][T11016] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2277'. [ 342.293234][T11014] generic_map_update_batch+0x4a1/0x810 [ 342.293281][T11014] ? rcu_read_unlock+0xa0/0xa0 [ 342.293306][T11014] ? __fdget+0x17c/0x200 [ 342.293329][T11014] ? rcu_read_unlock+0xa0/0xa0 [ 342.293347][T11014] bpf_map_do_batch+0x466/0x600 [ 342.293373][T11014] __sys_bpf+0x6f7/0x780 [ 342.293397][T11014] ? bpf_link_show_fdinfo+0x380/0x380 [ 342.293431][T11014] ? lock_chain_count+0x20/0x20 [ 342.293461][T11014] __x64_sys_bpf+0x78/0x90 [ 342.293481][T11014] do_syscall_64+0x4c/0xa0 [ 342.350029][T11014] ? clear_bhb_loop+0x60/0xb0 [ 342.354725][T11014] ? clear_bhb_loop+0x60/0xb0 [ 342.359426][T11014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.365339][T11014] RIP: 0033:0x7f683739c799 [ 342.369767][T11014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.389390][T11014] RSP: 002b:00007f683822e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.397822][T11014] RAX: ffffffffffffffda RBX: 00007f6837615fa0 RCX: 00007f683739c799 [ 342.405808][T11014] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 342.413795][T11014] RBP: 00007f683822e090 R08: 0000000000000000 R09: 0000000000000000 [ 342.421789][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.429780][T11014] R13: 00007f6837616038 R14: 00007f6837615fa0 R15: 00007ffdf4f985b8 [ 342.437783][T11014] [ 342.892352][T11044] netlink: 'syz.0.2288': attribute type 12 has an invalid length. [ 342.901339][T11044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2288'. [ 343.237615][T11058] netlink: 'syz.0.2293': attribute type 10 has an invalid length. [ 343.341741][T11061] netlink: 'syz.1.2294': attribute type 2 has an invalid length. [ 343.364980][T11061] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2294'. [ 343.617860][T11068] device syzkaller0 entered promiscuous mode [ 344.063066][T11080] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2302'. [ 344.097278][T11080] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 346.642018][T11113] netlink: 'syz.0.2312': attribute type 3 has an invalid length. [ 346.655340][T11113] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 346.665806][T11113] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2312'. [ 346.687767][T11111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2313'. [ 346.713718][T11111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2313'. [ 346.732971][T11111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2313'. [ 349.505932][T11222] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2354'. [ 349.542493][T11222] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 349.561016][T11222] CPU: 1 PID: 11222 Comm: syz.0.2354 Not tainted syzkaller #0 [ 349.568517][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.578587][T11222] Call Trace: [ 349.581876][T11222] [ 349.584814][T11222] dump_stack_lvl+0x188/0x24e [ 349.589519][T11222] ? show_regs_print_info+0x12/0x12 [ 349.594744][T11222] ? load_image+0x400/0x400 [ 349.599284][T11222] sysfs_warn_dup+0x8a/0xa0 [ 349.603810][T11222] sysfs_do_create_link_sd+0xc0/0x110 [ 349.609209][T11222] device_add+0x7ed/0xfb0 [ 349.613582][T11222] wiphy_register+0x1d9f/0x2ac0 [ 349.618486][T11222] ? cfg80211_event_work+0x40/0x40 [ 349.623620][T11222] ? minstrel_ht_alloc+0x894/0xa20 [ 349.628766][T11222] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 349.634855][T11222] ieee80211_register_hw+0x2d00/0x39f0 [ 349.640354][T11222] ? ieee80211_register_hw+0xee1/0x39f0 [ 349.645930][T11222] ? ieee80211_register_hw+0xee1/0x39f0 [ 349.651510][T11222] ? ieee80211_tasklet_handler+0x20/0x20 [ 349.657176][T11222] ? memset+0x1e/0x40 [ 349.661177][T11222] ? __hrtimer_init+0x186/0x270 [ 349.666051][T11222] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 349.671818][T11222] hwsim_new_radio_nl+0xafa/0xce0 [ 349.676886][T11222] genl_family_rcv_msg_doit+0x22a/0x330 [ 349.682465][T11222] ? end_current_label_crit_section+0x170/0x170 [ 349.688732][T11222] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 349.694655][T11222] ? bpf_lsm_capable+0x5/0x10 [ 349.699356][T11222] ? security_capable+0x85/0xb0 [ 349.704243][T11222] genl_rcv_msg+0x604/0x790 [ 349.708778][T11222] ? genl_bind+0x360/0x360 [ 349.713210][T11222] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 349.719582][T11222] netlink_rcv_skb+0x1fb/0x450 [ 349.724371][T11222] ? genl_bind+0x360/0x360 [ 349.728812][T11222] ? netlink_ack+0x1170/0x1170 [ 349.733614][T11222] ? down_read+0x1a8/0x2d0 [ 349.738059][T11222] genl_rcv+0x24/0x40 [ 349.742056][T11222] netlink_unicast+0x74d/0x8d0 [ 349.746857][T11222] netlink_sendmsg+0x8ad/0xbd0 [ 349.751653][T11222] ? netlink_getsockopt+0x550/0x550 [ 349.756881][T11222] ? aa_sock_msg_perm+0x94/0x150 [ 349.761838][T11222] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 349.767146][T11222] ? security_socket_sendmsg+0x7c/0xa0 [ 349.772631][T11222] ? netlink_getsockopt+0x550/0x550 [ 349.777851][T11222] ____sys_sendmsg+0x5be/0x970 [ 349.782654][T11222] ? __sys_sendmsg_sock+0x30/0x30 [ 349.787697][T11222] ? __import_iovec+0x315/0x500 [ 349.792576][T11222] ? import_iovec+0x6f/0xa0 [ 349.797194][T11222] ___sys_sendmsg+0x2a2/0x360 [ 349.801936][T11222] ? try_to_wake_up+0x67c/0x1080 [ 349.806905][T11222] ? __sys_sendmsg+0x290/0x290 [ 349.811753][T11222] __se_sys_sendmsg+0x1bb/0x2a0 [ 349.816636][T11222] ? __x64_sys_sendmsg+0x80/0x80 [ 349.821620][T11222] ? lockdep_hardirqs_on+0x94/0x140 [ 349.826841][T11222] do_syscall_64+0x4c/0xa0 [ 349.831279][T11222] ? clear_bhb_loop+0x60/0xb0 [ 349.835974][T11222] ? clear_bhb_loop+0x60/0xb0 [ 349.840674][T11222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.846589][T11222] RIP: 0033:0x7f285b39c799 [ 349.851022][T11222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.870643][T11222] RSP: 002b:00007f285c27e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.879082][T11222] RAX: ffffffffffffffda RBX: 00007f285b615fa0 RCX: 00007f285b39c799 [ 349.887071][T11222] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 349.895055][T11222] RBP: 00007f285b432c99 R08: 0000000000000000 R09: 0000000000000000 [ 349.903041][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.911030][T11222] R13: 00007f285b616038 R14: 00007f285b615fa0 R15: 00007fff35cf2d08 [ 349.919039][T11222] [ 349.936682][T11224] netlink: 'syz.3.2355': attribute type 1 has an invalid length. [ 349.951087][T11224] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2355'. [ 350.125885][T11233] FAULT_INJECTION: forcing a failure. [ 350.125885][T11233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.152670][T11233] CPU: 1 PID: 11233 Comm: syz.0.2358 Not tainted syzkaller #0 [ 350.160166][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.170227][T11233] Call Trace: [ 350.173498][T11233] [ 350.176420][T11233] dump_stack_lvl+0x188/0x24e [ 350.181119][T11233] ? show_regs_print_info+0x12/0x12 [ 350.186397][T11233] ? load_image+0x400/0x400 [ 350.190892][T11233] ? __might_fault+0xa6/0x120 [ 350.195561][T11233] should_fail_ex+0x399/0x4d0 [ 350.200229][T11233] copyin+0x1b/0x120 [ 350.204117][T11233] _copy_from_iter+0x447/0x1130 [ 350.208964][T11233] ? copyout_mc+0x110/0x110 [ 350.213458][T11233] ? __virt_addr_valid+0x188/0x540 [ 350.218557][T11233] ? __virt_addr_valid+0x188/0x540 [ 350.223657][T11233] ? __virt_addr_valid+0x465/0x540 [ 350.228775][T11233] ? __check_object_size+0x500/0xa40 [ 350.234060][T11233] netlink_sendmsg+0x755/0xbd0 [ 350.238823][T11233] ? netlink_getsockopt+0x550/0x550 [ 350.244016][T11233] ? aa_sock_msg_perm+0x94/0x150 [ 350.248944][T11233] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 350.254219][T11233] ? security_socket_sendmsg+0x7c/0xa0 [ 350.259674][T11233] ? netlink_getsockopt+0x550/0x550 [ 350.264868][T11233] ____sys_sendmsg+0x5be/0x970 [ 350.269632][T11233] ? __sys_sendmsg_sock+0x30/0x30 [ 350.274647][T11233] ? __import_iovec+0x315/0x500 [ 350.279500][T11233] ? import_iovec+0x6f/0xa0 [ 350.283991][T11233] ___sys_sendmsg+0x2a2/0x360 [ 350.288664][T11233] ? __sys_sendmsg+0x290/0x290 [ 350.293434][T11233] ? __lock_acquire+0x7d10/0x7d10 [ 350.298549][T11233] __se_sys_sendmsg+0x1bb/0x2a0 [ 350.303396][T11233] ? __x64_sys_sendmsg+0x80/0x80 [ 350.308345][T11233] ? lockdep_hardirqs_on+0x94/0x140 [ 350.313533][T11233] do_syscall_64+0x4c/0xa0 [ 350.317943][T11233] ? clear_bhb_loop+0x60/0xb0 [ 350.322614][T11233] ? clear_bhb_loop+0x60/0xb0 [ 350.327282][T11233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.333164][T11233] RIP: 0033:0x7f285b39c799 [ 350.337568][T11233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.357181][T11233] RSP: 002b:00007f285c27e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.365592][T11233] RAX: ffffffffffffffda RBX: 00007f285b615fa0 RCX: 00007f285b39c799 [ 350.373551][T11233] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 350.381520][T11233] RBP: 00007f285c27e090 R08: 0000000000000000 R09: 0000000000000000 [ 350.389487][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.397446][T11233] R13: 00007f285b616038 R14: 00007f285b615fa0 R15: 00007fff35cf2d08 [ 350.405469][T11233] [ 350.971391][T11253] netlink: 'syz.2.2366': attribute type 3 has an invalid length. [ 350.990193][T11253] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 351.010817][T11253] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2366'. [ 351.167160][T11260] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2369'. [ 351.212138][T11260] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 351.232522][T11260] CPU: 1 PID: 11260 Comm: syz.3.2369 Not tainted syzkaller #0 [ 351.240024][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.250099][T11260] Call Trace: [ 351.253394][T11260] [ 351.256342][T11260] dump_stack_lvl+0x188/0x24e [ 351.261054][T11260] ? show_regs_print_info+0x12/0x12 [ 351.266281][T11260] ? load_image+0x400/0x400 [ 351.270822][T11260] sysfs_warn_dup+0x8a/0xa0 [ 351.275351][T11260] sysfs_do_create_link_sd+0xc0/0x110 [ 351.280751][T11260] device_add+0x7ed/0xfb0 [ 351.285120][T11260] wiphy_register+0x1d9f/0x2ac0 [ 351.290018][T11260] ? cfg80211_event_work+0x40/0x40 [ 351.295148][T11260] ? minstrel_ht_alloc+0x894/0xa20 [ 351.300266][T11260] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 351.306337][T11260] ieee80211_register_hw+0x2d00/0x39f0 [ 351.311806][T11260] ? ieee80211_register_hw+0xee1/0x39f0 [ 351.317347][T11260] ? ieee80211_register_hw+0xee1/0x39f0 [ 351.322893][T11260] ? ieee80211_tasklet_handler+0x20/0x20 [ 351.328524][T11260] ? memset+0x1e/0x40 [ 351.332496][T11260] ? __hrtimer_init+0x186/0x270 [ 351.337344][T11260] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 351.343072][T11260] hwsim_new_radio_nl+0xafa/0xce0 [ 351.348100][T11260] genl_family_rcv_msg_doit+0x22a/0x330 [ 351.353636][T11260] ? end_current_label_crit_section+0x170/0x170 [ 351.359872][T11260] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 351.365758][T11260] ? bpf_lsm_capable+0x5/0x10 [ 351.370429][T11260] ? security_capable+0x85/0xb0 [ 351.375274][T11260] genl_rcv_msg+0x604/0x790 [ 351.379800][T11260] ? genl_bind+0x360/0x360 [ 351.384221][T11260] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 351.390572][T11260] netlink_rcv_skb+0x1fb/0x450 [ 351.395343][T11260] ? genl_bind+0x360/0x360 [ 351.399755][T11260] ? netlink_ack+0x1170/0x1170 [ 351.404529][T11260] ? down_read+0x1a8/0x2d0 [ 351.408943][T11260] genl_rcv+0x24/0x40 [ 351.412915][T11260] netlink_unicast+0x74d/0x8d0 [ 351.417682][T11260] netlink_sendmsg+0x8ad/0xbd0 [ 351.422446][T11260] ? netlink_getsockopt+0x550/0x550 [ 351.427644][T11260] ? aa_sock_msg_perm+0x94/0x150 [ 351.432572][T11260] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 351.437848][T11260] ? security_socket_sendmsg+0x7c/0xa0 [ 351.443308][T11260] ? netlink_getsockopt+0x550/0x550 [ 351.448506][T11260] ____sys_sendmsg+0x5be/0x970 [ 351.453277][T11260] ? __sys_sendmsg_sock+0x30/0x30 [ 351.458294][T11260] ? __import_iovec+0x315/0x500 [ 351.463137][T11260] ? import_iovec+0x6f/0xa0 [ 351.467636][T11260] ___sys_sendmsg+0x2a2/0x360 [ 351.472308][T11260] ? try_to_wake_up+0x6ae/0x1080 [ 351.477246][T11260] ? __sys_sendmsg+0x290/0x290 [ 351.482046][T11260] __se_sys_sendmsg+0x1bb/0x2a0 [ 351.486895][T11260] ? __x64_sys_sendmsg+0x80/0x80 [ 351.491846][T11260] ? lockdep_hardirqs_on+0x94/0x140 [ 351.497038][T11260] do_syscall_64+0x4c/0xa0 [ 351.501449][T11260] ? clear_bhb_loop+0x60/0xb0 [ 351.506118][T11260] ? clear_bhb_loop+0x60/0xb0 [ 351.510787][T11260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.516672][T11260] RIP: 0033:0x7fc44bd9c799 [ 351.521078][T11260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.540674][T11260] RSP: 002b:00007fc44ccec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.549080][T11260] RAX: ffffffffffffffda RBX: 00007fc44c015fa0 RCX: 00007fc44bd9c799 [ 351.557041][T11260] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 351.565003][T11260] RBP: 00007fc44be32c99 R08: 0000000000000000 R09: 0000000000000000 [ 351.572965][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.580928][T11260] R13: 00007fc44c016038 R14: 00007fc44c015fa0 R15: 00007fff55038298 [ 351.588907][T11260] [ 352.359737][T11306] netlink: 'syz.2.2384': attribute type 4 has an invalid length. [ 352.406226][T11306] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2384'. [ 353.814678][T11370] device aaaaaaaaaaaaaaa entered promiscuous mode [ 354.970488][T11399] netlink: 'syz.0.2421': attribute type 3 has an invalid length. [ 355.018848][T11399] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2421'. [ 355.066982][T11416] netlink: 'syz.2.2427': attribute type 10 has an invalid length. [ 355.085107][T11416] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2427'. [ 355.478979][T11431] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2430'. [ 355.497727][T11418] netlink: 'syz.2.2427': attribute type 10 has an invalid length. [ 355.528307][T11418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.541820][T11418] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 357.533633][T11452] netlink: 'syz.0.2437': attribute type 39 has an invalid length. [ 357.998431][T11483] netlink: 'syz.3.2451': attribute type 10 has an invalid length. [ 358.116500][T11487] device wlan1 entered promiscuous mode [ 358.269435][T11495] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2457'. [ 358.299684][T11498] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2456'. [ 358.463071][T11505] netlink: 'syz.3.2460': attribute type 10 has an invalid length. [ 358.528785][T11505] team0: Port device hsr_slave_0 added [ 358.794128][T11522] delete_channel: no stack [ 358.844825][T11522] delete_channel: no stack [ 359.874533][T11569] netlink: 'syz.2.2485': attribute type 33 has an invalid length. [ 359.900255][T11569] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2485'. [ 359.986719][T11548] device syzkaller0 entered promiscuous