last executing test programs: 6.642801257s ago: executing program 4 (id=19160): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x3, [@ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @struct={0x4, 0x9, 0x0, 0x4, 0x1, 0x5, [{0x10, 0x2, 0x1}, {0x5, 0x4, 0xee0d}, {0x7, 0x2, 0x8da9}, {0x6, 0x1, 0xfffffffb}, {0x6, 0x0, 0x8}, {0xe, 0x2, 0xfffeffff}, {0x7, 0x2, 0x6a}, {0xf, 0x2, 0x1}, {0x9, 0x0, 0x4003}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x54, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x1c7d}}, @struct={0x2, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x8, 0x5, 0x3}, {0x0, 0x0, 0x9}]}]}, {0x0, [0x0]}}, &(0x7f0000000580)=""/36, 0xeb, 0x24, 0x1, 0x7, 0x10000}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000740)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000009016b79dc08e920d66fdd277950b091363d71d4096fad26603511f6ccc67c67dca0000000000000000", @ANYRES32, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000200"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r5) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3000000000000000000000000700000094040000071b07"], 0x30}, 0x0) r7 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x80044944, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7", 0xb}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0) 5.564077374s ago: executing program 4 (id=19164): r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40400c0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r4, 0x0, 0x48800) r5 = socket$kcm(0xa, 0x5, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000001300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001380)=""/220, 0xdc}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/232, 0xe8}, {&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f0000001740)=""/218, 0xda}], 0x5}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x22, 0x0, 0x0) 4.370538398s ago: executing program 4 (id=19171): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x66, &(0x7f00000002c0)=""/102, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r2], &(0x7f0000000700)=[{0x5, 0x4, 0x10, 0x6}, {0x3, 0x1, 0x8}, {0x5, 0x1, 0x10, 0xb}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r6}, 0x48) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r7, 0x29, 0x6, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000d603b700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240)) 4.309746061s ago: executing program 2 (id=19173): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 4.187837697s ago: executing program 0 (id=19175): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) close(0x3) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="018d00000300"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40010021) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xffe0) sendmsg$kcm(r1, 0x0, 0x0) r4 = gettid() socketpair(0x25, 0x5, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x4090) perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.187019558s ago: executing program 2 (id=19176): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=@raw=[@initr0, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.714344672s ago: executing program 3 (id=19180): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f089e", 0x9}, {&(0x7f0000000180)="68ca8abd0058fc0a1d6b689866f0", 0xe}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d310700000000000000f7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57010030075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x18000000000002a0, 0xe, 0x80000, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_config_ext={0x2, 0x2}, 0x8061, 0x3, 0x4, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) close(0x3) r6 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r6, 0x29, 0x4b, 0x0, 0x0) 3.185259741s ago: executing program 2 (id=19181): r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40400c0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r4, 0x0, 0x48800) r5 = socket$kcm(0xa, 0x5, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000001300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001380)=""/220, 0xdc}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/232, 0xe8}, {&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f0000001740)=""/218, 0xda}], 0x5}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x22, 0x0, 0x0) 3.125835074s ago: executing program 0 (id=19182): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x5411, &(0x7f0000000280)={'wlan0\x00', @multicast}) 3.110443614s ago: executing program 4 (id=19183): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ad3700005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000000000000040"], 0x50) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8904, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x30, 0x8, 0x0, 0xfffff01c}, {0x6, 0x0, 0xc0}]}) socket$kcm(0x2, 0x6, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2b, 0x3, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 3.049206998s ago: executing program 1 (id=19184): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=@raw=[@initr0, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.954260293s ago: executing program 0 (id=19185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1}, 0xc) 2.840543829s ago: executing program 0 (id=19186): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 2.479031528s ago: executing program 0 (id=19187): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000011c0)=""/105, 0x69}, {&(0x7f0000000780)=""/190, 0xbe}], 0x5}, 0x12002) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000096000000060000000700000000100000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r5) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.100546268s ago: executing program 1 (id=19188): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18030000000000000000000000beec3c257e00ff0600a1b318000000000000000000000000000000650000000000000018000900000000002834950000000015000054030000000000009500f5c40b0400000000000000a200"/100], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f00000000c0), &(0x7f0000000140)=r2}, 0x20) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x8000000000000000, 0x0, 0x6, 0x10, 0x200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0}, 0x18) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f00000008c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) 2.053951071s ago: executing program 3 (id=19189): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x3, [@ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @struct={0x4, 0x9, 0x0, 0x4, 0x1, 0x5, [{0x10, 0x2, 0x1}, {0x5, 0x4, 0xee0d}, {0x7, 0x2, 0x8da9}, {0x6, 0x1, 0xfffffffb}, {0x6, 0x0, 0x8}, {0xe, 0x2, 0xfffeffff}, {0x7, 0x2, 0x6a}, {0xf, 0x2, 0x1}, {0x9, 0x0, 0x4003}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x54, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x1c7d}}, @struct={0x2, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x8, 0x5, 0x3}, {0x0, 0x0, 0x9}]}]}, {0x0, [0x0]}}, &(0x7f0000000580)=""/36, 0xeb, 0x24, 0x1, 0x7, 0x10000}, 0x28) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000740)='./file0\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000009016b79dc08e920d66fdd277950b091363d71d4096fad26603511f6ccc67c67dca0000000000000000", @ANYRES32, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1d, 0x29, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000090ce245206580000500000018400b04004b99eb524d6f5a4ddafe1ab02bee5008bb766c23f2985a7dc3e5f01c76aea41c27059e", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000010001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000182a0000", @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018000000000000000000000006000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0xff, 0xc6, &(0x7f0000000c40)=""/198, 0x41000, 0x46, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0xc, 0x7}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff, r5], 0x0, 0x10, 0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r8, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r8, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r8) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3000000000000000000000000700000094040000071b07"], 0x30}, 0x0) r10 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x80044944, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7", 0xb}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.053256451s ago: executing program 2 (id=19190): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f00000020c0)}, {&(0x7f0000000f00)="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", 0xe49}, {0x0}, {0x0}, {&(0x7f0000001d80)="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", 0x1000}], 0x6}, 0x0) 2.030549323s ago: executing program 4 (id=19191): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) (fail_nth: 4) 1.669182501s ago: executing program 2 (id=19192): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) close(0x3) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="018d00000300"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40010021) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xffe0) sendmsg$kcm(r1, 0x0, 0x0) r4 = gettid() socketpair(0x25, 0x5, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x4090) perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.561559717s ago: executing program 3 (id=19193): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=@raw=[@initr0, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.429990954s ago: executing program 0 (id=19194): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x66, &(0x7f00000002c0)=""/102, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r2], &(0x7f0000000700)=[{0x5, 0x4, 0x10, 0x6}, {0x3, 0x1, 0x8}, {0x5, 0x1, 0x10, 0xb}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r5}, 0x48) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r6, 0x29, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000400)=""/198}, 0x20) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000d603b700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240)) 1.382284097s ago: executing program 4 (id=19195): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ad3700005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000000000000040"], 0x50) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8904, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x30, 0x8, 0x0, 0xfffff01c}, {0x6, 0x0, 0xc0}]}) socket$kcm(0x2, 0x6, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2b, 0x3, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 1.367285998s ago: executing program 1 (id=19196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1}, 0xc) 1.301639881s ago: executing program 1 (id=19197): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 1.141850459s ago: executing program 1 (id=19198): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=@raw=[@initr0, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 535.392141ms ago: executing program 3 (id=19199): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FROZEN\x00', 0x7) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) 501.191813ms ago: executing program 2 (id=19200): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000080)="b9e203076008008cb89e08f086dd", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc1", 0x5}], 0x1}, 0x20040000) r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640), 0x6}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000500)='\t!~&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 183.09165ms ago: executing program 1 (id=19201): r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40400c0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r4, 0x0, 0x48800) r5 = socket$kcm(0xa, 0x5, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000001300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001380)=""/220, 0xdc}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/232, 0xe8}, {&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f0000001740)=""/218, 0xda}], 0x5}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x22, 0x0, 0x0) 22.575089ms ago: executing program 3 (id=19202): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f00000020c0)}, {&(0x7f0000000f00)="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", 0xe49}, {0x0}, {0x0}, {&(0x7f0000001d80)="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", 0x1000}], 0x6}, 0x0) 0s ago: executing program 3 (id=19203): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x1a, 0x0, 0x1, 0x8}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r1, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x3, 0x0, 0xdc5, 0x78, &(0x7f0000000680)="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", &(0x7f0000001680)="5ddf7a14e0592ca2ab56a100afa1c02f5fd34e806afb4d1bfb80a062403437d0fbd389ea160c2feb5255390b012ccc3bdf554a3c96988f67eb1851777cb6797c788a9df6b72fbea804b4568d8c1d2038b0aec52a24ff0d570e4ba4daea38c8f0029f3687361122355f2c7d683f1bd0c1252d18ed3fb1920c", 0x1, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone(0x10000880, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)="06529e90b6962f336062870f992533f9e946fa76498bc052bf6fd422312b0ae3f3a2") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x13bb711e) write$cgroup_pid(r1, &(0x7f00000002c0)=r5, 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4000000, 0x800000000000}, 0x4304, 0x204, 0x0, 0x4ea8b0fa215d91b8, 0x7f, 0xffffffff, 0x100, 0x0, 0x0, 0x0, 0x400000000000000}, r5, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000090"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): 613][T27354] ? proc_fault_inject_write+0x310/0x310 [ 2948.364242][T27354] ? fsnotify_perm+0x248/0x550 [ 2948.369011][T27354] ? proc_fault_inject_write+0x310/0x310 [ 2948.374721][T27354] vfs_read+0x2de/0xa00 [ 2948.378883][T27354] ? kernel_read+0x1e0/0x1e0 [ 2948.383481][T27354] ? __fget_files+0x28/0x4b0 [ 2948.388077][T27354] ? __fget_files+0x28/0x4b0 [ 2948.392660][T27354] ? __fget_files+0x43d/0x4b0 [ 2948.397342][T27354] ? __fdget_pos+0x2ae/0x360 [ 2948.401925][T27354] ? ksys_read+0x71/0x250 [ 2948.406253][T27354] ksys_read+0x14c/0x250 [ 2948.410496][T27354] ? vfs_write+0xa30/0xa30 [ 2948.414998][T27354] ? lockdep_hardirqs_on+0x94/0x140 [ 2948.420194][T27354] do_syscall_64+0x4c/0xa0 [ 2948.424606][T27354] ? clear_bhb_loop+0x60/0xb0 [ 2948.429272][T27354] ? clear_bhb_loop+0x60/0xb0 [ 2948.433942][T27354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2948.439826][T27354] RIP: 0033:0x7f301955b78e [ 2948.444249][T27354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2948.463857][T27354] RSP: 002b:00007f301a4befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2948.472267][T27354] RAX: ffffffffffffffda RBX: 00007f301a4bf6c0 RCX: 00007f301955b78e [ 2948.480316][T27354] RDX: 000000000000000f RSI: 00007f301a4bf0a0 RDI: 0000000000000004 [ 2948.488277][T27354] RBP: 00007f301a4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 2948.496236][T27354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2948.504202][T27354] R13: 00007f3019816038 R14: 00007f3019815fa0 R15: 00007ffe5752fc98 [ 2948.512184][T27354] [ 2948.616274][T27346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2948.798954][T27346] bond0 (unregistering): (slave team0): Releasing backup interface [ 2948.824455][T27346] bond0 (unregistering): Released all slaves [ 2948.862316][T27357] netlink: 'syz.0.17739': attribute type 4 has an invalid length. [ 2948.872217][T27357] netlink: 140 bytes leftover after parsing attributes in process `syz.0.17739'. [ 2948.885956][T27358] netlink: 'syz.4.17740': attribute type 10 has an invalid length. [ 2949.068719][T27369] netlink: 'syz.1.17742': attribute type 2 has an invalid length. [ 2949.070081][T27368] netlink: 'syz.2.17743': attribute type 1 has an invalid length. [ 2949.112468][T27368] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.17743'. [ 2949.130635][T27372] netlink: 'syz.0.17744': attribute type 1 has an invalid length. [ 2949.268545][T27382] FAULT_INJECTION: forcing a failure. [ 2949.268545][T27382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2949.301239][T27382] CPU: 1 PID: 27382 Comm: syz.2.17748 Not tainted syzkaller #0 [ 2949.308837][T27382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2949.318922][T27382] Call Trace: [ 2949.322214][T27382] [ 2949.325151][T27382] dump_stack_lvl+0x188/0x24e [ 2949.329887][T27382] ? show_regs_print_info+0x12/0x12 [ 2949.335118][T27382] ? load_image+0x400/0x400 [ 2949.339640][T27382] ? __lock_acquire+0x7d10/0x7d10 [ 2949.344690][T27382] should_fail_ex+0x399/0x4d0 [ 2949.349396][T27382] _copy_from_user+0x2c/0x170 [ 2949.354097][T27382] ___sys_sendmsg+0x1c3/0x360 [ 2949.358810][T27382] ? __sys_sendmsg+0x290/0x290 [ 2949.363632][T27382] ? __lock_acquire+0x7d10/0x7d10 [ 2949.368696][T27382] __se_sys_sendmsg+0x1bb/0x2a0 [ 2949.373565][T27382] ? __x64_sys_sendmsg+0x80/0x80 [ 2949.378544][T27382] ? lockdep_hardirqs_on+0x94/0x140 [ 2949.383765][T27382] do_syscall_64+0x4c/0xa0 [ 2949.388201][T27382] ? clear_bhb_loop+0x60/0xb0 [ 2949.392910][T27382] ? clear_bhb_loop+0x60/0xb0 [ 2949.397607][T27382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2949.403514][T27382] RIP: 0033:0x7f2cfc19aeb9 [ 2949.407937][T27382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2949.427604][T27382] RSP: 002b:00007f2cfa3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2949.436038][T27382] RAX: ffffffffffffffda RBX: 00007f2cfc415fa0 RCX: 00007f2cfc19aeb9 [ 2949.444029][T27382] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2949.452022][T27382] RBP: 00007f2cfa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2949.460022][T27382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2949.468009][T27382] R13: 00007f2cfc416038 R14: 00007f2cfc415fa0 R15: 00007ffdd42223d8 [ 2949.476016][T27382] [ 2949.589905][T27384] netlink: 'syz.0.17750': attribute type 1 has an invalid length. [ 2949.652305][T27384] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.17750'. [ 2949.990307][T27399] netlink: 'syz.0.17753': attribute type 10 has an invalid length. [ 2950.171194][T27410] netlink: 'syz.1.17757': attribute type 4 has an invalid length. [ 2950.180079][T27410] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17757'. [ 2950.237144][T27408] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17755'. [ 2950.445705][T27408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2950.522617][T27408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2950.595677][T27408] bond0 (unregistering): (slave team0): Releasing backup interface [ 2950.627567][T27427] FAULT_INJECTION: forcing a failure. [ 2950.627567][T27427] name failslab, interval 1, probability 0, space 0, times 0 [ 2950.649810][T27408] bond0 (unregistering): Released all slaves [ 2950.657828][T27427] CPU: 1 PID: 27427 Comm: syz.2.17762 Not tainted syzkaller #0 [ 2950.665408][T27427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2950.675475][T27427] Call Trace: [ 2950.678802][T27427] [ 2950.681822][T27427] dump_stack_lvl+0x188/0x24e [ 2950.686505][T27427] ? show_regs_print_info+0x12/0x12 [ 2950.691704][T27427] ? load_image+0x400/0x400 [ 2950.696219][T27427] ? __might_sleep+0xd0/0xd0 [ 2950.700799][T27427] ? __lock_acquire+0x7d10/0x7d10 [ 2950.705820][T27427] ? mark_lock+0x94/0x320 [ 2950.710234][T27427] should_fail_ex+0x399/0x4d0 [ 2950.714922][T27427] should_failslab+0x5/0x20 [ 2950.719425][T27427] slab_pre_alloc_hook+0x59/0x310 [ 2950.724445][T27427] ? __get_vm_area_node+0x122/0x330 [ 2950.729641][T27427] __kmem_cache_alloc_node+0x4f/0x260 [ 2950.735010][T27427] ? __get_vm_area_node+0x122/0x330 [ 2950.740200][T27427] kmalloc_node_trace+0x22/0xe0 [ 2950.745056][T27427] __get_vm_area_node+0x122/0x330 [ 2950.750071][T27427] ? perf_trace_lock_acquire+0x100/0x3e0 [ 2950.755706][T27427] __vmalloc_node_range+0x357/0x13b0 [ 2950.760993][T27427] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2950.766556][T27427] ? free_vm_area+0x50/0x50 [ 2950.771052][T27427] ? end_current_label_crit_section+0x170/0x170 [ 2950.777285][T27427] ? __lock_acquire+0x7d10/0x7d10 [ 2950.782309][T27427] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2950.787854][T27427] __vmalloc+0x76/0x80 [ 2950.791922][T27427] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2950.797466][T27427] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2950.802940][T27427] ? bpf_lsm_capable+0x5/0x10 [ 2950.807632][T27427] bpf_prog_alloc+0x1c/0x1b0 [ 2950.812238][T27427] bpf_prog_load+0x7c9/0x1560 [ 2950.816924][T27427] ? map_freeze+0x390/0x390 [ 2950.821427][T27427] ? __might_fault+0xa6/0x120 [ 2950.826105][T27427] ? __might_fault+0xa6/0x120 [ 2950.830791][T27427] ? __might_fault+0xc2/0x120 [ 2950.835458][T27427] ? __might_fault+0xa6/0x120 [ 2950.840127][T27427] ? bpf_lsm_bpf+0x5/0x10 [ 2950.844447][T27427] ? security_bpf+0x7a/0xa0 [ 2950.848944][T27427] __sys_bpf+0x5b8/0x780 [ 2950.853184][T27427] ? bpf_link_show_fdinfo+0x380/0x380 [ 2950.858561][T27427] ? lock_chain_count+0x20/0x20 [ 2950.863414][T27427] __x64_sys_bpf+0x78/0x90 [ 2950.867828][T27427] do_syscall_64+0x4c/0xa0 [ 2950.872252][T27427] ? clear_bhb_loop+0x60/0xb0 [ 2950.876922][T27427] ? clear_bhb_loop+0x60/0xb0 [ 2950.881595][T27427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2950.887487][T27427] RIP: 0033:0x7f2cfc19aeb9 [ 2950.891895][T27427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2950.911517][T27427] RSP: 002b:00007f2cfa3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2950.919929][T27427] RAX: ffffffffffffffda RBX: 00007f2cfc415fa0 RCX: 00007f2cfc19aeb9 [ 2950.927903][T27427] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2950.936051][T27427] RBP: 00007f2cfa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2950.944023][T27427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2950.952163][T27427] R13: 00007f2cfc416038 R14: 00007f2cfc415fa0 R15: 00007ffdd42223d8 [ 2950.960154][T27427] [ 2951.043158][T27427] syz.2.17762: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2951.074847][T27427] CPU: 0 PID: 27427 Comm: syz.2.17762 Not tainted syzkaller #0 [ 2951.082538][T27427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2951.092592][T27427] Call Trace: [ 2951.095880][T27427] [ 2951.098807][T27427] dump_stack_lvl+0x188/0x24e [ 2951.103485][T27427] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2951.109885][T27427] ? show_regs_print_info+0x12/0x12 [ 2951.115073][T27427] ? load_image+0x400/0x400 [ 2951.119562][T27427] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2951.125977][T27427] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2951.132483][T27427] warn_alloc+0x242/0x330 [ 2951.136814][T27427] ? __get_vm_area_node+0x122/0x330 [ 2951.142010][T27427] ? zone_watermark_ok_safe+0x270/0x270 [ 2951.147557][T27427] ? rcu_is_watching+0x11/0xa0 [ 2951.152325][T27427] ? __get_vm_area_node+0x318/0x330 [ 2951.157530][T27427] ? perf_trace_lock_acquire+0x100/0x3e0 [ 2951.163247][T27427] __vmalloc_node_range+0x37c/0x13b0 [ 2951.168552][T27427] ? free_vm_area+0x50/0x50 [ 2951.173050][T27427] ? end_current_label_crit_section+0x170/0x170 [ 2951.179287][T27427] ? __lock_acquire+0x7d10/0x7d10 [ 2951.184316][T27427] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2951.189860][T27427] __vmalloc+0x76/0x80 [ 2951.193927][T27427] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2951.199474][T27427] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2951.204842][T27427] ? bpf_lsm_capable+0x5/0x10 [ 2951.209514][T27427] bpf_prog_alloc+0x1c/0x1b0 [ 2951.214105][T27427] bpf_prog_load+0x7c9/0x1560 [ 2951.218796][T27427] ? map_freeze+0x390/0x390 [ 2951.223294][T27427] ? __might_fault+0xa6/0x120 [ 2951.227971][T27427] ? __might_fault+0xa6/0x120 [ 2951.232646][T27427] ? __might_fault+0xc2/0x120 [ 2951.237314][T27427] ? __might_fault+0xa6/0x120 [ 2951.242331][T27427] ? bpf_lsm_bpf+0x5/0x10 [ 2951.246652][T27427] ? security_bpf+0x7a/0xa0 [ 2951.251157][T27427] __sys_bpf+0x5b8/0x780 [ 2951.255399][T27427] ? bpf_link_show_fdinfo+0x380/0x380 [ 2951.260807][T27427] ? lock_chain_count+0x20/0x20 [ 2951.265689][T27427] __x64_sys_bpf+0x78/0x90 [ 2951.270111][T27427] do_syscall_64+0x4c/0xa0 [ 2951.274526][T27427] ? clear_bhb_loop+0x60/0xb0 [ 2951.279200][T27427] ? clear_bhb_loop+0x60/0xb0 [ 2951.283876][T27427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2951.289769][T27427] RIP: 0033:0x7f2cfc19aeb9 [ 2951.294181][T27427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2951.313828][T27427] RSP: 002b:00007f2cfa3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2951.322262][T27427] RAX: ffffffffffffffda RBX: 00007f2cfc415fa0 RCX: 00007f2cfc19aeb9 [ 2951.330254][T27427] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2951.338225][T27427] RBP: 00007f2cfa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2951.346216][T27427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2951.354364][T27427] R13: 00007f2cfc416038 R14: 00007f2cfc415fa0 R15: 00007ffdd42223d8 [ 2951.362343][T27427] [ 2951.378504][T27427] Mem-Info: [ 2951.381680][T27427] active_anon:9984 inactive_anon:0 isolated_anon:0 [ 2951.381680][T27427] active_file:22268 inactive_file:41069 isolated_file:0 [ 2951.381680][T27427] unevictable:768 dirty:341 writeback:0 [ 2951.381680][T27427] slab_reclaimable:22093 slab_unreclaimable:96771 [ 2951.381680][T27427] mapped:30445 shmem:1361 pagetables:590 [ 2951.381680][T27427] sec_pagetables:0 bounce:0 [ 2951.381680][T27427] kernel_misc_reclaimable:0 [ 2951.381680][T27427] free:1310585 free_pcp:8141 free_cma:0 [ 2951.473022][T27427] Node 0 active_anon:39936kB inactive_anon:0kB active_file:89072kB inactive_file:164076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121580kB dirty:1364kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10768kB pagetables:2360kB sec_pagetables:0kB all_unreclaimable? no [ 2951.593063][T27427] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2951.652964][T27427] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2951.771194][T27444] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.17769'. [ 2951.792866][T27427] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 2951.798776][T27427] Node 0 DMA32 free:1326672kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:39836kB inactive_anon:0kB active_file:89072kB inactive_file:164076kB unevictable:1536kB writepending:1864kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:16116kB local_pcp:10676kB free_cma:0kB [ 2951.870316][T27447] validate_nla: 2 callbacks suppressed [ 2951.870333][T27447] netlink: 'syz.1.17770': attribute type 4 has an invalid length. [ 2951.912925][T27447] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17770'. [ 2951.918978][T27443] delete_channel: no stack [ 2951.922172][T27427] lowmem_reserve[]: 0 0 1 1 1 [ 2951.931485][T27427] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2951.959062][T27427] lowmem_reserve[]: 0 0 0 0 0 [ 2951.992272][T27427] Node 1 Normal free:3900300kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16304kB local_pcp:9444kB free_cma:0kB [ 2952.022279][T27427] lowmem_reserve[]: 0 0 0 0 0 [ 2952.027099][T27427] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2952.039803][T27427] Node 0 DMA32: 116*4kB (ME) 314*8kB (UME) 1563*16kB (UME) 1100*32kB (UME) 809*64kB (UME) 549*128kB (UME) 526*256kB (UME) 244*512kB (UME) 129*1024kB (UM) 26*2048kB (UME) 170*4096kB (UM) = 1326480kB [ 2952.060285][T27427] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2952.072371][T27427] Node 1 Normal: 205*4kB (UME) 59*8kB (UME) 28*16kB (UME) 38*32kB (UME) 24*64kB (UME) 14*128kB (UME) 1*256kB (U) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3900300kB [ 2952.090436][T27427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2952.100676][T27427] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2952.110042][T27427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2952.141482][T27427] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2952.180138][T27427] 64698 total pagecache pages [ 2952.190682][T27427] 0 pages in swap cache [ 2952.200580][T27427] Free swap = 124996kB [ 2952.210691][T27427] Total swap = 124996kB [ 2952.222687][T27427] 2097051 pages RAM [ 2952.229652][T27427] 0 pages HighMem/MovableOnly [ 2952.258689][T27427] 415205 pages reserved [ 2952.269806][T27427] 0 pages cma reserved [ 2952.582439][T27469] FAULT_INJECTION: forcing a failure. [ 2952.582439][T27469] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.615930][T27469] CPU: 0 PID: 27469 Comm: syz.2.17776 Not tainted syzkaller #0 [ 2952.623528][T27469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2952.633593][T27469] Call Trace: [ 2952.636871][T27469] [ 2952.639797][T27469] dump_stack_lvl+0x188/0x24e [ 2952.644476][T27469] ? show_regs_print_info+0x12/0x12 [ 2952.649671][T27469] ? load_image+0x400/0x400 [ 2952.654168][T27469] ? __might_sleep+0xd0/0xd0 [ 2952.658748][T27469] ? __lock_acquire+0x7d10/0x7d10 [ 2952.663808][T27469] ? mark_lock+0x94/0x320 [ 2952.668227][T27469] should_fail_ex+0x399/0x4d0 [ 2952.672908][T27469] should_failslab+0x5/0x20 [ 2952.677503][T27469] slab_pre_alloc_hook+0x59/0x310 [ 2952.682526][T27469] ? __get_vm_area_node+0x122/0x330 [ 2952.687722][T27469] __kmem_cache_alloc_node+0x4f/0x260 [ 2952.693185][T27469] ? __get_vm_area_node+0x122/0x330 [ 2952.698383][T27469] kmalloc_node_trace+0x22/0xe0 [ 2952.703236][T27469] __get_vm_area_node+0x122/0x330 [ 2952.708259][T27469] __vmalloc_node_range+0x357/0x13b0 [ 2952.713540][T27469] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2952.719101][T27469] ? free_vm_area+0x50/0x50 [ 2952.723598][T27469] ? end_current_label_crit_section+0x170/0x170 [ 2952.729840][T27469] ? __lock_acquire+0x7d10/0x7d10 [ 2952.735080][T27469] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2952.740661][T27469] __vmalloc+0x76/0x80 [ 2952.744732][T27469] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2952.750299][T27469] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2952.755669][T27469] ? bpf_lsm_capable+0x5/0x10 [ 2952.760394][T27469] bpf_prog_alloc+0x1c/0x1b0 [ 2952.765010][T27469] bpf_prog_load+0x7c9/0x1560 [ 2952.769735][T27469] ? map_freeze+0x390/0x390 [ 2952.774238][T27469] ? __might_fault+0xa6/0x120 [ 2952.778914][T27469] ? __might_fault+0xa6/0x120 [ 2952.783583][T27469] ? __might_fault+0xc2/0x120 [ 2952.788258][T27469] ? __might_fault+0xa6/0x120 [ 2952.792931][T27469] ? bpf_lsm_bpf+0x5/0x10 [ 2952.797266][T27469] ? security_bpf+0x7a/0xa0 [ 2952.801854][T27469] __sys_bpf+0x5b8/0x780 [ 2952.806094][T27469] ? bpf_link_show_fdinfo+0x380/0x380 [ 2952.811474][T27469] ? lock_chain_count+0x20/0x20 [ 2952.816328][T27469] __x64_sys_bpf+0x78/0x90 [ 2952.820746][T27469] do_syscall_64+0x4c/0xa0 [ 2952.825250][T27469] ? clear_bhb_loop+0x60/0xb0 [ 2952.829919][T27469] ? clear_bhb_loop+0x60/0xb0 [ 2952.834682][T27469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2952.840567][T27469] RIP: 0033:0x7f2cfc19aeb9 [ 2952.844983][T27469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2952.864932][T27469] RSP: 002b:00007f2cfa3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2952.873338][T27469] RAX: ffffffffffffffda RBX: 00007f2cfc415fa0 RCX: 00007f2cfc19aeb9 [ 2952.881391][T27469] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2952.889356][T27469] RBP: 00007f2cfa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2952.897327][T27469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2952.905296][T27469] R13: 00007f2cfc416038 R14: 00007f2cfc415fa0 R15: 00007ffdd42223d8 [ 2952.913271][T27469] [ 2953.337787][T27487] netlink: 'syz.2.17783': attribute type 4 has an invalid length. [ 2953.373044][T27487] netlink: 140 bytes leftover after parsing attributes in process `syz.2.17783'. [ 2956.088200][T27508] netlink: 'syz.4.17789': attribute type 10 has an invalid length. [ 2956.262106][T27520] netlink: 'syz.2.17792': attribute type 10 has an invalid length. [ 2957.214747][T27537] netlink: 'syz.3.17798': attribute type 4 has an invalid length. [ 2957.228028][T27537] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17798'. [ 2957.319551][T27545] netlink: 'syz.0.17801': attribute type 1 has an invalid length. [ 2957.382321][T27545] netlink: 5 bytes leftover after parsing attributes in process `syz.0.17801'. [ 2958.208198][T27555] netlink: 'syz.1.17805': attribute type 10 has an invalid length. [ 2958.360139][T27562] FAULT_INJECTION: forcing a failure. [ 2958.360139][T27562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2958.409180][T27562] CPU: 0 PID: 27562 Comm: syz.3.17808 Not tainted syzkaller #0 [ 2958.416790][T27562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2958.426927][T27562] Call Trace: [ 2958.430285][T27562] [ 2958.433223][T27562] dump_stack_lvl+0x188/0x24e [ 2958.437909][T27562] ? show_regs_print_info+0x12/0x12 [ 2958.443109][T27562] ? load_image+0x400/0x400 [ 2958.447608][T27562] ? __lock_acquire+0x7d10/0x7d10 [ 2958.452625][T27562] ? snprintf+0xe5/0x140 [ 2958.456859][T27562] should_fail_ex+0x399/0x4d0 [ 2958.461535][T27562] _copy_to_user+0x2c/0x130 [ 2958.466058][T27562] simple_read_from_buffer+0xe3/0x150 [ 2958.471430][T27562] proc_fail_nth_read+0x1a6/0x220 [ 2958.476453][T27562] ? proc_fault_inject_write+0x310/0x310 [ 2958.482081][T27562] ? fsnotify_perm+0x248/0x550 [ 2958.486836][T27562] ? proc_fault_inject_write+0x310/0x310 [ 2958.492461][T27562] vfs_read+0x2de/0xa00 [ 2958.496611][T27562] ? kernel_read+0x1e0/0x1e0 [ 2958.501217][T27562] ? __fget_files+0x28/0x4b0 [ 2958.505814][T27562] ? __fget_files+0x28/0x4b0 [ 2958.510426][T27562] ? __fget_files+0x43d/0x4b0 [ 2958.515097][T27562] ? __fdget_pos+0x2ae/0x360 [ 2958.519676][T27562] ? ksys_read+0x71/0x250 [ 2958.524016][T27562] ksys_read+0x14c/0x250 [ 2958.528535][T27562] ? vfs_write+0xa30/0xa30 [ 2958.532946][T27562] ? lockdep_hardirqs_on+0x94/0x140 [ 2958.538135][T27562] do_syscall_64+0x4c/0xa0 [ 2958.542541][T27562] ? clear_bhb_loop+0x60/0xb0 [ 2958.547207][T27562] ? clear_bhb_loop+0x60/0xb0 [ 2958.551883][T27562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2958.557782][T27562] RIP: 0033:0x7f301955b78e [ 2958.562189][T27562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2958.581789][T27562] RSP: 002b:00007f301a4befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2958.590218][T27562] RAX: ffffffffffffffda RBX: 00007f301a4bf6c0 RCX: 00007f301955b78e [ 2958.598185][T27562] RDX: 000000000000000f RSI: 00007f301a4bf0a0 RDI: 0000000000000004 [ 2958.606148][T27562] RBP: 00007f301a4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 2958.614109][T27562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2958.622071][T27562] R13: 00007f3019816038 R14: 00007f3019815fa0 R15: 00007ffe5752fc98 [ 2958.630050][T27562] [ 2958.887387][T27579] netlink: 'syz.3.17811': attribute type 10 has an invalid length. [ 2959.005859][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.012302][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.824510][T27592] netlink: 'syz.4.17818': attribute type 1 has an invalid length. [ 2959.848859][T27592] netlink: 5 bytes leftover after parsing attributes in process `syz.4.17818'. [ 2960.858985][T27607] netlink: 'syz.2.17823': attribute type 10 has an invalid length. [ 2961.361165][T27632] netlink: 'syz.0.17830': attribute type 10 has an invalid length. [ 2961.424665][T27630] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17832'. [ 2962.141114][T27645] netlink: 'syz.1.17836': attribute type 1 has an invalid length. [ 2962.235895][T27645] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17836'. [ 2964.880371][T27643] device wg2 entered promiscuous mode [ 2964.895789][T27652] netlink: 'syz.3.17837': attribute type 16 has an invalid length. [ 2964.912469][T27652] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17837'. [ 2965.162227][T27663] FAULT_INJECTION: forcing a failure. [ 2965.162227][T27663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2965.192484][T27663] CPU: 1 PID: 27663 Comm: syz.3.17842 Not tainted syzkaller #0 [ 2965.200123][T27663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2965.210212][T27663] Call Trace: [ 2965.213610][T27663] [ 2965.216557][T27663] dump_stack_lvl+0x188/0x24e [ 2965.221347][T27663] ? show_regs_print_info+0x12/0x12 [ 2965.226561][T27663] ? load_image+0x400/0x400 [ 2965.231085][T27663] ? __lock_acquire+0x7d10/0x7d10 [ 2965.236136][T27663] should_fail_ex+0x399/0x4d0 [ 2965.240838][T27663] _copy_from_user+0x2c/0x170 [ 2965.245538][T27663] bpf_prog_test_run_skb+0x262/0x12a0 [ 2965.250915][T27663] ? __fget_files+0x28/0x4b0 [ 2965.255514][T27663] ? __fget_files+0x28/0x4b0 [ 2965.260115][T27663] ? __fget_files+0x43d/0x4b0 [ 2965.264825][T27663] ? cpu_online+0xa0/0xa0 [ 2965.269253][T27663] bpf_prog_test_run+0x31e/0x390 [ 2965.274213][T27663] __sys_bpf+0x62b/0x780 [ 2965.278471][T27663] ? bpf_link_show_fdinfo+0x380/0x380 [ 2965.283887][T27663] ? lock_chain_count+0x20/0x20 [ 2965.288794][T27663] __x64_sys_bpf+0x78/0x90 [ 2965.293227][T27663] do_syscall_64+0x4c/0xa0 [ 2965.297650][T27663] ? clear_bhb_loop+0x60/0xb0 [ 2965.302370][T27663] ? clear_bhb_loop+0x60/0xb0 [ 2965.307063][T27663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2965.312958][T27663] RIP: 0033:0x7f301959aeb9 [ 2965.317376][T27663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2965.336993][T27663] RSP: 002b:00007f301a4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2965.345446][T27663] RAX: ffffffffffffffda RBX: 00007f3019815fa0 RCX: 00007f301959aeb9 [ 2965.353438][T27663] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2965.361421][T27663] RBP: 00007f301a4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 2965.369401][T27663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2965.377375][T27663] R13: 00007f3019816038 R14: 00007f3019815fa0 R15: 00007ffe5752fc98 [ 2965.385388][T27663] [ 2965.494541][T27672] netlink: 'syz.1.17845': attribute type 10 has an invalid length. [ 2966.487595][T27696] netlink: 'syz.0.17854': attribute type 4 has an invalid length. [ 2966.511907][T27696] netlink: 140 bytes leftover after parsing attributes in process `syz.0.17854'. [ 2966.560388][T27698] FAULT_INJECTION: forcing a failure. [ 2966.560388][T27698] name failslab, interval 1, probability 0, space 0, times 0 [ 2966.576886][T27698] CPU: 1 PID: 27698 Comm: syz.1.17855 Not tainted syzkaller #0 [ 2966.584487][T27698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2966.594563][T27698] Call Trace: [ 2966.597853][T27698] [ 2966.600796][T27698] dump_stack_lvl+0x188/0x24e [ 2966.605503][T27698] ? show_regs_print_info+0x12/0x12 [ 2966.610722][T27698] ? load_image+0x400/0x400 [ 2966.615238][T27698] ? __might_sleep+0xd0/0xd0 [ 2966.619824][T27698] ? __lock_acquire+0x7d10/0x7d10 [ 2966.624846][T27698] should_fail_ex+0x399/0x4d0 [ 2966.629524][T27698] should_failslab+0x5/0x20 [ 2966.634023][T27698] slab_pre_alloc_hook+0x59/0x310 [ 2966.639056][T27698] kmem_cache_alloc_node+0x5a/0x320 [ 2966.644243][T27698] ? __alloc_skb+0xfc/0x7e0 [ 2966.648745][T27698] __alloc_skb+0xfc/0x7e0 [ 2966.653069][T27698] ? netlink_autobind+0xda/0x300 [ 2966.658094][T27698] netlink_sendmsg+0x654/0xbd0 [ 2966.662856][T27698] ? netlink_getsockopt+0x550/0x550 [ 2966.668051][T27698] ? aa_sock_msg_perm+0x94/0x150 [ 2966.672978][T27698] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2966.678253][T27698] ? security_socket_sendmsg+0x7c/0xa0 [ 2966.683709][T27698] ? netlink_getsockopt+0x550/0x550 [ 2966.688905][T27698] ____sys_sendmsg+0x5be/0x970 [ 2966.693668][T27698] ? __sys_sendmsg_sock+0x30/0x30 [ 2966.698685][T27698] ? __import_iovec+0x315/0x500 [ 2966.703537][T27698] ? import_iovec+0x6f/0xa0 [ 2966.708032][T27698] ___sys_sendmsg+0x2a2/0x360 [ 2966.712707][T27698] ? __sys_sendmsg+0x290/0x290 [ 2966.717490][T27698] ? ktime_get_real_ts64+0x440/0x440 [ 2966.722824][T27698] __se_sys_sendmsg+0x1bb/0x2a0 [ 2966.727672][T27698] ? __x64_sys_sendmsg+0x80/0x80 [ 2966.732618][T27698] ? lockdep_hardirqs_on+0x94/0x140 [ 2966.737807][T27698] do_syscall_64+0x4c/0xa0 [ 2966.742221][T27698] ? clear_bhb_loop+0x60/0xb0 [ 2966.746890][T27698] ? clear_bhb_loop+0x60/0xb0 [ 2966.751562][T27698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2966.757445][T27698] RIP: 0033:0x7fc853b9aeb9 [ 2966.761855][T27698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2966.781477][T27698] RSP: 002b:00007fc854a5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2966.789895][T27698] RAX: ffffffffffffffda RBX: 00007fc853e15fa0 RCX: 00007fc853b9aeb9 [ 2966.797863][T27698] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 2966.805829][T27698] RBP: 00007fc854a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 2966.813791][T27698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2966.821749][T27698] R13: 00007fc853e16038 R14: 00007fc853e15fa0 R15: 00007fff0b611578 [ 2966.829722][T27698] [ 2966.938583][T27709] FAULT_INJECTION: forcing a failure. [ 2966.938583][T27709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2966.957544][T27709] CPU: 1 PID: 27709 Comm: syz.2.17857 Not tainted syzkaller #0 [ 2966.965148][T27709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2966.975224][T27709] Call Trace: [ 2966.978601][T27709] [ 2966.981543][T27709] dump_stack_lvl+0x188/0x24e [ 2966.986247][T27709] ? show_regs_print_info+0x12/0x12 [ 2966.991457][T27709] ? load_image+0x400/0x400 [ 2966.995963][T27709] ? __lock_acquire+0x7d10/0x7d10 [ 2967.001011][T27709] ? perf_trace_lock+0xf8/0x390 [ 2967.005897][T27709] should_fail_ex+0x399/0x4d0 [ 2967.010713][T27709] _copy_from_user+0x2c/0x170 [ 2967.015451][T27709] ___sys_recvmsg+0x172/0x590 [ 2967.020177][T27709] ? __sys_recvmsg+0x290/0x290 [ 2967.024972][T27709] ? common_file_perm+0x171/0x1c0 [ 2967.030029][T27709] ? __fget_files+0x43d/0x4b0 [ 2967.034755][T27709] __x64_sys_recvmsg+0x205/0x2e0 [ 2967.039726][T27709] ? ___sys_recvmsg+0x590/0x590 [ 2967.044694][T27709] ? lockdep_hardirqs_on+0x94/0x140 [ 2967.049924][T27709] do_syscall_64+0x4c/0xa0 [ 2967.054361][T27709] ? clear_bhb_loop+0x60/0xb0 [ 2967.059068][T27709] ? clear_bhb_loop+0x60/0xb0 [ 2967.063786][T27709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2967.069705][T27709] RIP: 0033:0x7f2cfc19aeb9 [ 2967.074154][T27709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2967.093789][T27709] RSP: 002b:00007f2cfa3d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2967.102231][T27709] RAX: ffffffffffffffda RBX: 00007f2cfc416090 RCX: 00007f2cfc19aeb9 [ 2967.110271][T27709] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000006 [ 2967.118260][T27709] RBP: 00007f2cfa3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2967.126230][T27709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2967.134209][T27709] R13: 00007f2cfc416128 R14: 00007f2cfc416090 R15: 00007ffdd42223d8 [ 2967.142225][T27709] [ 2968.947351][T27742] netlink: 'syz.1.17869': attribute type 4 has an invalid length. [ 2968.978647][T27742] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17869'. [ 2969.221114][T27743] device syzkaller0 entered promiscuous mode [ 2970.118634][T27759] device wg2 left promiscuous mode [ 2973.023606][T27786] netlink: 'syz.2.17882': attribute type 4 has an invalid length. [ 2973.051155][T27786] netlink: 140 bytes leftover after parsing attributes in process `syz.2.17882'. [ 2974.152955][T27808] netlink: 'syz.1.17890': attribute type 1 has an invalid length. [ 2974.178737][T27808] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17890'. [ 2974.292415][T27818] netlink: 'syz.3.17894': attribute type 10 has an invalid length. [ 2975.506429][T27833] device syzkaller0 entered promiscuous mode [ 2975.520810][T27834] netlink: 'syz.1.17899': attribute type 4 has an invalid length. [ 2975.545652][T27834] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17899'. [ 2976.073402][T27846] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17902'. [ 2977.104205][ T7561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2977.113499][ T7561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2977.126584][ T7561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2977.163497][ T7561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2977.171158][ T7561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2977.181571][ T7561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2979.247886][ T7561] Bluetooth: hci2: command 0x0409 tx timeout [ 2980.202986][T27868] netlink: 'syz.1.17907': attribute type 10 has an invalid length. [ 2980.639998][T27861] chnl_net:caif_netlink_parms(): no