last executing test programs: 6.759614306s ago: executing program 2 (id=7242): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @enum64={0x2, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x8, 0x9, 0x7ff}, {0xc, 0x7, 0x9}, {0x1, 0x9, 0xc}, {0x5, 0xff, 0x4}, {0x8, 0x800, 0x400}, {0x9, 0xfffffbff, 0x1}, {0xa, 0x1, 0xd507}]}]}}, 0x0, 0xa6, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x5, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="c7255e2158fdca51570a47d60067cbab2260c9a9308615e68fb9e4647bf76a06d9202d1674f2180e3baa614b31f070a09e07c1dd94b4534f904517157777ce8e7e42f17f5f2325f05b0c3edb3b6562d3c74e5147ccadf5007fb4954b6b8ee00080000000000000b69a8323c8bfd26100357bd9ce51887f7c5649944aa4f27496d66d44ab9012540a52f3f0112e614286c7cb921b60a65a4c26e757ac5646c62804d5fa56a17c8a881efd083f5449cdaae55c091cc6547d70884db466f70c6906134a5f70d775512cc881f78324ee1d262341808c966bb93a5b9f257234382122732d5531c2ec9936795f40c29b2a00"/248], &(0x7f0000000c00)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000500"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000060000000c0000004ce484bf84730c0000000200000000000000000000faaccb3fee8543cbe35b91216c0905cfdec9f485f4605064d9bdc702dd28efb26f90e5689689b3ca46c71f3d5d29c79d70a261f47e2d84d9b55ec83f75c96dce1e605163e8000000"], 0x0, 0x26}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x2, 0x0, 0x2, 0xc, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x4a}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f40)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000f80)=[{0x3, 0x2, 0x3}, {0x5, 0x4, 0x7, 0x7}, {0x0, 0x3, 0x6, 0xa}, {0x3, 0x3, 0xa, 0x2}, {0x4, 0x2, 0x1, 0x2}, {0x0, 0x2, 0x1, 0x1}], 0x10, 0x9}, 0x94) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="00000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 6.622952599s ago: executing program 1 (id=7234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x10040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x91}, [@ldst={0x6, 0x2, 0x0, 0x0, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000000200)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x10}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r3}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfffffffa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000040040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) 6.513814552s ago: executing program 0 (id=7235): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x11) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x82}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 6.320525647s ago: executing program 3 (id=7236): r0 = socket$kcm(0x29, 0x2, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, r4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x70000, 0x0) 6.090344624s ago: executing program 4 (id=7237): socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x10cc42, 0xbd4, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff000}, 0x10c002, 0xac5d, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0xc, 0x0, 0x7fffffff, 0xc0000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x2, 0x9, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x2004}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0xffffffffffffffff) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="4d982fd1a8f7baca323601921b6e4eb1565b2a8d1ff975248480486a4fecf5", 0x1f}, {&(0x7f00000008c0)="165c34101ec7cb76bd6ac77b87cfbfe7116bbb025610449aa1fb7133450a888f225d82007b12a67dda37c5cf3fd9fd6a0270b915a8fc7993d9512e8cecbd1c855f72ff81e869b010bab18d489eb08166a68531200c602b99637fae5f237b49d24b29d910ba45e60f0b80ee66e4b8967a2a58cf274f4c5deaae286457fa2962368ab781f56797b39c579a3c8030638b1b6857", 0x92}, {&(0x7f0000000600)="53d160f00778271319829048cb5511147cfa3d4fda785bc748c83f7c678ea805293c6440dc302b7d797f6517dc9228d4c5bb99644be60926c2d80057f120c32986ebd4afcd9d2d10b752480000000000", 0x50}, {&(0x7f0000000700)="2977903d8c48c8f8868d37366e7239b014afedf0c7c179b4778178452579a03d0581d26b7235a96fb6667ab3ce3b7f3a9deda7e4", 0x34}], 0x5}, 0x0) (async) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) (async) sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) (async) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x18012, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x479b, 0x80000003, 0x2, 0x3cd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r4, 0x0, 0x7, &(0x7f00000001c0)='ns/net\x00'}, 0x30) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) recvmsg$kcm(r2, 0x0, 0x40010103) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.731818514s ago: executing program 3 (id=7238): r0 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = socket$kcm(0x10, 0x100000000002, 0x4) close(r2) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000880)=""/253, 0xfd}, {&(0x7f0000000980)=""/4, 0x4}], 0x6, &(0x7f0000000a40)=""/131, 0x83}, 0x40000122) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000b, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x7, 0x4, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r5], 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/51, 0x33, 0x0, &(0x7f0000000040)=""/93, 0x5d}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r6, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r7, &(0x7f0000000800), &(0x7f00000006c0)=""/194}, 0x20) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000122) 5.4968551s ago: executing program 4 (id=7239): r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x7, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x20, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xe000000000000000}, 0x1, 0xfffffffffffffffd, 0x80000001, 0x2, 0x8000000, 0xb67, 0x3, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0x2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09544d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x82b00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000240)="9c85345b6a2aaca2064ecc006161c2fe4f2d593eb38d62f18ea8b30c6595293e8114d046765097e77a677bf010ff2d810b121d38288b44cafe6cc8f47aa001151adf4ac0c3fbf488f018a5ef3790ebe6d1ae66837edc95af2184d0b587d43a9b0ca720a4c155e7cac791", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x10, 0x4}, {0x0, 0x4, 0xc, 0x4}], 0x10, 0x800}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x25, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0xa, 0x1, &(0x7f0000000140)={0x0, 0x0}) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x49, &(0x7f0000000000), 0x4) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0xc, 0x0, 0x8}, {0x94, 0x0, 0x2, 0xffffffff}]}) 5.333491685s ago: executing program 1 (id=7240): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) 5.209316997s ago: executing program 0 (id=7241): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb00001400a39020", 0x9}], 0x1, 0x0, 0x0, 0x1f000000}, 0x8044) 5.199052398s ago: executing program 2 (id=7243): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x7, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x6, 0x6, 0xd8, 0x5, 0x0, 0xfff, 0x2090, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp, 0x100020, 0x0, 0x6, 0x3, 0x2, 0x4, 0x7, 0x0, 0x9, 0x0, 0x77667fa3}, 0x0, 0xb, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x93, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) 4.896164736s ago: executing program 0 (id=7244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r6, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x5, 0xe, 0x0, &(0x7f0000000040)="6131ee2b0150bb2b01e805fe186b", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xb1) 4.895448306s ago: executing program 1 (id=7245): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.648518273s ago: executing program 3 (id=7246): perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x1d, 0xfd, 0x0, 0xfe, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0xb7, 0x2}, 0x40, 0x40000006, 0x0, 0x7, 0x3, 0x6, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0x89, 0x4, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x9360}, 0x100080, 0x3, 0x0, 0x8, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007911a800000000001e000000000000009500000c00000000e8275ffe7f4201"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfffffffffffffe73, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x80, 0x30, 0x43a1bd76, 0x8, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000f80), 0x4}, 0x4202, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000006}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x40810) setsockopt$sock_attach_bpf(r4, 0x84, 0x17, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x11, 0x3, 0xfffff00c}, {0x6, 0xaf, 0x5, 0x3}]}) socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000025c0), 0x0, &(0x7f00000011c0)=""/204, 0x41}, 0x40000143) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 4.334178601s ago: executing program 4 (id=7247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x400, 0xfffffffa, 0x21000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x6}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], 0x0}, 0x94) 3.756008797s ago: executing program 0 (id=7248): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001b40), 0x6}, 0x10c002, 0xac5d, 0x14, 0x3, 0x0, 0x1538, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x108282, 0xac5d, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00'], 0xfe33) 3.755445537s ago: executing program 2 (id=7249): r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x7, 0x4, 0x3, 0x7, 0x0, 0x8000000000000000, 0x81044, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8, 0xfe2}, 0x100400, 0x2, 0x3, 0x8, 0x1, 0x5, 0x95e3, 0x0, 0x9, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xa3, 0x23, 0x0, 0x6, 0x0, 0xf, 0x32000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2007, 0x0, @perf_bp, 0x2, 0x0, 0x9d23, 0x7, 0x7, 0x5, 0x10, 0x0, 0x273f0c26, 0x0, 0x100000003}, 0x0, 0xa, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x100}, 0x0, 0x6, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x2b, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r5 = syz_clone(0x24050000, &(0x7f0000000380)="92c5eddcfb6665bd6ccad93905456dd3832c8621062ea7d377cd07e4bd254a76ebe45e3f2bd071a6b717b625e378ad7e429241acb14f6d2543c25bfad788947a4b80d0821c107e0d4149b6cd39c7bc1475aff9d546d48755479b76e20d5648a940fc98ca4999c0e0181205d6d9aeae83b8905465247c80b3198e4367ec92637199d42c99995823f2984f3bdec6a5f4eb8459", 0x92, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000580)) perf_event_open(0x0, r5, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x230, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x4a) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x85, &(0x7f0000000ac0), 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000170000af0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x17, &(0x7f0000000200)=r11, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r11, 0x0, 0x9b, 0xd4, &(0x7f0000000380)="f9f187c349372a7597cd0e67b7414a724dd32a3992a5d467d02c4db5ece62bd6158ec6f32486a3876165eb453c147e21b5cb236f49090bc9fec82955ff06dfcb04e898aa7418e81de7ec07e9d0d830ff15955e4cb430bf242a23bbd844b933044226dc9a35aba17a8e687c87ee27e66a23debbf80c63507c44eff613a582731076cc5ce55c45b7d1beab17c44d5d43734bd627596650a66bfa7375", &(0x7f0000000540)=""/212, 0x4, 0x0, 0x79, 0xcf, &(0x7f0000000640)="481bd48fcac33936415b926bf0c1024220f37275f1f8b2a8cc6dc0fa6fdcaa9ea560bb59e86e758e1baeb5d74831752000ead2520ad4fddfba98ea66cd9d45d987f2f82cffe65aff482ff254126e6af9e6554e3b4de8afab03f17f7d76c10a9e2758b7d1e1adf572255c08172f84dcb9728fd79f62e2c12b66", &(0x7f00000006c0)="280973ac6af6adc596f0dc7bc171fc777f57d60bc1652c49e8928825fb379db3b799dbbe1dc889ffc014646fe2906be520337a8fa9f3a9558a6431003f40e60b100d3ef657c80ef22cb9639bacb91888cdf270c098d68cdf1eb4be5a4393d91ae8971b19528ee46329c7e1b122e83de8b78a62d8c7cbf63585f2d8e07d3e0c0d5ad1e256cae334a2b964f17c0498aeb8f23ed0a32b94685fc7f32dcf2797b713f37eb9401769fe47633111da993e198783f769589318111be60f2032b691a3efe181ff320bbbfba5bd05c5afed06b6", 0x1, 0x0, 0x800}, 0x50) socket$kcm(0x2, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_freezer_state(r12, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r13, &(0x7f00000000c0)='THAWED\x00', 0x7) 3.629200051s ago: executing program 1 (id=7250): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xe, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) 3.448403586s ago: executing program 4 (id=7251): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x7, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x6, 0x6, 0xd8, 0x5, 0x0, 0xfff, 0x2090, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp, 0x100020, 0x0, 0x6, 0x3, 0x2, 0x4, 0x7, 0x0, 0x9, 0x0, 0x77667fa3}, 0x0, 0xb, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x36}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x93, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x29, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @generic={0x4, 0x3, 0x8, 0xd, 0xa2}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_query, @alu={0x0, 0x1, 0x0, 0xb, 0x1, 0x18, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9d64}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, &(0x7f00000007c0), &(0x7f0000000640)=r6}, 0x20) r8 = getpid() perf_event_open(&(0x7f0000001840)={0x5, 0x80, 0x4, 0xe, 0x81, 0x2, 0x0, 0x9, 0x6e3b447f932de4bf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000001800), 0x7}, 0x2910, 0x100000001, 0x8, 0x4, 0xe8, 0x7, 0x0, 0x0, 0x1, 0x0, 0x5}, r8, 0xd, r2, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r7, &(0x7f00000004c0)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) openat$cgroup_subtree(r4, &(0x7f00000017c0), 0x2, 0x0) 3.335402448s ago: executing program 3 (id=7252): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x8, &(0x7f0000001580)=ANY=[@ANYBLOB="8532000004000000180000001b000000000000008100000018480000008c0000000000000000000000186100000400000000000000020000003f195000040000d6450cc7521cb494e2b0a0c028fd87af7ce765195a526df20bb6e52a7eda4c1fb0dc5390cda2be8b9e5c500e5e32804b4ac9cb90574243326de041a8152693859821e2ec3398451f6d5466a3df76a7740582ab6595e481e5d0d500e3ea85c881f7cba992d6a85cf071d6d78579779951e7a7dbf6b67b5e5d9bcf"], &(0x7f0000000180)='GPL\x00', 0x2, 0xb3, &(0x7f0000000500)=""/179, 0x41100, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xc, 0x6, 0x1000000}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000640)=[r0, r1, r1, r0], &(0x7f00000006c0)=[{0x4, 0x5, 0x2, 0x6}, {0x4, 0x4, 0x7, 0x1}], 0x10, 0xa38}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x002'], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xd, &(0x7f0000000ac0)=""/13, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b40)=[r6], &(0x7f0000000b80)=[{0x2, 0x4, 0x6}, {0x5, 0x4, 0x2, 0x3}, {0x2, 0x5, 0x10, 0x4}, {0x2, 0x4, 0x0, 0x1}, {0x2, 0x2, 0xf, 0x9}, {0x5, 0x4}, {0x1, 0x2, 0x7, 0xc}], 0x10, 0x5b}, 0x94) sendmsg(r2, &(0x7f0000001540)={&(0x7f0000000c80)=@can, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000d00)="5520065235136fee37c91512cf86dc3a7cfd7af07023cfa4c26e1e63ac66238f5a501789cf9456c99d958a7a65bf28c2ee5a2ecdaeaefc539e9bd92064cd344ecfde260fac5bf4721ee440b2f6ca1ae0b2a4879cc6cd69043a34d8123384615f3b92f1a8eb2030b84b822467bda5343b90a090cd27f5a28115cad4652c52e2c1e9a0608e5de33784fa18b745f593d78a8bcf03910c5591d9735bbfba696dacd5e69ba8cb31b35f85776857c2bbbc2957bb54fc305f620dba8c5256824fbd91405ab67b6d6b4d717460ac0b2821280e7cc38a37e270f8998c7e2a3e", 0xdb}, {&(0x7f0000000e00)="2ec9da4795f39b6a73d17b58999373fb0ac15bfd39a72ede37e7e5f95f32a509c216f63d", 0x24}, {&(0x7f0000000e40)="74540dba316c322de586561c3cb7b2d1c13bada8620932a7cacfc61c411de67e613ddd1189c3a56e8dc2f7b45f8f7416e2de9a444859637d41f1afd233bab78e488c8ed9c6e7c22236081711d7e6809bd506f07d03eba269df4743", 0x5b}, {&(0x7f0000000ec0)="109846c9cf61e3095cf745c103e0c32d22ba193c98798fb5535a1d59dbb95512975d8db5eb7820d339bd2fc90dab930120201a4f1f71abab4758b4796f77c0faa46bc09d983b22b1d55d52c655c359f5f907b818da8e25cacbd5a83515ffa02cf85fa1b5fdf49f5788ededafe76807845a7ee93b7072a57fd57db6f177dac41396e616f4fc55cb39b11b96728f81af3a996217790399a3f83cbdb4e74d6562c20e832684c911a39cfdfa54e6b5d20f7ec9ce0a7ea98a18b8606ae578c83e9a1493b66f06efc4dd4274edceb08a16f2eb3b46fb2dfe635a8892e0", 0xda}, {&(0x7f0000000fc0)="9e9140922b739679c0480ceeadaaacf655fc62e336e77198908649badcd6115d37182a1b940bc33eba9215ba29461ac441a0974a3467ea8b3e7f46b5c21bd41b54f74dfdb611e3d92d040a1a1383e04836e822c0465ae1548652403706f17d98ebd2a3ad7c158d6d04b25ea21272952c14fe5cc072d4c5d7cd1334e559bfb102e8b502e11a3771635db38c88700ae4c5b58f6e", 0x93}, {&(0x7f0000001080)="23cb", 0x2}, {&(0x7f00000010c0)="84dbd0af98", 0x5}, {&(0x7f0000001100)="e23db66d36882aea756855417c47dd561fec78ef67571485a21fc86c582a297b6b4dc19df16cf065b4f8e70ba2a26292217091e1111c6725ebba8b95406c4e7dea17407fdf569541d98878623b53757d858c4ffb841a034379991b978ad1abe687a6bacca857fdedfb8eebebd891d7396f71625a7c73207ab2f76fc1a234e592be588bf52bc9fcb977a0622d2e99eecafbddcfb86c", 0x95}, {&(0x7f00000011c0)="bd85f90c36055e8615ab7144fb150225b4428512897ae36c63e094ab27228667875b0533b27cf19fb109d2e8ba1b6e14626e0e088f6fd1533f8383060a71ef54c8815ab6bcd3ee0ef4073ba426bad66f2b2a1ac292c616d7bcfa56d0eaf31206e7a5cae59e1bc727cbe0a3ed9beb9b02c2b3a5dd5b2c8ae9b6fc8dd5dfe133724329e2c5b83d4182c1e089112a8909eae3f5e51e2fb220228324669c2c1636bb3a5c2efc0b43ce5af2c3268fd5b074f013d96973fd48f1a9fcd452b0f284d66abf907aef3c", 0xc5}], 0x9, &(0x7f0000001380)=[{0x50, 0x117, 0xabfd, "0b45499e1fbd664c4f3aabaf7538513b54e6bd95f52c6c1f0f1d7506de2593b2b3af61c9d6347f44825d245c182b6bc8ae82816ae3bf7d49e339"}, {0x80, 0x0, 0xffffffff, "a8569d9405dfbf19b11bbb7697d7760e6c6f2e74143208fb89afdfd5d6997b6a78416428f039806c40a799ede74b46c1c09d86a97e0e9b1ef75c6b39425cf1c6e2a6018b3247ff36168a14138dcedd30fdeefd2c1a6b85131c863d886d25c2f874ed2cd308b4313dc82dd03865cc89"}, {0xf0, 0x112, 0x4, "b69a02f495a661df3ebeee43a3a7e806e4b4013cbb95c9f9dfa3bf2c4440f4b19ab12249f5e6f1579eb5f8cce38802fcc5ded3e6b24188381c6f4bd314d1f6371a5587f8dd8be8a466d5f6d3277b63d541b677930b3c112957b1033292bb18dbb3ce76574e760748d445fad7009b1f92e12f9dc6a148b68b14855ce69cbf547fe146330fd16667d9808d5dd2ce22bf55cf0f784187dd82c7a5439823f1ca98aa89552ae7fa32f3818ceae16c84f3ab306e429d2d618ea63475fadcc95366ae062f7195cbb703b3628462432f771bd22356e380e5b4a0eddce5cb"}], 0x1c0}, 0x4040010) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8=r7], 0x9a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@ifindex, 0x37, 0x1, 0x9, &(0x7f00000007c0)=[0x0], 0x1, 0x0, &(0x7f0000000800), &(0x7f0000000880), &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0xb, &(0x7f00000009c0)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd1}], &(0x7f0000000a40)='GPL\x00', 0x5, 0xbb, &(0x7f0000000a80)=""/187, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x4, 0xe, 0x10001, 0x7fff}, 0x10, 0x1a0c0, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)=[r0], 0x0, 0x10, 0xfffffffb}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000000000000000e000000000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20) 3.153244624s ago: executing program 1 (id=7253): close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) 3.061081916s ago: executing program 2 (id=7254): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @enum64={0x2, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x8, 0x9, 0x7ff}, {0xc, 0x7, 0x9}, {0x1, 0x9, 0xc}, {0x5, 0xff, 0x4}, {0x8, 0x800, 0x400}, {0x9, 0xfffffbff, 0x1}, {0xa, 0x1, 0xd507}]}]}}, 0x0, 0xa6, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x5, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="c7255e2158fdca51570a47d60067cbab2260c9a9308615e68fb9e4647bf76a06d9202d1674f2180e3baa614b31f070a09e07c1dd94b4534f904517157777ce8e7e42f17f5f2325f05b0c3edb3b6562d3c74e5147ccadf5007fb4954b6b8ee00080000000000000b69a8323c8bfd26100357bd9ce51887f7c5649944aa4f27496d66d44ab9012540a52f3f0112e614286c7cb921b60a65a4c26e757ac5646c62804d5fa56a17c8a881efd083f5449cdaae55c091cc6547d70884db466f70c6906134a5f70d775512cc881f78324ee1d262341808c966bb93a5b9f257234382122732d5531c2ec9936795f40c29b2a00"/248], &(0x7f0000000c00)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000500"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000060000000c0000004ce484bf84730c0000000200000000000000000000faaccb3fee8543cbe35b91216c0905cfdec9f485f4605064d9bdc702dd28efb26f90e5689689b3ca46c71f3d5d29c79d70a261f47e2d84d9b55ec83f75c96dce1e605163e8000000"], 0x0, 0x26}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x2, 0x0, 0x2, 0xc, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x4a}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f40)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000f80)=[{0x3, 0x2, 0x3}, {0x5, 0x4, 0x7, 0x7}, {0x0, 0x3, 0x6, 0xa}, {0x3, 0x3, 0xa, 0x2}, {0x4, 0x2, 0x1, 0x2}, {0x0, 0x2, 0x1, 0x1}], 0x10, 0x9}, 0x94) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="00000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 2.898352681s ago: executing program 0 (id=7255): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) 1.365073073s ago: executing program 4 (id=7256): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="4099da2e7848052ca42f25a328d8a26a4f9123825ffaf4b207f0b832eae1474196f9f23a7701a5bb1c93b6dbca66", @ANYRES64=0x0], 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a4aa0000000000000000000500"/25], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000e35411a732ef72640000007b8af8ff00000000bca2000000000000a6020000f8ffff090000000008000000b70400000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xb9, 0x27, &(0x7f0000000200)="b68715d7c50d22524b932fa5c4bafa2d291168e5f937361a494239ec1389e60a4f3d443ed23529d1a891809b6295aa266d86140486d764b1143d2f48bf81f8e5334902b31964a9cf7b04842934c847e62ddce3e81238f2a786be9726e9ac34e4728ec8568c311c33b3bcfd0ecd2f3e7e20aef3fe1266bcfbbf313aee5a7997b6adb4019eb845b3f82b14694ad6365188f535e30518a6b6a73af72878c1cd4f5415c8481520bb0b49642f931e6d86777e6016bb783a24ec4bc0", &(0x7f00000002c0)=""/39, 0x9, 0x0, 0xa5, 0x40, &(0x7f0000000300)="264bfc7b56aab1e22638fadcc2b3af50e82df76d1efa5336f379a97b6ac32643416f613c449b0a042d7fd16d93875a8be88802ff08001f8e2b2179c99f64b19d3b8971854d3b3487f203d7227a2532c46b7ad2a076ae9bb0d5dea9611d4d7506a213f8aef383287e0f90594eabad93a53718c92de65b815c1d429080c08d754061caddba1541a7cc8f9b33576ba4305b4b54ba3ace41a8bc9c7a1813cd6f385379e2aae955", &(0x7f00000003c0)="6a5278ee22af109e9009a2ba3cbfd635acddfab81229861bbda7b9815c3d3e4ceafa26b433f3b9d072678aa1c64ed0f2a3442fa872d0a18fd7c1ca66c6244709", 0x5, 0x0, 0x1000}, 0x50) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x9}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1.364575683s ago: executing program 3 (id=7257): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (rerun: 32) r0 = socket$kcm(0xa, 0x1, 0x0) (async, rerun: 64) socket$kcm(0x11, 0x2, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20008001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000080), 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @volatile, @func={0xc, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x65}, 0x28) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01000000000000000000280000002800000004000000020000000100000f0100000003000000010100000000000048000000000000000f030000007472e900002e00"], &(0x7f00000003c0)=""/4096, 0x44, 0x1000, 0x1}, 0x20) (async, rerun: 64) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0209070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6", 0x79}], 0x1}, 0x0) 1.226411146s ago: executing program 0 (id=7258): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x37}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="0000000000000000000000fa88a8", 0x36}], 0x1}, 0x4000080) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.226170576s ago: executing program 1 (id=7259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r6, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x5, 0xe, 0x0, &(0x7f0000000040)="6131ee2b0150bb2b01e805fe186b", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xb1) 1.131941439s ago: executing program 2 (id=7260): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.009135102s ago: executing program 3 (id=7261): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x8, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x5, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000000010000081100000900000001", @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) (fail_nth: 4) 34.433409ms ago: executing program 2 (id=7262): perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x1d, 0xfd, 0x0, 0xfe, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0xb7, 0x2}, 0x40, 0x40000006, 0x0, 0x7, 0x3, 0x6, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0x89, 0x4, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x9360}, 0x100080, 0x3, 0x0, 0x8, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007911a800000000001e000000000000009500000c00000000e8275ffe7f4201"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfffffffffffffe73, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8ffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x80, 0x30, 0x43a1bd76, 0x8, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000f80), 0x4}, 0x4202, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000006}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x40810) setsockopt$sock_attach_bpf(r4, 0x84, 0x17, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x11, 0x3, 0xfffff00c}, {0x6, 0xaf, 0x5, 0x3}]}) socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000025c0), 0x0, &(0x7f00000011c0)=""/204, 0x41}, 0x40000143) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 0s ago: executing program 4 (id=7263): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x8, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x15, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000b00875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x5, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000000010000081100000900000001", @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r5}, 0x38) sendmsg(r4, &(0x7f0000002540)={&(0x7f0000000140)=@ethernet={0x95a94eb4754cf58}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)="1d055627e5c47a35aa340d2cef048d8c5bec8f9a3b3432e604033965c0d5a5b041f8a37b5257259f74db237b6d0328f79ddfeebf99082568a01e25a479d568a908f4bfd6f0412de3e7eccc49ba0695435a15d0adebadc5099d7c4243df57ad", 0x5f}, {&(0x7f0000000340)="99fd28f1911eb9e94dab824adc78e82fa6f2bc48584c5d9f632023b175e93ea270b524143282dcadb977bc1b7191527b44b75dd9ca3587a95c9629595384a0105a4268eff993f6b98d9d9c653cd063c88b2e44500c", 0x55}, {&(0x7f00000003c0)="e504a8d8785e3669221c0a4f2c6f4e9af324c47f763e77291ebb09e3731f95ce24d453edf5620ed032d350fa02879f60d85263d69ef720f9408ea25eb3661bbf3d9912fdcdd9f66cff1093576a409059ced31745144b149365edf2b46263222a2a8bebb80e1aa07a7890c1d53dea0cc44bf6eb5e6e98dda4cfd00204be04d9e2ca212b2d9c4cfab1a1fbd7e7cb8a1a39def7c4bfde7dfd0548f8eb1515ab0fc06d50b3f2fa7364d4bd03ad7e6648d855eb4ce80b9f37a40cc47cbbf158158429a110ab16d8e2c8cd0d72f14c1c86ab2cea6a", 0xd2}, {&(0x7f00000004c0)="bdda3ea57c8a44fabf6348fffd", 0xd}, {&(0x7f0000000500)="9e7a", 0x2}, {&(0x7f0000000540)="1ff423fcce8c203fb9b7fafdea8d2083a21931c08dbc7daa84eb8e711d10fc5a517cb5688f3238b6f2e51a6ab3e0262e7eeedc36c35fd42c82197db2068514c0899a85e249c24f8504ed3b561c079bef80907a1b5358c1d730ff703fb180af735ba8481e37db0486203936", 0x6b}, {&(0x7f00000005c0)="49f7bf221cdea9fb4c3871cd47e9afa0858b261271f511de5d72a25a55a68c5bd99271f59a6bb4b3d236646e48d12d164ed65adae18768895fcc6d769350ed184d5d4d94d301f30fda678ed51ffc83532c2dbd654ac0df1dec5d54417f5660f46ff937e0656a4b11bbac218ebce12f488716d3e191cdf0", 0x77}, {&(0x7f0000000680)="13d30e76c2b68da67b16b4bca5d1d0", 0xf}], 0x8, &(0x7f0000001500)=[{0x1010, 0x115, 0x1, "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"}], 0x1010}, 0x24008000) kernel console output (not intermixed with test programs): 000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.730771][T22834] R13: 00007f8b2ec16038 R14: 00007f8b2ec15fa0 R15: 00007fff08be8578 [ 1324.738776][T22834] [ 1326.660923][T22871] netlink: 'syz.3.5632': attribute type 25 has an invalid length. [ 1326.729795][T22871] netlink: 'syz.3.5632': attribute type 7 has an invalid length. [ 1327.789993][T22879] netlink: 'syz.2.5634': attribute type 17 has an invalid length. [ 1327.804903][T22879] netlink: 'syz.2.5634': attribute type 16 has an invalid length. [ 1327.838288][T22879] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5634'. [ 1327.905423][T22885] netlink: 'syz.2.5634': attribute type 19 has an invalid length. [ 1327.931783][T22885] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.5634'. [ 1328.072877][T22881] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5633'. [ 1328.991503][T22908] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5644'. [ 