mode [ 359.999037][T11569] netlink: 'syz.2.2485': attribute type 11 has an invalid length. [ 360.049519][T11569] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2485'. [ 362.282575][T11589] netlink: 'syz.0.2494': attribute type 21 has an invalid length. [ 362.290506][T11589] netlink: 'syz.0.2494': attribute type 1 has an invalid length. [ 362.304606][T11595] tap0: tun_chr_ioctl cmd 1074025677 [ 362.310647][T11595] tap0: linktype set to 823 [ 362.601713][T11609] netlink: 'syz.0.2501': attribute type 10 has an invalid length. [ 362.632145][T11605] netlink: 'syz.1.2499': attribute type 10 has an invalid length. [ 364.249832][T11678] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 364.265919][T11678] syzkaller0: linktype set to 825 [ 364.276218][T11678] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 365.271411][T11704] netlink: 'syz.2.2539': attribute type 3 has an invalid length. [ 365.309421][T11704] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2539'. [ 365.485072][T11711] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2542'. [ 365.543126][T11711] netlink: 'syz.2.2542': attribute type 10 has an invalid length. [ 365.635333][T11711] team0: Device wg1 is of different type [ 366.018348][T11729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2549'. [ 366.059785][T11730] netlink: 'syz.0.2547': attribute type 6 has an invalid length. [ 366.085695][T11730] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2547'. [ 366.090013][T11729] FAULT_INJECTION: forcing a failure. [ 366.090013][T11729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.138791][T11729] CPU: 0 PID: 11729 Comm: syz.3.2549 Not tainted syzkaller #0 [ 366.146304][T11729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.156380][T11729] Call Trace: [ 366.159675][T11729] [ 366.162609][T11729] dump_stack_lvl+0x188/0x24e [ 366.167302][T11729] ? show_regs_print_info+0x12/0x12 [ 366.172513][T11729] ? load_image+0x400/0x400 [ 366.177025][T11729] ? __lock_acquire+0x7d10/0x7d10 [ 366.182051][T11729] ? snprintf+0xe5/0x140 [ 366.186286][T11729] should_fail_ex+0x399/0x4d0 [ 366.190961][T11729] _copy_to_user+0x2c/0x130 [ 366.195471][T11729] simple_read_from_buffer+0xe3/0x150 [ 366.200848][T11729] proc_fail_nth_read+0x1a6/0x220 [ 366.205869][T11729] ? proc_fault_inject_write+0x310/0x310 [ 366.211500][T11729] ? fsnotify_perm+0x248/0x550 [ 366.216276][T11729] ? proc_fault_inject_write+0x310/0x310 [ 366.221917][T11729] vfs_read+0x2de/0xa00 [ 366.226082][T11729] ? kernel_read+0x1e0/0x1e0 [ 366.230677][T11729] ? __fget_files+0x28/0x4b0 [ 366.235278][T11729] ? __fget_files+0x28/0x4b0 [ 366.239881][T11729] ? __fget_files+0x43d/0x4b0 [ 366.244567][T11729] ? __fdget_pos+0x2ae/0x360 [ 366.249155][T11729] ? ksys_read+0x71/0x250 [ 366.253490][T11729] ksys_read+0x14c/0x250 [ 366.257737][T11729] ? vfs_write+0xa30/0xa30 [ 366.262158][T11729] ? lockdep_hardirqs_on+0x94/0x140 [ 366.267364][T11729] do_syscall_64+0x4c/0xa0 [ 366.271789][T11729] ? clear_bhb_loop+0x60/0xb0 [ 366.276467][T11729] ? clear_bhb_loop+0x60/0xb0 [ 366.281228][T11729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.287119][T11729] RIP: 0033:0x7fc44bd5cfce [ 366.291528][T11729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 366.311126][T11729] RSP: 002b:00007fc44ccebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.319536][T11729] RAX: ffffffffffffffda RBX: 00007fc44ccec6c0 RCX: 00007fc44bd5cfce [ 366.327501][T11729] RDX: 000000000000000f RSI: 00007fc44ccec0a0 RDI: 0000000000000008 [ 366.335464][T11729] RBP: 00007fc44ccec090 R08: 0000000000000000 R09: 0000000000000000 [ 366.343430][T11729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.351394][T11729] R13: 00007fc44c016038 R14: 00007fc44c015fa0 R15: 00007fff55038298 [ 366.359485][T11729] [ 366.627609][T11747] netlink: 'syz.4.2555': attribute type 3 has an invalid length. [ 366.645533][T11747] netlink: 'syz.4.2555': attribute type 1 has an invalid length. [ 366.676806][T11747] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2555'. [ 366.819387][T11754] netlink: 'syz.0.2556': attribute type 27 has an invalid length. [ 366.859051][T11754] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2556'. [ 367.346949][T11773] netlink: 'syz.3.2567': attribute type 10 has an invalid length. [ 367.367699][T11773] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2567'. [ 367.380342][T11773] device team0 entered promiscuous mode [ 367.403014][T11773] device team_slave_1 entered promiscuous mode [ 367.409515][T11773] device geneve1 entered promiscuous mode [ 367.431895][T11773] device hsr_slave_0 entered promiscuous mode [ 367.439728][T11773] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.478415][T11773] bond0: (slave team0): Releasing backup interface [ 367.516363][T11773] bridge0: port 3(team0) entered blocking state [ 367.537722][T11773] bridge0: port 3(team0) entered disabled state [ 368.329563][T11810] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2583'. [ 368.405762][T11810] device caif0 entered promiscuous mode [ 368.581872][T11817] netlink: 'syz.2.2586': attribute type 10 has an invalid length. [ 368.596244][T11817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2586'. [ 368.631656][T11817] device team0 entered promiscuous mode [ 368.675176][T11817] device team_slave_0 entered promiscuous mode [ 368.695374][T11817] device team_slave_1 entered promiscuous mode [ 368.722859][T11817] device geneve1 entered promiscuous mode [ 368.752628][T11817] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.760970][T11817] bond0: (slave team0): Releasing backup interface [ 368.793907][T11817] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 369.625010][T11857] netlink: 'syz.1.2601': attribute type 27 has an invalid length. [ 369.650358][T11857] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2601'. [ 370.163936][T11876] netlink: 'syz.0.2606': attribute type 10 has an invalid length. [ 370.239271][T11876] device team0 entered promiscuous mode [ 370.246014][T11876] device team_slave_0 entered promiscuous mode [ 370.253336][T11876] device team_slave_1 entered promiscuous mode [ 370.260300][T11876] device geneve1 entered promiscuous mode [ 370.266761][T11876] device netdevsim0 entered promiscuous mode [ 370.276164][T11876] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.327343][T11876] bond0: (slave team0): Releasing backup interface [ 370.411527][T11876] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 371.469841][T11909] netlink: 'syz.4.2621': attribute type 27 has an invalid length. [ 371.575229][T11909] __nla_validate_parse: 1 callbacks suppressed [ 371.575265][T11909] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2621'. [ 372.419936][T11931] netlink: 'syz.4.2628': attribute type 10 has an invalid length. [ 372.450331][T11931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2628'. [ 372.480140][T11931] device team0 entered promiscuous mode [ 372.539726][T11931] device team_slave_0 entered promiscuous mode [ 372.621286][T11931] device team_slave_1 entered promiscuous mode [ 372.679046][T11931] device geneve1 entered promiscuous mode [ 372.722991][T11931] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.767787][T11931] bond0: (slave team0): Releasing backup interface [ 372.822109][T11931] bridge0: port 3(team0) entered blocking state [ 372.846955][T11931] bridge0: port 3(team0) entered disabled state [ 372.922855][T11945] netlink: 'syz.0.2632': attribute type 21 has an invalid length. [ 372.937667][T11945] netlink: 'syz.0.2632': attribute type 6 has an invalid length. [ 372.968647][T11945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2632'. [ 373.432018][T11958] netlink: 'syz.2.2641': attribute type 27 has an invalid length. [ 373.452171][T11958] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2641'. [ 378.505020][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.511351][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.514787][T12014] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2669'. [ 380.113629][T12061] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2677'. [ 382.498176][T12120] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2697'. [ 383.408407][T12144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2711'. [ 384.151033][T12169] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2721'. [ 384.204645][T12169] netlink: zone id is out of range [ 384.210889][T12169] netlink: zone id is out of range [ 384.310257][T12169] netlink: zone id is out of range [ 384.337866][T12169] netlink: zone id is out of range [ 384.350829][T12169] netlink: zone id is out of range [ 384.385008][T12169] netlink: zone id is out of range [ 384.393339][T12169] netlink: zone id is out of range [ 384.425449][T12169] netlink: zone id is out of range [ 384.432417][T12169] netlink: zone id is out of range [ 384.442793][T12169] netlink: zone id is out of range [ 386.546712][T12193] netlink: 'syz.4.2730': attribute type 10 has an invalid length. [ 387.189824][T12205] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2734'. [ 387.225006][T12205] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 388.255899][T12238] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2746'. [ 388.901880][T12247] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2749'. [ 388.951184][T12247] bridge0: port 3(team0) entered disabled state [ 389.102912][T12247] device bridge_slave_1 left promiscuous mode [ 389.132735][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.186911][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.409737][T12247] bond0: (slave bridge0): Releasing backup interface [ 391.711270][T12304] netlink: 'syz.3.2768': attribute type 17 has an invalid length. [ 391.759682][T12309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2767'. [ 392.204310][T12325] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2774'. [ 392.248505][T12325] net_ratelimit: 288 callbacks suppressed [ 392.249829][T12325] netlink: zone id is out of range [ 392.288354][T12325] netlink: zone id is out of range [ 392.307244][T12325] netlink: zone id is out of range [ 392.330583][T12325] netlink: zone id is out of range [ 392.362149][T12325] netlink: zone id is out of range [ 392.391015][T12325] netlink: zone id is out of range [ 392.419591][T12325] netlink: zone id is out of range [ 392.446497][T12325] netlink: zone id is out of range [ 392.476603][T12325] netlink: zone id is out of range [ 392.498831][T12325] netlink: zone id is out of range [ 394.954684][T12363] netlink: 'syz.2.2786': attribute type 17 has an invalid length. [ 395.271558][T12369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2788'. [ 395.389768][T12371] bridge0: port 3(team0) entered disabled state [ 395.454751][T12371] device bridge_slave_1 left promiscuous mode [ 395.461097][T12371] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.480134][T12371] device bridge_slave_0 left promiscuous mode [ 395.487827][T12371] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.516785][T12371] bond0: (slave bridge0): Releasing backup interface [ 395.660888][T12383] bond0: (slave geneve0): Error: Slave device does not support XDP [ 398.550899][T12408] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2802'. [ 398.573016][T12408] net_ratelimit: 141 callbacks suppressed [ 398.573034][T12408] netlink: zone id is out of range [ 398.636649][T12408] netlink: zone id is out of range [ 398.695231][T12408] netlink: zone id is out of range [ 398.709334][T12408] netlink: zone id is out of range [ 398.737351][T12408] netlink: zone id is out of range [ 398.742968][T12408] netlink: zone id is out of range [ 398.748350][T12408] netlink: zone id is out of range [ 398.863505][T12408] netlink: zone id is out of range [ 398.868712][T12408] netlink: zone id is out of range [ 398.878020][T12408] netlink: zone id is out of range [ 399.277022][T12424] netlink: 'syz.1.2804': attribute type 17 has an invalid length. [ 400.443146][T12435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2811'. [ 400.489925][T12438] device bridge_slave_1 left promiscuous mode [ 400.513308][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.557716][T12438] device bridge_slave_0 left promiscuous mode [ 400.574150][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.715697][T12438] bond0: (slave bridge0): Releasing backup interface [ 401.173226][T12445] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2816'. [ 401.509105][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.518249][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.527321][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.566693][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.579365][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 401.588749][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.747181][ T6640] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 401.827114][ T6640] batman_adv: batadv0: Removing interface: netdevsim0 [ 402.031966][T12457] netlink: 'syz.0.2820': attribute type 12 has an invalid length. [ 402.046028][T12457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2820'. [ 402.198998][T12457] netlink: 'syz.0.2820': attribute type 29 has an invalid length. [ 402.271662][T12457] netlink: 'syz.0.2820': attribute type 29 has an invalid length. [ 402.417771][ T6640] device .