params data found [ 2980.715588][T27861] bridge0: port 1(bridge_slave_0) entered blocking state [ 2980.722843][T27861] bridge0: port 1(bridge_slave_0) entered disabled state [ 2980.731178][T27861] device bridge_slave_0 entered promiscuous mode [ 2980.745119][T27861] bridge0: port 2(bridge_slave_1) entered blocking state [ 2980.752316][T27861] bridge0: port 2(bridge_slave_1) entered disabled state [ 2980.760980][T27861] device bridge_slave_1 entered promiscuous mode [ 2980.796787][T27897] netlink: 'syz.1.17913': attribute type 1 has an invalid length. [ 2980.816742][T27893] netlink: 'syz.3.17914': attribute type 4 has an invalid length. [ 2980.833737][T27893] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17914'. [ 2980.842955][T27897] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17913'. [ 2980.975050][T27861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2981.006345][T27861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2981.099895][T27861] team0: Port device team_slave_0 added [ 2981.125474][T27861] team0: Port device team_slave_1 added [ 2981.207958][T27861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2981.253115][T27861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2981.312350][T27861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2981.335439][ T7561] Bluetooth: hci2: command 0x041b tx timeout [ 2981.372263][T27861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2981.414848][T27861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2981.533322][T27861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2982.152393][T27861] device hsr_slave_0 entered promiscuous mode [ 2982.160359][T27861] device hsr_slave_1 entered promiscuous mode [ 2982.168415][T27861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2982.198898][T27861] Cannot create hsr debugfs directory [ 2982.254090][T27915] netlink: 'syz.2.17919': attribute type 10 has an invalid length. [ 2982.400027][T27920] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17920'. [ 2982.514301][T27861] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2982.558416][T27927] device syzkaller0 entered promiscuous mode [ 2982.689689][T27861] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2982.717862][T27933] netlink: 'syz.3.17925': attribute type 4 has an invalid length. [ 2982.732873][T27933] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17925'. [ 2982.834786][T27937] netlink: 'syz.2.17927': attribute type 1 has an invalid length. [ 2982.838027][T27861] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2982.848563][T27937] netlink: 5 bytes leftover after parsing attributes in process `syz.2.17927'. [ 2982.986330][T27861] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2983.403049][T27329] Bluetooth: hci2: command 0x040f tx timeout [ 2985.482874][T27329] Bluetooth: hci2: command 0x0419 tx timeout [ 2987.325840][T27960] netlink: 'syz.1.17933': attribute type 10 has an invalid length. [ 2987.334439][T27967] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17934'. [ 2987.517937][T27861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2987.555610][T27861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2987.594182][T27861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2987.615931][T27861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2987.670870][T27978] netlink: 'syz.2.17937': attribute type 4 has an invalid length. [ 2987.701943][T27978] netlink: 140 bytes leftover after parsing attributes in process `syz.2.17937'. [ 2987.713763][T27985] netlink: 'syz.1.17940': attribute type 1 has an invalid length. [ 2987.736607][T27985] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17940'. [ 2987.867413][T27861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2987.913972][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2987.923154][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2987.956864][T27861] 8021q: adding VLAN 0 to HW filter on device team0 [ 2987.986377][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2987.996438][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2988.013470][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 2988.020691][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2988.086376][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2988.174241][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2988.272036][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2988.328157][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 2988.335467][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2988.424402][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2988.517420][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2988.548599][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2988.624339][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2988.673973][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2988.714787][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2988.753740][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2988.769699][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2988.793716][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2988.825424][T28004] netlink: 'syz.1.17946': attribute type 10 has an invalid length. [ 2988.857794][T27861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2988.919167][T27861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2988.967566][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2988.984672][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2989.754154][T28029] netlink: 'syz.1.17954': attribute type 1 has an invalid length. [ 2989.772999][T28029] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17954'. [ 2989.923280][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2989.930844][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2989.959682][T27861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2990.927589][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2990.948805][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2990.969853][T28049] netlink: 'syz.3.17960': attribute type 10 has an invalid length. [ 2991.033573][T24079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2991.048424][T24079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2991.089308][T24079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2991.127356][T24079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2991.165543][T27861] device veth0_vlan entered promiscuous mode [ 2991.229996][T27861] device veth1_vlan entered promiscuous mode [ 2991.395775][T24079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2991.464401][T24079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2991.614674][T24079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2991.719947][T24079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2991.887636][T27861] device veth0_macvtap entered promiscuous mode [ 2991.913413][T28068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17965'. [ 2991.934987][T27861] device veth1_macvtap entered promiscuous mode [ 2991.948183][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2991.959623][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2991.996252][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2992.036143][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.069389][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2992.094415][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.119794][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2992.149696][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.171583][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2992.194426][T28078] netlink: 'syz.3.17970': attribute type 1 has an invalid length. [ 2992.202310][T28078] netlink: 5 bytes leftover after parsing attributes in process `syz.3.17970'. [ 2992.214536][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.232853][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2992.261264][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.291586][T27861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2992.315147][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2992.330802][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2992.361429][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2992.383347][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.402828][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2992.423802][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.453562][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2992.475655][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.495666][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2992.509910][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.531894][T27861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2992.549524][T27861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2992.572401][T27861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2992.582916][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2992.602062][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2992.627034][T27861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2992.644576][T27861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2992.660419][T27861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2992.670025][T27861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2993.108450][T19652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2993.126599][T19652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2993.164897][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2993.199702][T19652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2993.222348][T19652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2993.244744][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2993.301048][T28092] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17975'. [ 2995.677966][T28133] netlink: 'syz.1.17998': attribute type 1 has an invalid length. [ 2995.722900][T28133] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17998'. [ 2995.952506][ T7561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2995.963163][ T7561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2995.971633][ T7561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2995.981181][ T7561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2995.989076][ T7561] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2995.996638][ T7561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2996.386049][T28139] chnl_net:caif_netlink_parms(): no params data found [ 2997.248591][T28157] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17995'. [ 2997.368959][T28157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2997.388674][T28157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2997.410914][T28157] bond0 (unregistering): Released all slaves [ 2997.494285][ T4717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2997.552309][T28166] netlink: 'syz.1.18000': attribute type 10 has an invalid length. [ 2997.675971][ T4717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2997.705895][T28178] netlink: 'syz.4.18002': attribute type 1 has an invalid length. [ 2997.714135][T28178] netlink: 5 bytes leftover after parsing attributes in process `syz.4.18002'. [ 2997.789889][T28139] bridge0: port 1(bridge_slave_0) entered blocking state [ 2997.815726][T28139] bridge0: port 1(bridge_slave_0) entered disabled state [ 2997.831181][T28139] device bridge_slave_0 entered promiscuous mode [ 2997.870353][ T4717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2997.906540][T28139] bridge0: port 2(bridge_slave_1) entered blocking state [ 2997.917066][T28139] bridge0: port 2(bridge_slave_1) entered disabled state [ 2997.933868][T28139] device bridge_slave_1 entered promiscuous mode [ 2998.018555][ T4717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2998.049555][T28139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2998.139540][T28139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2998.206666][T27329] Bluetooth: hci4: command 0x0409 tx timeout [ 2998.420143][T28139] team0: Port device team_slave_0 added [ 2998.485209][T28139] team0: Port device team_slave_1 added [ 2998.584721][T28139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2998.608465][T28139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2998.702391][T28139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2999.651210][T28139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2999.664525][T28139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2999.695118][T28139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2999.712917][T28214] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18012'. [ 2999.837060][T28139] device hsr_slave_0 entered promiscuous mode [ 2999.863401][T28139] device hsr_slave_1 entered promiscuous mode [ 2999.873411][T28139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2999.891340][T28139] Cannot create hsr debugfs directory [ 2999.938250][T28229] netlink: 'syz.4.18015': attribute type 10 has an invalid length. [ 3000.091413][T28237] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18017'. [ 3000.282836][T27329] Bluetooth: hci4: command 0x041b tx timeout [ 3001.552331][T28273] netlink: 'syz.1.18027': attribute type 1 has an invalid length. [ 3001.610056][T28273] netlink: 5 bytes leftover after parsing attributes in process `syz.1.18027'. [ 3002.363239][T27329] Bluetooth: hci4: command 0x040f tx timeout [ 3003.146369][T28288] netlink: 'syz.2.18030': attribute type 10 has an invalid length. [ 3003.158629][T28297] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18031'. [ 3003.272456][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3003.294281][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3003.321302][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3003.340963][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3003.371739][ T4717] device veth1_macvtap left promiscuous mode [ 3003.385625][ T4717] device veth0_macvtap left promiscuous mode [ 3003.399965][ T4717] device veth1_vlan left promiscuous mode [ 3003.433776][ T4717] device veth0_vlan left promiscuous mode [ 3004.453127][T27329] Bluetooth: hci4: command 0x0419 tx timeout [ 3005.290507][ T4717] team0 (unregistering): Port device team_slave_1 removed [ 3005.341044][ T4717] team0 (unregistering): Port device team_slave_0 removed [ 3005.819912][T28324] netlink: 'syz.4.18042': attribute type 10 has an invalid length. [ 3005.949274][T28139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3006.126761][T28139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3006.150288][T28340] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18045'. [ 