1329.076864][T22908] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1329.126427][T22908] CPU: 1 PID: 22908 Comm: syz.3.5644 Not tainted syzkaller #0 [ 1329.133984][T22908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1329.144089][T22908] Call Trace: [ 1329.147486][T22908] [ 1329.150438][T22908] dump_stack_lvl+0x188/0x24e [ 1329.155145][T22908] ? show_regs_print_info+0x12/0x12 [ 1329.160454][T22908] ? load_image+0x400/0x400 [ 1329.164992][T22908] sysfs_warn_dup+0x8a/0xa0 [ 1329.169518][T22908] sysfs_do_create_link_sd+0xc0/0x110 [ 1329.174915][T22908] device_add+0x7ed/0xfb0 [ 1329.179274][T22908] wiphy_register+0x1d9f/0x2ac0 [ 1329.184258][T22908] ? cfg80211_event_work+0x40/0x40 [ 1329.189479][T22908] ? minstrel_ht_alloc+0x894/0xa20 [ 1329.194792][T22908] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1329.200973][T22908] ieee80211_register_hw+0x2d00/0x39f0 [ 1329.206460][T22908] ? ieee80211_register_hw+0xf21/0x39f0 [ 1329.212025][T22908] ? ieee80211_register_hw+0xf21/0x39f0 [ 1329.217686][T22908] ? ieee80211_tasklet_handler+0x20/0x20 [ 1329.223360][T22908] ? memset+0x1e/0x40 [ 1329.227357][T22908] ? __hrtimer_init+0x186/0x270 [ 1329.232232][T22908] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1329.237986][T22908] hwsim_new_radio_nl+0xafa/0xce0 [ 1329.243047][T22908] genl_family_rcv_msg_doit+0x22a/0x330 [ 1329.248609][T22908] ? end_current_label_crit_section+0x170/0x170 [ 1329.254877][T22908] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1329.260885][T22908] ? bpf_lsm_capable+0x5/0x10 [ 1329.265579][T22908] ? security_capable+0x85/0xb0 [ 1329.270625][T22908] genl_rcv_msg+0x604/0x790 [ 1329.275150][T22908] ? genl_bind+0x360/0x360 [ 1329.279594][T22908] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1329.286000][T22908] netlink_rcv_skb+0x1fb/0x450 [ 1329.290879][T22908] ? genl_bind+0x360/0x360 [ 1329.295425][T22908] ? netlink_ack+0x1170/0x1170 [ 1329.300394][T22908] ? down_read+0x1a8/0x2d0 [ 1329.304972][T22908] genl_rcv+0x24/0x40 [ 1329.309060][T22908] netlink_unicast+0x74d/0x8d0 [ 1329.313854][T22908] netlink_sendmsg+0x8ad/0xbd0 [ 1329.318737][T22908] ? netlink_getsockopt+0x550/0x550 [ 1329.324006][T22908] ? aa_sock_msg_perm+0x94/0x150 [ 1329.328961][T22908] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1329.334260][T22908] ? security_socket_sendmsg+0x7c/0xa0 [ 1329.339749][T22908] ? netlink_getsockopt+0x550/0x550 [ 1329.345059][T22908] ____sys_sendmsg+0x5be/0x970 [ 1329.349943][T22908] ? __sys_sendmsg_sock+0x30/0x30 [ 1329.354986][T22908] ? __import_iovec+0x315/0x500 [ 1329.359867][T22908] ? import_iovec+0x6f/0xa0 [ 1329.364387][T22908] ___sys_sendmsg+0x2a2/0x360 [ 1329.369200][T22908] ? __sys_sendmsg+0x290/0x290 [ 1329.374013][T22908] ? trace_call_bpf+0xbf/0x6b0 [ 1329.378808][T22908] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1329.385270][T22908] __se_sys_sendmsg+0x1bb/0x2a0 [ 1329.390143][T22908] ? ct_nmi_exit+0x145/0x1c0 [ 1329.394746][T22908] ? __x64_sys_sendmsg+0x80/0x80 [ 1329.399817][T22908] ? lockdep_hardirqs_on+0x94/0x140 [ 1329.405070][T22908] do_syscall_64+0x4c/0xa0 [ 1329.409540][T22908] ? clear_bhb_loop+0x60/0xb0 [ 1329.414232][T22908] ? clear_bhb_loop+0x60/0xb0 [ 1329.419027][T22908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1329.424942][T22908] RIP: 0033:0x7f8b2e99cdd9 [ 1329.429380][T22908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.449080][T22908] RSP: 002b:00007f8b2f82c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1329.457696][T22908] RAX: ffffffffffffffda RBX: 00007f8b2ec15fa0 RCX: 00007f8b2e99cdd9 [ 1329.465693][T22908] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1329.473682][T22908] RBP: 00007f8b2ea32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1329.481667][T22908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.489649][T22908] R13: 00007f8b2ec16038 R14: 00007f8b2ec15fa0 R15: 00007fff08be8578 [ 1329.497739][T22908] [ 1329.546857][T22922] netlink: 'syz.0.5647': attribute type 10 has an invalid length. [ 1330.163042][T22948] FAULT_INJECTION: forcing a failure. [ 1330.163042][T22948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1330.202894][T22948] CPU: 0 PID: 22948 Comm: syz.3.5655 Not tainted syzkaller #0 [ 1330.210450][T22948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1330.220644][T22948] Call Trace: [ 1330.224040][T22948] [ 1330.227026][T22948] dump_stack_lvl+0x188/0x24e [ 1330.231781][T22948] ? show_regs_print_info+0x12/0x12 [ 1330.237051][T22948] ? load_image+0x400/0x400 [ 1330.241879][T22948] ? __lock_acquire+0x7d10/0x7d10 [ 1330.246979][T22948] should_fail_ex+0x399/0x4d0 [ 1330.251724][T22948] _copy_from_user+0x2c/0x170 [ 1330.256456][T22948] iovec_from_user+0x143/0x360 [ 1330.261375][T22948] __import_iovec+0x6d/0x500 [ 1330.266046][T22948] import_iovec+0x6f/0xa0 [ 1330.270431][T22948] ___sys_sendmsg+0x252/0x360 [ 1330.275176][T22948] ? __sys_sendmsg+0x290/0x290 [ 1330.280050][T22948] ? __lock_acquire+0x7d10/0x7d10 [ 1330.285182][T22948] __se_sys_sendmsg+0x1bb/0x2a0 [ 1330.290111][T22948] ? __x64_sys_sendmsg+0x80/0x80 [ 1330.295242][T22948] ? lockdep_hardirqs_on+0x94/0x140 [ 1330.300690][T22948] do_syscall_64+0x4c/0xa0 [ 1330.305172][T22948] ? clear_bhb_loop+0x60/0xb0 [ 1330.310003][T22948] ? clear_bhb_loop+0x60/0xb0 [ 1330.314745][T22948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1330.320672][T22948] RIP: 0033:0x7f8b2e99cdd9 [ 1330.325199][T22948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.345009][T22948] RSP: 002b:00007f8b2f82c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1330.353467][T22948] RAX: ffffffffffffffda RBX: 00007f8b2ec15fa0 RCX: 00007f8b2e99cdd9 [ 1330.361682][T22948] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1330.369850][T22948] RBP: 00007f8b2f82c090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.377841][T22948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1330.385925][T22948] R13: 00007f8b2ec16038 R14: 00007f8b2ec15fa0 R15: 00007fff08be8578 [ 1330.393953][T22948] [ 1330.651066][T22956] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5654'. [ 1330.731592][T22958] netlink: 'syz.2.5656': attribute type 4 has an invalid length. [ 1330.812186][T22958] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5656'. [ 1332.676337][T22971] netlink: 'syz.2.5659': attribute type 10 has an invalid length. [ 1332.710702][T22971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5659'. [ 1332.790728][T22971] device team0 entered promiscuous mode [ 1332.800978][T22971] device team_slave_0 entered promiscuous mode [ 1332.817060][T22971] device team_slave_1 entered promiscuous mode [ 1332.857135][T22971] device wlan1 entered promiscuous mode [ 1332.936189][T22971] bond0: (slave team0): Releasing backup interface [ 1333.204485][T22971] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1333.584604][T22991] netlink: 'syz.4.5661': attribute type 13 has an invalid length. [ 1333.593965][T22991] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5661'. [ 1333.748881][T22991] erspan0: refused to change device tx_queue_len [ 1333.759856][T22991] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1333.862567][T23002] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5667'. [ 1333.973821][T23003] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1334.051311][T23000] netlink: 'syz.1.5668': attribute type 21 has an invalid length. [ 1334.497008][T23007] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5670'. [ 1335.721121][T23030] netlink: 76144 bytes leftover after parsing attributes in process `syz.1.5678'. [ 1335.850206][T23036] netlink: 'syz.0.5681': attribute type 2 has an invalid length. [ 1336.161779][T23036] device 0 entered promiscuous mode [ 1336.330411][T23050] netlink: 'syz.3.5687': attribute type 10 has an invalid length. [ 1336.352021][T23050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5687'. [ 1336.392210][T23050] bridge0: port 3(team0) entered blocking state [ 1336.399258][T23050] bridge0: port 3(team0) entered forwarding state [ 1336.437851][T23050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.778906][T23061] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1337.277717][T23071] netlink: 8063 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1337.523825][T23074] tap0: tun_chr_ioctl cmd 2147767517 [ 1337.665220][T23078] netlink: 'syz.2.5696': attribute type 21 has an invalid length. [ 1337.688741][T23080] netlink: 'syz.4.5698': attribute type 16 has an invalid length. [ 1337.697277][T23080] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5698'. [ 1337.724154][T23078] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1337.742610][T23074] netlink: 'syz.3.5695': attribute type 1 has an invalid length. [ 1337.771294][T23074] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5695'. [ 1338.122423][T23098] netlink: 'syz.2.5702': attribute type 2 has an invalid length. [ 1339.000482][T23110] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.5707'. [ 1339.038362][T23110] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1339.190740][T23111] netlink: 'syz.1.5706': attribute type 10 has an invalid length. [ 1339.208723][T23111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1339.258857][T23111] device team0 entered promiscuous mode [ 1339.284957][T23111] device team_slave_0 entered promiscuous mode [ 1339.369037][T23111] device team_slave_1 entered promiscuous mode [ 1339.376191][T23111] bridge0: port 3(team0) entered blocking state [ 1339.408394][T23111] bridge0: port 3(team0) entered disabled state [ 1340.805821][T23147] netlink: 'syz.0.5720': attribute type 21 has an invalid length. [ 1340.851638][T23151] netlink: 'syz.2.5718': attribute type 3 has an invalid length. [ 1340.995877][T23151] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5718'. [ 1341.575390][T23158] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5719'. [ 1342.085703][T23159] netlink: 'syz.1.5719': attribute type 10 has an invalid length. [ 1342.142785][T23159] device bridge_slave_1 left promiscuous mode [ 1342.158618][T23159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.182462][T23159] device bridge_slave_1 entered promiscuous mode [ 1342.201841][T23159] team0: Port device bridge_slave_1 added [ 1342.448921][T23185] netlink: 'syz.0.5728': attribute type 19 has an invalid length. [ 1343.588466][T23203] netlink: 'syz.0.5735': attribute type 17 has an invalid length. [ 1343.617254][T23203] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1343.651028][T23206] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5733'. [ 1343.758819][T23204] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5732'. [ 1343.813990][T23206] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5733'. [ 1343.986781][T23200] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5732'. [ 1344.923825][T23224] netlink: 'syz.1.5741': attribute type 21 has an invalid length. [ 1344.937403][T23224] netlink: 13070 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1345.449113][T23242] netlink: 'syz.3.5749': attribute type 21 has an invalid length. [ 1346.063989][T23258] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5752'. [ 1346.116240][T23258] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5752'. [ 1346.275561][T23264] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5758'. [ 1346.339433][T23264] netlink: 'syz.4.5758': attribute type 12 has an invalid length. [ 1346.398573][T23264] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5758'. [ 1347.258246][T23274] netlink: 'syz.3.5760': attribute type 21 has an invalid length. [ 1347.266317][T23274] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5760'. [ 1347.762732][T23276] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.5760'. [ 1347.830733][T23280] netlink: 'syz.4.5762': attribute type 21 has an invalid length. [ 1348.673285][T23298] netlink: 'syz.0.5766': attribute type 3 has an invalid length. [ 1348.758756][T23298] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5766'. [ 1349.123737][T23305] sctp: [Deprecated]: syz.4.5767 (pid 23305) Use of int in maxseg socket option. [ 1349.123737][T23305] Use struct sctp_assoc_value instead [ 1349.128411][T23308] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5768'. [ 1349.426897][T23315] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5770'. [ 1350.752549][T23333] netlink: 'syz.1.5777': attribute type 1 has an invalid length. [ 1350.790949][T23333] netlink: 'syz.1.5777': attribute type 4 has an invalid length. [ 1350.870216][T23333] __nla_validate_parse: 3 callbacks suppressed [ 1350.870256][T23333] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5777'. [ 1351.287989][T23334] netlink: 'syz.3.5775': attribute type 2 has an invalid length. [ 1351.362981][T23334] netlink: 'syz.3.5775': attribute type 1 has an invalid length. [ 1351.532142][T23334] netlink: 'syz.3.5775': attribute type 2 has an invalid length. [ 1351.619679][T23334] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.5775'. [ 1351.682170][T23341] netlink: 'syz.2.5779': attribute type 21 has an invalid length. [ 1351.765882][T23341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1352.085473][T23341] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1353.729054][T23371] FAULT_INJECTION: forcing a failure. [ 1353.729054][T23371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1353.763759][T23351] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5781'. [ 1353.880969][T23371] CPU: 1 PID: 23371 Comm: syz.3.5786 Not tainted syzkaller #0 [ 1353.888524][T23371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1353.898609][T23371] Call Trace: [ 1353.901907][T23371] [ 1353.904853][T23371] dump_stack_lvl+0x188/0x24e [ 1353.909658][T23371] ? show_regs_print_info+0x12/0x12 [ 1353.914882][T23371] ? load_image+0x400/0x400 [ 1353.919497][T23371] ? __lock_acquire+0x7d10/0x7d10 [ 1353.924554][T23371] ? trace_call_bpf+0x5d6/0x6b0 [ 1353.929428][T23371] should_fail_ex+0x399/0x4d0 [ 1353.934126][T23371] _copy_from_user+0x2c/0x170 [ 1353.938836][T23371] __sys_bpf+0x2ea/0x780 [ 1353.943124][T23371] ? bpf_link_show_fdinfo+0x380/0x380 [ 1353.948704][T23371] ? lock_chain_count+0x20/0x20 [ 1353.953580][T23371] __x64_sys_bpf+0x78/0x90 [ 1353.958201][T23371] do_syscall_64+0x4c/0xa0 [ 1353.962649][T23371] ? clear_bhb_loop+0x60/0xb0 [ 1353.967343][T23371] ? clear_bhb_loop+0x60/0xb0 [ 1353.972041][T23371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1353.977956][T23371] RIP: 0033:0x7f8b2e99cdd9 [ 1353.982417][T23371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.002048][T23371] RSP: 002b:00007f8b2f80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1354.010486][T23371] RAX: ffffffffffffffda RBX: 00007f8b2ec16090 RCX: 00007f8b2e99cdd9 [ 1354.018558][T23371] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 1354.026547][T23371] RBP: 00007f8b2f80b090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.034617][T23371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.042686][T23371] R13: 00007f8b2ec16128 R14: 00007f8b2ec16090 R15: 00007fff08be8578 [ 1354.050713][T23371] [ 1354.109484][T23375] FAULT_INJECTION: forcing a failure. [ 1354.109484][T23375] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.122802][T23375] CPU: 0 PID: 23375 Comm: syz.4.5789 Not tainted syzkaller #0 [ 1354.130292][T23375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1354.140359][T23375] Call Trace: [ 1354.143660][T23375] [ 1354.146600][T23375] dump_stack_lvl+0x188/0x24e [ 1354.151315][T23375] ? show_regs_print_info+0x12/0x12 [ 1354.156551][T23375] ? load_image+0x400/0x400 [ 1354.161082][T23375] ? __might_sleep+0xd0/0xd0 [ 1354.165742][T23375] ? __lock_acquire+0x7d10/0x7d10 [ 1354.170792][T23375] should_fail_ex+0x399/0x4d0 [ 1354.175483][T23375] should_failslab+0x5/0x20 [ 1354.179998][T23375] slab_pre_alloc_hook+0x59/0x310 [ 1354.185054][T23375] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1354.190442][T23375] __kmem_cache_alloc_node+0x4f/0x260 [ 1354.195882][T23375] ? memset+0x1e/0x40 [ 1354.199909][T23375] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1354.205252][T23375] kmalloc_trace+0x26/0xe0 [ 1354.209728][T23375] __xdp_reg_mem_model+0x1e0/0x5c0 [ 1354.214874][T23375] ? kvmalloc_node+0x6c/0x180 [ 1354.219677][T23375] ? kvmalloc_node+0x6c/0x180 [ 1354.224394][T23375] ? xdp_reg_mem_model+0x30/0x30 [ 1354.229376][T23375] xdp_reg_mem_model+0x1e/0x30 [ 1354.234246][T23375] bpf_test_run_xdp_live+0x299/0x1a90 [ 1354.239635][T23375] ? verify_lock_unused+0x140/0x140 [ 1354.244858][T23375] ? kasan_set_track+0x60/0x70 [ 1354.249638][T23375] ? kasan_set_track+0x4b/0x70 [ 1354.254423][T23375] ? __kasan_kmalloc+0x8e/0xa0 [ 1354.259209][T23375] ? bpf_test_init+0x9f/0x140 [ 1354.263903][T23375] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 1354.269463][T23375] ? bpf_prog_test_run+0x31e/0x390 [ 1354.274593][T23375] ? __x64_sys_bpf+0x78/0x90 [ 1354.279289][T23375] ? do_syscall_64+0x4c/0xa0 [ 1354.283900][T23375] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.289994][T23375] ? xdp_convert_md_to_buff+0x330/0x330 [ 1354.295664][T23375] ? __lock_acquire+0x7d10/0x7d10 [ 1354.300802][T23375] ? __virt_addr_valid+0x188/0x540 [ 1354.305936][T23375] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1354.312210][T23375] ? bpf_test_init+0x119/0x140 [ 1354.317008][T23375] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1354.322486][T23375] bpf_prog_test_run_xdp+0x736/0xf10 [ 1354.327800][T23375] ? dev_put+0x80/0x80 [ 1354.331986][T23375] ? dev_put+0x80/0x80 [ 1354.336070][T23375] bpf_prog_test_run+0x31e/0x390 [ 1354.341053][T23375] __sys_bpf+0x62b/0x780 [ 1354.345320][T23375] ? bpf_link_show_fdinfo+0x380/0x380 [ 1354.350724][T23375] ? lock_chain_count+0x20/0x20 [ 1354.355605][T23375] __x64_sys_bpf+0x78/0x90 [ 1354.360043][T23375] do_syscall_64+0x4c/0xa0 [ 1354.364477][T23375] ? clear_bhb_loop+0x60/0xb0 [ 1354.369173][T23375] ? clear_bhb_loop+0x60/0xb0 [ 1354.373884][T23375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.380143][T23375] RIP: 0033:0x7f26fd79cdd9 [ 1354.384575][T23375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.404216][T23375] RSP: 002b:00007f26fe6b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1354.412653][T23375] RAX: ffffffffffffffda RBX: 00007f26fda15fa0 RCX: 00007f26fd79cdd9 [ 1354.420640][T23375] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1354.428625][T23375] RBP: 00007f26fe6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.436630][T23375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.444709][T23375] R13: 00007f26fda16038 R14: 00007f26fda15fa0 R15: 00007ffef0553548 [ 1354.452881][T23375] [ 1354.869361][T23379] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 1354.925073][T23379] netlink: 'syz.4.5791': attribute type 4 has an invalid length. [ 1354.935355][T23379] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5791'. [ 1355.669977][T23403] netlink: 'syz.1.5796': attribute type 1 has an invalid length. [ 1355.694489][T23403] netlink: 'syz.1.5796': attribute type 4 has an invalid length. [ 1355.723003][T23403] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5796'. [ 1355.737045][T23401] netlink: 'syz.4.5797': attribute type 21 has an invalid length. [ 1355.759010][T23401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5797'. [ 1355.842101][T23401] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.5797'. [ 1358.550220][T23435] netlink: 'syz.3.5807': attribute type 1 has an invalid length. [ 1358.573173][T23435] netlink: 'syz.3.5807': attribute type 4 has an invalid length. [ 1358.599074][T23435] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1358.617958][T23442] netlink: 'syz.0.5810': attribute type 1 has an invalid length. [ 1358.630457][T23442] netlink: 'syz.0.5810': attribute type 4 has an invalid length. [ 1358.648787][T23442] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1360.535568][T23470] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1360.587690][T23470] openvswitch: netlink: Flow key attr not present in new flow. [ 1361.256741][T23475] netlink: 'syz.4.5821': attribute type 10 has an invalid length. [ 1361.278972][T23475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5821'. [ 1361.400906][T23475] batman_adv: batadv0: Adding interface: vlan1 [ 1361.427855][T23475] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.462829][T23475] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 1361.497508][T23479] netlink: 'syz.1.5823': attribute type 1 has an invalid length. [ 1361.518427][T23479] netlink: 'syz.1.5823': attribute type 4 has an invalid length. [ 1361.537271][T23479] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5823'. [ 1361.567306][T23485] netlink: 'syz.2.5822': attribute type 1 has an invalid length. [ 1361.593666][T23485] netlink: 'syz.2.5822': attribute type 4 has an invalid length. [ 1361.648390][T23485] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5822'. [ 1361.954046][T23489] netlink: 'syz.0.5824': attribute type 4 has an invalid length. [ 1361.963362][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.969795][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.068719][T23489] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5824'. [ 1363.987211][T23519] netlink: 'syz.0.5836': attribute type 1 has an invalid length. [ 1364.038024][T23519] netlink: 'syz.0.5836': attribute type 4 has an invalid length. [ 1364.051427][T23519] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5836'. [ 1364.797435][T13997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1364.808016][T13997] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1364.817801][T23526] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1364.826596][T23526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1364.834535][T23526] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1364.842124][T23526] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1365.170435][T23529] netlink: 'syz.3.5838': attribute type 1 has an invalid length. [ 1365.191305][T23529] netlink: 'syz.3.5838': attribute type 4 has an invalid length. [ 1365.200969][T23529] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5838'. [ 1366.555006][T11636] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.685297][T23545] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1366.738580][T23525] chnl_net:caif_netlink_parms(): no params data found [ 1366.819569][T11636] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.908628][T23526] Bluetooth: hci3: command 0x0409 tx timeout [ 1366.958741][T11636] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.055684][T23525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.075021][T23525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.088817][T23525] device bridge_slave_0 entered promiscuous mode [ 1368.160982][T11636] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.176217][T23525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.188590][T23525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.203059][T23525] device bridge_slave_1 entered promiscuous mode [ 1368.212651][T23567] netlink: 'syz.0.5849': attribute type 1 has an invalid length. [ 1368.221135][T23567] netlink: 'syz.0.5849': attribute type 4 has an invalid length. [ 1368.230065][T23567] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5849'. [ 1368.385758][T23572] netlink: 'syz.2.5850': attribute type 1 has an invalid length. [ 1368.396661][T23572] netlink: 'syz.2.5850': attribute type 4 has an invalid length. [ 1368.405893][T23572] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5850'. [ 1368.473335][T23578] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.5851'. [ 1368.525630][T23525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.569236][T23525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.600557][T23574] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5851'. [ 1368.725348][T23525] team0: Port device team_slave_0 added [ 1368.787199][T23525] team0: Port device team_slave_1 added [ 1368.978381][T23526] Bluetooth: hci3: command 0x041b tx timeout [ 1369.310822][T23525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.329994][T23525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.494104][T23525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.573693][T23583] netlink: 'syz.2.5854': attribute type 10 has an invalid length. [ 1369.590944][T23583] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5854'. [ 1371.058442][T23526] Bluetooth: hci3: command 0x040f tx timeout [ 1371.918118][T23525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.925236][T23525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.951985][T23525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.144961][T23526] Bluetooth: hci3: command 0x0419 tx timeout [ 1374.626573][T23609] netlink: 'syz.3.5860': attribute type 10 has an invalid length. [ 1374.638784][T23609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5860'. [ 1374.657230][T23609] batman_adv: batadv0: Adding interface: vlan1 [ 1374.678363][T23609] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1374.725722][T23609] batman_adv: batadv0: Interface activated: vlan1 [ 1374.816206][T23618] netlink: 'syz.0.5861': attribute type 1 has an invalid length. [ 1374.836499][T23618] netlink: 'syz.0.5861': attribute type 4 has an invalid length. [ 1374.855597][T23618] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5861'. [ 1374.896286][T23623] netlink: 'syz.1.5864': attribute type 1 has an invalid length. [ 1374.905155][T23623] netlink: 'syz.1.5864': attribute type 4 has an invalid length. [ 1374.914224][T23623] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5864'. [ 1375.067008][T23525] device hsr_slave_0 entered promiscuous mode [ 1375.095912][T23525] device hsr_slave_1 entered promiscuous mode [ 1375.122168][T23624] netlink: 'syz.2.5863': attribute type 10 has an invalid length. [ 1375.196914][T23624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5863'. [ 1378.540306][T23628] ieee80211 phy536: Failed to add default virtual iface [ 1378.722510][T23656] netlink: 'syz.2.5869': attribute type 4 has an invalid length. [ 1378.744294][T23656] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5869'. [ 1380.392950][T23677] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5872'. [ 1380.412110][T23682] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5872'. [ 1380.946402][T23702] netlink: 'syz.3.5876': attribute type 1 has an invalid length. [ 1380.960208][T23702] netlink: 'syz.3.5876': attribute type 4 has an invalid length. [ 1380.975610][T23702] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5876'. [ 1381.106333][T23704] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5875'. [ 1381.243249][T23707] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5875'. [ 1381.405266][T23712] netlink: 'syz.3.5877': attribute type 1 has an invalid length. [ 1381.436404][T23712] netlink: 'syz.3.5877': attribute type 4 has an invalid length. [ 1381.468397][T23712] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1381.953923][T23525] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1382.036396][T23525] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1382.170960][T23525] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1382.243321][T23525] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1382.930192][T23525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1383.036728][T23525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.092582][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1383.104843][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1383.235958][T23750] netlink: 'syz.3.5884': attribute type 4 has an invalid length. [ 1383.282787][T23750] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5884'. [ 1383.867947][T23759] netlink: 'syz.0.5886': attribute type 1 has an invalid length. [ 1383.878563][T23759] netlink: 'syz.0.5886': attribute type 4 has an invalid length. [ 1383.887736][T23759] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5886'. [ 1383.901996][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1383.931927][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1383.977660][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.984933][T11630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.165930][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1387.181062][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1387.246280][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1387.289493][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.296678][T11630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.332112][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1387.421622][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1387.431489][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1387.492137][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1387.572203][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1387.636656][T23771] netlink: 