*! left promiscuous mode [ 402.499376][T12449] chnl_net:caif_netlink_parms(): no params data found [ 403.202903][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.210064][T12449] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.232078][T12449] device bridge_slave_0 entered promiscuous mode [ 403.367667][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.396667][T12449] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.426406][T12449] device bridge_slave_1 entered promiscuous mode [ 403.622721][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 403.656622][T12449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.733695][T12449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.820861][T12490] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2829'. [ 403.833051][T12490] net_ratelimit: 289 callbacks suppressed [ 403.833068][T12490] netlink: zone id is out of range [ 403.875037][T12490] netlink: zone id is out of range [ 403.913061][T12490] netlink: zone id is out of range [ 403.932754][T12490] netlink: zone id is out of range [ 403.937970][T12490] netlink: zone id is out of range [ 403.980221][T12449] team0: Port device team_slave_0 added [ 403.992068][T12490] netlink: zone id is out of range [ 404.036428][T12490] netlink: zone id is out of range [ 404.044285][T12449] team0: Port device team_slave_1 added [ 404.090798][T12490] netlink: zone id is out of range [ 404.107193][T12490] netlink: zone id is out of range [ 404.125860][T12490] netlink: zone id is out of range [ 404.218258][T12449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.250273][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.363640][T12449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.386500][T12500] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2830'. [ 404.438119][T12500] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 404.470949][T12500] CPU: 0 PID: 12500 Comm: syz.1.2830 Not tainted syzkaller #0 [ 404.478480][T12500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.488576][T12500] Call Trace: [ 404.491886][T12500] [ 404.494853][T12500] dump_stack_lvl+0x188/0x24e [ 404.499593][T12500] ? show_regs_print_info+0x12/0x12 [ 404.504839][T12500] ? load_image+0x400/0x400 [ 404.509424][T12500] sysfs_warn_dup+0x8a/0xa0 [ 404.513974][T12500] sysfs_do_create_link_sd+0xc0/0x110 [ 404.519397][T12500] device_add+0x7ed/0xfb0 [ 404.523821][T12500] wiphy_register+0x1d9f/0x2ac0 [ 404.528790][T12500] ? cfg80211_event_work+0x40/0x40 [ 404.533950][T12500] ? minstrel_ht_alloc+0x894/0xa20 [ 404.539132][T12500] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 404.545249][T12500] ieee80211_register_hw+0x2d00/0x39f0 [ 404.550793][T12500] ? ieee80211_register_hw+0xee1/0x39f0 [ 404.556385][T12500] ? ieee80211_register_hw+0xee1/0x39f0 [ 404.562006][T12500] ? ieee80211_tasklet_handler+0x20/0x20 [ 404.567720][T12500] ? memset+0x1e/0x40 [ 404.571741][T12500] ? __hrtimer_init+0x186/0x270 [ 404.576636][T12500] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 404.582441][T12500] hwsim_new_radio_nl+0xafa/0xce0 [ 404.587544][T12500] genl_family_rcv_msg_doit+0x22a/0x330 [ 404.593110][T12500] ? end_current_label_crit_section+0x170/0x170 [ 404.599379][T12500] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 404.605312][T12500] ? bpf_lsm_capable+0x5/0x10 [ 404.610001][T12500] ? security_capable+0x85/0xb0 [ 404.614900][T12500] genl_rcv_msg+0x604/0x790 [ 404.619447][T12500] ? genl_bind+0x360/0x360 [ 404.623875][T12500] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 404.630274][T12500] netlink_rcv_skb+0x1fb/0x450 [ 404.635059][T12500] ? genl_bind+0x360/0x360 [ 404.639497][T12500] ? netlink_ack+0x1170/0x1170 [ 404.644314][T12500] ? down_read+0x1a8/0x2d0 [ 404.648759][T12500] genl_rcv+0x24/0x40 [ 404.652751][T12500] netlink_unicast+0x74d/0x8d0 [ 404.657569][T12500] netlink_sendmsg+0x8ad/0xbd0 [ 404.662385][T12500] ? netlink_getsockopt+0x550/0x550 [ 404.667616][T12500] ? aa_sock_msg_perm+0x94/0x150 [ 404.672584][T12500] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 404.677879][T12500] ? security_socket_sendmsg+0x7c/0xa0 [ 404.683369][T12500] ? netlink_getsockopt+0x550/0x550 [ 404.688592][T12500] ____sys_sendmsg+0x5be/0x970 [ 404.693403][T12500] ? __sys_sendmsg_sock+0x30/0x30 [ 404.698439][T12500] ? __import_iovec+0x315/0x500 [ 404.703328][T12500] ? import_iovec+0x6f/0xa0 [ 404.707854][T12500] ___sys_sendmsg+0x2a2/0x360 [ 404.712561][T12500] ? try_to_wake_up+0x67c/0x1080 [ 404.717527][T12500] ? __sys_sendmsg+0x290/0x290 [ 404.722463][T12500] __se_sys_sendmsg+0x1bb/0x2a0 [ 404.727353][T12500] ? __x64_sys_sendmsg+0x80/0x80 [ 404.732356][T12500] ? lockdep_hardirqs_on+0x94/0x140 [ 404.737580][T12500] do_syscall_64+0x4c/0xa0 [ 404.742010][T12500] ? clear_bhb_loop+0x60/0xb0 [ 404.746704][T12500] ? clear_bhb_loop+0x60/0xb0 [ 404.751401][T12500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.757309][T12500] RIP: 0033:0x7f683739c799 [ 404.761738][T12500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.781354][T12500] RSP: 002b:00007f683822e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.789790][T12500] RAX: ffffffffffffffda RBX: 00007f6837615fa0 RCX: 00007f683739c799 [ 404.797778][T12500] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 404.805759][T12500] RBP: 00007f6837432c99 R08: 0000000000000000 R09: 0000000000000000 [ 404.813741][T12500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.821719][T12500] R13: 00007f6837616038 R14: 00007f6837615fa0 R15: 00007ffdf4f985b8 [ 404.829760][T12500] [ 404.853353][T12449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.860350][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.951187][T12449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.971867][T12505] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2832'. [ 405.415687][T12449] device hsr_slave_0 entered promiscuous mode [ 405.460104][T12449] device hsr_slave_1 entered promiscuous mode [ 405.480943][T12449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.505042][T12449] Cannot create hsr debugfs directory [ 405.702883][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 405.805286][ T6640] device hsr_slave_0 left promiscuous mode [ 405.830383][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.853420][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.900293][ T6640] device veth1_macvtap left promiscuous mode [ 405.916344][ T6640] device veth0_macvtap left promiscuous mode [ 405.943083][ T6640] device veth1_vlan left promiscuous mode [ 405.949033][ T6640] device veth0_vlan left promiscuous mode [ 406.402030][ T6640] device geneve1 left promiscuous mode [ 406.424940][ T6640] team0 (unregistering): Port device geneve1 removed [ 406.470238][ T6640] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 406.952869][T12527] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2840'. [ 407.280075][ T6640] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 407.360918][ T6640] device team_slave_1 left promiscuous mode [ 407.369287][ T6640] team0 (unregistering): Port device team_slave_1 removed [ 407.428251][ T6640] device team_slave_0 left promiscuous mode [ 407.436847][ T6640] team0 (unregistering): Port device team_slave_0 removed [ 407.490483][ T6640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.534958][ T6640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.726915][ T6640] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 407.786320][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 407.825521][ T6640] bond0 (unregistering): Released all slaves [ 407.881394][T12509] device sit0 left promiscuous mode [ 407.949506][T12538] netlink: 'syz.0.2844': attribute type 10 has an invalid length. [ 407.990165][T12538] device dummy0 entered promiscuous mode [ 408.003869][T12538] team0: Port device dummy0 added [ 408.032840][T12539] netlink: 'syz.0.2844': attribute type 10 has an invalid length. [ 408.052052][T12539] device dummy0 left promiscuous mode [ 408.068637][T12539] team0: Port device dummy0 removed [ 408.087122][T12539] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 409.540078][T12449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.561756][T12449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.610747][T12449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.651554][T12449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.872575][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 409.997121][T12449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.025786][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 410.055524][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.079741][T12449] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.091255][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 410.108899][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.136059][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.143241][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.201005][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 410.233939][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.243171][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.264985][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.272139][ T6640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.285337][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.296551][T12579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2855'. [ 410.307789][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.322413][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.346696][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.383307][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.412978][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 410.430429][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.470432][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.506131][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.530069][T12587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2856'. [ 410.531527][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.548557][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.559719][T12449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.570467][T12587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2856'. [ 410.606495][T12587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2856'. [ 411.233149][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.240639][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.254443][T12612] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2863'. [ 411.265560][T12612] net_ratelimit: 288 callbacks suppressed [ 411.265577][T12612] netlink: zone id is out of range [ 411.295889][T12449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.317930][T12612] netlink: zone id is out of range [ 411.368171][T12612] netlink: zone id is out of range [ 411.393571][T12612] netlink: zone id is out of range [ 411.398752][T12612] netlink: zone id is out of range [ 411.435428][T12612] netlink: zone id is out of range [ 411.440602][T12612] netlink: zone id is out of range [ 411.502859][T12612] netlink: zone id is out of range [ 411.508182][T12612] netlink: zone id is out of range [ 411.560374][T12612] netlink: zone id is out of range [ 412.012603][T12625] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2866'. [ 412.123532][T12629] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2867'. [ 412.231619][T12629] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2867'. [ 413.533975][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 413.565786][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 413.673649][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 413.696067][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 413.724574][T12449] device veth0_vlan entered promiscuous mode [ 413.731723][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 413.760201][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 413.789133][T12449] device veth1_vlan entered promiscuous mode [ 413.883252][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 413.904555][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 413.923984][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 413.944565][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 413.954089][T12653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2872'. [ 413.986152][T12449] device veth0_macvtap entered promiscuous mode [ 414.003696][T12653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2872'. [ 414.047466][T12449] device veth1_macvtap entered promiscuous mode [ 414.202904][T12449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.219922][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 414.236270][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.265661][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.281527][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.322317][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.356627][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.388138][T12449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.418122][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.430872][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.448697][T12449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.472357][T12449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.490188][T12449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.499115][T12449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.690900][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.708706][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.740185][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.779618][ T6640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.811228][ T6640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.847316][ T6638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 415.462331][T12691] __nla_validate_parse: 1 callbacks suppressed [ 415.462352][T12691] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2883'. [ 417.481319][T12737] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2888'. [ 417.527194][T12737] net_ratelimit: 288 callbacks suppressed [ 417.527215][T12737] netlink: zone id is out of range [ 417.553775][T12737] netlink: zone id is out of range [ 417.558947][T12737] netlink: zone id is out of range [ 417.621865][T12737] netlink: zone id is out of range [ 417.669879][T12737] netlink: zone id is out of range [ 417.695698][T12737] netlink: zone id is out of range [ 417.722693][T12737] netlink: zone id is out of range [ 417.729605][T12737] netlink: zone id is out of range [ 417.792138][T12737] netlink: zone id is out of range [ 417.819848][T12741] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2889'. [ 417.853257][T12737] netlink: zone id is out of range [ 417.908635][T12748] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2889'. [ 420.725092][T12792] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2910'. [ 420.857174][T12793] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2898'. [ 420.888128][T12793] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 420.897415][T12793] CPU: 1 PID: 12793 Comm: syz.0.2898 Not tainted syzkaller #0 [ 420.904933][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 420.915028][T12793] Call Trace: [ 420.918348][T12793] [ 420.921314][T12793] dump_stack_lvl+0x188/0x24e [ 420.926056][T12793] ? show_regs_print_info+0x12/0x12 [ 420.931307][T12793] ? load_image+0x400/0x400 [ 420.936005][T12793] sysfs_warn_dup+0x8a/0xa0 [ 420.940565][T12793] sysfs_do_create_link_sd+0xc0/0x110 [ 420.945996][T12793] device_add+0x7ed/0xfb0 [ 420.950431][T12793] wiphy_register+0x1d9f/0x2ac0 [ 420.955417][T12793] ? cfg80211_event_work+0x40/0x40 [ 420.960586][T12793] ? minstrel_ht_alloc+0x894/0xa20 [ 420.965794][T12793] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 420.971930][T12793] ieee80211_register_hw+0x2d00/0x39f0 [ 420.977452][T12793] ? lockdep_hardirqs_on+0x94/0x140 [ 420.982744][T12793] ? ieee80211_register_hw+0xee1/0x39f0 [ 420.988355][T12793] ? ieee80211_register_hw+0xee1/0x39f0 [ 420.993982][T12793] ? ieee80211_tasklet_handler+0x20/0x20 [ 420.999705][T12793] ? memset+0x1e/0x40 [ 421.003738][T12793] ? __hrtimer_init+0x186/0x270 [ 421.008625][T12793] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 421.014404][T12793] hwsim_new_radio_nl+0xafa/0xce0 [ 