3006.190166][T28139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3006.242596][T28139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3006.527762][T28139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3006.610908][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3006.631451][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3006.739338][T28139] 8021q: adding VLAN 0 to HW filter on device team0 [ 3006.783203][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3006.802106][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3006.855047][T19652] bridge0: port 1(bridge_slave_0) entered blocking state [ 3006.862215][T19652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3006.960126][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3006.985551][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3007.019578][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3007.038783][T19652] bridge0: port 2(bridge_slave_1) entered blocking state [ 3007.046022][T19652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3007.073208][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3007.082187][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3007.113466][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3007.125856][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3007.164930][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3007.181305][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3007.208320][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3007.217725][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3007.226568][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3007.238837][T28139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3007.251542][T28139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3007.269903][T28382] netlink: 'syz.1.18056': attribute type 10 has an invalid length. [ 3007.287538][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3007.300463][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3007.400871][T28389] netlink: 'syz.2.18057': attribute type 10 has an invalid length. [ 3008.123867][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3008.131500][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3008.160573][T28139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3008.837281][T28429] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18065'. [ 3008.878680][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3008.895376][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3009.050334][T28440] netlink: 'syz.2.18067': attribute type 1 has an invalid length. [ 3009.093282][T28440] netlink: 5 bytes leftover after parsing attributes in process `syz.2.18067'. [ 3009.417771][T28139] device veth0_vlan entered promiscuous mode [ 3009.428202][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3009.448029][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3009.487420][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3009.527948][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3009.576342][T28139] device veth1_vlan entered promiscuous mode [ 3009.658224][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3009.694114][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3009.737153][T28139] device veth0_macvtap entered promiscuous mode [ 3009.759254][T28139] device veth1_macvtap entered promiscuous mode [ 3009.811638][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.833599][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.852864][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.874376][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.902894][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.923235][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.939962][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.971047][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.988095][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3010.008969][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.030927][T28139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3010.080798][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3010.099296][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3010.108943][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3010.119249][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3010.132400][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3010.148305][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.159139][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3010.182650][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.192959][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3010.205048][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.215292][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3010.226226][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.238444][T28139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3010.249197][T28139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.263636][T28139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3010.293148][T28139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.312484][T28139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.332584][T28139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.341959][T28139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.364941][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3010.378290][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3010.493176][T19652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3010.502771][T19652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.510348][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3010.575994][T28477] netlink: 'syz.2.18078': attribute type 1 has an invalid length. [ 3010.584235][ T4715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3010.593480][T28477] netlink: 5 bytes leftover after parsing attributes in process `syz.2.18078'. [ 3010.613330][ T4715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.620996][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3011.196730][T28491] netlink: 'syz.2.18081': attribute type 10 has an invalid length. [ 3011.232571][T28487] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18080'. [ 3012.087020][T28518] netlink: 'syz.0.18092': attribute type 1 has an invalid length. [ 3012.095697][T28518] netlink: 5 bytes leftover after parsing attributes in process `syz.0.18092'. [ 3012.299291][T28524] netlink: 'syz.0.18096': attribute type 10 has an invalid length. [ 3013.653680][T28543] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18100'. [ 3013.865220][T28543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3013.946924][T28543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3014.029269][T28543] bond0 (unregistering): Released all slaves [ 3014.106089][T28555] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18104'. [ 3014.159148][T28563] netlink: 'syz.4.18108': attribute type 10 has an invalid length. [ 3015.394550][T18292] tipc: Left network mode [ 3016.251917][T28602] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18122'. [ 3016.590070][T28619] netlink: 'syz.3.18127': attribute type 1 has an invalid length. [ 3016.598760][T28619] netlink: 5 bytes leftover after parsing attributes in process `syz.3.18127'. [ 3016.908121][T28625] netlink: 'syz.0.18131': attribute type 10 has an invalid length. [ 3017.469256][T18292] device veth0_to_bridge left promiscuous mode [ 3017.517738][T18292] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 3017.541493][T18292] device hsr_slave_0 left promiscuous mode [ 3017.549011][T18292] device hsr_slave_1 left promiscuous mode [ 3017.556830][T18292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3017.571325][T18292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3017.640885][T18292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3017.662013][T18292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3017.678187][T18292] device bridge_slave_1 left promiscuous mode [ 3017.691754][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 3017.720232][T18292] device bridge_slave_0 left promiscuous mode [ 3017.727062][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 3017.757930][T18292] device veth1_macvtap left promiscuous mode [ 3017.769973][T18292] device veth0_macvtap left promiscuous mode [ 3018.521019][T18292] team0 (unregistering): Port device team_slave_1 removed [ 3019.017057][T28640] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18136'. [ 3019.033510][T28661] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18143'. [ 3019.078772][T28668] netlink: 'syz.4.18147': attribute type 10 has an invalid length. [ 3019.926597][T28706] netlink: 'syz.1.18162': attribute type 10 has an invalid length. [ 3019.946296][T28704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18161'. [ 3020.446324][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.452755][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.648919][T28739] netlink: 'syz.3.18175': attribute type 10 has an invalid length. [ 3021.635256][T28776] netlink: 'syz.0.18190': attribute type 10 has an invalid length. [ 3023.284271][T28808] FAULT_INJECTION: forcing a failure. [ 3023.284271][T28808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3023.314373][T28808] CPU: 1 PID: 28808 Comm: syz.4.18203 Not tainted syzkaller #0 [ 3023.322056][T28808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3023.332131][T28808] Call Trace: [ 3023.335429][T28808] [ 3023.338458][T28808] dump_stack_lvl+0x188/0x24e [ 3023.343162][T28808] ? show_regs_print_info+0x12/0x12 [ 3023.348388][T28808] ? load_image+0x400/0x400 [ 3023.352922][T28808] ? __lock_acquire+0x7d10/0x7d10 [ 3023.357967][T28808] ? smc_ioctl+0x273/0x8f0 [ 3023.362412][T28808] should_fail_ex+0x399/0x4d0 [ 3023.367123][T28808] _copy_from_user+0x2c/0x170 [ 3023.371822][T28808] sock_do_ioctl+0x18c/0x320 [ 3023.376420][T28808] ? sock_show_fdinfo+0xb0/0xb0 [ 3023.381283][T28808] sock_ioctl+0x4d2/0x710 [ 3023.385611][T28808] ? sock_poll+0x410/0x410 [ 3023.390028][T28808] ? bpf_lsm_file_ioctl+0x5/0x10 [ 3023.394980][T28808] ? security_file_ioctl+0x7c/0xa0 [ 3023.400117][T28808] ? sock_poll+0x410/0x410 [ 3023.404559][T28808] __se_sys_ioctl+0xfa/0x170 [ 3023.409162][T28808] do_syscall_64+0x4c/0xa0 [ 3023.413591][T28808] ? clear_bhb_loop+0x60/0xb0 [ 3023.418275][T28808] ? clear_bhb_loop+0x60/0xb0 [ 3023.423061][T28808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3023.428989][T28808] RIP: 0033:0x7f095339aeb9 [ 3023.433426][T28808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3023.453053][T28808] RSP: 002b:00007f0954260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3023.453876][T28817] netlink: 'syz.0.18205': attribute type 10 has an invalid length. [ 3023.461475][T28808] RAX: ffffffffffffffda RBX: 00007f0953615fa0 RCX: 00007f095339aeb9 [ 3023.461497][T28808] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 3023.461506][T28808] RBP: 00007f0954260090 R08: 0000000000000000 R09: 0000000000000000 [ 3023.461517][T28808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3023.461527][T28808] R13: 00007f0953616038 R14: 00007f0953615fa0 R15: 00007fffff170b58 [ 3023.461552][T28808] [ 3025.904166][T28878] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18227'. [ 3026.589853][T28895] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18233'. [ 3026.760319][T28900] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18234'. [ 3026.810655][T28899] delete_channel: no stack [ 3027.366470][T28922] netlink: 'syz.1.18243': attribute type 10 has an invalid length. [ 3027.834025][T28931] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18246'. [ 3028.479458][T28939] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18248'. [ 3028.564469][T28941] netlink: 'syz.3.18250': attribute type 10 has an invalid length. [ 3028.648004][T28938] delete_channel: no stack [ 3030.788165][T27329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3030.797852][T27329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3030.806193][T27329] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3030.816371][T27329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3030.826166][T18400] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3030.833741][T18400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3031.522636][T28984] netlink: 'syz.2.18266': attribute type 10 has an invalid length. [ 3031.737620][ T4730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3031.791964][T29008] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18273'. [ 3031.901860][ T4730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3032.039139][ T4730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3032.113671][T28995] chnl_net:caif_netlink_parms(): no params data found [ 3032.160485][ T4730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3032.229653][T28995] bridge0: port 1(bridge_slave_0) entered blocking state [ 3032.240385][T28995] bridge0: port 1(bridge_slave_0) entered disabled state [ 3032.248499][T28995] device bridge_slave_0 entered promiscuous mode [ 3032.257902][T28995] bridge0: port 2(bridge_slave_1) entered blocking state [ 3032.265336][T28995] bridge0: port 2(bridge_slave_1) entered disabled state [ 3032.275373][T28995] device bridge_slave_1 entered promiscuous mode [ 3032.319457][T28995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3032.359803][T28995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3032.410944][T28995] team0: Port device team_slave_0 added [ 3032.419627][T28995] team0: Port device team_slave_1 added [ 3032.446515][T28995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3032.454814][T28995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3032.486063][T28995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3032.499465][T28995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3032.508722][T28995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3032.534878][T28995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3032.706290][T28995] device hsr_slave_0 entered promiscuous mode [ 3032.770976][T28995] device hsr_slave_1 entered promiscuous mode [ 3032.926307][ T7561] Bluetooth: hci3: command 0x0409 tx timeout [ 3033.872022][T29041] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18282'. [ 3034.514147][T29073] netlink: 'syz.2.18290': attribute type 10 has an invalid length. [ 3035.012438][ T7561] Bluetooth: hci3: command 0x041b tx timeout [ 3035.907022][T29101] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18294'. [ 3036.208559][T29108] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18296'. [ 3036.284212][T28995] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3036.355507][T28995] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3036.367828][T28995] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3036.378448][T28995] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3036.436110][ T4730] device veth0_to_bridge