'syz.1.5889': attribute type 1 has an invalid length. [ 1387.703760][T23771] netlink: 'syz.1.5889': attribute type 4 has an invalid length. [ 1387.744916][T23771] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5889'. [ 1388.250882][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1388.273321][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1388.294665][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1388.331304][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1388.344274][T23776] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5890'. [ 1388.394249][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1388.438362][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1388.468840][T15069] cgroup: fork rejected by pids controller in /syz2 [ 1388.490555][T23525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1389.015926][T23793] netlink: 'syz.3.5897': attribute type 46 has an invalid length. [ 1389.511342][T23799] netlink: 'syz.0.5896': attribute type 10 has an invalid length. [ 1389.540471][T23799] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5896'. [ 1390.535052][T23526] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1390.550754][T23526] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1390.560624][T23526] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1390.577681][T23526] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1390.585991][T23526] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1390.593495][T23526] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1392.659197][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1394.743504][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 1395.718890][T23822] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.5902'. [ 1395.849814][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1395.857573][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1395.983613][T23525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.818438][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 1397.169349][T23811] chnl_net:caif_netlink_parms(): no params data found [ 1397.298057][T23859] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5906'. [ 1397.447308][T23861] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5906'. [ 1397.462223][T23858] netlink: 'syz.0.5904': attribute type 1 has an invalid length. [ 1397.482356][T23858] netlink: 'syz.0.5904': attribute type 4 has an invalid length. [ 1397.507110][T23858] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5904'. [ 1397.736977][T23811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.805347][T23811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.832676][T23811] device bridge_slave_0 entered promiscuous mode [ 1397.892530][T23811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.928313][T23811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.936748][T23811] device bridge_slave_1 entered promiscuous mode [ 1397.963183][T23872] netlink: 'syz.0.5907': attribute type 1 has an invalid length. [ 1397.978573][T23872] netlink: 'syz.0.5907': attribute type 4 has an invalid length. [ 1398.003060][T23872] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1398.130089][T23811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.191935][T23811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.373426][T23811] team0: Port device team_slave_0 added [ 1398.423653][T23811] team0: Port device team_slave_1 added [ 1398.720511][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1398.810930][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1398.898264][T23526] Bluetooth: hci1: command 0x0419 tx timeout [ 1398.914605][T23811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.956526][T23811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.058078][T23811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.140152][T23811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.166409][T23811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.314501][T23811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.347370][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1399.362238][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1399.372295][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1399.396006][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1399.433094][T23895] netlink: 'syz.0.5913': attribute type 27 has an invalid length. [ 1399.887493][T23895] bond0: (slave bond_slave_0): Releasing backup interface [ 1399.896289][T23895] device bond_slave_0 left promiscuous mode [ 1399.981940][T23889] netlink: 'syz.3.5911': attribute type 10 has an invalid length. [ 1399.990260][T23889] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5911'. [ 1400.082925][T23525] device veth0_vlan entered promiscuous mode [ 1400.198098][T23811] device hsr_slave_0 entered promiscuous mode [ 1400.249830][T23811] device hsr_slave_1 entered promiscuous mode [ 1400.284383][T23811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1400.324739][T23811] Cannot create hsr debugfs directory [ 1400.356116][T23525] device veth1_vlan entered promiscuous mode [ 1401.489594][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1401.519614][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1401.560568][T23525] device veth0_macvtap entered promiscuous mode [ 1401.630165][T23525] device veth1_macvtap entered promiscuous mode [ 1401.883941][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.900410][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.911314][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.922245][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.932588][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.958024][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.980797][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.999331][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.071876][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.119869][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.175344][T23525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.228421][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1402.256700][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1402.310226][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1402.354852][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.378410][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.385748][T23912] netlink: 'syz.3.5915': attribute type 3 has an invalid length. [ 1402.398352][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.398378][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.398396][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.398412][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.398430][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.537456][T23912] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1402.538215][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.578390][T23525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.608482][T23525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.629414][T23525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.648941][T23525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.657709][T23525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.698530][T23525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.707323][T23525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.754008][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1402.791167][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1402.986777][T23933] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5920'. [ 1403.182847][T23933] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5920'. [ 1403.352770][T23811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.903240][T23811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.964604][T11632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.006579][T11632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.150594][T23811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.202475][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1405.277491][T23811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.471451][T23549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.502383][T23549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.556967][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1405.603312][T23980] netlink: 'syz.3.5926': attribute type 4 has an invalid length. [ 1406.043833][T23811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1406.339187][T23991] netlink: 'syz.3.5926': attribute type 10 has an invalid length. [ 1406.511815][T23991] team0: Device veth1_vlan is already a lower device of the team interface [ 1406.728037][T23811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1406.758690][T23811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1406.875406][T23811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1407.223592][T24010] netlink: 'syz.0.5932': attribute type 1 has an invalid length. [ 1407.293562][T24010] netlink: 'syz.0.5932': attribute type 4 has an invalid length. [ 1407.302983][T24010] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5932'. [ 1407.490665][T23811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.366174][T23811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.569843][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1408.589651][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1408.657449][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1408.686112][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1408.724213][T23684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.731488][T23684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.826446][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1408.924618][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1408.944487][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1408.994372][T23684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.001608][T23684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.118698][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1409.241995][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1409.289218][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1409.340465][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1409.384922][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1409.440768][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1409.499391][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1409.553939][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1409.595408][T23811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1409.659127][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1409.753536][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1409.777345][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1409.831359][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1411.677462][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1411.687759][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1411.858085][T23811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.032578][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1412.042583][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1412.086327][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1412.099336][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1412.138874][T23811] device veth0_vlan entered promiscuous mode [ 1412.146402][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1412.198607][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1412.382151][T23811] device veth1_vlan entered promiscuous mode [ 1412.515220][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1412.536594][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1412.589674][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1412.623540][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1412.643976][T24089] netlink: 'syz.4.5949': attribute type 3 has an invalid length. [ 1412.667401][T23811] device veth0_macvtap entered promiscuous mode [ 1412.715685][T24089] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5949'. [ 1412.756474][T23811] device veth1_macvtap entered promiscuous mode [ 1412.934230][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.973066][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.010195][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.040710][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.056664][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.075153][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.093552][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.113308][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.132567][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.184244][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.219667][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.251882][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.288626][T23811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.340677][T24103] netlink: 'syz.1.5953': attribute type 1 has an invalid length. [ 1413.364204][T24103] netlink: 'syz.1.5953': attribute type 4 has an invalid length. [ 1413.392250][T24103] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5953'. [ 1413.421860][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1413.452382][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1413.499206][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1413.510945][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1413.537626][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.569041][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.605110][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.646270][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.677168][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.704431][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.734253][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.775835][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.822571][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.880949][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.911537][T23811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.937143][T23811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.979985][T23811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1414.385498][T24118] netlink: 'syz.4.5956': attribute type 4 has an invalid length. [ 1414.399781][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1414.413165][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1414.491488][T23811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.526991][T23811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.563479][T23811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.573499][T23811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.599036][T24115] netlink: 'syz.4.5956': attribute type 10 has an invalid length. [ 1414.679962][T24115] team0: Device veth1_vlan failed to register rx_handler [ 1418.555030][T24143] netlink: 'syz.1.5974': attribute type 4 has an invalid length. [ 1418.691276][T24147] netlink: 'syz.1.5974': attribute type 10 has an invalid length. [ 1418.927716][T24147] team0: Device veth1_vlan failed to register rx_handler [ 1419.180305][T23684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.209502][T23684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.671586][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1419.740735][T11638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.772560][T11638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.796058][T24156] netlink: 'syz.1.5966': attribute type 1 has an invalid length. [ 1419.851391][T24156] netlink: 'syz.1.5966': attribute type 4 has an invalid length. [ 1419.881635][T24156] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5966'. [ 1419.939524][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1420.371305][T24165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.380471][T24165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.921959][T24192] netlink: 'syz.2.5976': attribute type 29 has an invalid length. [ 1421.930748][T24192] netlink: 'syz.2.5976': attribute type 29 has an invalid length. [ 1421.939657][T24192] netlink: 'syz.2.5976': attribute type 29 has an invalid length. [ 1422.287628][T24200] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.5978'. [ 1423.271692][T24200] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1423.327030][T24200] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1423.357939][T24200] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1423.383607][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.390697][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.703354][T24209] netlink: 'syz.3.5981': attribute type 1 has an invalid length. [ 1423.737625][T24209] netlink: 'syz.3.5981': attribute type 4 has an invalid length. [ 1423.756572][T24209] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5981'. [ 1423.801428][T24211] netlink: 'syz.0.5982': attribute type 10 has an invalid length. [ 1423.824500][T24211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5982'. [ 1423.911958][T24211] bond0: (slave team0): Releasing backup interface [ 1424.044517][T24211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1424.614780][T11636] team0: Port device wlan1 removed [ 1428.172112][T11636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.190761][T11636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.206977][T11636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.236762][T11636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.292411][T11636] batman_adv: batadv0: Removing interface: vlan1 [ 1428.326507][T11636] device bridge_slave_1 left promiscuous mode [ 1428.354364][T11636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.380250][T11636] device bridge_slave_0 left promiscuous mode [ 1428.402638][T11636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.498270][T11636] device veth1_macvtap left promiscuous mode [ 1428.543450][T11636] device veth0_macvtap left promiscuous mode [ 1428.573313][T11636] device veth1_vlan left promiscuous mode [ 1430.052461][T11636] team0 (unregistering): Port device team_slave_1 removed [ 1430.106893][T11636] team0 (unregistering): Port device team_slave_0 removed [ 1430.156815][T11636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.210933][T11636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.593879][T11636] bond0 (unregistering): Released all slaves [ 1430.932007][T24276] FAULT_INJECTION: forcing a failure. [ 1430.932007][T24276] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.977644][T24276] CPU: 1 PID: 24276 Comm: syz.2.6003 Not tainted syzkaller #0 [ 1430.985205][T24276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1430.995478][T24276] Call Trace: [ 1430.998791][T24276] [ 1431.001838][T24276] dump_stack_lvl+0x188/0x24e [ 1431.006562][T24276] ? show_regs_print_info+0x12/0x12 [ 1431.011802][T24276] ? load_image+0x400/0x400 [ 1431.016340][T24276] ? __might_sleep+0xd0/0xd0 [ 1431.021040][T24276] ? __lock_acquire+0x7d10/0x7d10 [ 1431.026189][T24276] should_fail_ex+0x399/0x4d0 [ 1431.030993][T24276] should_failslab+0x5/0x20 [ 1431.035603][T24276] slab_pre_alloc_hook+0x59/0x310 [ 1431.040651][T24276] ? __se_sys_ioctl+0xfa/0x170 [ 1431.045444][T24276] ? do_syscall_64+0x4c/0xa0 [ 1431.050172][T24276] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1431.056425][T24276] kmem_cache_alloc_node+0x5a/0x320 [ 1431.061663][T24276] ? __alloc_skb+0xfc/0x7e0 [ 1431.066214][T24276] __alloc_skb+0xfc/0x7e0 [ 1431.070623][T24276] cfg80211_del_sta_sinfo+0x1f8/0x610 [ 1431.076044][T24276] ? nl80211_send_station+0x3420/0x3420 [ 1431.081667][T24276] ? trace_drv_return_int+0xa4/0x240 [ 1431.086989][T24276] ? drv_sta_state+0x931/0x1280 [ 1431.091873][T24276] __sta_info_destroy_part2+0x2f5/0x3f0 [ 1431.097450][T24276] __sta_info_flush+0x3b5/0x460 [ 1431.102336][T24276] ? sta_info_stop+0x40/0x40 [ 1431.107401][T24276] ieee80211_ibss_disconnect+0x262/0x710 [ 1431.113078][T24276] ieee80211_ibss_leave+0x21/0x130 [ 1431.118399][T24276] __cfg80211_leave_ibss+0x1da/0x450 [ 1431.123715][T24276] cfg80211_ibss_wext_siwfreq+0x220/0x370 [ 1431.129464][T24276] __cfg80211_wext_siwfreq+0x16d/0x7d0 [ 1431.134952][T24276] ? __cfg80211_wext_giwname+0x30/0x30 [ 1431.140451][T24276] ? full_name_hash+0x8e/0xe0 [ 1431.145160][T24276] ? __cfg80211_wext_giwname+0x30/0x30 [ 1431.150654][T24276] ioctl_standard_call+0xd4/0x2b0 [ 1431.155722][T24276] ? __cfg80211_wext_giwname+0x30/0x30 [ 1431.161382][T24276] wext_ioctl_dispatch+0x3da/0x470 [ 1431.166614][T24276] ? wext_ioctl_dispatch+0x470/0x470 [ 1431.172543][T24276] ? iw_handler_get_private+0x1e0/0x1e0 [ 1431.178211][T24276] wext_handle_ioctl+0x113/0x1d0 [ 1431.183270][T24276] ? call_commit_handler+0xf0/0xf0 [ 1431.188451][T24276] sock_ioctl+0x143/0x710 [ 1431.192813][T24276] ? sock_poll+0x410/0x410 [ 1431.197293][T24276] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1431.202258][T24276] ? security_file_ioctl+0x7c/0xa0 [ 1431.207395][T24276] ? sock_poll+0x410/0x410 [ 1431.212040][T24276] __se_sys_ioctl+0xfa/0x170 [ 1431.216688][T24276] do_syscall_64+0x4c/0xa0 [ 1431.221236][T24276] ? clear_bhb_loop+0x60/0xb0 [ 1431.226120][T24276] ? clear_bhb_loop+0x60/0xb0 [ 1431.230829][T24276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1431.236751][T24276] RIP: 0033:0x7fbc42f9cdd9 [ 1431.241192][T24276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.261007][T24276] RSP: 002b:00007fbc43f4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.269564][T24276] RAX: ffffffffffffffda RBX: 00007fbc43215fa0 RCX: 00007fbc42f9cdd9 [ 1431.277650][T24276] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000005 [ 1431.285735][T24276] RBP: 00007fbc43f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.293730][T24276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.301734][T24276] R13: 00007fbc43216038 R14: 00007fbc43215fa0 R15: 00007ffd04e50548 [ 1431.309845][T24276] [ 1433.978332][T24303] ieee80211 phy550: Failed to add default virtual iface [ 1436.017039][T23526] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1436.027399][T23526] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1436.035508][T23526] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1436.052441][T23526] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1436.061673][T23526] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1436.069664][T23526] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1436.518563][T24354] ieee80211 phy551: Failed to add default virtual iface [ 1438.000575][T24362] chnl_net:caif_netlink_parms(): no params data found [ 1438.104609][T23526] Bluetooth: hci0: command 0x0409 tx timeout [ 1439.059848][T24362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.069658][T24362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.094662][T24362] device bridge_slave_0 entered promiscuous mode [ 1439.172573][T24406] netlink: 'syz.3.6044': attribute type 29 has an invalid length. [ 1439.188802][T24406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6044'. [ 1439.229791][T24362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.237002][T24362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.259119][T24362] device bridge_slave_1 entered promiscuous mode [ 1439.280346][T24406] netlink: 'syz.3.6044': attribute type 29 has an invalid length. [ 1439.312727][T24406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6044'. [ 1439.436772][T24362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.596409][T24362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.822400][T24362] team0: Port device team_slave_0 added [ 1440.184192][T23526] Bluetooth: hci0: command 0x041b tx timeout [ 1440.493682][T24362] team0: Port device team_slave_1 added [ 1441.115937][T24362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.147080][T24362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.255393][T24362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.313907][T24362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.334699][T24362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.393364][T24362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.703882][T24362] device hsr_slave_0 entered promiscuous mode [ 1441.961817][T24362] device hsr_slave_1 entered promiscuous mode [ 1441.975525][T24362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1442.041802][T24362] Cannot create hsr debugfs directory [ 1442.262387][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1442.694195][T24455] netlink: 'syz.1.6059': attribute type 1 has an invalid length. [ 1442.737376][T24455] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.6059'. [ 1443.144294][T24362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.355742][T24362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.531104][T24362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.774482][T24362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.338276][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1444.634824][T24362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1444.673295][T24362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1444.727934][T24362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1444.789173][T24362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1445.507381][T24362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.598735][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1445.621504][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1445.721421][T24362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.013503][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1446.051514][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1446.075230][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.082522][T11613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.138609][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1446.164898][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1446.200749][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.208231][T11613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.238784][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1446.310450][T11636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1446.350327][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1446.386603][T11636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1446.416453][T11636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1446.500187][T11636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1446.530523][T11636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1446.579351][T11636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1446.627273][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1446.645289][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1446.694571][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1446.734303][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1446.773200][T24362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1447.952303][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1447.973701][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1448.140367][T24362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.425234][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1448.533767][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1449.314100][T24362] device veth0_vlan entered promiscuous mode [ 1449.414380][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1449.457174][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1449.529812][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1449.548719][T11630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1449.623434][T24362] device veth1_vlan entered promiscuous mode [ 1449.862749][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1449.919233][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1450.022656][T24362] device veth0_macvtap entered promiscuous mode [ 1450.045453][T24362] device veth1_macvtap entered promiscuous mode [ 