421.019467][T12793] genl_family_rcv_msg_doit+0x22a/0x330 [ 421.025022][T12793] ? end_current_label_crit_section+0x170/0x170 [ 421.031281][T12793] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 421.037196][T12793] ? bpf_lsm_capable+0x5/0x10 [ 421.041878][T12793] ? security_capable+0x85/0xb0 [ 421.046752][T12793] genl_rcv_msg+0x604/0x790 [ 421.051286][T12793] ? genl_bind+0x360/0x360 [ 421.055706][T12793] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 421.062080][T12793] netlink_rcv_skb+0x1fb/0x450 [ 421.066947][T12793] ? genl_bind+0x360/0x360 [ 421.071378][T12793] ? netlink_ack+0x1170/0x1170 [ 421.076175][T12793] ? down_read+0x1a8/0x2d0 [ 421.080610][T12793] genl_rcv+0x24/0x40 [ 421.084597][T12793] netlink_unicast+0x74d/0x8d0 [ 421.089397][T12793] netlink_sendmsg+0x8ad/0xbd0 [ 421.094202][T12793] ? netlink_getsockopt+0x550/0x550 [ 421.099423][T12793] ? aa_sock_msg_perm+0x94/0x150 [ 421.104374][T12793] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 421.109665][T12793] ? security_socket_sendmsg+0x7c/0xa0 [ 421.115137][T12793] ? netlink_getsockopt+0x550/0x550 [ 421.120344][T12793] ____sys_sendmsg+0x5be/0x970 [ 421.125145][T12793] ? __sys_sendmsg_sock+0x30/0x30 [ 421.130179][T12793] ? __import_iovec+0x315/0x500 [ 421.135060][T12793] ? import_iovec+0x6f/0xa0 [ 421.139575][T12793] ___sys_sendmsg+0x2a2/0x360 [ 421.144286][T12793] ? __sys_sendmsg+0x290/0x290 [ 421.149198][T12793] __se_sys_sendmsg+0x1bb/0x2a0 [ 421.154088][T12793] ? __x64_sys_sendmsg+0x80/0x80 [ 421.159115][T12793] ? lockdep_hardirqs_on+0x94/0x140 [ 421.164344][T12793] do_syscall_64+0x4c/0xa0 [ 421.168780][T12793] ? clear_bhb_loop+0x60/0xb0 [ 421.173475][T12793] ? clear_bhb_loop+0x60/0xb0 [ 421.178192][T12793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.184105][T12793] RIP: 0033:0x7f285b39c799 [ 421.188535][T12793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.208175][T12793] RSP: 002b:00007f285c27e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.216611][T12793] RAX: ffffffffffffffda RBX: 00007f285b615fa0 RCX: 00007f285b39c799 [ 421.224676][T12793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 421.232651][T12793] RBP: 00007f285b432c99 R08: 0000000000000000 R09: 0000000000000000 [ 421.240625][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.248628][T12793] R13: 00007f285b616038 R14: 00007f285b615fa0 R15: 00007fff35cf2d08 [ 421.256653][T12793] [ 421.382001][T12796] device aaaaaaaaaaaaaaa entered promiscuous mode [ 421.611263][T12800] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2902'. [ 423.048866][T12811] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2906'. [ 423.105740][T12811] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2906'. [ 424.896846][T12838] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2916'. [ 425.357824][T12846] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2928'. [ 425.560386][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 425.569486][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 425.577405][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 425.605455][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 425.613320][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 425.621582][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 425.680504][T12854] netlink: 'syz.1.2922': attribute type 21 has an invalid length. [ 425.689499][T12852] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2921'. [ 425.752907][T12852] net_ratelimit: 437 callbacks suppressed [ 425.752927][T12852] netlink: zone id is out of range [ 425.803574][T12852] netlink: zone id is out of range [ 425.808755][T12852] netlink: zone id is out of range [ 425.923077][T12852] netlink: zone id is out of range [ 425.928259][T12852] netlink: zone id is out of range [ 425.992665][T12852] netlink: zone id is out of range [ 425.997892][T12852] netlink: zone id is out of range [ 426.070280][T12852] netlink: zone id is out of range [ 426.122819][T12852] netlink: zone id is out of range [ 426.128005][T12852] netlink: zone id is out of range [ 426.225913][ T4432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.361499][ T4432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.578007][ T4432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.709351][ T4432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.939737][T12847] chnl_net:caif_netlink_parms(): no params data found [ 427.254717][ T4432] device 0 left promiscuous mode [ 427.305186][T12870] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2926'. [ 427.702671][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 427.732281][T12847] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.743179][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.778398][T12847] device bridge_slave_0 entered promiscuous mode [ 427.875868][T12847] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.889095][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.910992][T12847] device bridge_slave_1 entered promiscuous mode [ 428.212197][T12847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.246292][T12847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.414860][T12847] team0: Port device team_slave_0 added [ 428.435150][T12847] team0: Port device team_slave_1 added [ 428.567890][T12847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.583013][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.670766][T12847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.904063][T12847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.911061][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.018437][T12847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.294919][T12897] Â: renamed from pim6reg1 [ 429.407711][T12847] device hsr_slave_0 entered promiscuous mode [ 429.443176][T12847] device hsr_slave_1 entered promiscuous mode [ 429.783156][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 430.267727][ T4432] device veth1_macvtap left promiscuous mode [ 430.368570][T12919] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2936'. [ 430.649933][ T4432] device geneve1 left promiscuous mode [ 430.677095][ T4432] team0 (unregistering): Port device geneve1 removed [ 430.707478][ T4432] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 430.842663][ T4432] device hsr_slave_0 left promiscuous mode [ 430.850550][ T4432] team0 (unregistering): Port device hsr_slave_0 removed [ 430.941434][ T4432] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 431.001383][ T4432] device team_slave_1 left promiscuous mode [ 431.012241][ T4432] team0 (unregistering): Port device team_slave_1 removed [ 431.102702][ T4432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.155562][ T4432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.447343][ T4432] bond0 (unregistering): Released all slaves [ 431.539141][T12910] device syzkaller0 entered promiscuous mode [ 431.552730][T12919] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 431.562263][T12919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 431.572065][T12919] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 431.862624][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 433.548845][T12954] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2946'. [ 433.583023][T12954] net_ratelimit: 288 callbacks suppressed [ 433.583040][T12954] netlink: zone id is out of range [ 433.656199][T12954] netlink: zone id is out of range [ 433.704338][T12954] netlink: zone id is out of range [ 433.730041][T12954] netlink: zone id is out of range [ 433.762452][T12954] netlink: zone id is out of range [ 433.767740][T12954] netlink: zone id is out of range [ 433.804943][T12954] netlink: zone id is out of range [ 433.810123][T12954] netlink: zone id is out of range [ 433.857056][T12954] netlink: zone id is out of range [ 433.874300][T12954] netlink: zone id is out of range [ 433.942867][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 434.289029][T12970] netlink: 'syz.4.2950': attribute type 10 has an invalid length. [ 434.332084][T12968] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2951'. [ 434.395967][T12970] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.444390][T12970] bond0: (slave team0): Enslaving as an active interface with an up link [ 434.731224][T12847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.768587][T12847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.904851][T12847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.931812][T12847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.137369][T12985] netlink: 'syz.0.2953': attribute type 10 has an invalid length. [ 435.288412][T12847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.371365][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 435.386768][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.407561][T12847] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.443716][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 435.464403][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.502004][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.509290][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.560859][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 435.600026][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.623539][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.679490][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.686781][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.722351][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.751164][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 435.769445][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 435.804374][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.853829][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 435.881747][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 435.911364][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 435.935180][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.954046][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.005591][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.027067][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.043840][T12847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 436.281000][T13006] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 437.019235][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.058190][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.092337][T12847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.170833][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.185598][T13026] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2965'. [ 437.190359][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.238912][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.283324][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.333711][T12847] device veth0_vlan entered promiscuous mode [ 437.386868][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.401725][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.444667][T12847] device veth1_vlan entered promiscuous mode [ 437.545574][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 437.567652][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 437.608619][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 437.648266][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.711533][T12847] device veth0_macvtap entered promiscuous mode [ 437.758331][T12847] device veth1_macvtap entered promiscuous mode [ 437.777803][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.799621][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.811849][T12847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.833663][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 437.850370][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 437.882030][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 437.907073][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.928431][T13044] netlink: 'syz.0.2968': attribute type 12 has an invalid length. [ 437.957131][T13044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2968'. [ 437.988044][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.010354][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.038275][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.075170][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.114984][T12847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.159477][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 438.178722][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 438.229176][T12847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.245810][T12847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.267649][T12847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.295946][T12847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.407350][T13066] netlink: 'syz.0.2972': attribute type 21 has an invalid length. [ 438.434544][T13066] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 438.462132][T13066] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2972'. [ 438.539103][ T6648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.573263][ T6648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.609453][ T6640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.613111][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 438.635508][ T6640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.653391][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 439.263697][T13101] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2981'. [ 439.445156][T13101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.515734][T13101] bond0 (unregistering): (slave team0): Releasing backup interface [ 439.547113][T13101] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 439.568618][T13101] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.581183][T13101] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.591569][T13101] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.612941][T13101] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.663791][T13101] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 439.719730][T13101] bond0 (unregistering): Released all slaves [ 439.954479][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.960862][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.324872][T13141] netlink: 'syz.1.2990': attribute type 10 has an invalid length. [ 441.539428][T13183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3007'. [ 441.552211][T13183] device caif0 entered promiscuous mode [ 442.562910][T13194] netlink: 'syz.0.3010': attribute type 2 has an invalid length. [ 442.746537][T13219] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3017'. [ 442.784106][T13219] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 442.791878][T13219] CPU: 1 PID: 13219 Comm: syz.2.3017 Not tainted syzkaller #0 [ 