left promiscuous mode [ 3036.442427][ T4730] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 3036.491180][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3036.501673][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3036.520162][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3036.529724][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3036.568730][ T4730] device veth1_macvtap left promiscuous mode [ 3036.580396][ T4730] device veth0_macvtap left promiscuous mode [ 3037.061934][T29146] delete_channel: no stack [ 3037.084254][ T7561] Bluetooth: hci3: command 0x040f tx timeout [ 3039.169646][ T7561] Bluetooth: hci3: command 0x0419 tx timeout [ 3039.233838][ T4730] team0 (unregistering): Port device team_slave_1 removed [ 3039.289560][ T4730] team0 (unregistering): Port device team_slave_0 removed [ 3039.767399][T29148] netlink: 'syz.1.18302': attribute type 10 has an invalid length. [ 3039.776921][T29179] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18308'. [ 3040.066957][T28995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3040.111838][T29191] delete_channel: no stack [ 3040.164633][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3040.181585][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3040.213674][T28995] 8021q: adding VLAN 0 to HW filter on device team0 [ 3040.238658][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3040.257911][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3040.291368][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 3040.298590][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3040.351254][T29203] delete_channel: no stack [ 3040.374926][T29202] netlink: 'syz.1.18317': attribute type 10 has an invalid length. [ 3040.425136][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3040.448151][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3040.463575][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3040.486982][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 3040.494233][T18292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3040.556562][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3041.095742][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3041.128880][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3041.153231][T29209] delete_channel: no stack [ 3041.165521][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3041.216569][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3041.260508][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3041.285970][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3041.317917][T28995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3041.369147][T28995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3041.408097][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3041.428915][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3041.458921][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3041.484373][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3041.512458][T29236] delete_channel: no stack [ 3041.519744][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3041.574860][T29232] netlink: 'syz.3.18322': attribute type 10 has an invalid length. [ 3042.085297][T29256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18327'. [ 3042.513370][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3042.537625][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3042.558384][T28995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3042.576387][T29273] netlink: 'syz.3.18332': attribute type 10 has an invalid length. [ 3042.648789][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3042.670452][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3042.758509][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3042.787400][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3042.815822][T28995] device veth0_vlan entered promiscuous mode [ 3042.830626][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3042.845855][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3042.872668][T28995] device veth1_vlan entered promiscuous mode [ 3042.889726][T29280] delete_channel: no stack [ 3042.938451][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3042.958866][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3043.027787][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3043.061021][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3043.109694][T28995] device veth0_macvtap entered promiscuous mode [ 3043.139100][T28995] device veth1_macvtap entered promiscuous mode [ 3043.159740][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3043.170449][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3043.204593][T29289] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18344'. [ 3043.257281][T28995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3043.274842][T28995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.291899][T28995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3043.303629][T28995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.328081][T28995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3043.349915][T28995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.365357][T28995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3043.378476][T28995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.391891][T28995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3043.404422][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3043.416616][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3043.445654][T28995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3043.483276][T28995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.513166][T28995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3043.532903][T28995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.563414][T28995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3043.582799][T28995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.592655][T28995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3043.632743][T28995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.652814][T28995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3043.661658][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3043.693254][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3043.754727][T28995] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3043.798165][T28995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3043.811435][T28995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3043.827397][T28995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3044.277675][T18292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3044.296031][T18292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3044.329687][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3044.370332][T18292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3044.383452][T18292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3044.415251][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3044.423775][T29316] delete_channel: no stack [ 3044.466138][T29324] FAULT_INJECTION: forcing a failure. [ 3044.466138][T29324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3044.483557][T29324] CPU: 1 PID: 29324 Comm: syz.1.18346 Not tainted syzkaller #0 [ 3044.486201][T29321] netlink: 'syz.4.18347': attribute type 10 has an invalid length. [ 3044.491148][T29324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3044.491166][T29324] Call Trace: [ 3044.491174][T29324] [ 3044.491183][T29324] dump_stack_lvl+0x188/0x24e [ 3044.491215][T29324] ? show_regs_print_info+0x12/0x12 [ 3044.491237][T29324] ? load_image+0x400/0x400 [ 3044.529839][T29324] ? __lock_acquire+0x7d10/0x7d10 [ 3044.534895][T29324] ? __virt_addr_valid+0x188/0x540 [ 3044.540040][T29324] should_fail_ex+0x399/0x4d0 [ 3044.544755][T29324] _copy_from_user+0x2c/0x170 [ 3044.549455][T29324] ___bpf_copy_key+0xb0/0x100 [ 3044.554156][T29324] map_update_elem+0x2a9/0x680 [ 3044.558951][T29324] __sys_bpf+0x4ec/0x780 [ 3044.563221][T29324] ? bpf_link_show_fdinfo+0x380/0x380 [ 3044.568635][T29324] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3044.574831][T29324] __x64_sys_bpf+0x78/0x90 [ 3044.579284][T29324] do_syscall_64+0x4c/0xa0 [ 3044.583718][T29324] ? clear_bhb_loop+0x60/0xb0 [ 3044.588409][T29324] ? clear_bhb_loop+0x60/0xb0 [ 3044.593087][T29324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3044.598975][T29324] RIP: 0033:0x7fc853b9aeb9 [ 3044.603387][T29324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3044.623077][T29324] RSP: 002b:00007fc854a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3044.631482][T29324] RAX: ffffffffffffffda RBX: 00007fc853e15fa0 RCX: 00007fc853b9aeb9 [ 3044.639447][T29324] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000002 [ 3044.647412][T29324] RBP: 00007fc854a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 3044.655372][T29324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3044.663331][T29324] R13: 00007fc853e16038 R14: 00007fc853e15fa0 R15: 00007fff0b611578 [ 3044.671402][T29324] [ 3045.595690][T29346] delete_channel: no stack [ 3046.025575][T29352] delete_channel: no stack [ 3046.204203][T18400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3046.271584][T18400] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3046.280545][T18400] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3046.292022][T18400] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3046.299995][T18400] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3046.307668][T18400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3046.449320][T29362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18359'. [ 3046.651796][T29366] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18361'. [ 3046.689427][T29365] delete_channel: no stack [ 3046.862041][ T4717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3047.033637][ T4717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3047.133421][T29359] chnl_net:caif_netlink_parms(): no params data found [ 3047.219392][ T4717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3047.295457][T29393] netlink: 'syz.4.18372': attribute type 10 has an invalid length. [ 3047.336725][T29389] delete_channel: no stack [ 3047.360704][ T4717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3047.422636][T29359] bridge0: port 1(bridge_slave_0) entered blocking state [ 3047.457705][T29359] bridge0: port 1(bridge_slave_0) entered disabled state [ 3047.481270][T29359] device bridge_slave_0 entered promiscuous mode [ 3047.518175][T29359] bridge0: port 2(bridge_slave_1) entered blocking state [ 3047.552946][T29359] bridge0: port 2(bridge_slave_1) entered disabled state [ 3047.561584][T29359] device bridge_slave_1 entered promiscuous mode [ 3047.672009][T29359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3047.693860][T29359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3047.726345][T29408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18377'. [ 3047.851849][T29359] team0: Port device team_slave_0 added [ 3047.898633][T29359] team0: Port device team_slave_1 added [ 3047.971507][T29407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18376'. [ 3048.005381][T29359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3048.012463][T29359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3048.090084][T29359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3048.279292][T29359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3048.292824][T29359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3048.319390][T29359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3048.343792][T29418] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18380'. [ 3048.363146][ T7561] Bluetooth: hci5: command 0x0409 tx timeout [ 3048.385599][T29417] delete_channel: no stack [ 3048.430483][T29359] device hsr_slave_0 entered promiscuous mode [ 3048.446650][T29359] device hsr_slave_1 entered promiscuous mode [ 3048.459214][T29359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3048.472275][T29359] Cannot create hsr debugfs directory [ 3048.736857][T29431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18383'. [ 3049.076045][T29441] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18385'. [ 3049.208452][T29443] delete_channel: no stack [ 3049.628627][T29454] netlink: 'syz.0.18388': attribute type 10 has an invalid length. [ 3049.681402][T29454] 8021q: adding VLAN 0 to HW filter on device team0 [ 3049.701772][T29454] bond0: (slave team0): Enslaving as an active interface with an up link [ 3050.170764][ T4717] device hsr_slave_0 left promiscuous mode [ 3050.198155][ T4717] device hsr_slave_1 left promiscuous mode [ 3050.280039][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3050.297653][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3050.338370][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3050.367593][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3050.410851][ T4717] device bridge_slave_1 left promiscuous mode [ 3050.438766][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 3050.444255][ T7561] Bluetooth: hci5: command 0x041b tx timeout [ 3050.476222][ T4717] device bridge_slave_0 left promiscuous mode [ 3050.510852][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 3050.636534][ T4717] device veth1_macvtap left promiscuous mode [ 3050.663901][ T4717] device veth0_macvtap left promiscuous mode [ 3050.681858][ T4717] device veth1_vlan left promiscuous mode [ 3050.694730][ T4717] device veth0_vlan left promiscuous mode [ 3052.448535][ T4717] team0 (unregistering): Port device team_slave_1 removed [ 3052.501067][ T4717] team0 (unregistering): Port device team_slave_0 removed [ 3052.523051][ T7561] Bluetooth: hci5: command 0x040f tx timeout [ 3053.036454][T29474] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18395'. [ 3053.051354][T29494] netlink: 'syz.1.18401': attribute type 4 has an invalid length. [ 3053.063159][T29494] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18401'. [ 3053.101577][T29359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3053.160268][T29359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3053.185219][T29503] netlink: 'syz.3.18404': attribute type 10 has an invalid length. [ 3053.203373][T29359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3053.238494][T29359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3053.573774][T29359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3053.622238][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3053.636950][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3053.659517][T29359] 8021q: adding VLAN 0 to HW filter on device team0 [ 3053.680197][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3053.705382][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3053.741717][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 