1450.102249][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.146477][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.228547][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.271374][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.301469][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.312107][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.322665][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.336446][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.355259][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.375613][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.392506][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.412086][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.439710][T24362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.447884][T24559] netlink: 'syz.2.6090': attribute type 1 has an invalid length. [ 1450.490279][T24559] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6090'. [ 1450.571472][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1450.590862][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1450.636379][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1450.669271][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1450.706758][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.748947][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.776067][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.798307][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.849204][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.876060][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.888173][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.913592][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.937364][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.961700][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.985557][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.012295][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.043891][T24362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.084930][T24362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.110920][T24362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.137630][T24362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.204496][T24362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.308503][T11636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1451.325218][T11636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1452.807733][T11634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.830239][T11634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.930176][T11636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1453.167638][T24598] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6102'. [ 1453.265007][T11634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.278388][T11634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.312067][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1453.612073][T24611] bridge0: port 4(syz_tun) entered blocking state [ 1453.628358][T24611] bridge0: port 4(syz_tun) entered disabled state [ 1453.674072][T24611] device syz_tun entered promiscuous mode [ 1453.707893][T24611] bridge0: port 4(syz_tun) entered blocking state [ 1453.715655][T24611] bridge0: port 4(syz_tun) entered forwarding state [ 1453.820846][T24606] netlink: 'syz.4.6104': attribute type 1 has an invalid length. [ 1453.878479][T24606] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1458.695925][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1458.706315][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1458.715079][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1458.727616][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1458.788342][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1458.811259][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1459.478804][T24689] FAULT_INJECTION: forcing a failure. [ 1459.478804][T24689] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.563244][T24689] CPU: 1 PID: 24689 Comm: syz.4.6128 Not tainted syzkaller #0 [ 1459.570807][T24689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1459.581178][T24689] Call Trace: [ 1459.584508][T24689] [ 1459.587480][T24689] dump_stack_lvl+0x188/0x24e [ 1459.592222][T24689] ? show_regs_print_info+0x12/0x12 [ 1459.597465][T24689] ? load_image+0x400/0x400 [ 1459.602024][T24689] ? __might_sleep+0xd0/0xd0 [ 1459.606644][T24689] ? __lock_acquire+0x7d10/0x7d10 [ 1459.611808][T24689] should_fail_ex+0x399/0x4d0 [ 1459.616541][T24689] should_failslab+0x5/0x20 [ 1459.621085][T24689] slab_pre_alloc_hook+0x59/0x310 [ 1459.626331][T24689] ? sk_prot_alloc+0xe7/0x210 [ 1459.631054][T24689] __kmem_cache_alloc_node+0x4f/0x260 [ 1459.636480][T24689] ? sk_prot_alloc+0xe7/0x210 [ 1459.641203][T24689] __kmalloc+0xa0/0x240 [ 1459.645672][T24689] sk_prot_alloc+0xe7/0x210 [ 1459.650212][T24689] ? sk_alloc+0x20/0x340 [ 1459.654586][T24689] sk_alloc+0x36/0x340 [ 1459.658717][T24689] pppol2tp_create+0x2e/0x1f0 [ 1459.663461][T24689] pppox_create+0x127/0x1a0 [ 1459.668030][T24689] __sock_create+0x4a2/0x940 [ 1459.672702][T24689] __sys_socketpair+0x232/0x540 [ 1459.677627][T24689] __x64_sys_socketpair+0x97/0xb0 [ 1459.682796][T24689] do_syscall_64+0x4c/0xa0 [ 1459.687261][T24689] ? clear_bhb_loop+0x60/0xb0 [ 1459.691984][T24689] ? clear_bhb_loop+0x60/0xb0 [ 1459.696715][T24689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.702672][T24689] RIP: 0033:0x7ff87b39cdd9 [ 1459.707144][T24689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.726986][T24689] RSP: 002b:00007ff87c17c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1459.735554][T24689] RAX: ffffffffffffffda RBX: 00007ff87b615fa0 RCX: 00007ff87b39cdd9 [ 1459.743577][T24689] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000018 [ 1459.751599][T24689] RBP: 00007ff87c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.759624][T24689] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.767644][T24689] R13: 00007ff87b616038 R14: 00007ff87b615fa0 R15: 00007fff3841aca8 [ 1459.775696][T24689] [ 1459.843865][T24684] chnl_net:caif_netlink_parms(): no params data found [ 1460.291732][T24705] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6130'. [ 1460.898500][T23526] Bluetooth: hci5: command 0x0409 tx timeout [ 1460.937580][T24728] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6138'. [ 1461.288549][T11630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.424717][T24684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.434772][T24684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.504737][T24684] device bridge_slave_0 entered promiscuous mode [ 1461.700147][T11630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.991320][T24684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.001366][T24684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.010138][T24684] device bridge_slave_1 entered promiscuous mode [ 1462.049430][T11630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.201207][T11630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.245897][T24684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.418965][T24684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.497039][T24749] device syzkaller0 entered promiscuous mode [ 1462.980292][T23526] Bluetooth: hci5: command 0x041b tx timeout [ 1463.399328][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1463.464148][T24684] team0: Port device team_slave_0 added [ 1463.510607][T24684] team0: Port device team_slave_1 added [ 1463.641601][T24757] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1463.838900][T24684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.855622][T24684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.979238][T24684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.029210][T24684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.058189][T24684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.156995][T24684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.692472][T24684] device hsr_slave_0 entered promiscuous mode [ 1464.732681][T24684] device hsr_slave_1 entered promiscuous mode [ 1464.821694][T24684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1464.849041][T24684] Cannot create hsr debugfs directory [ 1465.060067][T23526] Bluetooth: hci5: command 0x040f tx timeout [ 1465.102728][T11630] tipc: Left network mode [ 1465.103719][T24784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6154'. [ 1465.179144][T24786] FAULT_INJECTION: forcing a failure. [ 1465.179144][T24786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1465.302936][T24786] CPU: 0 PID: 24786 Comm: syz.0.6153 Not tainted syzkaller #0 [ 1465.310664][T24786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1465.320763][T24786] Call Trace: [ 1465.324071][T24786] [ 1465.327034][T24786] dump_stack_lvl+0x188/0x24e [ 1465.331783][T24786] ? show_regs_print_info+0x12/0x12 [ 1465.337038][T24786] ? load_image+0x400/0x400 [ 1465.341591][T24786] ? __lock_acquire+0x7d10/0x7d10 [ 1465.346678][T24786] should_fail_ex+0x399/0x4d0 [ 1465.351400][T24786] prepare_alloc_pages+0x1e2/0x5f0 [ 1465.356571][T24786] __alloc_pages+0x130/0x4f0 [ 1465.361222][T24786] ? zone_statistics+0x170/0x170 [ 1465.366209][T24786] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1465.371977][T24786] ? copy_page_from_iter+0xe4/0x100 [ 1465.377215][T24786] pipe_write+0x623/0x1b20 [ 1465.382059][T24786] ? pipe_read+0x1260/0x1260 [ 1465.386706][T24786] ? end_current_label_crit_section+0x14b/0x170 [ 1465.393043][T24786] ? common_file_perm+0x171/0x1c0 [ 1465.398202][T24786] vfs_write+0x4b1/0xa30 [ 1465.402516][T24786] ? file_end_write+0x250/0x250 [ 1465.407520][T24786] ? __fget_files+0x43d/0x4b0 [ 1465.412253][T24786] ? __fdget_pos+0x1d4/0x360 [ 1465.416888][T24786] ? ksys_write+0x71/0x250 [ 1465.421440][T24786] ksys_write+0x14c/0x250 [ 1465.425797][T24786] ? __ia32_sys_read+0x80/0x80 [ 1465.430678][T24786] ? lockdep_hardirqs_on+0x94/0x140 [ 1465.435898][T24786] do_syscall_64+0x4c/0xa0 [ 1465.440338][T24786] ? clear_bhb_loop+0x60/0xb0 [ 1465.445029][T24786] ? clear_bhb_loop+0x60/0xb0 [ 1465.449734][T24786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1465.455738][T24786] RIP: 0033:0x7f59f4d9cdd9 [ 1465.460197][T24786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1465.480114][T24786] RSP: 002b:00007f59f5be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1465.488555][T24786] RAX: ffffffffffffffda RBX: 00007f59f5016090 RCX: 00007f59f4d9cdd9 [ 1465.496543][T24786] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 1465.504525][T24786] RBP: 00007f59f5be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1465.512516][T24786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.520510][T24786] R13: 00007f59f5016128 R14: 00007f59f5016090 R15: 00007ffc5663c4c8 [ 1465.528512][T24786] [ 1465.772946][T24784] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6154'. [ 1465.837102][T24784] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1466.070239][T23549] bridge0: port 3(team0) entered disabled state [ 1467.143147][T23526] Bluetooth: hci5: command 0x0419 tx timeout [ 1468.402452][T24684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1468.498372][T24684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1468.664552][T24684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1468.815109][T24684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1470.510304][T24684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.622539][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1470.648991][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1470.714360][T24684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.759756][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1470.789558][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1470.857350][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.864752][T11638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.603058][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1471.627837][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1471.652234][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1471.744271][T11638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.751755][T11638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1471.770863][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1471.795347][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1471.820439][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1471.837704][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1471.929173][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1471.957169][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1472.020043][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1472.059467][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1472.084901][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1472.116391][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1472.169823][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1472.207961][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1474.469893][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1474.477622][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1474.592083][T24684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.727690][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1474.804244][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1475.070148][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1475.092335][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1475.137807][T24944] netlink: 'syz.2.6194': attribute type 1 has an invalid length. [ 1475.161746][T24944] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.6194'. [ 1475.428001][T24684] device veth0_vlan entered promiscuous mode [ 1475.443287][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1475.501170][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1475.572994][T24684] device veth1_vlan entered promiscuous mode [ 1475.740343][T24950] FAULT_INJECTION: forcing a failure. [ 1475.740343][T24950] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.765684][T24950] CPU: 0 PID: 24950 Comm: syz.2.6196 Not tainted syzkaller #0 [ 1475.773223][T24950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1475.783333][T24950] Call Trace: [ 1475.786649][T24950] [ 1475.789610][T24950] dump_stack_lvl+0x188/0x24e [ 1475.794333][T24950] ? rcu_is_watching+0x11/0xa0 [ 1475.799128][T24950] ? show_regs_print_info+0x12/0x12 [ 1475.804369][T24950] ? load_image+0x400/0x400 [ 1475.808914][T24950] ? lockdep_hardirqs_on+0x94/0x140 [ 1475.814143][T24950] should_fail_ex+0x399/0x4d0 [ 1475.818846][T24950] should_failslab+0x5/0x20 [ 1475.823361][T24950] slab_pre_alloc_hook+0x59/0x310 [ 1475.828404][T24950] kmem_cache_alloc_node+0x5a/0x320 [ 1475.833653][T24950] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1475.839912][T24950] ? __alloc_skb+0xfc/0x7e0 [ 1475.844445][T24950] __alloc_skb+0xfc/0x7e0 [ 1475.848972][T24950] tcp_stream_alloc_skb+0x3e/0x330 [ 1475.854535][T24950] tcp_connect+0x16bd/0x4ac0 [ 1475.859152][T24950] ? tcp_fastopen_defer_connect+0xde/0x360 [ 1475.864984][T24950] ? secure_ipv6_port_ephemeral+0x200/0x200 [ 1475.870909][T24950] tcp_v4_connect+0xfd8/0x18e0 [ 1475.875707][T24950] ? tcp_twsk_unique+0x990/0x990 [ 1475.880666][T24950] __inet_stream_connect+0x242/0xe10 [ 1475.885972][T24950] ? inet_dgram_connect+0x360/0x360 [ 1475.891217][T24950] tcp_sendmsg_fastopen+0x38f/0x600 [ 1475.896436][T24950] tcp_sendmsg_locked+0x3616/0x3a90 [ 1475.901759][T24950] ? perf_trace_preemptirq_template+0x268/0x320 [ 1475.908022][T24950] ? mark_lock+0x94/0x320 [ 1475.912401][T24950] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1475.918407][T24950] ? lock_chain_count+0x20/0x20 [ 1475.923369][T24950] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1475.929560][T24950] ? lockdep_hardirqs_on+0x94/0x140 [ 1475.934773][T24950] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1475.940973][T24950] ? tcp_sendmsg+0x1d/0x40 [ 1475.945413][T24950] ? tcp_set_state+0x520/0x520 [ 1475.950190][T24950] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1475.955940][T24950] tcp_sendmsg+0x2b/0x40 [ 1475.960215][T24950] ? inet_send_prepare+0x260/0x260 [ 1475.965339][T24950] ____sys_sendmsg+0x5be/0x970 [ 1475.970120][T24950] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1475.976305][T24950] ? __sys_sendmsg_sock+0x30/0x30 [ 1475.981353][T24950] ? __import_iovec+0x315/0x500 [ 1475.986224][T24950] ? import_iovec+0x6f/0xa0 [ 1475.990744][T24950] ___sys_sendmsg+0x2a2/0x360 [ 1475.995446][T24950] ? __sys_sendmsg+0x290/0x290 [ 1476.000330][T24950] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1476.006455][T24950] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1476.012639][T24950] ? __x64_sys_sendmsg+0x71/0x80 [ 1476.017630][T24950] ? __se_sys_sendmsg+0xf4/0x2a0 [ 1476.022586][T24950] ? kasan_check_range+0xe/0x290 [ 1476.027548][T24950] __se_sys_sendmsg+0x1bb/0x2a0 [ 1476.032515][T24950] ? __x64_sys_sendmsg+0x80/0x80 [ 1476.037489][T24950] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1476.043502][T24950] do_syscall_64+0x4c/0xa0 [ 1476.047955][T24950] ? clear_bhb_loop+0x60/0xb0 [ 1476.052647][T24950] ? clear_bhb_loop+0x60/0xb0 [ 1476.057351][T24950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1476.063262][T24950] RIP: 0033:0x7fbc42f9cdd9 [ 1476.067792][T24950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.087435][T24950] RSP: 002b:00007fbc43f4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1476.095952][T24950] RAX: ffffffffffffffda RBX: 00007fbc43215fa0 RCX: 00007fbc42f9cdd9 [ 1476.103935][T24950] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000016 [ 1476.111920][T24950] RBP: 00007fbc43f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.120076][T24950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1476.128059][T24950] R13: 00007fbc43216038 R14: 00007fbc43215fa0 R15: 00007ffd04e50548 [ 1476.136062][T24950] [ 1476.313308][T24684] device veth0_macvtap entered promiscuous mode [ 1476.330093][T11642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1476.350411][T11642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1476.432635][T24684] device veth1_macvtap entered promiscuous mode [ 1476.447105][T11642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1476.462198][T11642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1476.697516][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1476.765420][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.823430][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1476.890482][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.952471][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.005358][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.063262][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.097946][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.133373][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.180360][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.227647][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.279058][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.297341][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.309743][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.322857][T24684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.588564][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1477.599868][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1477.643105][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.674167][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.685977][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.702926][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.713363][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.724557][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.734719][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.745581][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.755529][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.766914][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.776883][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.790164][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.800223][T24684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.814571][T24684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.827134][T24684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.870746][T11642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1477.915975][T11642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1478.497875][T24684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.525116][T24684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.534354][T24684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.543494][T24684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.482698][T11613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.515460][T11613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.785152][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1480.303160][T23684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.319320][T23684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.322559][T25008] netlink: 26 bytes leftover after parsing attributes in process `syz.4.6217'. [ 1480.327664][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1480.800506][T25022] netlink: 'syz.4.6222': attribute type 2 has an invalid length. [ 1483.667010][T25022] device 0 entered promiscuous mode [ 1484.869019][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.875471][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.117581][T25105] netlink: 'syz.4.6248': attribute type 3 has an invalid length. [ 1490.195717][T25105] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6248'. [ 1492.019035][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 1492.149455][T25131] FAULT_INJECTION: forcing a failure. [ 1492.149455][T25131] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.162255][T25131] CPU: 1 PID: 25131 Comm: syz.2.6256 Not tainted syzkaller #0 [ 1492.169761][T25131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1492.179853][T25131] Call Trace: [ 1492.183172][T25131] [ 1492.186148][T25131] dump_stack_lvl+0x188/0x24e [ 1492.190885][T25131] ? show_regs_print_info+0x12/0x12 [ 1492.196142][T25131] ? load_image+0x400/0x400 [ 1492.200705][T25131] should_fail_ex+0x399/0x4d0 [ 1492.205427][T25131] should_failslab+0x5/0x20 [ 1492.209968][T25131] slab_pre_alloc_hook+0x59/0x310 [ 1492.215037][T25131] ? nf_ct_ext_add+0x1a7/0x3e0 [ 1492.219846][T25131] __kmem_cache_alloc_node+0x4f/0x260 [ 1492.225270][T25131] ? nf_ct_ext_add+0x1a7/0x3e0 [ 1492.230083][T25131] __kmalloc_node_track_caller+0x9e/0x230 [ 1492.235851][T25131] krealloc+0x6a/0x100 [ 1492.239964][T25131] nf_ct_ext_add+0x1a7/0x3e0 [ 1492.244607][T25131] init_conntrack+0x8af/0x11a0 [ 1492.249412][T25131] ? early_drop+0x870/0x870 [ 1492.253953][T25131] ? nf_conntrack_find_get+0x670/0x670 [ 1492.259464][T25131] ? __siphash_unaligned+0x25b/0x3a0 [ 1492.264883][T25131] nf_conntrack_in+0xd3e/0x17b0 [ 1492.269779][T25131] ? nf_ct_pernet+0x270/0x270 [ 1492.274485][T25131] ? ip6t_alloc_initial_table+0x640/0x640 [ 1492.280232][T25131] ? ipv6_defrag+0x2d2/0x3a0 [ 1492.284841][T25131] ? ipv4_confirm+0x380/0x380 [ 1492.289659][T25131] nf_hook_slow+0xb9/0x200 [ 1492.294114][T25131] NF_HOOK+0x219/0x3b0 [ 1492.298295][T25131] ? sk_setup_caps+0xaa0/0xaa0 [ 1492.303170][T25131] ? net_zcopy_put_abort+0x90/0x90 [ 1492.308492][T25131] ? NF_HOOK+0x9b/0x3b0 [ 1492.312755][T25131] ? ip6_rcv_core+0x1750/0x1750 [ 1492.317635][T25131] ? net_zcopy_put_abort+0x90/0x90 [ 1492.322865][T25131] ? ip6_rcv_finish_core+0x420/0x420 [ 1492.328173][T25131] __netif_receive_skb+0xcc/0x290 [ 1492.333314][T25131] ? netif_receive_skb+0x11e/0x830 [ 1492.338445][T25131] netif_receive_skb+0x1d4/0x830 [ 1492.343517][T25131] ? enqueue_to_backlog+0xd30/0xd30 [ 1492.348816][T25131] ? ct_irq_exit_irqson+0x113/0x170 [ 1492.354125][T25131] ? tun_rx_batched+0x182/0x790 [ 1492.359083][T25131] tun_rx_batched+0x1db/0x790 [ 1492.363785][T25131] ? pskb_may_pull+0xf0/0xf0 [ 1492.368393][T25131] ? __local_bh_enable_ip+0x136/0x1c0 [ 1492.373888][T25131] ? lockdep_hardirqs_on+0x94/0x140 [ 1492.379100][T25131] ? read_lock_is_recursive+0x10/0x10 [ 1492.384578][T25131] ? __local_bh_enable_ip+0x136/0x1c0 [ 1492.389965][T25131] ? _local_bh_enable+0xa0/0xa0 [ 1492.394839][T25131] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 1492.400844][T25131] tun_get_user+0x286f/0x3c70 [ 1492.405631][T25131] ? tun_get_user+0x249b/0x3c70 [ 1492.410688][T25131] ? rcu_read_unlock+0xa0/0xa0 [ 1492.415483][T25131] ? tun_get+0x1c/0x2e0 [ 1492.419663][T25131] ? __lock_acquire+0x7d10/0x7d10 [ 1492.424709][T25131] ? tun_get+0x1c/0x2e0 [ 1492.428901][T25131] tun_chr_write_iter+0x112/0x1f0 [ 1492.433945][T25131] vfs_write+0x4b1/0xa30 [ 1492.438211][T25131] ? file_end_write+0x250/0x250 [ 1492.443089][T25131] ? __fget_files+0x43d/0x4b0 [ 1492.447793][T25131] ? __fdget_pos+0x1d4/0x360 [ 1492.452399][T25131] ? ksys_write+0x71/0x250 [ 1492.456835][T25131] ksys_write+0x14c/0x250 [ 1492.461187][T25131] ? __ia32_sys_read+0x80/0x80 [ 1492.465974][T25131] ? lockdep_hardirqs_on+0x94/0x140 [ 1492.471186][T25131] do_syscall_64+0x4c/0xa0 [ 1492.475621][T25131] ? clear_bhb_loop+0x60/0xb0 [ 1492.480317][T25131] ? clear_bhb_loop+0x60/0xb0 [ 1492.485085][T25131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1492.490996][T25131] RIP: 0033:0x7fbc42f9cdd9 [ 1492.495428][T25131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.515313][T25131] RSP: 002b:00007fbc43f4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1492.523745][T25131] RAX: ffffffffffffffda RBX: 00007fbc43215fa0 RCX: 00007fbc42f9cdd9 [ 1492.531816][T25131] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 1492.539804][T25131] RBP: 00007fbc43f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.547783][T25131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.555766][T25131] R13: 00007fbc43216038 R14: 00007fbc43215fa0 R15: 00007ffd04e50548 [ 1492.563766][T25131] [ 1494.059422][T25132] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6255'. [ 1494.521051][T25153] netlink: 'syz.1.6262': attribute type 3 has an invalid length. [ 1494.569869][T25153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1496.712739][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1496.723178][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1496.731624][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1496.742129][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1496.758958][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1496.766435][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1498.220541][T25175] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6271'. [ 1498.391403][T15401] bridge0: port 4(syz_tun) entered disabled state [ 1498.493635][T15401] device syz_tun left promiscuous mode [ 1498.530102][T15401] bridge0: port 4(syz_tun) entered disabled state [ 1499.836369][T25184] chnl_net:caif_netlink_parms(): no params data found [ 1500.165396][T25184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.213936][T25184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.258962][T23526] Bluetooth: hci2: command 0x0409 tx timeout [ 1500.266640][T25184] device bridge_slave_0 entered promiscuous mode [ 1502.338586][T23526] Bluetooth: hci2: command 0x041b tx timeout [ 1503.159910][T25184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.167320][T25184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.187338][T25184] device bridge_slave_1 entered promiscuous mode [ 1503.515431][T25184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.634074][T25184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.046429][T25184] team0: Port device team_slave_0 added [ 1504.428381][T23526] Bluetooth: hci2: command 0x040f tx timeout [ 1504.539578][T25184] team0: Port device team_slave_1 added [ 1504.695127][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1504.702984][T11630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.712202][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.722711][T11630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.731608][T11630] bridge0: port 3(team0) entered disabled state [ 1504.741510][T11630] device bridge_slave_0 left promiscuous mode [ 1504.747801][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.775044][T11630] device veth1_macvtap left promiscuous mode [ 1504.781522][T11630] device veth0_macvtap left promiscuous mode [ 1504.793272][T11630] device veth0_vlan left promiscuous mode [ 1505.402522][T11630] device team_slave_1 left promiscuous mode [ 1505.413570][T11630] team0 (unregistering): Port device team_slave_1 removed [ 1505.459972][T11630] device team_slave_0 left promiscuous mode [ 1505.466900][T11630] team0 (unregistering): Port device team_slave_0 removed [ 1505.512808][T11630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1505.563331][T11630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1505.617386][T11630] device bridge_slave_1 