442.799360][T13219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.809445][T13219] Call Trace: [ 442.812741][T13219] [ 442.815690][T13219] dump_stack_lvl+0x188/0x24e [ 442.820412][T13219] ? show_regs_print_info+0x12/0x12 [ 442.825641][T13219] ? load_image+0x400/0x400 [ 442.830164][T13219] sysfs_warn_dup+0x8a/0xa0 [ 442.834667][T13219] sysfs_do_create_link_sd+0xc0/0x110 [ 442.840044][T13219] device_add+0x7ed/0xfb0 [ 442.844394][T13219] wiphy_register+0x1d9f/0x2ac0 [ 442.849266][T13219] ? cfg80211_event_work+0x40/0x40 [ 442.854389][T13219] ? minstrel_ht_alloc+0x894/0xa20 [ 442.859508][T13219] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 442.865575][T13219] ieee80211_register_hw+0x2d00/0x39f0 [ 442.871047][T13219] ? ieee80211_register_hw+0xee1/0x39f0 [ 442.876588][T13219] ? ieee80211_register_hw+0xee1/0x39f0 [ 442.882141][T13219] ? ieee80211_tasklet_handler+0x20/0x20 [ 442.887786][T13219] ? memset+0x1e/0x40 [ 442.891771][T13219] ? __hrtimer_init+0x186/0x270 [ 442.896623][T13219] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 442.902369][T13219] hwsim_new_radio_nl+0xafa/0xce0 [ 442.907422][T13219] genl_family_rcv_msg_doit+0x22a/0x330 [ 442.912964][T13219] ? end_current_label_crit_section+0x170/0x170 [ 442.919204][T13219] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 442.925103][T13219] ? bpf_lsm_capable+0x5/0x10 [ 442.929775][T13219] ? security_capable+0x85/0xb0 [ 442.934631][T13219] genl_rcv_msg+0x604/0x790 [ 442.939142][T13219] ? genl_bind+0x360/0x360 [ 442.943557][T13219] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 442.949904][T13219] netlink_rcv_skb+0x1fb/0x450 [ 442.954668][T13219] ? genl_bind+0x360/0x360 [ 442.959078][T13219] ? netlink_ack+0x1170/0x1170 [ 442.963854][T13219] ? down_read+0x1a8/0x2d0 [ 442.968277][T13219] genl_rcv+0x24/0x40 [ 442.972254][T13219] netlink_unicast+0x74d/0x8d0 [ 442.977030][T13219] netlink_sendmsg+0x8ad/0xbd0 [ 442.981815][T13219] ? netlink_getsockopt+0x550/0x550 [ 442.987020][T13219] ? aa_sock_msg_perm+0x94/0x150 [ 442.991956][T13219] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 442.997232][T13219] ? security_socket_sendmsg+0x7c/0xa0 [ 443.002695][T13219] ? netlink_getsockopt+0x550/0x550 [ 443.007891][T13219] ____sys_sendmsg+0x5be/0x970 [ 443.012668][T13219] ? __sys_sendmsg_sock+0x30/0x30 [ 443.017686][T13219] ? __import_iovec+0x315/0x500 [ 443.022544][T13219] ? import_iovec+0x6f/0xa0 [ 443.027045][T13219] ___sys_sendmsg+0x2a2/0x360 [ 443.031723][T13219] ? try_to_wake_up+0x67c/0x1080 [ 443.036664][T13219] ? __sys_sendmsg+0x290/0x290 [ 443.041490][T13219] __se_sys_sendmsg+0x1bb/0x2a0 [ 443.046345][T13219] ? __x64_sys_sendmsg+0x80/0x80 [ 443.051305][T13219] ? lockdep_hardirqs_on+0x94/0x140 [ 443.056502][T13219] do_syscall_64+0x4c/0xa0 [ 443.060915][T13219] ? clear_bhb_loop+0x60/0xb0 [ 443.065592][T13219] ? clear_bhb_loop+0x60/0xb0 [ 443.070271][T13219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.076158][T13219] RIP: 0033:0x7f313e79c799 [ 443.080574][T13219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.100181][T13219] RSP: 002b:00007f313f686028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.108940][T13219] RAX: ffffffffffffffda RBX: 00007f313ea15fa0 RCX: 00007f313e79c799 [ 443.116993][T13219] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 443.124956][T13219] RBP: 00007f313e832c99 R08: 0000000000000000 R09: 0000000000000000 [ 443.132919][T13219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.140881][T13219] R13: 00007f313ea16038 R14: 00007f313ea15fa0 R15: 00007ffe2b7b9868 [ 443.148866][T13219] [ 443.814572][T13253] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3029'. [ 443.859586][T13253] device team_slave_0 left promiscuous mode [ 444.003309][T13253] team0: Port device team_slave_0 removed [ 444.011809][T13253] net_ratelimit: 139 callbacks suppressed [ 444.011877][T13253] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 444.388982][T13274] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.3037'. [ 444.414729][T13274] netlink: zone id is out of range [ 444.455476][T13274] netlink: zone id is out of range [ 444.477149][T13274] netlink: zone id is out of range [ 444.521201][T13274] netlink: zone id is out of range [ 444.596870][T13274] netlink: zone id is out of range [ 444.616603][T13274] netlink: zone id is out of range [ 444.621888][T13274] netlink: zone id is out of range [ 444.631499][T13274] netlink: zone id is out of range [ 444.637100][T13274] netlink: zone id is out of range [ 445.334680][T13300] netlink: 'syz.2.3048': attribute type 2 has an invalid length. [ 445.346425][T13300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3048'. [ 446.055552][T13321] netlink: 'syz.0.3056': attribute type 2 has an invalid length. [ 446.067452][T13321] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3056'. [ 446.396631][T13331] netlink: 'syz.4.3059': attribute type 21 has an invalid length. [ 446.436286][T13331] netlink: 'syz.4.3059': attribute type 1 has an invalid length. [ 446.536706][T13331] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3059'. [ 447.025262][T13349] netlink: 'syz.2.3061': attribute type 21 has an invalid length. [ 447.112032][T13349] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3061'. [ 447.261127][T13349] netlink: 'syz.2.3061': attribute type 4 has an invalid length. [ 447.485338][T13349] netlink: 'syz.2.3061': attribute type 5 has an invalid length. [ 447.633902][T13349] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3061'. [ 448.337805][T13368] netlink: 'syz.0.3069': attribute type 10 has an invalid length. [ 448.366779][T13368] device team0 left promiscuous mode [ 448.442242][T13368] device team_slave_0 left promiscuous mode [ 448.480008][T13368] device team_slave_1 left promiscuous mode [ 448.555683][T13368] device geneve1 left promiscuous mode [ 448.585988][T13368] device netdevsim0 left promiscuous mode [ 448.753864][T13368] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.827476][T13368] bond0: (slave team0): Enslaving as an active interface with an up link [ 450.274541][T13398] netlink: 'syz.1.3078': attribute type 2 has an invalid length. [ 450.282322][T13398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3078'. [ 450.427803][T13401] netlink: 'syz.3.3079': attribute type 21 has an invalid length. [ 450.460478][T13401] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 450.501516][T13401] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3079'. [ 451.330709][T13409] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3083'. [ 451.442838][T13409] net_ratelimit: 3661 callbacks suppressed [ 451.442862][T13409] netlink: zone id is out of range [ 451.523955][T13409] netlink: zone id is out of range [ 451.529137][T13409] netlink: zone id is out of range [ 451.559351][T13409] netlink: zone id is out of range [ 451.611018][T13409] netlink: zone id is out of range [ 451.644008][T13409] netlink: zone id is out of range [ 451.652776][T13409] netlink: zone id is out of range [ 451.657942][T13409] netlink: zone id is out of range [ 451.741462][T13409] netlink: zone id is out of range [ 451.790738][T13409] netlink: zone id is out of range [ 451.986748][T13414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.994482][T13414] IPv6: NLM_F_CREATE should be set when creating new route [ 452.002689][T13414] IPv6: NLM_F_CREATE should be set when creating new route [ 452.010775][T13414] IPv6: NLM_F_CREATE should be set when creating new route [ 453.701125][T13440] FAULT_INJECTION: forcing a failure. [ 453.701125][T13440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.756666][T13440] CPU: 0 PID: 13440 Comm: syz.0.3091 Not tainted syzkaller #0 [ 453.764192][T13440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.774271][T13440] Call Trace: [ 453.777575][T13440] [ 453.780532][T13440] dump_stack_lvl+0x188/0x24e [ 453.785260][T13440] ? show_regs_print_info+0x12/0x12 [ 453.790502][T13440] ? load_image+0x400/0x400 [ 453.795055][T13440] ? __might_fault+0xa6/0x120 [ 453.799798][T13440] should_fail_ex+0x399/0x4d0 [ 453.804532][T13440] copyin+0x1b/0x120 [ 453.808476][T13440] _copy_from_iter+0x447/0x1130 [ 453.813394][T13440] ? copyout_mc+0x110/0x110 [ 453.817933][T13440] ? __virt_addr_valid+0x188/0x540 [ 453.823082][T13440] ? __virt_addr_valid+0x188/0x540 [ 453.828226][T13440] ? __virt_addr_valid+0x465/0x540 [ 453.833380][T13440] ? __check_object_size+0x500/0xa40 [ 453.838724][T13440] netlink_sendmsg+0x755/0xbd0 [ 453.843557][T13440] ? netlink_getsockopt+0x550/0x550 [ 453.848807][T13440] ? aa_sock_msg_perm+0x94/0x150 [ 453.853794][T13440] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 453.859144][T13440] ? security_socket_sendmsg+0x7c/0xa0 [ 453.864650][T13440] ? netlink_getsockopt+0x550/0x550 [ 453.869886][T13440] ____sys_sendmsg+0x5be/0x970 [ 453.874718][T13440] ? __sys_sendmsg_sock+0x30/0x30 [ 453.879775][T13440] ? __import_iovec+0x315/0x500 [ 453.884683][T13440] ? import_iovec+0x6f/0xa0 [ 453.889234][T13440] ___sys_sendmsg+0x2a2/0x360 [ 453.893974][T13440] ? __sys_sendmsg+0x290/0x290 [ 453.898845][T13440] ? __lock_acquire+0x7d10/0x7d10 [ 453.903996][T13440] __se_sys_sendmsg+0x1bb/0x2a0 [ 453.908896][T13440] ? __x64_sys_sendmsg+0x80/0x80 [ 453.913929][T13440] ? lockdep_hardirqs_on+0x94/0x140 [ 453.919174][T13440] do_syscall_64+0x4c/0xa0 [ 453.923621][T13440] ? clear_bhb_loop+0x60/0xb0 [ 453.928325][T13440] ? clear_bhb_loop+0x60/0xb0 [ 453.933044][T13440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.938967][T13440] RIP: 0033:0x7f285b39c799 [ 453.943420][T13440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.963057][T13440] RSP: 002b:00007f285c27e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.971511][T13440] RAX: ffffffffffffffda RBX: 00007f285b615fa0 RCX: 00007f285b39c799 [ 453.979509][T13440] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 000000000000000a [ 453.987506][T13440] RBP: 00007f285c27e090 R08: 0000000000000000 R09: 0000000000000000 [ 453.995506][T13440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.003509][T13440] R13: 00007f285b616038 R14: 00007f285b615fa0 R15: 00007fff35cf2d08 [ 454.011560][T13440] [ 454.607872][T13446] netlink: 'syz.3.3093': attribute type 2 has an invalid length. [ 454.616008][T13446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3093'. [ 454.891936][T13461] netlink: 'syz.2.3097': attribute type 21 has an invalid length. [ 454.901587][T13461] netlink: 'syz.2.3097': attribute type 1 has an invalid length. [ 454.913144][T13461] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3097'. [ 455.148673][T13475] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3105'. [ 456.307893][T13490] netlink: 'syz.0.3109': attribute type 2 has an invalid length. [ 456.346804][T13490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3109'. [ 458.266909][T13520] netlink: 'syz.3.3125': attribute type 2 has an invalid length. [ 458.274889][T13520] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3125'. [ 459.012346][T13545] netlink: 'syz.4.3136': attribute type 29 has an invalid length. [ 459.071481][T13545] netlink: 'syz.4.3136': attribute type 29 has an invalid length. [ 459.373760][T13556] netlink: 'syz.1.3140': attribute type 21 has an invalid length. [ 459.429834][T13556] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 459.519050][T13556] tap0: tun_chr_ioctl cmd 1074025677 [ 459.533143][T13556] tap0: linktype set to 823 [ 461.190956][T13619] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 461.201054][T13619] syzkaller1: linktype set to 6 [ 461.521980][T13634] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3174'. [ 461.535088][T13634] net_ratelimit: 288 callbacks suppressed [ 461.535106][T13634] netlink: zone id is out of range [ 461.552043][T13634] netlink: zone id is out of range [ 461.557588][T13634] netlink: zone id is out of range [ 461.563369][T13634] netlink: zone id is out of range [ 461.568703][T13634] netlink: zone id is out of range [ 461.582888][T13634] netlink: zone id is out of range [ 461.588314][T13634] netlink: zone id is out of range [ 461.596876][T13634] netlink: zone id is out of range [ 461.613076][T13634] netlink: zone id is out of range [ 461.623271][T13634] netlink: zone id is out of range [ 461.860097][T13639] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3175'. [ 463.701381][T13673] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3190'. [ 464.235820][T13681] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3194'. [ 464.252191][T13681] netlink: 'syz.0.3194': attribute type 10 has an invalid length. [ 464.341855][T13681] team0: Device wg1 is of different type [ 464.949339][T13686] netlink: 'syz.3.3196': attribute type 3 has an invalid length. [ 465.009611][T13686] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3196'. [ 465.179047][T13694] netlink: 'syz.2.3199': attribute type 21 has an invalid length. [ 465.195693][T13694] netlink: 'syz.2.3199': attribute type 1 has an invalid length. [ 465.207582][T13694] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3199'. [ 465.293150][T13701] netlink: 'syz.0.3201': attribute type 2 has an invalid length. [ 465.302113][T13701] netlink: 'syz.0.3201': attribute type 1 has an invalid length. [ 465.321235][T13701] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3201'. [ 465.420439][T13706] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3205'. [ 465.679365][T13713] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3206'. [ 466.487088][T13726] netlink: 'syz.4.3211': attribute type 27 has an invalid length. [ 466.507892][T13726] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3211'. [ 467.160294][T13736] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3216'. [ 467.197920][T13738] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3217'. [ 467.267676][T13738] net_ratelimit: 735 callbacks suppressed [ 467.267701][T13738] netlink: zone id is out of range [ 467.317548][T13738] netlink: zone id is out of range [ 467.362587][T13738] netlink: zone id is out of range [ 467.367765][T13738] netlink: zone id is out of range [ 467.435282][T13738] netlink: zone id is out of range [ 467.440471][T13738] netlink: zone id is out of range [ 467.494083][T13738] netlink: zone id is out of range [ 467.509598][T13738] netlink: zone id is out of range [ 467.540098][T13738] netlink: zone id is out of range [ 467.549301][T13745] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3220'. [ 467.569192][T13738] netlink: zone id is out of range [ 467.760890][T13748] netlink: 'syz.2.3221': attribute type 2 has an invalid length. [ 467.792657][T13748] netlink: 'syz.2.3221': attribute type 1 has an invalid length. [ 467.800453][T13748] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3221'. [ 468.770976][T13764] netlink: 'syz.2.3225': attribute type 3 has an invalid length. [ 468.784681][T13764] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3225'. [ 