3053.748975][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3053.782445][T29526] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18409'. [ 3053.804788][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3053.820928][T29524] delete_channel: no stack [ 3053.827104][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3053.849335][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3053.875525][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 3053.882759][T18292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3053.909425][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3053.946445][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3053.976679][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3054.008162][T18400] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7 [ 3054.008273][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3054.056590][T29530] netlink: 'syz.3.18411': attribute type 10 has an invalid length. [ 3054.076837][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3054.113578][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3054.142227][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3054.174422][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3054.223627][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3054.248552][T29359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3054.271037][T29359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3054.308687][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3054.324580][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3054.584985][T29554] FAULT_INJECTION: forcing a failure. [ 3054.584985][T29554] name failslab, interval 1, probability 0, space 0, times 0 [ 3054.604431][T18400] Bluetooth: hci5: command 0x0419 tx timeout [ 3054.617695][T29554] CPU: 0 PID: 29554 Comm: syz.3.18416 Not tainted syzkaller #0 [ 3054.625385][T29554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3054.635457][T29554] Call Trace: [ 3054.638833][T29554] [ 3054.641778][T29554] dump_stack_lvl+0x188/0x24e [ 3054.646479][T29554] ? show_regs_print_info+0x12/0x12 [ 3054.651699][T29554] ? load_image+0x400/0x400 [ 3054.656221][T29554] ? __might_sleep+0xd0/0xd0 [ 3054.660829][T29554] ? __lock_acquire+0x7d10/0x7d10 [ 3054.665985][T29554] should_fail_ex+0x399/0x4d0 [ 3054.670708][T29554] should_failslab+0x5/0x20 [ 3054.675245][T29554] slab_pre_alloc_hook+0x59/0x310 [ 3054.680315][T29554] ? sk_prot_alloc+0xe7/0x210 [ 3054.685015][T29554] __kmem_cache_alloc_node+0x4f/0x260 [ 3054.690419][T29554] ? sk_prot_alloc+0xe7/0x210 [ 3054.695124][T29554] __kmalloc+0xa0/0x240 [ 3054.699311][T29554] sk_prot_alloc+0xe7/0x210 [ 3054.703850][T29554] ? sk_alloc+0x20/0x340 [ 3054.708113][T29554] sk_alloc+0x36/0x340 [ 3054.712206][T29554] ? bpf_ctx_init+0x163/0x1a0 [ 3054.716905][T29554] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 3054.722473][T29554] bpf_prog_test_run_skb+0x35e/0x12a0 [ 3054.727865][T29554] ? __fget_files+0x28/0x4b0 [ 3054.732478][T29554] ? __fget_files+0x43d/0x4b0 [ 3054.737194][T29554] ? cpu_online+0xa0/0xa0 [ 3054.741636][T29554] bpf_prog_test_run+0x31e/0x390 [ 3054.746607][T29554] __sys_bpf+0x62b/0x780 [ 3054.750875][T29554] ? bpf_link_show_fdinfo+0x380/0x380 [ 3054.756281][T29554] ? lock_chain_count+0x20/0x20 [ 3054.761157][T29554] __x64_sys_bpf+0x78/0x90 [ 3054.765597][T29554] do_syscall_64+0x4c/0xa0 [ 3054.770041][T29554] ? clear_bhb_loop+0x60/0xb0 [ 3054.774733][T29554] ? clear_bhb_loop+0x60/0xb0 [ 3054.779431][T29554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3054.785340][T29554] RIP: 0033:0x7f095459aeb9 [ 3054.789771][T29554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3054.809405][T29554] RSP: 002b:00007f0955428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3054.817847][T29554] RAX: ffffffffffffffda RBX: 00007f0954815fa0 RCX: 00007f095459aeb9 [ 3054.825841][T29554] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 3054.833830][T29554] RBP: 00007f0955428090 R08: 0000000000000000 R09: 0000000000000000 [ 3054.841905][T29554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3054.849894][T29554] R13: 00007f0954816038 R14: 00007f0954815fa0 R15: 00007ffc272c0798 [ 3054.857905][T29554] [ 3055.119422][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3055.165892][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3055.189762][T29566] netlink: 'syz.4.18419': attribute type 4 has an invalid length. [ 3055.217649][T29566] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18419'. [ 3055.251222][T29359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3055.279740][T29564] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18417'. [ 3055.372301][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3055.399917][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3055.504256][T29571] netlink: 'syz.0.18420': attribute type 10 has an invalid length. [ 3055.606329][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3055.633050][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3055.670984][T29359] device veth0_vlan entered promiscuous mode [ 3055.716150][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3055.738196][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3055.782724][T29359] device veth1_vlan entered promiscuous mode [ 3055.881665][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3055.905682][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3055.937142][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3055.983807][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3056.018089][T29359] device veth0_macvtap entered promiscuous mode [ 3056.038321][T29359] device veth1_macvtap entered promiscuous mode [ 3056.080186][T29359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3056.114356][T29359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.154117][T29359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3056.179506][T29359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.201007][T29359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3056.230560][T29359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.251001][T29359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3056.269684][T29359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.296686][T29359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3056.306828][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3056.321705][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3056.333302][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3056.342261][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3056.352277][T29599] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18427'. [ 3056.374989][T29359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.391330][T29359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.401730][T29359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.417752][T29359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.428069][T29359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.451918][T29359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.464854][T29359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.480302][T29359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.493495][T29359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3056.503425][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3056.514635][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3056.534612][T29359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.550258][T29359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.569165][T29359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.579615][T29359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.601529][T29605] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18429'. [ 3056.882942][T18292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3056.890782][T18292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3056.940494][T19652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3056.956798][T29610] netlink: 'syz.4.18431': attribute type 4 has an invalid length. [ 3056.979533][T29610] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18431'. [ 3057.022412][T19652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3057.049790][T19652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3057.071384][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3057.206167][T29618] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18434'. [ 3057.512270][T29631] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18440'. [ 3057.960517][T18400] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3057.970038][T18400] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3057.980498][T18400] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3057.992232][T18400] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3058.001452][T18400] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3058.010773][T18400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3058.548808][T29645] netlink: 'syz.3.18443': attribute type 4 has an invalid length. [ 3058.565069][T29645] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18443'. [ 3058.584502][T29639] chnl_net:caif_netlink_parms(): no params data found [ 3058.831748][T29639] bridge0: port 1(bridge_slave_0) entered blocking state [ 3058.863239][T29639] bridge0: port 1(bridge_slave_0) entered disabled state [ 3058.871056][T29639] device bridge_slave_0 entered promiscuous mode [ 3058.903276][T29639] bridge0: port 2(bridge_slave_1) entered blocking state [ 3058.910716][T29639] bridge0: port 2(bridge_slave_1) entered disabled state [ 3058.919306][T29639] device bridge_slave_1 entered promiscuous mode [ 3059.635856][T29639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3059.688623][T29639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3059.756479][T29639] team0: Port device team_slave_0 added [ 3059.782385][T29639] team0: Port device team_slave_1 added [ 3059.839617][T29639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3059.848782][T29639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3059.898666][T29639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3059.927064][T29639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3059.940636][T29639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3059.968713][T29639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3060.123226][ T7561] Bluetooth: hci0: command 0x0409 tx timeout [ 3060.150881][T29687] netlink: 'syz.2.18458': attribute type 4 has an invalid length. [ 3060.160992][T29687] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18458'. [ 3060.838257][T29639] device hsr_slave_0 entered promiscuous mode [ 3060.847688][T29639] device hsr_slave_1 entered promiscuous mode [ 3060.866283][T29639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3060.885487][T29639] Cannot create hsr debugfs directory [ 3062.203134][ T7561] Bluetooth: hci0: command 0x041b tx timeout [ 3062.301421][T29639] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3063.143807][T29718] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18470'. [ 3063.162153][T29720] netlink: 'syz.4.18471': attribute type 25 has an invalid length. [ 3063.256525][T29639] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3063.371253][T29639] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3063.472262][T29732] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18475'. [ 3063.497118][T29731] delete_channel: no stack [ 3063.518289][T29639] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3063.543568][T29736] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18477'. [ 3063.630968][T29736] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18477'. [ 3064.283093][ T7561] Bluetooth: hci0: command 0x040f tx timeout [ 3064.806660][T29756] device bridge_slave_1 left promiscuous mode [ 3064.833132][T29756] bridge0: port 2(bridge_slave_1) entered disabled state [ 3064.845286][T29756] device bridge_slave_0 left promiscuous mode [ 3064.870486][T29756] bridge0: port 1(bridge_slave_0) entered disabled state [ 3065.038685][T29762] netlink: 'syz.2.18485': attribute type 10 has an invalid length. [ 3065.136608][T29762] 8021q: adding VLAN 0 to HW filter on device team0 [ 3065.156405][T29762] bond0: (slave team0): Enslaving as an active interface with an up link [ 3065.238469][T29639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3065.254066][T29639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3065.313552][T29639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3065.322656][T29775] netlink: 'syz.3.18489': attribute type 25 has an invalid length. [ 3065.355020][T29639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3065.664708][T29789] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18501'. [ 3065.679832][T29788] delete_channel: no stack [ 3065.717253][T29639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3065.726123][T18292] device veth0_to_bridge left promiscuous mode [ 3065.732468][T18292] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 3065.791493][T18292] device hsr_slave_0 left promiscuous mode [ 3065.811341][T18292] device hsr_slave_1 left promiscuous mode [ 3065.829227][T18292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3065.843776][T18292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3065.851659][T18292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3065.861560][T18292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3065.882003][T18292] device bridge_slave_1 left promiscuous mode [ 3065.903103][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 3066.362899][T18400] Bluetooth: hci0: command 0x0419 tx timeout [ 3066.706994][T18292] device bridge_slave_0 left promiscuous mode [ 3066.722937][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 3066.763574][T18292] device veth1_macvtap left promiscuous mode [ 3066.776946][T18292] device veth0_macvtap left promiscuous mode [ 3066.792911][T18292] device veth1_vlan left promiscuous mode [ 3066.798768][T18292] device veth0_vlan left promiscuous mode [ 3067.869600][T18292] team0 (unregistering): Port device team_slave_1 removed [ 3067.917735][T18292] team0 (unregistering): Port device team_slave_0 removed [ 3068.455321][T29806] netlink: 'syz.3.18498': attribute type 39 has an invalid length. [ 3068.539377][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3068.563745][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3068.618543][T29639] 8021q: adding VLAN 0 to HW filter on device team0 [ 3068.679729][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3068.712006][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3068.743668][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 