left promiscuous mode [ 1505.626803][T11630] team0 (unregistering): Port device bridge_slave_1 removed [ 1505.924285][T11630] bond0 (unregistering): Released all slaves [ 1506.066827][T25184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.078294][T25184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.104622][T25184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.129471][T25184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.143397][T25184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.182818][T25184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.344346][T25184] device hsr_slave_0 entered promiscuous mode [ 1506.400320][T25184] device hsr_slave_1 entered promiscuous mode [ 1506.450269][T25184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1506.499769][T23526] Bluetooth: hci2: command 0x0419 tx timeout [ 1506.520138][T25184] Cannot create hsr debugfs directory [ 1508.952315][T25184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.081535][T11630] device 0 left promiscuous mode [ 1509.096865][T25266] netlink: 'syz.0.6299': attribute type 29 has an invalid length. [ 1509.228037][T25184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.403655][T25266] netlink: 'syz.0.6299': attribute type 29 has an invalid length. [ 1509.523891][T25184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.885862][T11630] tipc: Left network mode [ 1509.891355][T25260] netlink: 'syz.0.6299': attribute type 29 has an invalid length. [ 1509.961448][T25184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.023080][T25290] netlink: 'syz.2.6311': attribute type 22 has an invalid length. [ 1513.031102][T25290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6311'. [ 1513.943643][T25184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1514.247403][T25184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1514.278875][T25184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1514.721352][T25184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1517.618305][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 1518.251682][T25351] device syzkaller0 entered promiscuous mode [ 1518.473744][T25358] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.6335'. [ 1518.502206][T25184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.564770][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1518.599475][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1518.635466][T25184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.711267][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1518.749535][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1518.777778][T23684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.785050][T23684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.835303][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1519.420767][T25384] netlink: 'syz.2.6343': attribute type 3 has an invalid length. [ 1519.468964][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1519.492827][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1519.517373][T25384] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6343'. [ 1519.529791][T23684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.537087][T23684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.213331][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1520.272584][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1520.296247][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1520.339900][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1520.369894][T23684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1520.394792][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1520.424106][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1520.499346][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1520.522280][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1520.567626][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1520.597155][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1520.783944][T25184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.872437][T25423] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.6353'. [ 1522.164040][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1522.182512][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1522.240706][T25184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.804974][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1524.814794][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1524.900024][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1524.910126][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1524.946129][T25184] device veth0_vlan entered promiscuous mode [ 1525.023757][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1525.038469][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1525.083253][T25184] device veth1_vlan entered promiscuous mode [ 1525.201268][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1525.221626][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1525.254029][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1525.289117][T25444] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.6359'. [ 1525.362579][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1525.454974][T25184] device veth0_macvtap entered promiscuous mode [ 1525.537488][T25184] device veth1_macvtap entered promiscuous mode [ 1525.687142][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.728381][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.830242][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.841494][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.851918][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.863748][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.874501][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.886343][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.907119][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.937055][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.998155][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.017414][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.036202][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.074925][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.140014][T25184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.383100][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1526.397662][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1526.434253][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1526.461789][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1526.484038][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.497745][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.528344][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.551813][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.572583][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.596102][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.608982][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.620215][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.631945][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.643120][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.653708][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.664583][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.674911][T25184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.685658][T25184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.698041][T25184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.744232][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1526.761514][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1526.791709][T25184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.808650][T25184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.828597][T25184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.837422][T25184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.773193][T25477] netlink: 'syz.1.6372': attribute type 3 has an invalid length. [ 1529.818498][T25477] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6372'. [ 1529.871651][T25479] netlink: 'syz.1.6372': attribute type 3 has an invalid length. [ 1529.915185][T25479] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6372'. [ 1530.010593][T11638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.050580][T11638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.151297][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1530.234879][T11632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.253244][T11632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.100186][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1534.484521][T25514] netlink: 15478 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1534.813114][T25525] FAULT_INJECTION: forcing a failure. [ 1534.813114][T25525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.871351][T25525] CPU: 1 PID: 25525 Comm: syz.0.6388 Not tainted syzkaller #0 [ 1534.878897][T25525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1534.889120][T25525] Call Trace: [ 1534.892434][T25525] [ 1534.895393][T25525] dump_stack_lvl+0x188/0x24e [ 1534.900105][T25525] ? show_regs_print_info+0x12/0x12 [ 1534.905334][T25525] ? load_image+0x400/0x400 [ 1534.909857][T25525] ? __lock_acquire+0x7d10/0x7d10 [ 1534.914914][T25525] should_fail_ex+0x399/0x4d0 [ 1534.919616][T25525] _copy_from_user+0x2c/0x170 [ 1534.924314][T25525] ___sys_sendmsg+0x1c3/0x360 [ 1534.929016][T25525] ? __sys_sendmsg+0x290/0x290 [ 1534.933823][T25525] ? __lock_acquire+0x7d10/0x7d10 [ 1534.938890][T25525] __se_sys_sendmsg+0x1bb/0x2a0 [ 1534.943764][T25525] ? __x64_sys_sendmsg+0x80/0x80 [ 1534.948743][T25525] ? lockdep_hardirqs_on+0x94/0x140 [ 1534.954133][T25525] do_syscall_64+0x4c/0xa0 [ 1534.958659][T25525] ? clear_bhb_loop+0x60/0xb0 [ 1534.963351][T25525] ? clear_bhb_loop+0x60/0xb0 [ 1534.968133][T25525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1534.974043][T25525] RIP: 0033:0x7f59f4d9cdd9 [ 1534.978472][T25525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.998268][T25525] RSP: 002b:00007f59f5c02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1535.006744][T25525] RAX: ffffffffffffffda RBX: 00007f59f5015fa0 RCX: 00007f59f4d9cdd9 [ 1535.014813][T25525] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 1535.022797][T25525] RBP: 00007f59f5c02090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.030877][T25525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.038863][T25525] R13: 00007f59f5016038 R14: 00007f59f5015fa0 R15: 00007ffc5663c4c8 [ 1535.046866][T25525] [ 1535.181556][T25534] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.6393'. [ 1539.358367][T25589] netlink: 'syz.1.6411': attribute type 1 has an invalid length. [ 1539.438433][T25589] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.6411'. [ 1539.932050][T25602] netlink: 'syz.2.6415': attribute type 1 has an invalid length. [ 1539.982294][T25602] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.6415'. [ 1540.044586][ T48] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 1541.752086][T25636] FAULT_INJECTION: forcing a failure. [ 1541.752086][T25636] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.903222][T25636] CPU: 0 PID: 25636 Comm: syz.2.6425 Not tainted syzkaller #0 [ 1541.910797][T25636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1541.920988][T25636] Call Trace: [ 1541.924302][T25636] [ 1541.927264][T25636] dump_stack_lvl+0x188/0x24e [ 1541.932012][T25636] ? show_regs_print_info+0x12/0x12 [ 1541.937267][T25636] ? load_image+0x400/0x400 [ 1541.941828][T25636] ? __might_sleep+0xd0/0xd0 [ 1541.946463][T25636] ? __lock_acquire+0x7d10/0x7d10 [ 1541.951644][T25636] should_fail_ex+0x399/0x4d0 [ 1541.956387][T25636] should_failslab+0x5/0x20 [ 1541.961024][T25636] slab_pre_alloc_hook+0x59/0x310 [ 1541.966117][T25636] kmem_cache_alloc_node+0x5a/0x320 [ 1541.971471][T25636] ? __alloc_skb+0xfc/0x7e0 [ 1541.976134][T25636] __alloc_skb+0xfc/0x7e0 [ 1541.980526][T25636] ? netlink_autobind+0xda/0x300 [ 1541.985533][T25636] netlink_sendmsg+0x654/0xbd0 [ 1541.990390][T25636] ? netlink_getsockopt+0x550/0x550 [ 1541.995673][T25636] ? aa_sock_msg_perm+0x94/0x150 [ 1542.000684][T25636] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1542.006013][T25636] ? security_socket_sendmsg+0x7c/0xa0 [ 1542.011548][T25636] ? netlink_getsockopt+0x550/0x550 [ 1542.016813][T25636] ____sys_sendmsg+0x5be/0x970 [ 1542.021625][T25636] ? __sys_sendmsg_sock+0x30/0x30 [ 1542.026676][T25636] ? __import_iovec+0x315/0x500 [ 1542.031565][T25636] ? import_iovec+0x6f/0xa0 [ 1542.036183][T25636] ___sys_sendmsg+0x2a2/0x360 [ 1542.040898][T25636] ? __sys_sendmsg+0x290/0x290 [ 1542.045726][T25636] ? __lock_acquire+0x7d10/0x7d10 [ 1542.050905][T25636] __se_sys_sendmsg+0x1bb/0x2a0 [ 1542.055963][T25636] ? __x64_sys_sendmsg+0x80/0x80 [ 1542.061041][T25636] ? lockdep_hardirqs_on+0x94/0x140 [ 1542.066282][T25636] do_syscall_64+0x4c/0xa0 [ 1542.070871][T25636] ? clear_bhb_loop+0x60/0xb0 [ 1542.075746][T25636] ? clear_bhb_loop+0x60/0xb0 [ 1542.080461][T25636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1542.086387][T25636] RIP: 0033:0x7fbc42f9cdd9 [ 1542.090825][T25636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.110734][T25636] RSP: 002b:00007fbc43f4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1542.119288][T25636] RAX: ffffffffffffffda RBX: 00007fbc43215fa0 RCX: 00007fbc42f9cdd9 [ 1542.127315][T25636] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1542.135335][T25636] RBP: 00007fbc43f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.143429][T25636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.151430][T25636] R13: 00007fbc43216038 R14: 00007fbc43215fa0 R15: 00007ffd04e50548 [ 1542.159471][T25636] [ 1543.708884][T25641] netlink: 'syz.3.6426': attribute type 25 has an invalid length. [ 1543.716784][T25641] netlink: 'syz.3.6426': attribute type 29 has an invalid length. [ 1543.757956][T25642] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6426'. [ 1543.778436][T25646] netlink: 'syz.1.6428': attribute type 3 has an invalid length. [ 1543.786246][T25646] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6428'. [ 1544.100545][ T48] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1544.109265][ T48] Bluetooth: hci0: Injecting HCI hardware error event [ 1544.117397][T23526] Bluetooth: hci0: hardware error 0x00 [ 1544.770653][T25671] FAULT_INJECTION: forcing a failure. [ 1544.770653][T25671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.789398][T25671] CPU: 0 PID: 25671 Comm: syz.2.6437 Not tainted syzkaller #0 [ 1544.796934][T25671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1544.807117][T25671] Call Trace: [ 1544.810422][T25671] [ 1544.813376][T25671] dump_stack_lvl+0x188/0x24e [ 1544.818188][T25671] ? show_regs_print_info+0x12/0x12 [ 1544.823434][T25671] ? load_image+0x400/0x400 [ 1544.827989][T25671] ? __lock_acquire+0x7d10/0x7d10 [ 1544.833094][T25671] should_fail_ex+0x399/0x4d0 [ 1544.837821][T25671] _copy_from_user+0x2c/0x170 [ 1544.842550][T25671] bpf_prog_test_run_skb+0x262/0x12a0 [ 1544.847994][T25671] ? __fget_files+0x28/0x4b0 [ 1544.852639][T25671] ? __fget_files+0x28/0x4b0 [ 1544.857293][T25671] ? __fget_files+0x43d/0x4b0 [ 1544.862040][T25671] ? cpu_online+0xa0/0xa0 [ 1544.866413][T25671] bpf_prog_test_run+0x31e/0x390 [ 1544.871400][T25671] __sys_bpf+0x62b/0x780 [ 1544.875696][T25671] ? bpf_link_show_fdinfo+0x380/0x380 [ 1544.881141][T25671] ? lock_chain_count+0x20/0x20 [ 1544.886077][T25671] __x64_sys_bpf+0x78/0x90 [ 1544.890551][T25671] do_syscall_64+0x4c/0xa0 [ 1544.895190][T25671] ? clear_bhb_loop+0x60/0xb0 [ 1544.899908][T25671] ? clear_bhb_loop+0x60/0xb0 [ 1544.904632][T25671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.910578][T25671] RIP: 0033:0x7fbc42f9cdd9 [ 1544.915035][T25671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.934691][T25671] RSP: 002b:00007fbc43f4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1544.943188][T25671] RAX: ffffffffffffffda RBX: 00007fbc43215fa0 RCX: 00007fbc42f9cdd9 [ 1544.951212][T25671] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1544.959231][T25671] RBP: 00007fbc43f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.967240][T25671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.975259][T25671] R13: 00007fbc43216038 R14: 00007fbc43215fa0 R15: 00007ffd04e50548 [ 1544.983297][T25671] [ 1545.670782][T25689] netlink: 'syz.3.6444': attribute type 3 has an invalid length. [ 1545.697238][T25689] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6444'. [ 1546.409307][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.415764][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.422208][T23526] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1546.691604][T25696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6446'. [ 1548.930336][T25717] FAULT_INJECTION: forcing a failure. [ 1548.930336][T25717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.018557][T25717] CPU: 0 PID: 25717 Comm: syz.4.6451 Not tainted syzkaller #0 [ 1549.026977][T25717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1549.037144][T25717] Call Trace: [ 1549.040469][T25717] [ 1549.043434][T25717] dump_stack_lvl+0x188/0x24e [ 1549.048170][T25717] ? show_regs_print_info+0x12/0x12 [ 1549.053418][T25717] ? load_image+0x400/0x400 [ 1549.057975][T25717] ? __lock_acquire+0x7d10/0x7d10 [ 1549.063057][T25717] should_fail_ex+0x399/0x4d0 [ 1549.067782][T25717] _copy_from_user+0x2c/0x170 [ 1549.072517][T25717] bpf_prog_test_run_skb+0x262/0x12a0 [ 1549.077972][T25717] ? __fget_files+0x28/0x4b0 [ 1549.082687][T25717] ? __fget_files+0x28/0x4b0 [ 1549.087330][T25717] ? __fget_files+0x43d/0x4b0 [ 1549.092076][T25717] ? cpu_online+0xa0/0xa0 [ 1549.096553][T25717] bpf_prog_test_run+0x31e/0x390 [ 1549.101535][T25717] __sys_bpf+0x62b/0x780 [ 1549.105811][T25717] ? bpf_link_show_fdinfo+0x380/0x380 [ 1549.111217][T25717] ? lock_chain_count+0x20/0x20 [ 1549.116110][T25717] __x64_sys_bpf+0x78/0x90 [ 1549.120548][T25717] do_syscall_64+0x4c/0xa0 [ 1549.125003][T25717] ? clear_bhb_loop+0x60/0xb0 [ 1549.129704][T25717] ? clear_bhb_loop+0x60/0xb0 [ 1549.134399][T25717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1549.140309][T25717] RIP: 0033:0x7ff87b39cdd9 [ 1549.144737][T25717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.164354][T25717] RSP: 002b:00007ff87c17c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1549.172783][T25717] RAX: ffffffffffffffda RBX: 00007ff87b615fa0 RCX: 00007ff87b39cdd9 [ 1549.180773][T25717] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 1549.188760][T25717] RBP: 00007ff87c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.196753][T25717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.204940][T25717] R13: 00007ff87b616038 R14: 00007ff87b615fa0 R15: 00007fff3841aca8 [ 1549.212958][T25717] [ 1549.495377][T25730] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6456'. [ 1549.506562][T25730] openvswitch: netlink: Message has 6 unknown bytes. [ 1549.799114][T11630] device wlan1 left promiscuous mode [ 1549.827840][T11630] team0: Port device wlan1 removed [ 1550.384902][T25748] sctp: [Deprecated]: syz.4.6461 (pid 25748) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1550.384902][T25748] Use struct sctp_sack_info instead [ 1553.935277][T25775] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6468'. [ 1554.869171][T25796] sctp: [Deprecated]: syz.2.6476 (pid 25796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1554.869171][T25796] Use struct sctp_sack_info instead [ 1555.179798][T25806] device bridge_slave_1 left promiscuous mode [ 1555.318840][T25806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.555088][T25806] device bridge_slave_0 left promiscuous mode [ 1555.561742][T25806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.768623][T25817] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1558.778026][T25817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1558.808135][T25817] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1563.123069][T25868] netlink: 'syz.1.6494': attribute type 3 has an invalid length. [ 1563.188733][T25868] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6494'. [ 1563.527277][T25875] netlink: 'syz.2.6497': attribute type 10 has an invalid length. [ 1563.692014][T25875] team0: Port device macvlan0 added [ 1563.758519][T25879] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6496'. [ 1563.882381][T25887] netlink: 'syz.4.6500': attribute type 12 has an invalid length. [ 1563.902029][T25887] netlink: 'syz.4.6500': attribute type 15 has an invalid length. [ 1567.235559][T25895] netlink: 'syz.4.6503': attribute type 3 has an invalid length. [ 1567.278355][T25895] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6503'. [ 1567.490994][T25913] FAULT_INJECTION: forcing a failure. [ 1567.490994][T25913] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.580071][T25913] CPU: 1 PID: 25913 Comm: syz.1.6508 Not tainted syzkaller #0 [ 1567.587722][T25913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1567.597826][T25913] Call Trace: [ 1567.601147][T25913] [ 1567.604109][T25913] dump_stack_lvl+0x188/0x24e [ 1567.608902][T25913] ? show_regs_print_info+0x12/0x12 [ 1567.614152][T25913] ? load_image+0x400/0x400 [ 1567.618712][T25913] ? __might_sleep+0xd0/0xd0 [ 1567.623330][T25913] ? __lock_acquire+0x7d10/0x7d10 [ 1567.628475][T25913] ? memset+0x1e/0x40 [ 1567.632511][T25913] should_fail_ex+0x399/0x4d0 [ 1567.637240][T25913] should_failslab+0x5/0x20 [ 1567.641789][T25913] slab_pre_alloc_hook+0x59/0x310 [ 1567.646964][T25913] kmem_cache_alloc+0x56/0x2f0 [ 1567.651771][T25913] ? security_inode_alloc+0x30/0x110 [ 1567.657105][T25913] security_inode_alloc+0x30/0x110 [ 1567.662251][T25913] inode_init_always+0x8f8/0xc90 [ 1567.667218][T25913] new_inode_pseudo+0x91/0x1c0 [ 1567.672009][T25913] __sock_create+0x129/0x940 [ 1567.676623][T25913] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1567.682738][T25913] __sys_socket+0xc4/0x190 [ 1567.687196][T25913] __x64_sys_socket+0x76/0x80 [ 1567.691926][T25913] do_syscall_64+0x4c/0xa0 [ 1567.696402][T25913] ? clear_bhb_loop+0x60/0xb0 [ 1567.701197][T25913] ? clear_bhb_loop+0x60/0xb0 [ 1567.705992][T25913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1567.711916][T25913] RIP: 0033:0x7f61f659cdd9 [ 1567.716347][T25913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.735968][T25913] RSP: 002b:00007f61f74f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1567.744399][T25913] RAX: ffffffffffffffda RBX: 00007f61f6815fa0 RCX: 00007f61f659cdd9 [ 1567.752415][T25913] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000028 [ 1567.760419][T25913] RBP: 00007f61f74f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1567.768412][T25913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1567.776487][T25913] R13: 00007f61f6816038 R14: 00007f61f6815fa0 R15: 00007ffff25ff108 [ 1567.784497][T25913] [ 1567.845223][T25913] socket: no more sockets [ 1568.480533][T25925] netlink: 'syz.4.6512': attribute type 3 has an invalid length. [ 1568.518101][T25929] netlink: 'syz.4.6512': attribute type 3 has an invalid length. [ 1568.522831][T25925] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6512'. [ 1568.557869][T25929] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6512'. [ 1568.796840][T25937] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1570.579112][T25955] ieee80211 phy614: Failed to add default virtual iface [ 1571.555959][T25980] netlink: 'syz.0.6528': attribute type 3 has an invalid length. [ 1571.623229][T25980] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.6528'. [ 1572.507817][T26002] netlink: 'syz.2.6537': attribute type 3 has an invalid length. [ 1572.550014][T26002] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.6537'. [ 1574.930276][T26030] netlink: 'syz.1.6547': attribute type 4 has an invalid length. [ 1579.164262][T26082] netlink: 'syz.0.6559': attribute type 1 has an invalid length. [ 1579.198678][T26082] netlink: 'syz.0.6559': attribute type 4 has an invalid length. [ 1579.217777][T26082] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6559'. [ 1580.216550][T26097] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6564'. [ 1582.376970][T26105] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6568'. [ 1583.042024][T26121] netlink: 192432 bytes leftover after parsing attributes in process `syz.2.6571'. [ 1583.104688][T26121] netlink: get zone limit has 4 unknown bytes [ 1584.178438][T23526] Bluetooth: hci5: command 0x0406 tx timeout [ 1584.744860][T26158] FAULT_INJECTION: forcing a failure. [ 1584.744860][T26158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.758892][T26158] CPU: 0 PID: 26158 Comm: syz.4.6584 Not tainted syzkaller #0 [ 1584.766423][T26158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1584.776539][T26158] Call Trace: [ 1584.779880][T26158] [ 1584.782864][T26158] dump_stack_lvl+0x188/0x24e [ 1584.787651][T26158] ? show_regs_print_info+0x12/0x12 [ 1584.792916][T26158] ? load_image+0x400/0x400 [ 1584.797467][T26158] ? __lock_acquire+0x7d10/0x7d10 [ 1584.802520][T26158] should_fail_ex+0x399/0x4d0 [ 1584.807218][T26158] _copy_from_user+0x2c/0x170 [ 1584.811934][T26158] sk_setsockopt+0x2f1/0x28a0 [ 1584.816676][T26158] ? __fget_files+0x28/0x4b0 [ 1584.821375][T26158] ? sockopt_capable+0x60/0x60 [ 1584.826382][T26158] ? aa_sk_perm+0x81f/0x950 [ 1584.830970][T26158] ? aa_af_perm+0x340/0x340 [ 1584.835528][T26158] ? __fget_files+0x43d/0x4b0 [ 1584.840274][T26158] ? aa_sock_opt_perm+0x74/0x100 [ 1584.845252][T26158] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 1584.850828][T26158] ? security_socket_setsockopt+0x7a/0xa0 [ 1584.856844][T26158] __sys_setsockopt+0x2f6/0x3d0 [ 1584.861741][T26158] __x64_sys_setsockopt+0xb1/0xc0 [ 1584.866923][T26158] do_syscall_64+0x4c/0xa0 [ 1584.871391][T26158] ? clear_bhb_loop+0x60/0xb0 [ 1584.876129][T26158] ? clear_bhb_loop+0x60/0xb0 [ 1584.880873][T26158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1584.886825][T26158] RIP: 0033:0x7ff87b39cdd9 [ 1584.891284][T26158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.911120][T26158] RSP: 002b:00007ff87c17c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1584.919597][T26158] RAX: ffffffffffffffda RBX: 00007ff87b615fa0 RCX: 00007ff87b39cdd9 [ 1584.927793][T26158] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000006 [ 1584.935836][T26158] RBP: 00007ff87c17c090 R08: 0000000000000004 R09: 0000000000000000 [ 1584.944027][T26158] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1584.952049][T26158] R13: 00007ff87b616038 R14: 00007ff87b615fa0 R15: 00007fff3841aca8 [ 1584.960131][T26158] [ 1589.425395][T26204] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6595'. [ 1589.888369][T11630] device wlan1 left promiscuous mode [ 1589.913057][T26217] netlink: 'syz.0.6598': attribute type 3 has an invalid length. [ 1589.940740][T11630] team0: Port device wlan1 removed [ 1589.958199][T26217] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6598'. [ 1590.090732][T26215] netlink: 'syz.0.6598': attribute type 3 has an invalid length. [ 1590.128740][T26215] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.6598'. [ 1590.333360][T26235] netlink: 192432 bytes leftover after parsing attributes in process `syz.3.6603'. [ 1590.375662][T26235] netlink: get zone limit has 4 unknown bytes [ 1590.561522][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.579791][T11630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.608960][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.626781][T11630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.684999][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.705974][T11630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.793694][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.842936][T11630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.852446][T11630] batman_adv: batadv0: Interface deactivated: vlan1 [ 1590.859693][T11630] batman_adv: batadv0: Removing interface: vlan1 [ 1590.867402][T11630] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 1590.961655][T11630] batman_adv: batadv0: Removing interface: ipvlan1 [ 1591.236877][T11630] bridge0: port 3(team0) entered disabled state [ 1591.265681][T11630] device bridge_slave_1 left promiscuous mode [ 1591.282579][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.369060][T11630] device bridge_slave_0 left promiscuous mode [ 1591.386043][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.638671][T11630] device veth1_macvtap left promiscuous mode [ 1591.644897][T11630] device veth0_macvtap left promiscuous mode [ 1591.699062][T11630] device veth1_macvtap