469.565720][T13778] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3230'. [ 469.897485][T13784] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3233'. [ 470.353147][T13793] validate_nla: 1 callbacks suppressed [ 470.353168][T13793] netlink: 'syz.2.3236': attribute type 21 has an invalid length. [ 470.431774][T13793] netlink: 'syz.2.3236': attribute type 6 has an invalid length. [ 470.464710][T13793] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3236'. [ 470.804274][ T4284] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 471.378201][T13810] netlink: 'syz.1.3242': attribute type 2 has an invalid length. [ 471.425385][T13810] netlink: 'syz.1.3242': attribute type 1 has an invalid length. [ 471.448524][T13810] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3242'. [ 471.501059][T13813] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3244'. [ 471.525931][T13810] device macvlan1 entered promiscuous mode [ 471.584720][T13816] netlink: 'syz.0.3243': attribute type 27 has an invalid length. [ 472.486002][T13834] __nla_validate_parse: 2 callbacks suppressed [ 472.486024][T13834] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3251'. [ 472.514304][T13834] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 472.522080][T13834] CPU: 1 PID: 13834 Comm: syz.2.3251 Not tainted syzkaller #0 [ 472.529571][T13834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.539659][T13834] Call Trace: [ 472.542956][T13834] [ 472.545895][T13834] dump_stack_lvl+0x188/0x24e [ 472.550613][T13834] ? show_regs_print_info+0x12/0x12 [ 472.555850][T13834] ? load_image+0x400/0x400 [ 472.560394][T13834] sysfs_warn_dup+0x8a/0xa0 [ 472.564909][T13834] sysfs_do_create_link_sd+0xc0/0x110 [ 472.570297][T13834] device_add+0x7ed/0xfb0 [ 472.574665][T13834] wiphy_register+0x1d9f/0x2ac0 [ 472.579569][T13834] ? cfg80211_event_work+0x40/0x40 [ 472.584688][T13834] ? minstrel_ht_alloc+0x894/0xa20 [ 472.589842][T13834] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 472.595924][T13834] ieee80211_register_hw+0x2d00/0x39f0 [ 472.601417][T13834] ? ieee80211_register_hw+0xee1/0x39f0 [ 472.606973][T13834] ? ieee80211_register_hw+0xee1/0x39f0 [ 472.612550][T13834] ? ieee80211_tasklet_handler+0x20/0x20 [ 472.618216][T13834] ? memset+0x1e/0x40 [ 472.622203][T13834] ? __hrtimer_init+0x186/0x270 [ 472.627071][T13834] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 472.632848][T13834] hwsim_new_radio_nl+0xafa/0xce0 [ 472.637912][T13834] genl_family_rcv_msg_doit+0x22a/0x330 [ 472.643468][T13834] ? end_current_label_crit_section+0x170/0x170 [ 472.649721][T13834] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 472.655638][T13834] ? bpf_lsm_capable+0x5/0x10 [ 472.660318][T13834] ? security_capable+0x85/0xb0 [ 472.665192][T13834] genl_rcv_msg+0x604/0x790 [ 472.669725][T13834] ? genl_bind+0x360/0x360 [ 472.674143][T13834] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 472.680516][T13834] netlink_rcv_skb+0x1fb/0x450 [ 472.685293][T13834] ? genl_bind+0x360/0x360 [ 472.689719][T13834] ? netlink_ack+0x1170/0x1170 [ 472.694519][T13834] ? down_read+0x1a8/0x2d0 [ 472.698950][T13834] genl_rcv+0x24/0x40 [ 472.702934][T13834] netlink_unicast+0x74d/0x8d0 [ 472.707732][T13834] netlink_sendmsg+0x8ad/0xbd0 [ 472.712533][T13834] ? netlink_getsockopt+0x550/0x550 [ 472.717750][T13834] ? aa_sock_msg_perm+0x94/0x150 [ 472.722817][T13834] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 472.728106][T13834] ? security_socket_sendmsg+0x7c/0xa0 [ 472.733581][T13834] ? netlink_getsockopt+0x550/0x550 [ 472.738794][T13834] ____sys_sendmsg+0x5be/0x970 [ 472.743593][T13834] ? __sys_sendmsg_sock+0x30/0x30 [ 472.748624][T13834] ? __import_iovec+0x315/0x500 [ 472.753501][T13834] ? import_iovec+0x6f/0xa0 [ 472.758021][T13834] ___sys_sendmsg+0x2a2/0x360 [ 472.762713][T13834] ? try_to_wake_up+0x6ae/0x1080 [ 472.767669][T13834] ? __sys_sendmsg+0x290/0x290 [ 472.772574][T13834] __se_sys_sendmsg+0x1bb/0x2a0 [ 472.777437][T13834] ? ct_nmi_exit+0x145/0x1c0 [ 472.782038][T13834] ? __x64_sys_sendmsg+0x80/0x80 [ 472.787025][T13834] ? lockdep_hardirqs_on+0x94/0x140 [ 472.792240][T13834] do_syscall_64+0x4c/0xa0 [ 472.796663][T13834] ? clear_bhb_loop+0x60/0xb0 [ 472.801342][T13834] ? clear_bhb_loop+0x60/0xb0 [ 472.806030][T13834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.811930][T13834] RIP: 0033:0x7f313e79c799 [ 472.816353][T13834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.835963][T13834] RSP: 002b:00007f313f686028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.844385][T13834] RAX: ffffffffffffffda RBX: 00007f313ea15fa0 RCX: 00007f313e79c799 [ 472.852362][T13834] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 472.860335][T13834] RBP: 00007f313e832c99 R08: 0000000000000000 R09: 0000000000000000 [ 472.868308][T13834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.876281][T13834] R13: 00007f313ea16038 R14: 00007f313ea15fa0 R15: 00007ffe2b7b9868 [ 472.884293][T13834] [ 473.218643][T13846] netlink: 'syz.4.3258': attribute type 2 has an invalid length. [ 473.266699][T13845] netlink: 'syz.1.3257': attribute type 21 has an invalid length. [ 473.295321][T13846] netlink: 'syz.4.3258': attribute type 1 has an invalid length. [ 473.334985][T13845] netlink: 'syz.1.3257': attribute type 1 has an invalid length. [ 473.381829][T13846] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3258'. [ 473.419835][T13845] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3257'. [ 474.808425][T13879] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3268'. [ 474.831225][T13879] net_ratelimit: 437 callbacks suppressed [ 474.831242][T13879] netlink: zone id is out of range [ 474.963464][T13879] netlink: zone id is out of range [ 474.992602][T13879] netlink: zone id is out of range [ 475.002336][T13879] netlink: zone id is out of range [ 475.020786][T13879] netlink: zone id is out of range [ 475.041100][T13879] netlink: zone id is out of range [ 475.062731][T13879] netlink: zone id is out of range [ 475.083137][T13879] netlink: zone id is out of range [ 475.088303][T13879] netlink: zone id is out of range [ 475.122685][T13879] netlink: zone id is out of range [ 476.155621][T13899] netlink: 'syz.2.3277': attribute type 21 has an invalid length. [ 476.192770][T13899] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 476.221279][T13899] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3277'. [ 476.619985][T13906] netlink: 'syz.3.3279': attribute type 10 has an invalid length. [ 476.716976][T13906] team0: Port device dummy0 added [ 476.743433][T13907] netlink: 'syz.3.3279': attribute type 10 has an invalid length. [ 476.843774][T13907] team0: Port device dummy0 removed [ 476.914534][T13907] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 477.784282][T13934] netlink: 'syz.4.3291': attribute type 10 has an invalid length. [ 477.827210][T13934] device geneve0 entered promiscuous mode [ 477.974975][T13934] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 478.052567][T13946] netlink: 'syz.3.3292': attribute type 21 has an invalid length. [ 478.060453][T13946] netlink: 'syz.3.3292': attribute type 1 has an invalid length. [ 478.110036][T13946] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3292'. [ 478.167253][T13950] netlink: 'syz.0.3296': attribute type 21 has an invalid length. [ 479.068204][T13987] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3309'. [ 479.107027][T13989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.137285][T13989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.212261][T13989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.266239][T13989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.809121][T13991] netlink: 'syz.3.3310': attribute type 21 has an invalid length. [ 479.823379][T13991] netlink: 'syz.3.3310': attribute type 6 has an invalid length. [ 479.852735][T13991] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3310'. [ 480.135746][T14006] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3313'. [ 482.006311][T14036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.062986][T14036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.683555][T14040] sctp: [Deprecated]: syz.1.3325 (pid 14040) Use of int in maxseg socket option. [ 482.683555][T14040] Use struct sctp_assoc_value instead [ 484.576344][T14036] bond0: (slave batadv0): Releasing backup interface [ 484.601013][T14047] validate_nla: 2 callbacks suppressed [ 484.601029][T14047] netlink: 'syz.1.3329': attribute type 10 has an invalid length. [ 485.049863][T14076] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3338'. [ 485.068311][T14076] net_ratelimit: 288 callbacks suppressed [ 485.068329][T14076] netlink: zone id is out of range [ 485.081298][T14076] netlink: zone id is out of range [ 485.087216][T14076] netlink: zone id is out of range [ 485.093137][T14076] netlink: zone id is out of range [ 485.105389][T14076] netlink: zone id is out of range [ 485.115576][T14076] netlink: zone id is out of range [ 485.126835][T14076] netlink: zone id is out of range [ 485.148361][T14076] netlink: zone id is out of range [ 485.163646][T14076] netlink: zone id is out of range [ 485.176567][T14076] netlink: zone id is out of range [ 485.699339][T14087] netlink: 'syz.2.3341': attribute type 21 has an invalid length. [ 485.730047][T14087] netlink: 'syz.2.3341': attribute type 6 has an invalid length. [ 485.766706][T14087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3341'. [ 485.999272][T14095] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3343'. [ 486.628720][T14099] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3346'. [ 487.395166][T14109] netlink: 'syz.2.3350': attribute type 10 has an invalid length. [ 487.600614][T14116] netlink: 'syz.3.3351': attribute type 10 has an invalid length. [ 487.626597][T14110] sctp: [Deprecated]: syz.2.3350 (pid 14110) Use of int in maxseg socket option. [ 487.626597][T14110] Use struct sctp_assoc_value instead [ 487.667629][T14116] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.691621][T14116] bond0: (slave team0): Enslaving as an active interface with an up link [ 488.300189][T14125] netlink: 'syz.4.3356': attribute type 3 has an invalid length. [ 488.329336][T14125] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3356'. [ 488.601171][T14133] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3358'. [ 489.798992][T14157] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3368'. [ 490.201222][T14166] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3371'. [ 490.256458][T14166] net_ratelimit: 586 callbacks suppressed [ 490.256478][T14166] netlink: zone id is out of range [ 490.298654][T14166] netlink: zone id is out of range [ 490.304057][T14166] netlink: zone id is out of range [ 490.309674][T14166] netlink: zone id is out of range [ 490.315217][T14166] netlink: zone id is out of range [ 490.320804][T14166] netlink: zone id is out of range [ 490.326761][T14166] netlink: zone id is out of range [ 490.332307][T14166] netlink: zone id is out of range [ 490.338203][T14166] netlink: zone id is out of range [ 490.353350][T14166] netlink: zone id is out of range [ 493.318750][T14191] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 493.387868][T14196] netlink: 'syz.1.3382': attribute type 10 has an invalid length. [ 493.444404][T14199] netlink: 'syz.0.3383': attribute type 21 has an invalid length. [ 493.466155][T14199] netlink: 'syz.0.3383': attribute type 1 has an invalid length. [ 493.487371][T14199] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3383'. [ 493.524129][T14203] netlink: 'syz.3.3385': attribute type 2 has an invalid length. [ 493.620926][T14203] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.3385'. [ 493.828959][T14205] netlink: 'syz.2.3386': attribute type 21 has an invalid length. [ 493.844726][T14205] netlink: 'syz.2.3386': attribute type 1 has an invalid length. [ 493.869106][T14205] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3386'. [ 493.939866][T14196] sctp: [Deprecated]: syz.1.3382 (pid 14196) Use of int in maxseg socket option. [ 493.939866][T14196] Use struct sctp_assoc_value instead [ 494.187867][T14218] netlink: 'syz.2.3391': attribute type 21 has an invalid length. [ 494.204034][T14218] netlink: 'syz.2.3391': attribute type 1 has an invalid length. [ 494.224697][T14220] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3392'. [ 494.243315][T14218] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3391'. [ 494.296909][T14222] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3393'. [ 495.839553][T14246] netlink: 'syz.2.3400': attribute type 21 has an invalid length. [ 495.855957][T14246] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 495.896132][T14246] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3400'. [ 496.327531][T14253] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3402'. [ 497.085468][T14263] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3406'. [ 497.431144][T14274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.465469][T14274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.509356][T14274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.524155][T14274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.708476][T14289] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 497.961924][T14300] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3421'. [ 497.996474][T14300] net_ratelimit: 437 callbacks suppressed [ 497.996494][T14300] netlink: zone id is out of range [ 498.036051][T14300] netlink: zone id is out of range [ 498.083023][T14300] netlink: zone id is out of range [ 498.119977][T14300] netlink: zone id is out of range [ 498.140198][T14300] netlink: zone id is out of range [ 498.152719][T14300] netlink: zone id is out of range [ 498.164172][T14300] netlink: zone id is out of range [ 498.185906][T14300] netlink: zone id is out of range [ 498.204514][T14300] netlink: zone id is out of range [ 498.215613][T14300] netlink: zone id is out of range [ 498.494803][T14314] device aaaaaaaaaaaaaaa entered promiscuous mode [ 499.117270][T14326] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 500.044454][T14348] validate_nla: 4 callbacks suppressed [ 500.044631][T14348] netlink: 'syz.4.3438': attribute type 21 has an invalid length. [ 500.081979][T14348] netlink: 'syz.4.3438': attribute type 1 has an invalid length. [ 500.092871][T14348] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3438'. [ 500.883064][T14367] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 501.116184][T14375] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3460'. [ 501.385812][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.392263][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.489797][T14391] netlink: 'syz.4.3458': attribute type 10 has an invalid length. [ 501.654755][T14391] team0: Device wg1 is of different type [ 501.737882][T14396] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3459'. [ 502.044160][T14410] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3466'. [ 502.089202][ T6640] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.174844][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 502.184501][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 502.196597][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 502.213717][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 502.222322][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 502.226261][ T6640] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.240603][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.398074][ T6640] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.573276][ T6640] team0: Port device netdevsim0 removed [ 503.067126][ T6640] device 0 left promiscuous mode [ 503.106789][T14419] chnl_net:caif_netlink_parms(): no params data found [ 503.428686][ T6640] device ip6gretap0 left promiscuous mode [ 503.438437][ T6640] : port 1(ip6gretap0) entered disabled state [ 504.000396][T14419] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.010719][T14419] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.044527][T14419] device bridge_slave_0 entered promiscuous mode [ 504.064166][T14456] IPv6: NLM_F_CREATE should be specified when creating new route [ 504.090872][T14456] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3476'. [ 504.196964][T14419] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.214679][T14419] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.246264][T14419] device bridge_slave_1 entered promiscuous mode [ 504.262725][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 504.475476][T14419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.517249][T14419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.736588][T14419] team0: Port device team_slave_0 added [ 504.756361][T14419] team0: Port device team_slave_1 added [ 504.999905][T14419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.027293][T14419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.057132][T14419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.074789][T14476] netlink: 'syz.4.3483': attribute type 21 has an invalid length. [ 505.114640][T14476] netlink: 'syz.4.3483': attribute type 1 has an invalid length. [ 505.132633][T14476] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3483'. [ 505.165521][T14419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.174536][T14419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.209837][T14419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.332277][T14484] netlink: 'syz.3.3484': attribute type 21 has an invalid length. [ 505.340039][T14494] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.3487'. [ 505.341790][T14492] FAULT_INJECTION: forcing a failure. [ 505.341790][T14492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.363029][T14484] netlink: 'syz.3.3484': attribute type 1 has an invalid length. [ 505.364415][T14492] CPU: 1 PID: 14492 Comm: syz.1.3486 Not tainted syzkaller #0 [ 505.371020][T14484] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3484'. [ 505.378203][T14492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.378228][T14492] Call Trace: [ 505.378237][T14492] [ 505.378246][T14492] dump_stack_lvl+0x188/0x24e [ 505.378281][T14492] ? show_regs_print_info+0x12/0x12 [ 505.378306][T14492] ? load_image+0x400/0x400 [ 505.378332][T14492] ? __lock_acquire+0x7d10/0x7d10 [ 505.378356][T14492] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 505.378391][T14492] should_fail_ex+0x399/0x4d0 [ 505.378419][T14492] _copy_from_user+0x2c/0x170 [ 505.378446][T14492] ___sys_sendmsg+0x1c3/0x360 [ 505.378485][T14492] ? __sys_sendmsg+0x290/0x290 [ 505.378549][T14492] ? __lock_acquire+0x7d10/0x7d10 [ 505.378616][T14492] __se_sys_sendmsg+0x1bb/0x2a0 [ 505.378639][T14492] ? ct_nmi_exit+0x145/0x1c0 [ 505.378662][T14492] ? __x64_sys_sendmsg+0x80/0x80 [ 505.378713][T14492] ? lockdep_hardirqs_on+0x94/0x140 [ 505.472655][T14492] do_syscall_64+0x4c/0xa0 [ 505.477075][T14492] ? clear_bhb_loop+0x60/0xb0 [ 505.481755][T14492] ? clear_bhb_loop+0x60/0xb0 [ 505.486430][T14492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.492315][T14492] RIP: 0033:0x7f683739c799 [ 505.496723][T14492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.516323][T14492] RSP: 002b:00007f68381ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.524735][T14492] RAX: ffffffffffffffda RBX: 00007f6837616180 RCX: 00007f683739c799 [ 505.532700][T14492] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 505.540661][T14492] RBP: 00007f68381ec090 R08: 0000000000000000 R09: 0000000000000000 [ 505.548623][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.556585][T14492] R13: 00007f6837616218 R14: 00007f6837616180 R15: 00007ffdf4f985b8 [ 505.564572][T14492] [ 505.590433][T14419] device hsr_slave_0 entered promiscuous mode [ 505.600096][T14419] device hsr_slave_1 entered promiscuous mode [ 505.608076][T14419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.615808][T14419] Cannot create hsr debugfs directory [ 505.852765][ T6640] device hsr_slave_0 left promiscuous mode [ 505.920481][ T6640] device veth1_macvtap left promiscuous mode [ 505.929135][ T6640] device veth0_macvtap left promiscuous mode [ 506.186966][ T6640] team0 (unregistering): Port device geneve1 removed [ 506.343700][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 506.483252][ T6640] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 506.632952][ T6640] team0 (unregistering): Port device team_slave_1 removed [ 506.683197][ T6640] team0 (unregistering): Port device team_slave_0 removed [ 506.735829][ T6640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.791010][ T6640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.140234][ T6640] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 507.177178][ T6640] bond0 (unregistering): (slave team0): Releasing backup interface [ 507.221055][ T6640] bond0 (unregistering): Released all slaves [ 507.301333][T14524] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3493'. [ 507.374490][T14532] netlink: 'syz.4.3495': attribute type 7 has an invalid length. [ 507.529754][T14538] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3496'. [ 507.566704][T14538] net_ratelimit: 437 callbacks suppressed [ 507.566720][T14538] netlink: zone id is out of range [ 507.663252][T14538] netlink: zone id is out of range [ 507.683480][T14538] netlink: zone id is out of range [ 507.688638][T14538] netlink: zone id is out of range [ 507.707612][T14538] netlink: zone id is out of range [ 507.717244][T14538] netlink: zone id is out of range [ 507.723068][T14538] netlink: zone id is out of range [ 507.728430][T14538] netlink: zone id is out of range [ 507.733937][T14538] netlink: zone id is out of range [ 507.739372][T14538] netlink: zone id is out of range [ 507.882087][T14545] netlink: 'syz.2.3498': attribute type 21 has an invalid length. [ 507.912947][T14545] netlink: 'syz.2.3498': attribute type 1 has an invalid length. [ 507.950562][T14545] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3498'. [ 508.406941][T14419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 508.422895][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 508.439534][T14419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 508.465514][T14419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 508.475506][T14419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 508.525473][T14572] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3506'. [ 508.562306][T14572] netlink: 'syz.3.3506': attribute type 10 has an invalid length. [ 508.578172][T14572] team0: Device wg1 is up. Set it down before adding it as a team port [ 508.597529][T14573] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3507'. [ 508.644840][T14419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.672395][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 508.686391][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.717774][T14419] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.738157][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 508.748194][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 508.799772][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.806965][ T4432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.858960][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 508.874850][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 508.905806][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 508.922024][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.929205][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.939820][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 508.985804][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 508.998276][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 509.019122][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 509.067756][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 509.085431][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 509.124007][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 509.152082][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 509.173318][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.188535][T14419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 509.216803][T14419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 509.243970][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 509.253016][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.544156][T14596] netlink: 'syz.2.3514': attribute type 21 has an invalid length. [ 509.563530][T14596] netlink: 'syz.2.3514': attribute type 1 has an invalid length. [ 509.583682][T14596] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3514'. [ 509.836467][T14608] FAULT_INJECTION: forcing a failure. [ 509.836467][T14608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.857854][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.882595][T14608] CPU: 1 PID: 14608 Comm: syz.3.3517 Not tainted syzkaller #0 [ 509.886771][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.890092][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.890105][T14608] Call Trace: [ 509.910726][T14608] [ 509.913676][T14608] dump_stack_lvl+0x188/0x24e [ 509.918385][T14608] ? show_regs_print_info+0x12/0x12 [ 509.923610][T14608] ? load_image+0x400/0x400 [ 509.928146][T14608] ? __lock_acquire+0x7d10/0x7d10 [ 509.933205][T14608] should_fail_ex+0x399/0x4d0 [ 509.937906][T14608] _copy_from_user+0x2c/0x170 [ 509.942615][T14608] __sys_bpf+0x2ea/0x780 [ 509.946885][T14608] ? bpf_link_show_fdinfo+0x380/0x380 [ 509.952298][T14608] ? lock_chain_count+0x20/0x20 [ 509.957181][T14608] __x64_sys_bpf+0x78/0x90 [ 509.961625][T14608] do_syscall_64+0x4c/0xa0 [ 509.966063][T14608] ? clear_bhb_loop+0x60/0xb0 [ 509.970759][T14608] ? clear_bhb_loop+0x60/0xb0 [ 509.975458][T14608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.981377][T14608] RIP: 0033:0x7f510459c799 [ 509.985819][T14608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.005452][T14608] RSP: 002b:00007f510548a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.014002][T14608] RAX: ffffffffffffffda RBX: 00007f5104815fa0 RCX: 00007f510459c799 [ 510.022006][T14608] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 510.030277][T14608] RBP: 00007f510548a090 R08: 0000000000000000 R09: 0000000000000000 [ 510.038266][T14608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.046257][T14608] R13: 00007f5104816038 R14: 00007f5104815fa0 R15: 00007fffc83e16f8 [ 510.054267][T14608] [ 510.067663][T14419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.107234][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 510.136483][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 510.206521][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 510.220043][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 510.253312][T14419] device veth0_vlan entered promiscuous mode [ 510.260042][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 510.285182][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 510.317144][T14419] device veth1_vlan entered promiscuous mode [ 510.363260][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 510.372079][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 510.398346][T14419] device veth0_macvtap entered promiscuous mode [ 510.414364][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 510.423975][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 510.441629][T14419] device veth1_macvtap entered promiscuous mode [ 510.457649][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 510.474583][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.500207][T14419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.509401][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 510.522355][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.532085][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.546417][T14419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.554527][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 510.600919][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 510.622005][T14419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.641271][T14419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.661641][T14419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.681890][T14419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.844417][T14634] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3521'. [ 510.860478][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.882178][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.924255][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 510.948455][T14637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3523'. [ 510.979350][ T6638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.014208][ T6638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.031371][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 511.193873][T14645] FAULT_INJECTION: forcing a failure. [ 511.193873][T14645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.243163][T14645] CPU: 1 PID: 14645 Comm: syz.2.3526 Not tainted syzkaller #0 [ 511.250683][T14645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 511.260764][T14645] Call Trace: [ 511.264065][T14645] [ 511.267017][T14645] dump_stack_lvl+0x188/0x24e [ 511.271729][T14645] ? show_regs_print_info+0x12/0x12 [ 511.276965][T14645] ? load_image+0x400/0x400 [ 511.281512][T14645] ? __lock_acquire+0x7d10/0x7d10 [ 511.286565][T14645] ? lock_chain_count+0x20/0x20 [ 511.291453][T14645] should_fail_ex+0x399/0x4d0 [ 511.296169][T14645] _copy_from_user+0x2c/0x170 [ 511.300885][T14645] iovec_from_user+0x143/0x360 [ 511.305770][T14645] __import_iovec+0x6d/0x500 [ 511.310381][T14645] ? should_fail_ex+0x162/0x4d0 [ 511.315264][T14645] import_iovec+0x6f/0xa0 [ 511.319633][T14645] ___sys_recvmsg+0x4b6/0x590 [ 511.324343][T14645] ? __sys_recvmsg+0x290/0x290 [ 511.329132][T14645] ? common_file_perm+0x171/0x1c0 [ 511.334178][T14645] ? __fget_files+0x43d/0x4b0 [ 511.338883][T14645] __x64_sys_recvmsg+0x205/0x2e0 [ 511.343834][T14645] ? ___sys_recvmsg+0x590/0x590 [ 511.348709][T14645] ? lockdep_hardirqs_on+0x94/0x140 [ 511.353910][T14645] do_syscall_64+0x4c/0xa0 [ 511.358326][T14645] ? clear_bhb_loop+0x60/0xb0 [ 511.363000][T14645] ? clear_bhb_loop+0x60/0xb0 [ 511.367704][T14645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.373614][T14645] RIP: 0033:0x7f313e79c799 [ 511.378040][T14645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.397657][T14645] RSP: 002b:00007f313f686028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 511.406072][T14645] RAX: ffffffffffffffda RBX: 00007f313ea15fa0 RCX: 00007f313e79c799 [ 511.414037][T14645] RDX: 0000000000000120 RSI: 0000200000000240 RDI: 0000000000000004 [ 511.422004][T14645] RBP: 00007f313f686090 R08: 0000000000000000 R09: 0000000000000000 [ 511.429973][T14645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.437940][T14645] R13: 00007f313ea16038 R14: 00007f313ea15fa0 R15: 00007ffe2b7b9868 [ 511.445927][T14645] [ 511.627796][T14649] netlink: 'syz.3.3527': attribute type 21 has an invalid length. [ 511.676037][T14649] netlink: 'syz.3.3527': attribute type 1 has an invalid length. [ 511.707457][T14649] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3527'. [ 511.751048][T14653] netlink: 'syz.4.3528': attribute type 10 has an invalid length. [ 511.785385][T14653] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3528'. [ 511.830864][T14653] device batadv_slave_1 entered promiscuous mode [ 511.894199][T14659] tc_dump_action: action bad kind [ 513.866458][T14696] tap0: tun_chr_ioctl cmd 1074025677 [ 513.887376][T14696] tap0: linktype set to 804 [ 514.443955][T14714] netlink: 'syz.4.3544': attribute type 21 has an invalid length. [ 514.467945][T14714] netlink: 'syz.4.3544': attribute type 6 has an invalid length. [ 514.490841][T14714] __nla_validate_parse: 2 callbacks suppressed [ 514.490861][T14714] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3544'. [ 514.731884][T14721] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3547'. [ 514.803219][T14721] net_ratelimit: 288 callbacks suppressed [ 514.803240][T14721] netlink: zone id is out of range [ 514.876897][T14721] netlink: zone id is out of range [ 514.879945][T14724] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3548'. [ 514.882048][T14721] netlink: zone id is out of range [ 514.882064][T14721] netlink: zone id is out of range [ 514.882078][T14721] netlink: zone id is out of range [ 514.882091][T14721] netlink: zone id is out of range [ 514.882104][T14721] netlink: zone id is out of range [ 514.882116][T14721] netlink: zone id is out of range [ 515.015402][T14730] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3549'. [ 515.171672][T14721] netlink: zone id is out of range [ 515.192027][T14721] netlink: zone id is out of range [ 516.044386][T14749] netlink: 'syz.2.3556': attribute type 3 has an invalid length. [ 516.062898][T14749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3556'. [ 516.214894][T14753] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 517.474384][T14773] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3561'. [ 518.058308][T14787] netlink: 'syz.4.3564': attribute type 3 has an invalid length. [ 518.159741][T14787] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3564'. [ 520.125670][T14828] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3577'. [ 520.205266][T14828] net_ratelimit: 288 callbacks suppressed [ 520.205284][T14828] netlink: zone id is out of range [ 520.254522][T14828] netlink: zone id is out of range [ 520.259720][T14828] netlink: zone id is out of range [ 520.301499][T14828] netlink: zone id is out of range [ 520.342642][T14828] netlink: zone id is out of range [ 520.348050][T14828] netlink: zone id is out of range [ 520.374912][T14828] netlink: zone id is out of range [ 520.390812][T14828] netlink: zone id is out of range [ 520.439233][T14828] netlink: zone id is out of range [ 520.456111][T14828] netlink: zone id is out of range [ 521.267392][T14848] netlink: 'syz.4.3583': attribute type 10 has an invalid length. [ 522.116422][T14848] bond0: (slave geneve0): Releasing backup interface [ 522.158595][T14856] bond0: (slave dummy0): Error: Slave device does not support XDP [ 522.984651][T14867] Ÿë: port 1(gretap0) entered blocking state [ 522.990919][T14867] Ÿë: port 1(gretap0) entered disabled state [ 523.039983][T14867] device gretap0 entered promiscuous mode [ 523.140649][T14871] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3592'. [ 523.750085][T14887] netlink: 'syz.3.3596': attribute type 10 has an invalid length. [ 523.871495][T14887] team0: Port device geneve1 added [ 523.943994][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 523.960820][T14893] netlink: 'syz.2.3599': attribute type 10 has an invalid length. [ 524.117243][T14889] netlink: 'syz.4.3598': attribute type 21 has an invalid length. [ 524.127436][T14889] netlink: 'syz.4.3598': attribute type 1 has an invalid length. [ 524.143063][T14889] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3598'. [ 524.175315][T14887] sctp: [Deprecated]: syz.3.3596 (pid 14887) Use of int in maxseg socket option. [ 524.175315][T14887] Use struct sctp_assoc_value instead [ 524.546471][T14900] netlink: 'syz.2.3600': attribute type 13 has an invalid length. [ 524.579069][T14900] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3600'. [ 524.597288][T14903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3602'. [ 524.630467][T14900] erspan0: refused to change device tx_queue_len [ 524.657683][T14899] bond0: (slave team0): Error: Slave device does not support XDP [ 524.720955][T14902] netlink: 'syz.2.3600': attribute type 13 has an invalid length. [ 524.732307][T14902] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3600'. [ 524.749002][T14902] erspan0: refused to change device tx_queue_len [ 524.756993][T14903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3602'. [ 525.132074][T14912] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3605'. [ 525.763163][T14922] netlink: 'syz.3.3610': attribute type 10 has an invalid length. [ 526.548400][T14933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3614'. [ 526.563983][T14933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3614'. [ 527.006490][T14939] netlink: 'syz.1.3616': attribute type 12 has an invalid length. [ 527.022915][T14939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3616'. [ 527.310820][T14945] : port 1(ip6gretap0) entered blocking state [ 527.369201][T14945] : port 1(ip6gretap0) entered disabled state [ 527.399691][T14945] device ip6gretap0 entered promiscuous mode [ 528.033263][T14958] netlink: 'syz.3.3624': attribute type 10 has an invalid length. [ 528.661008][T14966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3626'. [ 528.680156][T14966] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3626'. [ 528.967344][T14975] device veth1_macvtap left promiscuous mode [ 529.098753][T14981] netlink: 'syz.0.3634': attribute type 2 has an invalid length. [ 529.132870][T14981] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3634'. [ 529.481405][T14992] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3637'. [ 529.516015][T14992] net_ratelimit: 439 callbacks suppressed [ 529.516037][T14992] netlink: zone id is out of range [ 529.580237][T14992] netlink: zone id is out of range [ 529.652666][T14992] netlink: zone id is out of range [ 529.670693][T14992] netlink: zone id is out of range [ 529.727763][T14992] netlink: zone id is out of range [ 529.756119][T14992] netlink: zone id is out of range [ 529.806959][T14992] netlink: zone id is out of range [ 529.840528][T14992] netlink: zone id is out of range [ 529.875008][T14992] netlink: zone id is out of range [ 529.891625][T14992] netlink: zone id is out of range [ 530.006008][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.015582][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.024587][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.033651][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.041654][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 530.051684][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.124906][T15000] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3639'. [ 532.144011][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 534.192764][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 536.292780][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 538.342883][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 556.442817][ T4316] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2660 jiffies s: 53153 root: 0x2/. [ 556.463917][ T4316] rcu: blocking rcu_node structures (internal RCU debug): [ 556.471084][ T4316] Sending NMI from CPU 0 to CPUs 1: [ 556.476346][ C1] NMI backtrace for cpu 1 [ 556.476356][ C1] CPU: 1 PID: 14975 Comm: syz.3.3631 Not tainted syzkaller #0 [ 556.476372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.476380][ C1] RIP: 0010:__lock_acquire+0xed7/0x7d10 [ 556.476403][ C1] Code: 8b 18 48 85 db 4c 8b 7c 24 18 74 56 83 fb 31 0f 83 6e 5c 00 00 48 8d 04 9b 49 8d 5c c6 f8 48 89 d8 48 c1 e8 03 42 0f b6 04 00 <84> c0 0f 85 6f 5c 00 00 8b 1b 48 8b 44 24 50 42 0f b6 04 00 84 c0 [ 556.476416][ C1] RSP: 0018:ffffc900057768e0 EFLAGS: 00000806 [ 556.476429][ C1] RAX: 0000000000000000 RBX: ffff888054a2c770 RCX: ffffffff81644ff5 [ 556.476440][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af6240 [ 556.476450][ C1] RBP: ffffc90005776b30 R08: dffffc0000000000 R09: 1ffffffff215ec48 [ 556.476461][ C1] R10: dffffc0000000000 R11: fffffbfff215ec49 R12: ffff888054a2bb80 [ 556.476472][ C1] R13: ba4dca8940e6c4ef R14: ffff888054a2c660 R15: ffff888054a2c798 [ 556.476483][ C1] FS: 00007f510548a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 556.476496][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.476507][ C1] CR2: 000000110c26e1cc CR3: 000000005ed3e000 CR4: 00000000003506e0 [ 556.476520][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.476529][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 556.476538][ C1] Call Trace: [ 556.476544][ C1] [ 556.476563][ C1] ? perf_trace_lock+0xf8/0x390 [ 556.476579][ C1] ? verify_lock_unused+0x140/0x140 [ 556.476596][ C1] ? __lock_acquire+0x12f4/0x7d10 [ 556.476614][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 556.476639][ C1] lock_acquire+0x1bb/0x4a0 [ 556.476655][ C1] ? perf_output_begin_forward+0xa7/0xa80 [ 556.476675][ C1] ? sched_clock_cpu+0x6e/0x260 [ 556.476693][ C1] ? read_lock_is_recursive+0x10/0x10 [ 556.476713][ C1] ? __task_pid_nr_ns+0x38c/0x460 [ 556.476732][ C1] perf_output_begin_forward+0xc3/0xa80 [ 556.476749][ C1] ? perf_output_begin_forward+0xa7/0xa80 [ 556.476765][ C1] ? perf_instruction_pointer+0xbc/0x2f0 [ 556.476789][ C1] ? __perf_cgroup_move+0x150/0x150 [ 556.476806][ C1] ? perf_callchain+0x190/0x190 [ 556.476836][ C1] perf_event_output_forward+0x1ad/0x2f0 [ 556.476854][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 556.476871][ C1] ? perf_get_page_size+0x430/0x430 [ 556.476891][ C1] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 556.476910][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 556.476930][ C1] __perf_event_overflow+0x448/0x610 [ 556.476953][ C1] perf_tp_event+0x38c/0xc00 [ 556.476973][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 556.476996][ C1] ? trace_irq_enable_rcuidle+0xd3/0x140 [ 556.477021][ C1] ? trace_irq_enable_rcuidle+0xd3/0x140 [ 556.477048][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 556.477069][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 556.477088][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 556.477105][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 556.477122][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 556.477141][ C1] ? lock_chain_count+0x20/0x20 [ 556.477159][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 556.477175][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 556.477194][ C1] trace_hardirqs_on+0x24/0x40 [ 556.477209][ C1] asm_sysvec_irq_work+0x16/0x20 [ 556.477225][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 556.477241][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 556.477253][ C1] RSP: 0018:ffffc90005777400 EFLAGS: 00000206 [ 556.477264][ C1] RAX: 0878a6627da0f800 RBX: 1ffff92000aeee88 RCX: 0878a6627da0f800 [ 556.477275][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 556.477286][ C1] RBP: ffffc900057774f0 R08: ffffffff90af62df R09: 1ffffffff215ec5b [ 556.477297][ C1] R10: dffffc0000000000 R11: fffffbfff215ec5c R12: 0000000000000246 [ 556.477308][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 556.477329][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 556.477346][ C1] ? page_ext_get+0x1de/0x2a0 [ 556.477365][ C1] __rcu_read_unlock+0x78/0xd0 [ 556.477380][ C1] page_ext_put+0x91/0xb0 [ 556.477395][ C1] copy_page_range+0x24ea/0x3900 [ 556.477437][ C1] ? pfn_valid+0x450/0x450 [ 556.477456][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 556.477480][ C1] copy_mm+0xec3/0x1690 [ 556.477503][ C1] ? copy_signal+0x680/0x680 [ 556.477516][ C1] ? lockdep_init_map_type+0x98/0x8d0 [ 556.477542][ C1] ? __init_rwsem+0x11e/0x160 [ 556.477558][ C1] ? copy_signal+0x556/0x680 [ 556.477574][ C1] copy_process+0x1979/0x4030 [ 556.477595][ C1] ? copy_process+0x94d/0x4030 [ 556.477615][ C1] ? idle_dummy+0x10/0x10 [ 556.477635][ C1] kernel_clone+0x24b/0x900 [ 556.477652][ C1] ? create_io_thread+0x170/0x170 [ 556.477675][ C1] __x64_sys_clone+0x1a7/0x220 [ 556.477692][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 556.477717][ C1] ? syscall_enter_from_user_mode+0x2a/0x80 [ 556.477735][ C1] do_syscall_64+0x4c/0xa0 [ 556.477752][ C1] ? clear_bhb_loop+0x60/0xb0 [ 556.477766][ C1] ? clear_bhb_loop+0x60/0xb0 [ 556.477782][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.477798][ C1] RIP: 0033:0x7f510459c799 [ 556.477816][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.477828][ C1] RSP: 002b:00007f5105489fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 556.477842][ C1] RAX: ffffffffffffffda RBX: 00007f5104815fa0 RCX: 00007f510459c799 [ 556.477853][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000108000 [ 556.477863][ C1] RBP: 00007f5104632c99 R08: 0000000000000000 R09: 0000000000000000 [ 556.477872][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 556.477881][ C1] R13: 00007f5104816038 R14: 00007f5104815fa0 R15: 00007fffc83e16f8 [ 556.477900][ C1]