left promiscuous mode [ 1591.705225][T11630] device veth0_macvtap left promiscuous mode [ 1591.718754][T11630] device veth0_vlan left promiscuous mode [ 1592.378626][T11630] device team_slave_1 left promiscuous mode [ 1592.390831][T11630] team0 (unregistering): Port device team_slave_1 removed [ 1592.443069][T11630] device team_slave_0 left promiscuous mode [ 1592.450872][T11630] team0 (unregistering): Port device team_slave_0 removed [ 1592.501715][T11630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.743853][T11630] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1592.856650][T11630] bond0 (unregistering): Released all slaves [ 1593.136379][T11630] device macvlan0 left promiscuous mode [ 1593.143742][T11630] team0 (unregistering): Port device macvlan0 removed [ 1593.509031][T11630] device team_slave_1 left promiscuous mode [ 1593.516211][T11630] team0 (unregistering): Port device team_slave_1 removed [ 1593.581659][T11630] device team_slave_0 left promiscuous mode [ 1593.589845][T11630] team0 (unregistering): Port device team_slave_0 removed [ 1593.642631][T11630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.061380][T11630] bond0 (unregistering): Released all slaves [ 1597.691776][T26275] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6621'. [ 1597.704051][T26275] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1597.712360][T26278] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6611'. [ 1597.957299][T26287] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6615'. [ 1598.286808][T26297] FAULT_INJECTION: forcing a failure. [ 1598.286808][T26297] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.328294][T26297] CPU: 1 PID: 26297 Comm: syz.1.6619 Not tainted syzkaller #0 [ 1598.335854][T26297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1598.346066][T26297] Call Trace: [ 1598.349400][T26297] [ 1598.352448][T26297] dump_stack_lvl+0x188/0x24e [ 1598.357291][T26297] ? show_regs_print_info+0x12/0x12 [ 1598.362547][T26297] ? load_image+0x400/0x400 [ 1598.367098][T26297] ? __might_sleep+0xd0/0xd0 [ 1598.371734][T26297] ? __lock_acquire+0x7d10/0x7d10 [ 1598.376811][T26297] should_fail_ex+0x399/0x4d0 [ 1598.381528][T26297] should_failslab+0x5/0x20 [ 1598.386070][T26297] slab_pre_alloc_hook+0x59/0x310 [ 1598.391233][T26297] ? __get_vm_area_node+0x122/0x330 [ 1598.396483][T26297] __kmem_cache_alloc_node+0x4f/0x260 [ 1598.402019][T26297] ? __get_vm_area_node+0x122/0x330 [ 1598.407257][T26297] kmalloc_node_trace+0x22/0xe0 [ 1598.412157][T26297] __get_vm_area_node+0x122/0x330 [ 1598.417226][T26297] __vmalloc_node_range+0x357/0x13b0 [ 1598.422552][T26297] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1598.428158][T26297] ? perf_trace_preemptirq_template+0x268/0x320 [ 1598.434450][T26297] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1598.440487][T26297] ? free_vm_area+0x50/0x50 [ 1598.445043][T26297] ? rcu_is_watching+0x11/0xa0 [ 1598.449848][T26297] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1598.456050][T26297] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1598.461812][T26297] __vmalloc+0x76/0x80 [ 1598.466067][T26297] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1598.471687][T26297] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1598.477128][T26297] bpf_prog_alloc+0x1c/0x1b0 [ 1598.481799][T26297] bpf_prog_load+0x7c9/0x1560 [ 1598.486541][T26297] ? map_freeze+0x390/0x390 [ 1598.491097][T26297] ? rcu_is_watching+0x11/0xa0 [ 1598.493603][T26291] netlink: 'syz.3.6617': attribute type 3 has an invalid length. [ 1598.495911][T26297] ? __sys_bpf+0x5a4/0x780 [ 1598.495951][T26297] __sys_bpf+0x5b8/0x780 [ 1598.495983][T26297] ? bpf_link_show_fdinfo+0x380/0x380 [ 1598.496024][T26297] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1598.496067][T26297] __x64_sys_bpf+0x78/0x90 [ 1598.496096][T26297] do_syscall_64+0x4c/0xa0 [ 1598.496125][T26297] ? clear_bhb_loop+0x60/0xb0 [ 1598.496150][T26297] ? clear_bhb_loop+0x60/0xb0 [ 1598.496178][T26297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1598.496203][T26297] RIP: 0033:0x7f61f659cdd9 [ 1598.496223][T26297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.496241][T26297] RSP: 002b:00007f61f74f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1598.496266][T26297] RAX: ffffffffffffffda RBX: 00007f61f6815fa0 RCX: 00007f61f659cdd9 [ 1598.496283][T26297] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1598.496299][T26297] RBP: 00007f61f74f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.496312][T26297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1598.496326][T26297] R13: 00007f61f6816038 R14: 00007f61f6815fa0 R15: 00007ffff25ff108 [ 1598.496359][T26297] [ 1598.668580][T26297] syz.1.6619: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1598.684273][T26291] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6617'. [ 1598.708240][T26297] CPU: 0 PID: 26297 Comm: syz.1.6619 Not tainted syzkaller #0 [ 1598.708275][T26297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1598.708287][T26297] Call Trace: [ 1598.708296][T26297] [ 1598.708305][T26297] dump_stack_lvl+0x188/0x24e [ 1598.708339][T26297] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1598.708364][T26297] ? show_regs_print_info+0x12/0x12 [ 1598.708393][T26297] ? load_image+0x400/0x400 [ 1598.708422][T26297] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1598.708446][T26297] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1598.708472][T26297] warn_alloc+0x242/0x330 [ 1598.708499][T26297] ? __get_vm_area_node+0x122/0x330 [ 1598.708536][T26297] ? zone_watermark_ok_safe+0x270/0x270 [ 1598.708565][T26297] ? rcu_is_watching+0x11/0xa0 [ 1598.708599][T26297] ? __get_vm_area_node+0x318/0x330 [ 1598.708632][T26297] __vmalloc_node_range+0x37c/0x13b0 [ 1598.708669][T26297] ? perf_trace_preemptirq_template+0x268/0x320 [ 1598.708707][T26297] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1598.708738][T26297] ? free_vm_area+0x50/0x50 [ 1598.708762][T26297] ? rcu_is_watching+0x11/0xa0 [ 1598.708793][T26297] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1598.708824][T26297] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1598.708853][T26297] __vmalloc+0x76/0x80 [ 1598.708877][T26297] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1598.708907][T26297] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1598.708941][T26297] bpf_prog_alloc+0x1c/0x1b0 [ 1598.708973][T26297] bpf_prog_load+0x7c9/0x1560 [ 1598.709014][T26297] ? map_freeze+0x390/0x390 [ 1598.709042][T26297] ? rcu_is_watching+0x11/0xa0 [ 1598.709087][T26297] ? __sys_bpf+0x5a4/0x780 [ 1598.709120][T26297] __sys_bpf+0x5b8/0x780 [ 1598.709149][T26297] ? bpf_link_show_fdinfo+0x380/0x380 [ 1598.709189][T26297] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1598.709230][T26297] __x64_sys_bpf+0x78/0x90 [ 1598.709259][T26297] do_syscall_64+0x4c/0xa0 [ 1598.709286][T26297] ? clear_bhb_loop+0x60/0xb0 [ 1598.709310][T26297] ? clear_bhb_loop+0x60/0xb0 [ 1598.709337][T26297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1598.709363][T26297] RIP: 0033:0x7f61f659cdd9 [ 1598.709382][T26297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.709400][T26297] RSP: 002b:00007f61f74f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1598.709426][T26297] RAX: ffffffffffffffda RBX: 00007f61f6815fa0 RCX: 00007f61f659cdd9 [ 1598.709442][T26297] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1598.709457][T26297] RBP: 00007f61f74f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.709471][T26297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1598.709484][T26297] R13: 00007f61f6816038 R14: 00007f61f6815fa0 R15: 00007ffff25ff108 [ 1598.709516][T26297] [ 1598.709558][T26297] Mem-Info: [ 1598.709796][T26297] active_anon:9349 inactive_anon:0 isolated_anon:0 [ 1598.709796][T26297] active_file:21894 inactive_file:40543 isolated_file:0 [ 1598.709796][T26297] unevictable:768 dirty:157 writeback:0 [ 1598.709796][T26297] slab_reclaimable:26582 slab_unreclaimable:109104 [ 1598.709796][T26297] mapped:34320 shmem:1361 pagetables:699 [ 1598.709796][T26297] sec_pagetables:0 bounce:0 [ 1598.709796][T26297] kernel_misc_reclaimable:0 [ 1598.709796][T26297] free:1294589 free_pcp:7998 free_cma:0 [ 1598.710011][T26297] Node 0 active_anon:37396kB inactive_anon:0kB active_file:87576kB inactive_file:161968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137280kB dirty:628kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10452kB pagetables:2796kB sec_pagetables:0kB all_unreclaimable? no [ 1598.710106][T26297] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1598.710273][T26297] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.710583][T26297] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1598.711228][T26297] Node 0 DMA32 free:1253680kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:37396kB inactive_anon:0kB active_file:87576kB inactive_file:161968kB unevictable:1536kB writepending:628kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:23200kB local_pcp:12660kB free_cma:0kB [ 1598.711413][T26297] lowmem_reserve[]: 0 0 1 [ 1599.193935][T26306] netlink: 'syz.3.6622': attribute type 1 has an invalid length. [ 1599.208628][T26297] 1 1 [ 1599.212778][T26297] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1599.241074][T26297] lowmem_reserve[]: 0 0 0 0 0 [ 1599.246227][T26297] Node 1 Normal free:3909304kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:8768kB local_pcp:8576kB free_cma:0kB [ 1599.261255][T26306] netlink: 'syz.3.6622': attribute type 4 has an invalid length. [ 1599.285743][T26306] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6622'. [ 1599.292665][T26297] lowmem_reserve[]: 0 0 0 0 0 [ 1599.346202][T26297] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1599.369696][T26297] Node 0 DMA32: 1406*4kB (UME) 1415*8kB (UME) 1718*16kB (UME) 719*32kB (ME) 487*64kB (UME) 450*128kB (UME) 241*256kB (UME) 79*512kB (UME) 28*1024kB (UM) 12*2048kB (UM) 230*4096kB (UM) = 1253680kB [ 1599.416646][T26297] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1599.461526][T26297] Node 1 Normal: 248*4kB (UE) 49*8kB (UE) 31*16kB (UME) 183*32kB (UME) 66*64kB (UME) 28*128kB (UME) 8*256kB (UME) 5*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3909304kB [ 1599.564450][T26297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.577627][T26297] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1599.587601][T26297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.605184][T26297] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1599.629212][T26297] 63798 total pagecache pages [ 1599.633986][T26297] 0 pages in swap cache [ 1599.656153][T26297] Free swap = 124996kB [ 1599.665050][T26297] Total swap = 124996kB [ 1599.670829][T26311] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6623'. [ 1599.696082][T26297] 2097051 pages RAM [ 1599.736616][T26297] 0 pages HighMem/MovableOnly [ 1599.754032][T26297] 415209 pages reserved [ 1599.768625][T26297] 0 pages cma reserved [ 1600.085363][T26308] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6623'. [ 1600.514018][T26313] netlink: 'syz.1.6625': attribute type 3 has an invalid length. [ 1600.528479][T26313] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6625'. [ 1601.181199][T26324] netlink: 'syz.2.6629': attribute type 3 has an invalid length. [ 1601.218396][T26324] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.6629'. [ 1604.346772][T26337] netlink: 'syz.1.6631': attribute type 10 has an invalid length. [ 1604.422346][T26337] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1604.488718][T23549] device .*! left promiscuous mode [ 1604.902955][T26341] netlink: 'syz.4.6634': attribute type 3 has an invalid length. [ 1604.933530][T26341] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6634'. [ 1604.973434][T23549] device 0 left promiscuous mode [ 1605.121023][T26351] netlink: 'syz.0.6636': attribute type 33 has an invalid length. [ 1605.159205][T26351] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6636'. [ 1605.169317][T26351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1605.186905][T23549] tipc: Left network mode [ 1605.264616][T26354] netlink: 'syz.2.6639': attribute type 1 has an invalid length. [ 1605.293603][T26354] netlink: 'syz.2.6639': attribute type 4 has an invalid length. [ 1605.337494][T26354] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1607.701320][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.708209][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.366522][T26365] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6643'. [ 1608.416591][T26367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6643'. [ 1608.445290][T26363] netlink: 'syz.0.6642': attribute type 3 has an invalid length. [ 1608.458538][T26363] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1610.246061][T26400] netlink: 'syz.4.6653': attribute type 1 has an invalid length. [ 1610.312414][T26400] netlink: 'syz.4.6653': attribute type 4 has an invalid length. [ 1610.339971][T26400] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6653'. [ 1611.826895][T26408] netlink: 'syz.1.6651': attribute type 3 has an invalid length. [ 1611.838414][T26408] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6651'. [ 1611.867986][T26407] netlink: 'syz.1.6651': attribute type 3 has an invalid length. [ 1611.898372][T26407] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6651'. [ 1613.165786][T26428] netlink: 'syz.1.6660': attribute type 3 has an invalid length. [ 1613.180599][T26428] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6660'. [ 1613.589276][T26446] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6663'. [ 1613.729908][T26445] netlink: 'syz.2.6665': attribute type 1 has an invalid length. [ 1613.754461][T26445] netlink: 'syz.2.6665': attribute type 4 has an invalid length. [ 1613.788563][T26445] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6665'. [ 1613.868838][T26436] netlink: 'syz.0.6662': attribute type 10 has an invalid length. [ 1614.890087][T26436] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1616.202937][T26464] netlink: 'syz.3.6671': attribute type 3 has an invalid length. [ 1616.213960][T26464] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6671'. [ 1616.858617][T26479] netlink: 'syz.4.6674': attribute type 3 has an invalid length. [ 1616.885695][T26479] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6674'. [ 1616.916799][T26488] FAULT_INJECTION: forcing a failure. [ 1616.916799][T26488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1616.968645][T26488] CPU: 0 PID: 26488 Comm: syz.0.6677 Not tainted syzkaller #0 [ 1616.976501][T26488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1616.986732][T26488] Call Trace: [ 1616.990092][T26488] [ 1616.993060][T26488] dump_stack_lvl+0x188/0x24e [ 1616.997793][T26488] ? show_regs_print_info+0x12/0x12 [ 1617.003063][T26488] ? load_image+0x400/0x400 [ 1617.007614][T26488] ? __lock_acquire+0x7d10/0x7d10 [ 1617.012773][T26488] ? __kmem_cache_alloc_node+0x140/0x260 [ 1617.018463][T26488] should_fail_ex+0x399/0x4d0 [ 1617.023187][T26488] _copy_from_user+0x2c/0x170 [ 1617.027914][T26488] generic_map_delete_batch+0x2c1/0x6f0 [ 1617.033517][T26488] ? bpf_map_inc_not_zero+0x100/0x100 [ 1617.038949][T26488] ? __fdget+0x17c/0x200 [ 1617.043240][T26488] ? bpf_map_inc_not_zero+0x100/0x100 [ 1617.048658][T26488] bpf_map_do_batch+0x466/0x600 [ 1617.053560][T26488] __sys_bpf+0x6f7/0x780 [ 1617.057844][T26488] ? bpf_link_show_fdinfo+0x380/0x380 [ 1617.063292][T26488] ? lock_chain_count+0x20/0x20 [ 1617.068388][T26488] __x64_sys_bpf+0x78/0x90 [ 1617.073035][T26488] do_syscall_64+0x4c/0xa0 [ 1617.077573][T26488] ? clear_bhb_loop+0x60/0xb0 [ 1617.082304][T26488] ? clear_bhb_loop+0x60/0xb0 [ 1617.087030][T26488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1617.093042][T26488] RIP: 0033:0x7f59f4d9cdd9 [ 1617.097499][T26488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.117310][T26488] RSP: 002b:00007f59f5be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1617.125865][T26488] RAX: ffffffffffffffda RBX: 00007f59f5016090 RCX: 00007f59f4d9cdd9 [ 1617.133868][T26488] RDX: 0000000000000038 RSI: 0000200000000440 RDI: 000000000000001b [ 1617.141874][T26488] RBP: 00007f59f5be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.150418][T26488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.158422][T26488] R13: 00007f59f5016128 R14: 00007f59f5016090 R15: 00007ffc5663c4c8 [ 1617.166471][T26488] [ 1617.337875][T26495] FAULT_INJECTION: forcing a failure. [ 1617.337875][T26495] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.404422][T26495] CPU: 1 PID: 26495 Comm: syz.4.6679 Not tainted syzkaller #0 [ 1617.412062][T26495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1617.422258][T26495] Call Trace: [ 1617.425575][T26495] [ 1617.428682][T26495] dump_stack_lvl+0x188/0x24e [ 1617.433426][T26495] ? show_regs_print_info+0x12/0x12 [ 1617.438681][T26495] ? load_image+0x400/0x400 [ 1617.443231][T26495] ? __might_sleep+0xd0/0xd0 [ 1617.447874][T26495] ? __lock_acquire+0x7d10/0x7d10 [ 1617.452965][T26495] should_fail_ex+0x399/0x4d0 [ 1617.457699][T26495] should_failslab+0x5/0x20 [ 1617.462264][T26495] slab_pre_alloc_hook+0x59/0x310 [ 1617.467343][T26495] ? kvmalloc_node+0x6c/0x180 [ 1617.472171][T26495] __kmem_cache_alloc_node+0x4f/0x260 [ 1617.477676][T26495] ? kvmalloc_node+0x6c/0x180 [ 1617.482419][T26495] __kmalloc_node+0xa0/0x240 [ 1617.487077][T26495] kvmalloc_node+0x6c/0x180 [ 1617.491647][T26495] page_pool_create+0x1e7/0x5c0 [ 1617.496564][T26495] bpf_test_run_xdp_live+0x223/0x1a90 [ 1617.501986][T26495] ? verify_lock_unused+0x140/0x140 [ 1617.507243][T26495] ? kasan_set_track+0x60/0x70 [ 1617.512053][T26495] ? kasan_set_track+0x4b/0x70 [ 1617.516871][T26495] ? __kasan_kmalloc+0x8e/0xa0 [ 1617.521696][T26495] ? bpf_test_init+0x9f/0x140 [ 1617.526426][T26495] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 1617.532028][T26495] ? bpf_prog_test_run+0x31e/0x390 [ 1617.537191][T26495] ? __x64_sys_bpf+0x78/0x90 [ 1617.541830][T26495] ? do_syscall_64+0x4c/0xa0 [ 1617.546617][T26495] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1617.552754][T26495] ? xdp_convert_md_to_buff+0x330/0x330 [ 1617.558371][T26495] ? __lock_acquire+0x7d10/0x7d10 [ 1617.563441][T26495] ? __virt_addr_valid+0x188/0x540 [ 1617.568605][T26495] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1617.575001][T26495] ? bpf_test_init+0x119/0x140 [ 1617.579915][T26495] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1617.585469][T26495] bpf_prog_test_run_xdp+0x736/0xf10 [ 1617.590820][T26495] ? dev_put+0x80/0x80 [ 1617.594954][T26495] ? dev_put+0x80/0x80 [ 1617.599073][T26495] bpf_prog_test_run+0x31e/0x390 [ 1617.604062][T26495] __sys_bpf+0x62b/0x780 [ 1617.608364][T26495] ? bpf_link_show_fdinfo+0x380/0x380 [ 1617.613890][T26495] ? lock_chain_count+0x20/0x20 [ 1617.618801][T26495] __x64_sys_bpf+0x78/0x90 [ 1617.623338][T26495] do_syscall_64+0x4c/0xa0 [ 1617.627872][T26495] ? clear_bhb_loop+0x60/0xb0 [ 1617.632665][T26495] ? clear_bhb_loop+0x60/0xb0 [ 1617.637455][T26495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1617.643367][T26495] RIP: 0033:0x7ff87b39cdd9 [ 1617.647885][T26495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.667863][T26495] RSP: 002b:00007ff87c17c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1617.676384][T26495] RAX: ffffffffffffffda RBX: 00007ff87b615fa0 RCX: 00007ff87b39cdd9 [ 1617.684374][T26495] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1617.692360][T26495] RBP: 00007ff87c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.700344][T26495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.708329][T26495] R13: 00007ff87b616038 R14: 00007ff87b615fa0 R15: 00007fff3841aca8 [ 1617.716328][T26495] [ 1617.728318][T26495] page_pool_create() gave up with errno -12 [ 1618.067988][T26512] netlink: 'syz.4.6686': attribute type 3 has an invalid length. [ 1618.077743][T26512] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6686'. [ 1618.975109][T26517] netlink: 'syz.4.6686': attribute type 3 has an invalid length. [ 1619.009086][T26517] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6686'. [ 1619.062335][T26506] netlink: 'syz.2.6684': attribute type 10 has an invalid length. [ 1620.998921][T26506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1621.081089][T26531] netlink: 'syz.0.6690': attribute type 3 has an invalid length. [ 1621.092301][T26531] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.6690'. [ 1622.211695][T26554] netlink: 'syz.3.6696': attribute type 10 has an invalid length. [ 1623.052328][T26567] netlink: 'syz.2.6702': attribute type 3 has an invalid length. [ 1623.104312][T26567] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.6702'. [ 1625.138706][T23526] Bluetooth: hci2: command 0x0406 tx timeout [ 1625.933690][T26581] netlink: 'syz.4.6707': attribute type 1 has an invalid length. [ 1625.942444][T26581] netlink: 'syz.4.6707': attribute type 4 has an invalid length. [ 1625.960825][T26581] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6707'. [ 1625.974194][T26584] netlink: 'syz.2.6708': attribute type 1 has an invalid length. [ 1625.992560][T26584] netlink: 'syz.2.6708': attribute type 4 has an invalid length. [ 1626.008247][T26584] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6708'. [ 1627.267528][T26607] netlink: 'syz.4.6716': attribute type 3 has an invalid length. [ 1627.281762][T26607] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6716'. [ 1627.558710][T26613] netlink: 'syz.3.6720': attribute type 1 has an invalid length. [ 1627.580500][T26613] netlink: 'syz.3.6720': attribute type 4 has an invalid length. [ 1627.639634][T26613] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1627.741248][T26623] netlink: 'syz.0.6723': attribute type 1 has an invalid length. [ 1627.759044][T26623] netlink: 'syz.0.6723': attribute type 4 has an invalid length. [ 1627.767835][T26623] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6723'. [ 1627.843352][T26627] netlink: 'syz.4.6724': attribute type 10 has an invalid length. [ 1628.003700][T26628] netlink: 'syz.4.6724': attribute type 10 has an invalid length. [ 1629.688164][T26654] netlink: 'syz.4.6731': attribute type 3 has an invalid length. [ 1629.704331][T26654] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6731'. [ 1629.919658][T26666] FAULT_INJECTION: forcing a failure. [ 1629.919658][T26666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1629.941129][T26666] CPU: 1 PID: 26666 Comm: syz.1.6735 Not tainted syzkaller #0 [ 1629.948801][T26666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1629.958906][T26666] Call Trace: [ 1629.962209][T26666] [ 1629.965160][T26666] dump_stack_lvl+0x188/0x24e [ 1629.969956][T26666] ? show_regs_print_info+0x12/0x12 [ 1629.975178][T26666] ? load_image+0x400/0x400 [ 1629.979700][T26666] ? __lock_acquire+0x7d10/0x7d10 [ 1629.984747][T26666] should_fail_ex+0x399/0x4d0 [ 1629.989448][T26666] _copy_from_user+0x2c/0x170 [ 1629.994320][T26666] ___sys_sendmsg+0x1c3/0x360 [ 1629.999120][T26666] ? __sys_sendmsg+0x290/0x290 [ 1630.003931][T26666] ? __lock_acquire+0x7d10/0x7d10 [ 1630.009093][T26666] __se_sys_sendmsg+0x1bb/0x2a0 [ 1630.013961][T26666] ? ct_nmi_exit+0x145/0x1c0 [ 1630.018588][T26666] ? __x64_sys_sendmsg+0x80/0x80 [ 1630.023574][T26666] ? lockdep_hardirqs_on+0x94/0x140 [ 1630.028789][T26666] do_syscall_64+0x4c/0xa0 [ 1630.033222][T26666] ? clear_bhb_loop+0x60/0xb0 [ 1630.037919][T26666] ? clear_bhb_loop+0x60/0xb0 [ 1630.042613][T26666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1630.048521][T26666] RIP: 0033:0x7f61f659cdd9 [ 1630.052955][T26666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1630.072747][T26666] RSP: 002b:00007f61f74f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1630.081177][T26666] RAX: ffffffffffffffda RBX: 00007f61f6815fa0 RCX: 00007f61f659cdd9 [ 1630.089160][T26666] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1630.097235][T26666] RBP: 00007f61f74f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1630.105216][T26666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1630.113288][T26666] R13: 00007f61f6816038 R14: 00007f61f6815fa0 R15: 00007ffff25ff108 [ 1630.121286][T26666] [ 1630.243284][T26667] ref_ctr_offset mismatch. inode: 0x2d9 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1630.751666][T26670] netlink: 'syz.4.6736': attribute type 1 has an invalid length. [ 1630.761251][T26670] netlink: 'syz.4.6736': attribute type 4 has an invalid length. [ 1630.781084][T26670] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6736'. [ 1630.796372][T26674] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6737'. [ 1631.372249][T26689] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6741'. [ 1631.421216][T26692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.428524][T26692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.436257][T26692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.443458][T26692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.591597][T26692] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1631.895516][T26708] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6746'. [ 1634.380599][T26710] validate_nla: 5 callbacks suppressed [ 1634.380622][T26710] netlink: 'syz.1.6746': attribute type 3 has an invalid length. [ 1634.417425][T26710] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6746'. [ 1634.562564][T26720] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.6749'. [ 1634.903596][T26726] netlink: 'syz.3.6751': attribute type 1 has an invalid length. [ 1634.932944][T26726] netlink: 'syz.3.6751': attribute type 4 has an invalid length. [ 1634.965594][T26726] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6751'. [ 1635.823478][T26752] netlink: 'syz.3.6760': attribute type 3 has an invalid length. [ 1635.825954][T26755] netlink: 'syz.1.6759': attribute type 12 has an invalid length. [ 1635.856741][T26752] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1635.948496][T26755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6759'. [ 1636.192138][T26752] netlink: 'syz.3.6760': attribute type 3 has an invalid length. [ 1636.218978][T26752] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1636.252941][T26755] netlink: 'syz.1.6759': attribute type 10 has an invalid length. [ 1636.281619][T26755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.289366][T26755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.398494][T26755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.405718][T26755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1636.413340][T26755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.420596][T26755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.650588][T26755] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1636.703422][T26772] netlink: 'syz.0.6762': attribute type 21 has an invalid length. [ 1636.769034][T26772] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1636.903657][T26776] FAULT_INJECTION: forcing a failure. [ 1636.903657][T26776] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.968374][T26776] CPU: 1 PID: 26776 Comm: syz.4.6765 Not tainted syzkaller #0 [ 1636.975926][T26776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1636.986487][T26776] Call Trace: [ 1636.989813][T26776] [ 1636.992781][T26776] dump_stack_lvl+0x188/0x24e [ 1636.997520][T26776] ? show_regs_print_info+0x12/0x12 [ 1637.002788][T26776] ? load_image+0x400/0x400 [ 1637.007354][T26776] ? __lock_acquire+0x7d10/0x7d10 [ 1637.012519][T26776] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1637.018647][T26776] should_fail_ex+0x399/0x4d0 [ 1637.023722][T26776] should_failslab+0x5/0x20 [ 1637.028267][T26776] slab_pre_alloc_hook+0x59/0x310 [ 1637.033328][T26776] kmem_cache_alloc_lru+0x49/0x2e0 [ 1637.038632][T26776] ? __d_alloc+0x31/0x700 [ 1637.042975][T26776] __d_alloc+0x31/0x700 [ 1637.047143][T26776] d_alloc_pseudo+0x19/0x70 [ 1637.051746][T26776] alloc_file_pseudo+0xe0/0x200 [ 1637.056609][T26776] ? alloc_empty_file_noaccount+0x80/0x80 [ 1637.062350][T26776] ? _raw_spin_unlock+0x24/0x40 [ 1637.067215][T26776] ? alloc_fd+0x58f/0x630 [ 1637.071563][T26776] sock_alloc_file+0xb3/0x240 [ 1637.076354][T26776] __sys_socket+0x12a/0x190 [ 1637.080884][T26776] __x64_sys_socket+0x76/0x80 [ 1637.085589][T26776] do_syscall_64+0x4c/0xa0 [ 1637.090023][T26776] ? clear_bhb_loop+0x60/0xb0 [ 1637.094717][T26776] ? clear_bhb_loop+0x60/0xb0 [ 1637.099413][T26776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.105324][T26776] RIP: 0033:0x7ff87b39cdd9 [ 1637.109754][T26776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.129384][T26776] RSP: 002b:00007ff87c17c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1637.137950][T26776] RAX: ffffffffffffffda RBX: 00007ff87b615fa0 RCX: 00007ff87b39cdd9 [ 1637.145931][T26776] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 1637.154087][T26776] RBP: 00007ff87c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.162247][T26776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.170236][T26776] R13: 00007ff87b616038 R14: 00007ff87b615fa0 R15: 00007fff3841aca8 [ 1637.178241][T26776] [ 1637.250478][T26775] netlink: 'syz.3.6766': attribute type 1 has an invalid length. [ 1637.280476][T26775] netlink: 'syz.3.6766': attribute type 4 has an invalid length. [ 1637.304018][T26775] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6766'. [ 1637.329007][T26778] netlink: 126612 bytes leftover after parsing attributes in process `syz.1.6767'. [ 1637.379412][T26778] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6767'. [ 1638.119700][T26799] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6773'. [ 1638.739839][T26814] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6777'. [ 1641.309737][T23549] device wlan1 left promiscuous mode [ 1641.369617][T23549] team0: Port device wlan1 removed [ 1641.543112][T26843] FAULT_INJECTION: forcing a failure. [ 1641.543112][T26843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.562099][T26844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6786'. [ 1641.638157][T26843] CPU: 0 PID: 26843 Comm: syz.4.6785 Not tainted syzkaller #0 [ 1641.645877][T26843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1641.655953][T26843] Call Trace: [ 1641.659247][T26843] [ 1641.662191][T26843] dump_stack_lvl+0x188/0x24e [ 1641.666914][T26843] ? show_regs_print_info+0x12/0x12 [ 1641.672184][T26843] ? load_image+0x400/0x400 [ 1641.676858][T26843] ? __lock_acquire+0x7d10/0x7d10 [ 1641.682019][T26843] should_fail_ex+0x399/0x4d0 [ 1641.686725][T26843] _copy_from_user+0x2c/0x170 [ 1641.691430][T26843] kstrtouint_from_user+0xda/0x170 [ 1641.696613][T26843] ? kstrtol_from_user+0x190/0x190 [ 1641.701773][T26843] proc_fail_nth_write+0x8b/0x200 [ 1641.706817][T26843] ? proc_fail_nth_read+0x220/0x220 [ 1641.712118][T26843] ? common_file_perm+0x171/0x1c0 [ 1641.717170][T26843] ? proc_fail_nth_read+0x220/0x220 [ 1641.722386][T26843] vfs_write+0x2e6/0xa30 [ 1641.726661][T26843] ? file_end_write+0x250/0x250 [ 1641.731540][T26843] ? __fget_files+0x28/0x4b0 [ 1641.736168][T26843] ? __fget_files+0x28/0x4b0 [ 1641.740868][T26843] ? __fget_files+0x43d/0x4b0 [ 1641.745670][T26843] ? __fdget_pos+0x2ae/0x360 [ 1641.750276][T26843] ? ksys_write+0x71/0x250 [ 1641.754715][T26843] ksys_write+0x14c/0x250 [ 1641.759072][T26843] ? __ia32_sys_read+0x80/0x80 [ 1641.763863][T26843] ? lockdep_hardirqs_on+0x94/0x140 [ 1641.769081][T26843] do_syscall_64+0x4c/0xa0 [ 1641.773524][T26843] ? clear_bhb_loop+0x60/0xb0 [ 1641.778223][T26843] ? clear_bhb_loop+0x60/0xb0 [ 1641.782949][T26843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1641.788857][T26843] RIP: 0033:0x7ff87b35d60e [ 1641.793351][T26843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1641.812989][T26843] RSP: 002b:00007ff87c17bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1641.821436][T26843] RAX: ffffffffffffffda RBX: 00007ff87c17c6c0 RCX: 00007ff87b35d60e [ 1641.829421][T26843] RDX: 0000000000000001 RSI: 00007ff87c17c0a0 RDI: 0000000000000008 [ 1641.837415][T26843] RBP: 00007ff87c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.845404][T26843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.853399][T26843] R13: 00007ff87b616038 R14: 00007ff87b615fa0 R15: 00007fff3841aca8 [ 1641.861489][T26843] [ 1642.125431][T23549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1642.162114][T23549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1642.283709][T23549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1642.292702][T23549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1642.377781][T23549] device veth1_macvtap left promiscuous mode [ 1642.394461][T23549] device veth0_macvtap left promiscuous mode [ 1642.402329][T23549] device veth1_vlan left promiscuous mode [ 1642.440710][T23549] device veth0_vlan left promiscuous mode [ 1643.435266][T23549] device team_slave_1 left promiscuous mode [ 1643.443555][T23549] team0 (unregistering): Port device team_slave_1 removed [ 1643.495306][T23549] device team_slave_0 left promiscuous mode [ 1643.502489][T23549] team0 (unregistering): Port device team_slave_0 removed [ 1643.553226][T23549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1643.563728][T23549] device bond_slave_1 left promiscuous mode [ 1643.815182][T23549] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1643.823944][T23549] device batadv0 left promiscuous mode [ 1643.915450][T23549] bond0 (unregistering): Released all slaves [ 1643.983857][T26861] validate_nla: 6 callbacks suppressed [ 1643.983876][T26861] netlink: 'syz.0.6790': attribute type 10 has an invalid length. [ 1644.018285][T26867] netlink: 'syz.2.6792': attribute type 19 has an invalid length. [ 1644.031792][T26868] nr0: port 1(hsr0) entered blocking state [ 1644.066359][T26868] nr0: port 1(hsr0) entered disabled state [ 1644.100483][T26868] device hsr0 entered promiscuous mode [ 1644.435864][T26871] hsr0: VLAN not yet supported [ 1648.173711][T26921] netlink: 'syz.0.6806': attribute type 19 has an invalid length. [ 1650.619360][T26953] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6817'. [ 1650.865535][T26956] netlink: 'syz.3.6816': attribute type 1 has an invalid length. [ 1650.926787][T26948] netlink: 'syz.2.6814': attribute type 3 has an invalid length. [ 1650.959765][T26948] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1652.179241][T26979] netlink: 'syz.3.6820': attribute type 19 has an invalid length. [ 1653.614164][T27004] netlink: 'syz.4.6830': attribute type 3 has an invalid length. [ 1653.701726][T27004] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6830'. [ 1654.134212][T27016] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6834'. [ 1655.366972][T27033] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6840'. [ 1658.939720][T27068] netlink: 'syz.0.6846': attribute type 3 has an invalid length. [ 1659.026899][T27068] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.6846'. [ 1659.239514][T27077] netlink: 'syz.2.6862': attribute type 4 has an invalid length. [ 1660.372727][T27087] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6852'. [ 1660.423923][T27092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.431730][T27092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.243355][T27113] netlink: 'syz.1.6864': attribute type 16 has an invalid length. [ 1661.279763][T27113] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6864'. [ 1661.718394][T27118] netlink: 'syz.2.6865': attribute type 3 has an invalid length. [ 1661.749766][T27118] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.6865'. [ 1661.995158][T27130] netlink: 'syz.4.6870': attribute type 10 has an invalid length. [ 1662.044093][T27130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1662.093664][T27130] device team0 entered promiscuous mode [ 1662.137469][T27130] device team_slave_0 entered promiscuous mode [ 1662.159713][T27130] device team_slave_1 entered promiscuous mode [ 1662.194145][T27130] bridge0: port 3(team0) entered blocking state [ 1662.244655][T27130] bridge0: port 3(team0) entered disabled state [ 1662.309910][T27130] bridge0: port 3(team0) entered blocking state [ 1662.316473][T27130] bridge0: port 3(team0) entered forwarding state [ 1662.395284][T27137] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1663.831370][T27179] netlink: 'syz.2.6881': attribute type 3 has an invalid length. [ 1663.888868][T27179] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1664.069729][T27174] netlink: 'syz.2.6881': attribute type 3 has an invalid length. [ 1664.095420][T27174] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1666.115435][T27221] netlink: 'syz.4.6898': attribute type 21 has an invalid length. [ 1666.238763][T27221] netlink: 'syz.4.6898': attribute type 29 has an invalid length. [ 1666.309291][T27221] netlink: 'syz.4.6898': attribute type 29 has an invalid length. [ 1666.380586][T27222] netlink: 'syz.4.6898': attribute type 29 has an invalid length. [ 1666.497640][T27232] netlink: 'syz.1.6901': attribute type 3 has an invalid length. [ 1666.570060][T27232] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6901'. [ 1666.852959][T27232] netlink: 'syz.1.6901': attribute type 3 has an invalid length. [ 1666.868435][T27232] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6901'. [ 1668.337558][T27269] netlink: 'syz.1.6913': attribute type 3 has an invalid length. [ 1668.375916][T27269] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6913'. [ 1668.625245][T27269] netlink: 'syz.1.6913': attribute type 3 has an invalid length. [ 1668.651971][T27269] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6913'. [ 1669.142375][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.149147][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.201638][T27287] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.6918'. [ 1669.402641][T27286] netlink: 'syz.1.6918': attribute type 4 has an invalid length. [ 1669.478553][T27286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6918'. [ 1674.175994][T27330] netlink: 'syz.3.6928': attribute type 3 has an invalid length. [ 1674.199075][T27330] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6928'. [ 1674.554762][T27335] netlink: 'syz.4.6929': attribute type 3 has an invalid length. [ 1674.634566][T27335] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6929'. [ 1676.073285][T27370] netlink: 'syz.3.6942': attribute type 3 has an invalid length. [ 1676.184667][T27370] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6942'. [ 1676.358256][T27376] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6944'. [ 1678.305644][T27410] netlink: 'syz.1.6955': attribute type 3 has an invalid length. [ 1678.343648][T27410] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6955'. [ 1678.447215][T27410] netlink: 'syz.1.6955': attribute type 3 has an invalid length. [ 1678.461838][T27410] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6955'. [ 1678.515005][T27416] FAULT_INJECTION: forcing a failure. [ 1678.515005][T27416] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.588146][T27416] CPU: 1 PID: 27416 Comm: syz.3.6956 Not tainted syzkaller #0 [ 1678.595720][T27416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1678.606090][T27416] Call Trace: [ 1678.609542][T27416] [ 1678.612611][T27416] dump_stack_lvl+0x188/0x24e [ 1678.617356][T27416] ? show_regs_print_info+0x12/0x12 [ 1678.622882][T27416] ? load_image+0x400/0x400 [ 1678.627735][T27416] ? __might_sleep+0xd0/0xd0 [ 1678.632493][T27416] ? __lock_acquire+0x7d10/0x7d10 [ 1678.637782][T27416] ? rcu_is_watching+0x11/0xa0 [ 1678.642885][T27416] should_fail_ex+0x399/0x4d0 [ 1678.648516][T27416] should_failslab+0x5/0x20 [ 1678.653253][T27416] slab_pre_alloc_hook+0x59/0x310 [ 1678.658916][T27416] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1678.665748][T27416] __kmem_cache_alloc_node+0x4f/0x260 [ 1678.672520][T27416] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1678.678501][T27416] kmalloc_trace+0x26/0xe0 [ 1678.683530][T27416] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1678.689715][T27416] sctp_association_new+0x15e5/0x25d0 [ 1678.696401][T27416] sctp_connect_new_asoc+0x2da/0x6a0 [ 1678.702453][T27416] ? __sctp_connect+0xd80/0xd80 [ 1678.707622][T27416] ? __local_bh_enable_ip+0x136/0x1c0 [ 1678.713551][T27416] ? _local_bh_enable+0xa0/0xa0 [ 1678.718682][T27416] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1678.724693][T27416] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1678.730971][T27416] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1678.736771][T27416] ? security_sctp_bind_connect+0x85/0xb0 [ 1678.742637][T27416] sctp_sendmsg+0x15b0/0x2940 [ 1678.747507][T27416] ? aa_sk_perm+0x771/0x950 [ 1678.752312][T27416] ? sctp_getsockopt+0x8a0/0x8a0 [ 1678.757927][T27416] ? __might_fault+0xa6/0x120 [ 1678.764236][T27416] ? aa_af_perm+0x340/0x340 [ 1678.768863][T27416] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1678.775576][T27416] ? inet_sendmsg+0x78/0x2f0 [ 1678.780615][T27416] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1678.785911][T27416] ? security_socket_sendmsg+0x7c/0xa0 [ 1678.791674][T27416] ? inet_send_prepare+0x260/0x260 [ 1678.797181][T27416] ____sys_sendmsg+0x5be/0x970 [ 1678.802198][T27416] ? __sys_sendmsg_sock+0x30/0x30 [ 1678.807455][T27416] ? __import_iovec+0x315/0x500 [ 1678.812516][T27416] ? import_iovec+0x6f/0xa0 [ 1678.817130][T27416] ___sys_sendmsg+0x2a2/0x360 [ 1678.822252][T27416] ? __sys_sendmsg+0x290/0x290 [ 1678.827177][T27416] ? __lock_acquire+0x7d10/0x7d10 [ 1678.832445][T27416] __se_sys_sendmsg+0x1bb/0x2a0 [ 1678.838302][T27416] ? __x64_sys_sendmsg+0x80/0x80 [ 1678.843739][T27416] ? lockdep_hardirqs_on+0x94/0x140 [ 1678.849416][T27416] do_syscall_64+0x4c/0xa0 [ 1678.854232][T27416] ? clear_bhb_loop+0x60/0xb0 [ 1678.859324][T27416] ? clear_bhb_loop+0x60/0xb0 [ 1678.864914][T27416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1678.871846][T27416] RIP: 0033:0x7f3e3799cdd9 [ 1678.876578][T27416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.901871][T27416] RSP: 002b:00007f3e3880e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.910819][T27416] RAX: ffffffffffffffda RBX: 00007f3e37c15fa0 RCX: 00007f3e3799cdd9 [ 1678.919457][T27416] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1678.929071][T27416] RBP: 00007f3e3880e090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.938079][T27416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.946340][T27416] R13: 00007f3e37c16038 R14: 00007f3e37c15fa0 R15: 00007ffdc9c3a808 [ 1678.956184][T27416] [ 1680.771036][T27449] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6966'. [ 1680.936586][T27448] netlink: 'syz.3.6967': attribute type 3 has an invalid length. [ 1681.033788][T27448] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6967'. [ 1682.187096][T27451] netlink: 'syz.1.6966': attribute type 12 has an invalid length. [ 1682.198541][T27450] netlink: 'syz.3.6967': attribute type 3 has an invalid length. [ 1682.218173][T27450] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6967'. [ 1682.985882][T27464] netlink: 'syz.3.6970': attribute type 3 has an invalid length. [ 1683.048559][T27464] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6970'. [ 1683.831470][T27481] FAULT_INJECTION: forcing a failure. [ 1683.831470][T27481] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.888424][T27481] CPU: 0 PID: 27481 Comm: syz.1.6976 Not tainted syzkaller #0 [ 1683.897117][T27481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1683.908609][T27481] Call Trace: [ 1683.912180][T27481] [ 1683.915976][T27481] dump_stack_lvl+0x188/0x24e [ 1683.921649][T27481] ? show_regs_print_info+0x12/0x12 [ 1683.928034][T27481] ? load_image+0x400/0x400 [ 1683.934309][T27481] ? __might_sleep+0xd0/0xd0 [ 1683.939753][T27481] ? __lock_acquire+0x7d10/0x7d10 [ 1683.947150][T27481] should_fail_ex+0x399/0x4d0 [ 1683.953453][T27481] should_failslab+0x5/0x20 [ 1683.959594][T27481] slab_pre_alloc_hook+0x59/0x310 [ 1683.966498][T27481] ? __lock_acquire+0x7d10/0x7d10 [ 1683.974555][T27481] ? kvmalloc_node+0x6c/0x180 [ 1683.982332][T27481] __kmem_cache_alloc_node+0x4f/0x260 [ 1683.989427][T27481] ? schedule_delayed_monitor_work+0x160/0x160 [ 1683.997369][T27481] ? kvmalloc_node+0x6c/0x180 [ 1684.003773][T27481] __kmalloc_node+0xa0/0x240 [ 1684.012092][T27481] kvmalloc_node+0x6c/0x180 [ 1684.018965][T27481] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 1684.026837][T27481] ? 0xffffffffa0004440 [ 1684.032564][T27481] ? text_poke_copy+0x79/0x90 [ 1684.038687][T27481] ? 0xffffffffa0004440 [ 1684.043755][T27481] ? 0xffffffffa0004440 [ 1684.048837][T27481] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1684.056205][T27481] ? 0xffffffffa0004440 [ 1684.062115][T27481] ? xdp_convert_md_to_buff+0x330/0x330 [ 1684.069854][T27481] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1684.077851][T27481] ? bpf_test_init+0x119/0x140 [ 1684.083475][T27481] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1684.089694][T27481] bpf_prog_test_run_xdp+0x736/0xf10 [ 1684.096738][T27481] ? dev_put+0x80/0x80 [ 1684.102087][T27481] ? dev_put+0x80/0x80 [ 1684.106916][T27481] bpf_prog_test_run+0x31e/0x390 [ 1684.114090][T27481] __sys_bpf+0x62b/0x780 [ 1684.121041][T27481] ? bpf_link_show_fdinfo+0x380/0x380 [ 1684.127867][T27481] ? lock_chain_count+0x20/0x20 [ 1684.134466][T27481] __x64_sys_bpf+0x78/0x90 [ 1684.139770][T27481] do_syscall_64+0x4c/0xa0 [ 1684.147668][T27481] ? clear_bhb_loop+0x60/0xb0 [ 1684.155302][T27481] ? clear_bhb_loop+0x60/0xb0 [ 1684.161532][T27481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.169653][T27481] RIP: 0033:0x7f61f659cdd9 [ 1684.174886][T27481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.198207][T27481] RSP: 002b:00007f61f74f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1684.208058][T27481] RAX: ffffffffffffffda RBX: 00007f61f6815fa0 RCX: 00007f61f659cdd9 [ 1684.217891][T27481] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1684.228783][T27481] RBP: 00007f61f74f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1684.238635][T27481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1684.250218][T27481] R13: 00007f61f6816038 R14: 00007f61f6815fa0 R15: 00007ffff25ff108 [ 1684.260933][T27481] [ 1684.446097][T27485] netlink: 'syz.3.6977': attribute type 12 has an invalid length. [ 1684.509469][T27485] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.6977'. [ 1685.251563][T27493] netlink: 'syz.0.6981': attribute type 3 has an invalid length. [ 1685.289824][T27493] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.6981'. [ 1686.097739][T27532] netlink: 'syz.0.6992': attribute type 29 has an invalid length. [ 1686.206760][T27532] netlink: 'syz.0.6992': attribute type 29 has an invalid length. [ 1686.510497][T27542] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6995'. [ 1686.618349][T27541] : port 1(ip6gretap0) entered blocking state [ 1686.625427][T27541] : port 1(ip6gretap0) entered disabled state [ 1686.662660][T27541] device ip6gretap0 entered promiscuous mode [ 1686.765770][T27546] netlink: 'syz.4.6995': attribute type 3 has an invalid length. [ 1686.807008][T27546] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6995'. [ 1686.825744][T27547] device ip6gretap0 left promiscuous mode [ 1686.832754][T27547] : port 1(ip6gretap0) entered disabled state [ 1686.877923][T27549] mac80211_hwsim hwsim561 ªªªªªª: renamed from wlan0 [ 1687.345792][T27552] netlink: 'syz.4.6997': attribute type 21 has an invalid length. [ 1687.458641][T27552] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1687.509581][T27552] netlink: 'syz.4.6997': attribute type 4 has an invalid length. [ 1687.552391][T27552] netlink: 'syz.4.6997': attribute type 5 has an invalid length. [ 1687.567727][T27552] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1687.627944][T27554] netlink: 'syz.3.6998': attribute type 3 has an invalid length. [ 1687.679997][T27554] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6998'. [ 1688.231727][T27575] FAULT_INJECTION: forcing a failure. [ 1688.231727][T27575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1688.350948][T27575] CPU: 0 PID: 27575 Comm: syz.1.7006 Not tainted syzkaller #0 [ 1688.361242][T27575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1688.373647][T27575] Call Trace: [ 1688.377508][T27575] [ 1688.381346][T27575] dump_stack_lvl+0x188/0x24e [ 1688.388384][T27575] ? show_regs_print_info+0x12/0x12 [ 1688.394877][T27575] ? load_image+0x400/0x400 [ 1688.400592][T27575] ? __lock_acquire+0x7d10/0x7d10 [ 1688.406159][T27575] should_fail_ex+0x399/0x4d0 [ 1688.411120][T27575] _copy_from_user+0x2c/0x170 [ 1688.415861][T27575] bpf_prog_test_run_skb+0x262/0x12a0 [ 1688.423302][T27575] ? __fget_files+0x28/0x4b0 [ 1688.428431][T27575] ? __fget_files+0x28/0x4b0 [ 1688.433565][T27575] ? __fget_files+0x43d/0x4b0 [ 1688.439117][T27575] ? cpu_online+0xa0/0xa0 [ 1688.444314][T27575] bpf_prog_test_run+0x31e/0x390 [ 1688.451682][T27575] __sys_bpf+0x62b/0x780 [ 1688.457724][T27575] ? bpf_link_show_fdinfo+0x380/0x380 [ 1688.464592][T27575] ? lock_chain_count+0x20/0x20 [ 1688.470923][T27575] __x64_sys_bpf+0x78/0x90 [ 1688.476108][T27575] do_syscall_64+0x4c/0xa0 [ 1688.481625][T27575] ? clear_bhb_loop+0x60/0xb0 [ 1688.487132][T27575] ? clear_bhb_loop+0x60/0xb0 [ 1688.491937][T27575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1688.499010][T27575] RIP: 0033:0x7f61f659cdd9 [ 1688.503711][T27575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.525749][T27575] RSP: 002b:00007f61f74f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1688.535845][T27575] RAX: ffffffffffffffda RBX: 00007f61f6815fa0 RCX: 00007f61f659cdd9 [ 1688.545809][T27575] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 1688.554901][T27575] RBP: 00007f61f74f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.563816][T27575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.573485][T27575] R13: 00007f61f6816038 R14: 00007f61f6815fa0 R15: 00007ffff25ff108 [ 1688.583534][T27575] [ 1688.696920][T27579] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7007'. [ 1689.155960][T27595] FAULT_INJECTION: forcing a failure. [ 1689.155960][T27595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1689.239866][T27595] CPU: 1 PID: 27595 Comm: syz.0.7012 Not tainted syzkaller #0 [ 1689.248091][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1689.261492][T27595] Call Trace: [ 1689.266155][T27595] [ 1689.270511][T27595] dump_stack_lvl+0x188/0x24e [ 1689.276456][T27595] ? show_regs_print_info+0x12/0x12 [ 1689.283453][T27595] ? load_image+0x400/0x400 [ 1689.290156][T27595] ? __lock_acquire+0x7d10/0x7d10 [ 1689.297783][T27595] ? snprintf+0xe5/0x140 [ 1689.303206][T27595] should_fail_ex+0x399/0x4d0 [ 1689.309426][T27595] _copy_to_user+0x2c/0x130 [ 1689.315715][T27595] simple_read_from_buffer+0xe3/0x150 [ 1689.323377][T27595] proc_fail_nth_read+0x1a6/0x220 [ 1689.332602][T27595] ? proc_fault_inject_write+0x310/0x310 [ 1689.339855][T27595] ? fsnotify_perm+0x248/0x550 [ 1689.347550][T27595] ? proc_fault_inject_write+0x310/0x310 [ 1689.355840][T27595] vfs_read+0x2de/0xa00 [ 1689.361021][T27595] ? kernel_read+0x1e0/0x1e0 [ 1689.366577][T27595] ? __fget_files+0x28/0x4b0 [ 1689.372587][T27595] ? __fget_files+0x28/0x4b0 [ 1689.380526][T27595] ? __fget_files+0x43d/0x4b0 [ 1689.387780][T27595] ? __fdget_pos+0x2ae/0x360 [ 1689.394237][T27595] ? ksys_read+0x71/0x250 [ 1689.399112][T27595] ksys_read+0x14c/0x250 [ 1689.404286][T27595] ? vfs_write+0xa30/0xa30 [ 1689.410295][T27595] ? lockdep_hardirqs_on+0x94/0x140 [ 1689.416940][T27595] do_syscall_64+0x4c/0xa0 [ 1689.422034][T27595] ? clear_bhb_loop+0x60/0xb0 [ 1689.426870][T27595] ? clear_bhb_loop+0x60/0xb0 [ 1689.432932][T27595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1689.440126][T27595] RIP: 0033:0x7f59f4d5d60e [ 1689.445276][T27595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1689.468420][T27595] RSP: 002b:00007f59f5c01fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1689.478820][T27595] RAX: ffffffffffffffda RBX: 00007f59f5c026c0 RCX: 00007f59f4d5d60e [ 1689.489138][T27595] RDX: 000000000000000f RSI: 00007f59f5c020a0 RDI: 0000000000000004 [ 1689.498161][T27595] RBP: 00007f59f5c02090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.508921][T27595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.520336][T27595] R13: 00007f59f5016038 R14: 00007f59f5015fa0 R15: 00007ffc5663c4c8 [ 1689.530522][T27595] [ 1690.916023][T27602] netlink: 'syz.0.7014': attribute type 3 has an invalid length. [ 1690.971028][T27604] FAULT_INJECTION: forcing a failure. [ 1690.971028][T27604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.983113][T27602] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1691.000676][T27604] CPU: 1 PID: 27604 Comm: syz.1.7015 Not tainted syzkaller #0 [ 1691.018145][T27604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1691.033656][T27604] Call Trace: [ 1691.037752][T27604] [ 1691.043473][T27604] dump_stack_lvl+0x188/0x24e [ 1691.049903][T27604] ? show_regs_print_info+0x12/0x12 [ 1691.060332][T27604] ? load_image+0x400/0x400 [ 1691.068316][T27604] ? __lock_acquire+0x7d10/0x7d10 [ 1691.075983][T27604] should_fail_ex+0x399/0x4d0 [ 1691.084338][T27604] _copy_from_user+0x2c/0x170 [ 1691.092160][T27604] __copy_msghdr+0x3b7/0x580 [ 1691.099076][T27604] ___sys_sendmsg+0x210/0x360 [ 1691.107022][T27604] ? __sys_sendmsg+0x290/0x290 [ 1691.114591][T27604] ? __lock_acquire+0x7d10/0x7d10 [ 1691.120244][T27604] __se_sys_sendmsg+0x1bb/0x2a0 [ 1691.126684][T27604] ? ct_nmi_exit+0x145/0x1c0 [ 1691.133176][T27604] ? __x64_sys_sendmsg+0x80/0x80 [ 1691.139747][T27604] ? lockdep_hardirqs_on+0x94/0x140 [ 1691.146478][T27604] do_syscall_64+0x4c/0xa0 [ 1691.152839][T27604] ? clear_bhb_loop+0x60/0xb0 [ 1691.159985][T27604] ? clear_bhb_loop+0x60/0xb0 [ 1691.166537][T27604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1691.175554][T27604] RIP: 0033:0x7f61f659cdd9 [ 1691.179879][T27607] netlink: 'syz.0.7014': attribute type 3 has an invalid length. [ 1691.180704][T27604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.180733][T27604] RSP: 002b:00007f61f74f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1691.180759][T27604] RAX: ffffffffffffffda RBX: 00007f61f6815fa0 RCX: 00007f61f659cdd9 [ 1691.180776][T27604] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1691.180789][T27604] RBP: 00007f61f74f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.180804][T27604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.180818][T27604] R13: 00007f61f6816038 R14: 00007f61f6815fa0 R15: 00007ffff25ff108 [ 1691.180850][T27604] [ 1691.445663][T27607] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1692.251889][T27625] netlink: 'syz.3.7022': attribute type 1 has an invalid length. [ 1692.402320][T27625] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7022'. [ 1692.762776][T27633] netlink: 'syz.2.7024': attribute type 21 has an invalid length. [ 1692.997403][T27633] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7024'. [ 1693.148512][T27633] netlink: 'syz.2.7024': attribute type 4 has an invalid length. [ 1693.326726][T27633] netlink: 'syz.2.7024': attribute type 5 has an invalid length. [ 1693.421421][T27633] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7024'. [ 1694.044826][T27647] netlink: 'syz.3.7027': attribute type 10 has an invalid length. [ 1694.061433][T27647] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7027'. [ 1694.079759][T27647] device batadv_slave_1 entered promiscuous mode [ 1694.191845][T27647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1694.356387][T27647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.453482][T27665] netlink: 'syz.0.7031': attribute type 3 has an invalid length. [ 1696.483764][T27665] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.7031'. [ 1697.158785][T27676] mac80211_hwsim hwsim604 ªªªªªª: renamed from wlan0 [ 1697.244795][T27678] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7035'. [ 1697.569751][T27693] mac80211_hwsim hwsim544 ªªªªªª: renamed from wlan0 [ 1697.958246][T27694] netlink: 'syz.1.7039': attribute type 21 has an invalid length. [ 1697.991941][T27694] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7039'. [ 1698.044827][T27694] netlink: 'syz.1.7039': attribute type 4 has an invalid length. [ 1698.130733][T27694] netlink: 'syz.1.7039': attribute type 5 has an invalid length. [ 1698.203219][T27694] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7039'. [ 1698.790225][T27704] netlink: 'syz.4.7043': attribute type 3 has an invalid length. [ 1698.821997][T27704] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.7043'. [ 1701.138805][T27712] ieee80211 phy641: Failed to add default virtual iface [ 1702.501645][T27751] FAULT_INJECTION: forcing a failure. [ 1702.501645][T27751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1702.566641][T27751] CPU: 1 PID: 27751 Comm: syz.3.7056 Not tainted syzkaller #0 [ 1702.577426][T27751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1702.590425][T27751] Call Trace: [ 1702.594642][T27751] [ 1702.599097][T27751] dump_stack_lvl+0x188/0x24e [ 1702.606342][T27751] ? show_regs_print_info+0x12/0x12 [ 1702.612855][T27751] ? load_image+0x400/0x400 [ 1702.618984][T27751] ? __lock_acquire+0x7d10/0x7d10 [ 1702.625588][T27751] should_fail_ex+0x399/0x4d0 [ 1702.631667][T27751] _copy_from_user+0x2c/0x170 [ 1702.638913][T27751] strndup_user+0xb3/0x150 [ 1702.647721][T27751] perf_uprobe_init+0x5d/0x190 [ 1702.654306][T27751] perf_uprobe_event_init+0xe2/0x170 [ 1702.661918][T27751] perf_try_init_event+0x12b/0x3d0 [ 1702.669180][T27751] perf_event_alloc+0xf5c/0x21b0 [ 1702.677133][T27751] ? perf_event_alloc+0xbe2/0x21b0 [ 1702.685036][T27751] ? find_lively_task_by_vpid+0x19/0x290 [ 1702.692226][T27751] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 1702.700046][T27751] ? __fget_files+0x43d/0x4b0 [ 1702.705720][T27751] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1702.709518][T27753] netlink: 'syz.1.7057': attribute type 1 has an invalid length. [ 1702.714131][T27751] ? lockdep_hardirqs_on+0x94/0x140 [ 1702.714185][T27751] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1702.714221][T27751] do_syscall_64+0x4c/0xa0 [ 1702.714250][T27751] ? clear_bhb_loop+0x60/0xb0 [ 1702.748832][T27751] ? clear_bhb_loop+0x60/0xb0 [ 1702.754237][T27751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1702.759680][T27763] device bond_slave_1 entered promiscuous mode [ 1702.761228][T27751] RIP: 0033:0x7f3e3799cdd9 [ 1702.774847][T27751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.789674][T27753] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7057'. [ 1702.800714][T27751] RSP: 002b:00007f3e3880e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1702.800752][T27751] RAX: ffffffffffffffda RBX: 00007f3e37c15fa0 RCX: 00007f3e3799cdd9 [ 1702.800768][T27751] RDX: 0000000000000000 RSI: 00000000000001a8 RDI: 0000200000001080 [ 1702.800781][T27751] RBP: 00007f3e3880e090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.800793][T27751] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1702.800807][T27751] R13: 00007f3e37c16038 R14: 00007f3e37c15fa0 R15: 00007ffdc9c3a808 [ 1702.800840][T27751] [ 1702.883614][T27765] tap0: tun_chr_ioctl cmd 2147767517 [ 1703.003453][T27764] netlink: 'syz.0.7059': attribute type 3 has an invalid length. [ 1703.029003][T27764] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1703.136198][T27766] netlink: 'syz.0.7059': attribute type 3 has an invalid length. [ 1703.175145][T27766] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1703.774153][T27778] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7064'. [ 1705.402873][T27807] netlink: 'syz.0.7074': attribute type 1 has an invalid length. [ 1705.445096][T27807] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.7074'. [ 1705.614920][T27810] netlink: 'syz.2.7075': attribute type 3 has an invalid length. [ 1705.727309][T27810] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7075'. [ 1705.927813][T27815] netlink: 'syz.2.7075': attribute type 3 has an invalid length. [ 1706.039092][T27815] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.7075'. [ 1706.645916][T27834] FAULT_INJECTION: forcing a failure. [ 1706.645916][T27834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.706922][T27834] CPU: 0 PID: 27834 Comm: syz.4.7083 Not tainted syzkaller #0 [ 1706.719706][T27834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1706.736155][T27834] Call Trace: [ 1706.740814][T27834] [ 1706.745288][T27834] dump_stack_lvl+0x188/0x24e [ 1706.751452][T27834] ? show_regs_print_info+0x12/0x12 [ 1706.761185][T27834] ? load_image+0x400/0x400 [ 1706.768561][T27834] ? __lock_acquire+0x7d10/0x7d10 [ 1706.775826][T27834] should_fail_ex+0x399/0x4d0 [ 1706.783471][T27834] _copy_to_user+0x2c/0x130 [ 1706.789260][T27834] bpf_verifier_vlog+0x172/0x390 [ 1706.796215][T27834] __btf_verifier_log+0xdf/0x130 [ 1706.802556][T27834] ? btf_check_sec_info+0x350/0x350 [ 1706.808301][T27834] ? __virt_addr_valid+0x188/0x540 [ 1706.815127][T27834] ? btf_parse_hdr+0x1e0/0x7e0 [ 1706.821495][T27834] btf_parse_hdr+0x384/0x7e0 [ 1706.827026][T27834] btf_new_fd+0x3c6/0x780 [ 1706.832615][T27834] __sys_bpf+0x612/0x780 [ 1706.837543][T27834] ? bpf_link_show_fdinfo+0x380/0x380 [ 1706.843865][T27834] ? lock_chain_count+0x20/0x20 [ 1706.849568][T27834] __x64_sys_bpf+0x78/0x90 [ 1706.855271][T27834] do_syscall_64+0x4c/0xa0 [ 1706.860980][T27834] ? clear_bhb_loop+0x60/0xb0 [ 1706.866535][T27834] ? clear_bhb_loop+0x60/0xb0 [ 1706.874446][T27834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1706.881966][T27834] RIP: 0033:0x7ff87b39cdd9 [ 1706.888777][T27834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.918398][T27834] RSP: 002b:00007ff87c17c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1706.930636][T27834] RAX: ffffffffffffffda RBX: 00007ff87b615fa0 RCX: 00007ff87b39cdd9 [ 1706.942407][T27834] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 1706.952487][T27834] RBP: 00007ff87c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.967940][T27834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.978973][T27834] R13: 00007ff87b616038 R14: 00007ff87b615fa0 R15: 00007fff3841aca8 [ 1706.990601][T27834] [ 1708.163545][T27856] netlink: 'syz.2.7091': attribute type 3 has an invalid length. [ 1708.178403][T27856] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.7091'. [ 1708.657281][T27873] mac80211_hwsim hwsim579 ªªªªªª: renamed from wlan0 [ 1709.070154][T27879] netlink: 'syz.2.7098': attribute type 1 has an invalid length. [ 1709.118449][T27879] netlink: 'syz.2.7098': attribute type 4 has an invalid length. [ 1709.168486][T27879] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7098'. [ 1709.811257][T27887] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7101'. [ 1709.813961][T27885] FAULT_INJECTION: forcing a failure. [ 1709.813961][T27885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1709.958430][T27885] CPU: 1 PID: 27885 Comm: syz.1.7100 Not tainted syzkaller #0 [ 1709.972944][T27885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1709.988822][T27885] Call Trace: [ 1709.994087][T27885] [ 1709.999418][T27885] dump_stack_lvl+0x188/0x24e [ 1710.005578][T27885] ? show_regs_print_info+0x12/0x12 [ 1710.012892][T27885] ? load_image+0x400/0x400 [ 1710.016643][T27889] netlink: 'syz.2.7102': attribute type 27 has an invalid length. [ 1710.019455][T27885] ? __lock_acquire+0x7d10/0x7d10 [ 1710.019507][T27885] should_fail_ex+0x399/0x4d0 [ 1710.019534][T27885] _copy_to_user+0x2c/0x130 [ 1710.019574][T27885] bpf_verifier_vlog+0x172/0x390 [ 1710.019620][T27885] __btf_verifier_log+0xdf/0x130 [ 1710.019653][T27885] ? btf_check_sec_info+0x350/0x350 [ 1710.019698][T27885] ? __virt_addr_valid+0x188/0x540 [ 1710.019726][T27885] ? btf_parse_hdr+0x1e0/0x7e0 [ 1710.019753][T27885] btf_parse_hdr+0x384/0x7e0 [ 1710.019782][T27885] btf_new_fd+0x3c6/0x780 [ 1710.019813][T27885] __sys_bpf+0x612/0x780 [ 1710.019842][T27885] ? bpf_link_show_fdinfo+0x380/0x380 [ 1710.019889][T27885] ? __x64_sys_bpf+0x19/0x90 [ 1710.122776][T27885] __x64_sys_bpf+0x78/0x90 [ 1710.128577][T27885] do_syscall_64+0x4c/0xa0 [ 1710.133757][T27885] ? clear_bhb_loop+0x60/0xb0 [ 1710.140568][T27885] ? clear_bhb_loop+0x60/0xb0 [ 1710.146883][T27885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1710.154981][T27885] RIP: 0033:0x7f61f659cdd9 [ 1710.160442][T27885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.184022][T27885] RSP: 002b:00007f61f74f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1710.196676][T27885] RAX: ffffffffffffffda RBX: 00007f61f6815fa0 RCX: 00007f61f659cdd9 [ 1710.207393][T27885] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 1710.216203][T27885] RBP: 00007f61f74f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.226596][T27885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.235558][T27885] R13: 00007f61f6816038 R14: 00007f61f6815fa0 R15: 00007ffff25ff108 [ 1710.245586][T27885] [ 1710.324745][T27894] netlink: 'syz.4.7104': attribute type 10 has an invalid length. [ 1710.336895][T27894] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7104'. [ 1710.358444][T27894] device batadv_slave_1 entered promiscuous mode [ 1710.375423][T27894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1710.404546][T27894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.430158][T27895] FAULT_INJECTION: forcing a failure. [ 1710.430158][T27895] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.454367][T27895] CPU: 1 PID: 27895 Comm: syz.0.7103 Not tainted syzkaller #0 [ 1710.464202][T27895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.477916][T27895] Call Trace: [ 1710.482467][T27895] [ 1710.486072][T27895] dump_stack_lvl+0x188/0x24e [ 1710.492559][T27895] ? show_regs_print_info+0x12/0x12 [ 1710.499952][T27895] ? load_image+0x400/0x400 [ 1710.507080][T27895] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1710.516060][T27895] should_fail_ex+0x399/0x4d0 [ 1710.521951][T27895] should_failslab+0x5/0x20 [ 1710.527352][T27895] slab_pre_alloc_hook+0x59/0x310 [ 1710.533833][T27895] ? lockdep_hardirqs_on+0x94/0x140 [ 1710.541371][T27895] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1710.547852][T27895] __kmem_cache_alloc_node+0x4f/0x260 [ 1710.553775][T27895] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1710.559985][T27895] __kmalloc+0xa0/0x240 [ 1710.565354][T27895] bpf_prog_test_run_skb+0x234/0x12a0 [ 1710.570781][T27895] ? __fget_files+0x28/0x4b0 [ 1710.575789][T27895] ? __fget_files+0x28/0x4b0 [ 1710.580883][T27895] ? __fget_files+0x43d/0x4b0 [ 1710.586157][T27895] ? cpu_online+0xa0/0xa0 [ 1710.591440][T27895] bpf_prog_test_run+0x31e/0x390 [ 1710.596926][T27895] __sys_bpf+0x62b/0x780 [ 1710.601571][T27895] ? bpf_link_show_fdinfo+0x380/0x380 [ 1710.608488][T27895] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1710.615377][T27895] __x64_sys_bpf+0x78/0x90 [ 1710.620191][T27895] do_syscall_64+0x4c/0xa0 [ 1710.624905][T27895] ? clear_bhb_loop+0x60/0xb0 [ 1710.630131][T27895] ? clear_bhb_loop+0x60/0xb0 [ 1710.636584][T27895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1710.644876][T27895] RIP: 0033:0x7f59f4d9cdd9 [ 1710.650255][T27895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.674785][T27895] RSP: 002b:00007f59f5be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1710.685863][T27895] RAX: ffffffffffffffda RBX: 00007f59f5016090 RCX: 00007f59f4d9cdd9 [ 1710.697206][T27895] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 1710.706617][T27895] RBP: 00007f59f5be1090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.715332][T27895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.724621][T27895] R13: 00007f59f5016128 R14: 00007f59f5016090 R15: 00007ffc5663c4c8 [ 1710.733524][T27895] [ 1710.924826][T27904] netlink: 'syz.2.7106': attribute type 3 has an invalid length. [ 1710.948121][T27904] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.7106'. [ 1711.004367][T27903] netlink: 'syz.2.7106': attribute type 3 has an invalid length. [ 1711.038432][T27903] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.7106'. [ 1712.886410][T27946] netlink: 'syz.2.7113': attribute type 1 has an invalid length. [ 1712.939028][T27946] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7113'. [ 1713.667682][T27938] mac80211_hwsim hwsim539 ªªªªªª: renamed from wlan0 [ 1713.829056][T27949] device bond_slave_1 entered promiscuous mode [ 1714.046114][T27955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7115'. [ 1714.090617][T27955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1714.173002][T27957] netlink: 'syz.3.7117': attribute type 3 has an invalid length. [ 1714.200414][T27957] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7117'. [ 1714.261814][T27960] netlink: 'syz.3.7117': attribute type 3 has an invalid length. [ 1714.309380][T27960] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.7117'. [ 1716.051325][T27994] netlink: 'syz.4.7126': attribute type 1 has an invalid length. [ 1716.096650][T27994] netlink: 'syz.4.7126': attribute type 4 has an invalid length. [ 1716.140157][T27994] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7126'. [ 1716.419444][T28004] netlink: 'syz.0.7128': attribute type 1 has an invalid length. [ 1716.447785][T28004] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1716.536996][T28006] device bond_slave_1 entered promiscuous mode [ 1717.276624][T28012] netlink: 'syz.1.7131': attribute type 3 has an invalid length. [ 1717.316757][T28012] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.7131'. [ 1717.369870][T28021] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.7133'. [ 1718.197535][T28041] netlink: 'syz.3.7137': attribute type 12 has an invalid length. [ 1718.233482][T28041] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7137'. [ 1718.286856][T28043] netlink: 'syz.0.7148': attribute type 1 has an invalid length. [ 1718.316577][T28043] netlink: 'syz.0.7148': attribute type 4 has an invalid length. [ 1718.356189][T28043] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7148'. [ 1719.094716][T28058] netlink: 'syz.3.7139': attribute type 1 has an invalid length. [ 1719.143932][T28058] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7139'. [ 1719.282438][T28062] validate_nla: 1 callbacks suppressed [ 1719.282459][T28062] netlink: 'syz.0.7141': attribute type 1 has an invalid length. [ 1719.333064][T28062] netlink: 'syz.0.7141': attribute type 4 has an invalid length. [ 1719.361997][T28062] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7141'. [ 1719.913122][T28067] FAULT_INJECTION: forcing a failure. [ 1719.913122][T28067] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.941238][T28067] CPU: 1 PID: 28067 Comm: syz.1.7143 Not tainted syzkaller #0 [ 1719.951930][T28067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1719.964399][T28067] Call Trace: [ 1719.968163][T28067] [ 1719.972281][T28067] dump_stack_lvl+0x188/0x24e [ 1719.979766][T28067] ? show_regs_print_info+0x12/0x12 [ 1719.986353][T28067] ? load_image+0x400/0x400 [ 1719.992149][T28067] ? __lock_acquire+0x7d10/0x7d10 [ 1719.998670][T28067] should_fail_ex+0x399/0x4d0 [ 1720.004714][T28067] should_failslab+0x5/0x20 [ 1720.010207][T28067] slab_pre_alloc_hook+0x59/0x310 [ 1720.015755][T28067] kmem_cache_alloc_lru+0x49/0x2e0 [ 1720.021669][T28067] ? __d_alloc+0x31/0x700 [ 1720.026902][T28067] __d_alloc+0x31/0x700 [ 1720.031554][T28067] d_alloc_pseudo+0x19/0x70 [ 1720.036723][T28067] alloc_file_pseudo+0xe0/0x200 [ 1720.042922][T28067] ? alloc_empty_file_noaccount+0x80/0x80 [ 1720.050698][T28067] ? unclone_ctx+0xca/0x120 [ 1720.055985][T28067] anon_inode_getfile+0xc1/0x1a0 [ 1720.062241][T28067] __se_sys_perf_event_open+0xc26/0x1ec0 [ 1720.069667][T28067] ? clockevents_program_event+0x22c/0x310 [ 1720.076972][T28067] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1720.083253][T28067] ? lockdep_hardirqs_on+0x94/0x140 [ 1720.089549][T28067] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1720.099251][T28067] do_syscall_64+0x4c/0xa0 [ 1720.105816][T28067] ? clear_bhb_loop+0x60/0xb0 [ 1720.115463][T28067] ? clear_bhb_loop+0x60/0xb0 [ 1720.122263][T28067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1720.130654][T28067] RIP: 0033:0x7f61f659cdd9 [ 1720.136341][T28067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1720.164459][T28067] RSP: 002b:00007f61f74f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1720.175246][T28067] RAX: ffffffffffffffda RBX: 00007f61f6815fa0 RCX: 00007f61f659cdd9 [ 1720.184720][T28067] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000080 [ 1720.194922][T28067] RBP: 00007f61f74f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.203902][T28067] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1720.213833][T28067] R13: 00007f61f6816038 R14: 00007f61f6815fa0 R15: 00007ffff25ff108 [ 1720.222912][T28067] [ 1720.842324][T28083] netlink: 'syz.1.7147': attribute type 1 has an invalid length. [ 1720.868537][T28083] netlink: 'syz.1.7147': attribute type 4 has an invalid length. [ 1720.889738][T28083] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7147'. [ 1721.103952][T28091] netlink: 'syz.3.7152': attribute type 1 has an invalid length. [ 1721.155085][T28091] netlink: 'syz.3.7152': attribute type 4 has an invalid length. [ 1721.187326][T28091] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7152'. [ 1721.421055][T28104] netlink: 'syz.2.7155': attribute type 1 has an invalid length. [ 1721.456559][T28104] netlink: 'syz.2.7155': attribute type 4 has an invalid length. [ 1721.484300][T28104] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7155'. [ 1721.802216][T28115] netlink: 'syz.3.7159': attribute type 1 has an invalid length. [ 1721.875835][T28115] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1723.788407][T28130] FAULT_INJECTION: forcing a failure. [ 1723.788407][T28130] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.820513][T28130] CPU: 0 PID: 28130 Comm: syz.3.7165 Not tainted syzkaller #0 [ 1723.829719][T28130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1723.842141][T28130] Call Trace: [ 1723.845683][T28130] [ 1723.849875][T28130] dump_stack_lvl+0x188/0x24e [ 1723.855880][T28130] ? show_regs_print_info+0x12/0x12 [ 1723.863577][T28130] ? load_image+0x400/0x400 [ 1723.869982][T28130] ? __might_sleep+0xd0/0xd0 [ 1723.875934][T28130] ? __lock_acquire+0x7d10/0x7d10 [ 1723.882256][T28130] should_fail_ex+0x399/0x4d0 [ 1723.889119][T28130] should_failslab+0x5/0x20 [ 1723.895566][T28130] slab_pre_alloc_hook+0x59/0x310 [ 1723.901364][T28130] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1723.908546][T28130] __kmem_cache_alloc_node+0x4f/0x260 [ 1723.917722][T28130] ? memset+0x1e/0x40 [ 1723.925498][T28130] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1723.931539][T28130] kmalloc_trace+0x26/0xe0 [ 1723.937488][T28130] __xdp_reg_mem_model+0x1e0/0x5c0 [ 1723.943544][T28130] ? kvmalloc_node+0x6c/0x180 [ 1723.949340][T28130] ? kvmalloc_node+0x6c/0x180 [ 1723.955067][T28130] ? xdp_reg_mem_model+0x30/0x30 [ 1723.962777][T28130] xdp_reg_mem_model+0x1e/0x30 [ 1723.968967][T28130] bpf_test_run_xdp_live+0x299/0x1a90 [ 1723.974657][T28130] ? verify_lock_unused+0x140/0x140 [ 1723.980842][T28130] ? kasan_set_track+0x60/0x70 [ 1723.986808][T28130] ? kasan_set_track+0x4b/0x70 [ 1723.992871][T28130] ? __kasan_kmalloc+0x8e/0xa0 [ 1723.998658][T28130] ? bpf_test_init+0x9f/0x140 [ 1724.004320][T28130] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 1724.012067][T28130] ? bpf_prog_test_run+0x31e/0x390 [ 1724.019592][T28130] ? __x64_sys_bpf+0x78/0x90 [ 1724.025897][T28130] ? do_syscall_64+0x4c/0xa0 [ 1724.031757][T28130] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1724.040577][T28130] ? xdp_convert_md_to_buff+0x330/0x330 [ 1724.047511][T28130] ? __lock_acquire+0x7d10/0x7d10 [ 1724.053682][T28130] ? __virt_addr_valid+0x188/0x540 [ 1724.059513][T28130] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1724.066763][T28130] ? bpf_test_init+0x119/0x140 [ 1724.072690][T28130] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1724.080188][T28130] bpf_prog_test_run_xdp+0x736/0xf10 [ 1724.087554][T28130] ? dev_put+0x80/0x80 [ 1724.093034][T28130] ? dev_put+0x80/0x80 [ 1724.100154][T28130] bpf_prog_test_run+0x31e/0x390 [ 1724.106690][T28130] __sys_bpf+0x62b/0x780 [ 1724.112495][T28130] ? bpf_link_show_fdinfo+0x380/0x380 [ 1724.119694][T28130] ? lock_chain_count+0x20/0x20 [ 1724.125742][T28130] __x64_sys_bpf+0x78/0x90 [ 1724.131203][T28130] do_syscall_64+0x4c/0xa0 [ 1724.136270][T28130] ? clear_bhb_loop+0x60/0xb0 [ 1724.141374][T28130] ? clear_bhb_loop+0x60/0xb0 [ 1724.147007][T28130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1724.154341][T28130] RIP: 0033:0x7f3e3799cdd9 [ 1724.159517][T28130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.183031][T28130] RSP: 002b:00007f3e3880e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1724.193414][T28130] RAX: ffffffffffffffda RBX: 00007f3e37c15fa0 RCX: 00007f3e3799cdd9 [ 1724.202305][T28130] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1724.211278][T28130] RBP: 00007f3e3880e090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.221915][T28130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.231678][T28130] R13: 00007f3e37c16038 R14: 00007f3e37c15fa0 R15: 00007ffdc9c3a808 [ 1724.242498][T28130] [ 1724.679089][T28140] netlink: 'syz.4.7168': attribute type 1 has an invalid length. [ 1724.728417][T28140] netlink: 'syz.4.7168': attribute type 4 has an invalid length. [ 1724.878631][T28140] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7168'. [ 1724.994998][T28137] netlink: 'syz.2.7167': attribute type 3 has an invalid length. [ 1725.056505][T28137] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.7167'. Stopping sshd: stopped /usr/sbin/sshd (pid 4022) OK Stopping crond: stopped /usr/sbin/crond (pid 4009) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3931) Stopping network: [ 1729.888928][T28203] netlink: 'syz.3.7182': attribute type 1 has an invalid length. [ 1729.955922][T28203] netlink: 'syz.3.7182': attribute type 4 has an invalid length. [ 1729.998581][T28203] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7182'. [ 1730.592157][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.599575][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.343362][T28214] netlink: 'syz.4.7185': attribute type 3 has an invalid length. [ 1731.437107][T28214] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.7185'. OK [ 1732.242836][T28249] netlink: 'syz.4.7192': attribute type 4 has an invalid length. [ 1732.408247][T28249] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7192'. [ 1732.420545][T28247] netlink: 'syz.2.7194': attribute type 1 has an invalid length. [ 1732.448764][T28247] netlink: 'syz.2.7194': attribute type 4 has an invalid length. [ 1732.493979][T28247] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7194'. Stopping iptables: [ 1732.770372][T28262] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.7197'. OK Stopping system message bus: [ 1734.489067][T28304] netlink: 'syz.3.7208': attribute type 21 has an invalid length. [ 1734.531936][T28304] openvswitch: netlink: Flow get message rejected, Key attribute missing. done [ 1735.232441][T28317] netlink: 'syz.3.7211': attribute type 3 has an invalid length. [ 1735.346187][T28317] netlink: 'syz.3.7211': attribute type 1 has an invalid length. [ 1735.445530][T28317] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7211'. [ 1737.148495][T28354] FAULT_INJECTION: forcing a failure. [ 1737.148495][T28354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.260724][T28354] CPU: 0 PID: 28354 Comm: syz.0.7220 Not tainted syzkaller #0 [ 1737.269687][T28354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1737.287906][T28354] Call Trace: [ 1737.293467][T28354] [ 1737.298140][T28354] dump_stack_lvl+0x188/0x24e [ 1737.305037][T28354] ? show_regs_print_info+0x12/0x12 [ 1737.312645][T28354] ? load_image+0x400/0x400 [ 1737.319455][T28354] ? __lock_acquire+0x7d10/0x7d10 [ 1737.325441][T28354] ? snprintf+0xe5/0x140 [ 1737.330584][T28354] should_fail_ex+0x399/0x4d0 [ 1737.337268][T28354] _copy_to_user+0x2c/0x130 [ 1737.345461][T28354] simple_read_from_buffer+0xe3/0x150 [ 1737.352673][T28354] proc_fail_nth_read+0x1a6/0x220 [ 1737.361473][T28354] ? proc_fault_inject_write+0x310/0x310 [ 1737.367648][T28354] ? fsnotify_perm+0x248/0x550 [ 1737.374604][T28354] ? proc_fault_inject_write+0x310/0x310 [ 1737.384514][T28354] vfs_read+0x2de/0xa00 [ 1737.389699][T28354] ? kernel_read+0x1e0/0x1e0 [ 1737.398569][T28354] ? __fget_files+0x28/0x4b0 [ 1737.404384][T28354] ? __fget_files+0x28/0x4b0 [ 1737.410738][T28354] ? __fget_files+0x43d/0x4b0 [ 1737.416847][T28354] ? __fdget_pos+0x2ae/0x360 [ 1737.424530][T28354] ? ksys_read+0x71/0x250 [ 1737.430040][T28354] ksys_read+0x14c/0x250 [ 1737.435990][T28354] ? vfs_write+0xa30/0xa30 [ 1737.441310][T28354] ? lockdep_hardirqs_on+0x94/0x140 [ 1737.448182][T28354] do_syscall_64+0x4c/0xa0 [ 1737.453857][T28354] ? clear_bhb_loop+0x60/0xb0 [ 1737.459294][T28354] ? clear_bhb_loop+0x60/0xb0 [ 1737.465019][T28354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.472667][T28354] RIP: 0033:0x7f59f4d5d60e [ 1737.478644][T28354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1737.508562][T28354] RSP: 002b:00007f59f5c01fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1737.524873][T28354] RAX: ffffffffffffffda RBX: 00007f59f5c026c0 RCX: 00007f59f4d5d60e [ 1737.537586][T28354] RDX: 000000000000000f RSI: 00007f59f5c020a0 RDI: 0000000000000005 [ 1737.548892][T28354] RBP: 00007f59f5c02090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.558783][T28354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.567761][T28354] R13: 00007f59f5016038 R14: 00007f59f5015fa0 R15: 00007ffc5663c4c8 [ 1737.577189][T28354] [ 1737.870762][T28360] netlink: 'syz.4.7222': attribute type 11 has an invalid length. [ 1737.948436][T28360] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7222'. [ 1738.275203][T28368] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1738.968562][T28376] delete_channel: no stack Stopping klogd: [ 1739.902161][T28397] netlink: 'syz.4.7232': attribute type 1 has an invalid length. [ 1739.923773][T28397] netlink: 'syz.4.7232': attribute type 4 has an invalid length. [ 1739.959070][T28397] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7232'. OK [ 1740.511045][T28406] netlink: 'syz.1.7234': attribute type 2 has an invalid length. [ 1740.538103][T28406] netlink: 'syz.1.7234': attribute type 8 has an invalid length. [ 1740.563924][T28406] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7234'. Stopping acpid: [ 1740.716928][T28402] netlink: 'syz.1.7234': attribute type 11 has an invalid length. [ 1740.758408][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 3849 [ 1740.799963][T28402] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7234'. [ 1740.816662][T28402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium OK Stopping syslogd: [ 1742.884635][T28456] netlink: 'syz.0.7248': attribute type 1 has an invalid length. [ 1742.935210][T28456] netlink: 'syz.0.7248': attribute type 4 has an invalid length. [ 1742.989552][T28456] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7248'. stopped /sbin/syslogd (pid 3619) OK umount: can't remount debugfs read-only [ 1745.430608][T28499] FAULT_INJECTION: forcing a failure. [ 1745.430608][T28499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1745.553951][T28499] CPU: 1 PID: 28499 Comm: syz.3.7261 Not tainted syzkaller #0 [ 1745.570636][T28499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1745.588759][T28499] Call Trace: [ 1745.598273][T28499] [ 1745.603495][T28499] dump_stack_lvl+0x188/0x24e [ 1745.611419][T28499] ? show_regs_print_info+0x12/0x12 [ 1745.620408][T28499] ? load_image+0x400/0x400 [ 1745.628441][T28499] ? __lock_acquire+0x7d10/0x7d10 [ 1745.636287][T28499] ? __fget_files+0x28/0x4b0 [ 1745.642908][T28499] should_fail_ex+0x399/0x4d0 [ 1745.648983][T28499] _copy_from_user+0x2c/0x170 [ 1745.655741][T28499] generic_map_update_batch+0x4a1/0x810 [ 1745.662955][T28499] ? rcu_read_unlock+0xa0/0xa0 [ 1745.669481][T28499] ? __fdget+0x17c/0x200 [ 1745.675297][T28499] ? rcu_read_unlock+0xa0/0xa0 [ 1745.682114][T28499] bpf_map_do_batch+0x466/0x600 [ 1745.688386][T28499] __sys_bpf+0x6f7/0x780 [ 1745.695426][T28499] ? bpf_link_show_fdinfo+0x380/0x380 [ 1745.702699][T28499] ? lock_chain_count+0x20/0x20 [ 1745.710469][T28499] __x64_sys_bpf+0x78/0x90 [ 1745.719687][T28499] do_syscall_64+0x4c/0xa0 [ 1745.726836][T28499] ? clear_bhb_loop+0x60/0xb0 [ 1745.735018][T28499] ? clear_bhb_loop+0x60/0xb0 [ 1745.741957][T28499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1745.751247][T28499] RIP: 0033:0x7f3e3799cdd9 [ 1745.758185][T28499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.789985][T28499] RSP: 002b:00007f3e3880e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1745.802555][T28499] RAX: ffffffffffffffda RBX: 00007f3e37c15fa0 RCX: 00007f3e3799cdd9 [ 1745.813319][T28499] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 000000000000001a [ 1745.825602][T28499] RBP: 00007f3e3880e090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.843703][T28499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.856610][T28499] R13: 00007f3e37c16038 R14: 00007f3e37c15fa0 R15: 00007ffdc9c3a808 [ 1745.870574][T28499] umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.20 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 1751.116769][T11638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.235282][T11638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.349796][T11638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.450807][T11638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.516621][T28518] kvm: exiting hardware virtualization [ 1751.560337][T28518] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1751.584317][T28518] ACPI: PM: Preparing to enter system sleep state S5 [ 1751.608646][T28518] reboot: Power down serialport: VM disconnected.