3068.750827][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3068.770422][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3068.809071][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3068.855716][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3068.901290][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 3068.908489][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3068.940075][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3068.960956][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3069.044990][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3069.055531][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3069.092453][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3069.101622][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3069.122168][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3069.172105][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3069.180973][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3069.211210][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3069.239299][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3069.265808][T29830] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18507'. [ 3069.297879][T29639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3069.555490][T29827] delete_channel: no stack [ 3069.749639][T29842] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18511'. [ 3069.777466][T29841] delete_channel: no stack [ 3069.804728][T29847] netlink: 'syz.4.18512': attribute type 4 has an invalid length. [ 3069.831573][T29847] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18512'. [ 3069.926967][T29639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3069.950842][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3069.963593][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3070.006282][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3070.025483][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3070.078626][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3070.089525][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3070.116676][T29639] device veth0_vlan entered promiscuous mode [ 3070.137728][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3070.147464][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3070.178991][T29639] device veth1_vlan entered promiscuous mode [ 3070.205356][T29857] device bridge_slave_1 left promiscuous mode [ 3070.223568][T29857] bridge0: port 2(bridge_slave_1) entered disabled state [ 3070.257567][T29857] device bridge_slave_0 left promiscuous mode [ 3070.266753][T29857] bridge0: port 1(bridge_slave_0) entered disabled state [ 3070.425513][T29868] FAULT_INJECTION: forcing a failure. [ 3070.425513][T29868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3070.448110][T29868] CPU: 1 PID: 29868 Comm: syz.0.18522 Not tainted syzkaller #0 [ 3070.455712][T29868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3070.465785][T29868] Call Trace: [ 3070.469096][T29868] [ 3070.472052][T29868] dump_stack_lvl+0x188/0x24e [ 3070.476764][T29868] ? show_regs_print_info+0x12/0x12 [ 3070.481993][T29868] ? load_image+0x400/0x400 [ 3070.486525][T29868] ? __lock_acquire+0x7d10/0x7d10 [ 3070.491591][T29868] should_fail_ex+0x399/0x4d0 [ 3070.496304][T29868] _copy_from_user+0x2c/0x170 [ 3070.501006][T29868] iovec_from_user+0x143/0x360 [ 3070.505822][T29868] __import_iovec+0x6d/0x500 [ 3070.510440][T29868] import_iovec+0x6f/0xa0 [ 3070.514799][T29868] ___sys_sendmsg+0x252/0x360 [ 3070.519502][T29868] ? __sys_sendmsg+0x290/0x290 [ 3070.524307][T29868] ? __lock_acquire+0x7d10/0x7d10 [ 3070.529403][T29868] __se_sys_sendmsg+0x1bb/0x2a0 [ 3070.534290][T29868] ? __x64_sys_sendmsg+0x80/0x80 [ 3070.539284][T29868] ? lockdep_hardirqs_on+0x94/0x140 [ 3070.544509][T29868] do_syscall_64+0x4c/0xa0 [ 3070.548950][T29868] ? clear_bhb_loop+0x60/0xb0 [ 3070.553650][T29868] ? clear_bhb_loop+0x60/0xb0 [ 3070.558343][T29868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3070.564278][T29868] RIP: 0033:0x7f1834b9aeb9 [ 3070.568709][T29868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3070.588339][T29868] RSP: 002b:00007f18359d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3070.596779][T29868] RAX: ffffffffffffffda RBX: 00007f1834e15fa0 RCX: 00007f1834b9aeb9 [ 3070.604776][T29868] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 3070.612797][T29868] RBP: 00007f18359d5090 R08: 0000000000000000 R09: 0000000000000000 [ 3070.620797][T29868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3070.628789][T29868] R13: 00007f1834e16038 R14: 00007f1834e15fa0 R15: 00007ffc44c6d098 [ 3070.636799][T29868] [ 3070.682128][T29866] netlink: 'syz.3.18520': attribute type 10 has an invalid length. [ 3070.702268][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3070.718457][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3070.750260][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3070.767338][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3070.795419][T29639] device veth0_macvtap entered promiscuous mode [ 3070.811321][T29882] netlink: 'syz.0.18525': attribute type 4 has an invalid length. [ 3070.826276][T29882] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18525'. [ 3070.862010][T29639] device veth1_macvtap entered promiscuous mode [ 3070.901221][T29639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3070.922096][T29639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3070.951212][T29639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3070.978252][T29639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3071.028974][T29639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3071.055154][T29639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3071.079015][T29639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3071.092818][T29639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3071.107492][T29639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3071.119363][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3071.138255][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3071.157971][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3071.173702][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3071.192917][T29893] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18529'. [ 3071.224357][T29639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3071.240790][T29639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3071.251900][T29639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3071.270140][T29639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3071.280367][T29639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3071.299715][T29639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3071.321476][T29639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3071.349024][T29639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3071.377086][T29639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3071.389507][T29893] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18529'. [ 3071.402082][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3071.426357][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3071.439015][T29639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3071.449142][T29639] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3071.458362][T29639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3071.467921][T29639] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3072.348198][ T4715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3072.372734][ T4715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3072.380657][T15855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3072.434517][T29908] netlink: 'syz.3.18534': attribute type 10 has an invalid length. [ 3072.437277][T15855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3072.460736][T15855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3072.486179][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3072.528063][T29910] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18535'. [ 3072.558870][T29914] netlink: 'syz.2.18537': attribute type 4 has an invalid length. [ 3072.584114][T29909] delete_channel: no stack [ 3072.602208][T29914] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18537'. [ 3072.718464][T29920] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18438'. [ 3072.909948][T29920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3073.056571][T29920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3073.191636][T29920] bond0 (unregistering): Released all slaves [ 3073.439114][T29933] device bridge_slave_1 left promiscuous mode [ 3073.454905][T29933] bridge0: port 2(bridge_slave_1) entered disabled state [ 3073.512622][T29933] device bridge_slave_0 left promiscuous mode [ 3073.526947][T29933] bridge0: port 1(bridge_slave_0) entered disabled state [ 3074.912184][T29960] netlink: 'syz.0.18551': attribute type 4 has an invalid length. [ 3074.926520][T29960] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18551'. [ 3075.213632][T29962] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18552'. [ 3075.237331][T29965] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.18554'. [ 3075.246485][T29961] delete_channel: no stack [ 3075.280475][T29965] netlink: 'syz.2.18554': attribute type 25 has an invalid length. [ 3075.300577][T29965] netlink: 'syz.2.18554': attribute type 1 has an invalid length. [ 3075.316063][T29965] bridge0: port 1(bridge_slave_0) entered learning state [ 3075.518259][T29971] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18556'. [ 3075.743627][T29971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3075.814502][T29971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3075.856804][T29971] bond0 (unregistering): (slave team0): Releasing backup interface [ 3075.876586][T29971] bond0 (unregistering): Released all slaves [ 3076.128350][T29991] netlink: 'syz.3.18564': attribute type 4 has an invalid length. [ 3076.161235][T29991] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18564'. [ 3076.188103][T29993] device bridge_slave_1 left promiscuous mode [ 3076.216556][T29993] bridge0: port 2(bridge_slave_1) entered disabled state [ 3076.265500][T29993] device bridge_slave_0 left promiscuous mode [ 3076.292399][T29993] bridge0: port 1(bridge_slave_0) entered disabled state [ 3076.566162][T30000] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18567'. [ 3076.578473][T30005] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18570'. [ 3076.604976][T29999] delete_channel: no stack [ 3076.628163][T30004] delete_channel: no stack [ 3076.881578][T30016] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.18574'. [ 3077.146233][T30030] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18580'. [ 3077.227874][T30032] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.18590'. [ 3077.266931][T30036] netlink: 'syz.1.18590': attribute type 25 has an invalid length. [ 3077.292181][T30036] netlink: 'syz.1.18590': attribute type 1 has an invalid length. [ 3077.316359][T30036] bridge0: port 1(bridge_slave_0) entered learning state [ 3077.434009][T30043] delete_channel: no stack [ 3077.693363][T30052] delete_channel: no stack [ 3078.583618][T30077] netlink: 'syz.2.18599': attribute type 4 has an invalid length. [ 3079.547542][T30083] delete_channel: no stack [ 3079.791476][T30094] FAULT_INJECTION: forcing a failure. [ 3079.791476][T30094] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.814344][T30094] CPU: 1 PID: 30094 Comm: syz.4.18605 Not tainted syzkaller #0 [ 3079.822042][T30094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3079.832641][T30094] Call Trace: [ 3079.835931][T30094] [ 3079.838876][T30094] dump_stack_lvl+0x188/0x24e [ 3079.843586][T30094] ? show_regs_print_info+0x12/0x12 [ 3079.848814][T30094] ? load_image+0x400/0x400 [ 3079.853337][T30094] ? __might_sleep+0xd0/0xd0 [ 3079.857940][T30094] ? __lock_acquire+0x7d10/0x7d10 [ 3079.862991][T30094] should_fail_ex+0x399/0x4d0 [ 3079.867697][T30094] should_failslab+0x5/0x20 [ 3079.872218][T30094] slab_pre_alloc_hook+0x59/0x310 [ 3079.877261][T30094] ? prepend_path+0xa68/0xc20 [ 3079.881951][T30094] ? tomoyo_encode+0x27e/0x540 [ 3079.886743][T30094] __kmem_cache_alloc_node+0x4f/0x260 [ 3079.892225][T30094] ? tomoyo_encode+0x27e/0x540 [ 3079.897013][T30094] __kmalloc+0xa0/0x240 [ 3079.901200][T30094] tomoyo_encode+0x27e/0x540 [ 3079.905826][T30094] tomoyo_realpath_from_path+0x58e/0x5d0 [ 3079.911501][T30094] ? tomoyo_path_number_perm+0x205/0x650 [ 3079.917158][T30094] tomoyo_path_number_perm+0x22f/0x650 [ 3079.922641][T30094] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3079.928116][T30094] ? ksys_write+0x1c0/0x250 [ 3079.932659][T30094] ? common_file_perm+0x171/0x1c0 [ 3079.937724][T30094] ? __fget_files+0x28/0x4b0 [ 3079.942399][T30094] ? __fget_files+0x28/0x4b0 [ 3079.947022][T30094] security_file_ioctl+0x6c/0xa0 [ 3079.951988][T30094] __se_sys_ioctl+0x48/0x170 [ 3079.956599][T30094] do_syscall_64+0x4c/0xa0 [ 3079.961032][T30094] ? clear_bhb_loop+0x60/0xb0 [ 3079.965819][T30094] ? clear_bhb_loop+0x60/0xb0 [ 3079.970539][T30094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3079.976451][T30094] RIP: 0033:0x7f095339aeb9 [ 3079.980876][T30094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3080.000498][T30094] RSP: 002b:00007f0954260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3080.008941][T30094] RAX: ffffffffffffffda RBX: 00007f0953615fa0 RCX: 00007f095339aeb9 [ 3080.016934][T30094] RDX: 00002000000013c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 3080.024926][T30094] RBP: 00007f0954260090 R08: 0000000000000000 R09: 0000000000000000 [ 3080.032916][T30094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3080.040907][T30094] R13: 00007f0953616038 R14: 00007f0953615fa0 R15: 00007fffff170b58 [ 3080.048918][T30094] [ 3080.067009][T30099] __nla_validate_parse: 7 callbacks suppressed [ 3080.067026][T30099] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18607'. [ 3080.155403][T30094] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3080.300621][T30105] netlink: 'syz.4.18609': attribute type 10 has an invalid length. [ 3081.575226][T30133] netlink: 'syz.3.18619': attribute type 4 has an invalid length. [ 3081.598633][T30133] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18619'. [ 3081.743209][T30142] device bridge_slave_1 left promiscuous mode [ 3081.780370][T30142] bridge0: port 2(bridge_slave_1) entered disabled state [ 3081.808454][T30142] device bridge_slave_0 left promiscuous mode [ 3081.828922][T30142] bridge0: port 1(bridge_slave_0) entered disabled state [ 3081.886606][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.893087][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.085371][T30137] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18620'. [ 3082.196466][T30148] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18624'. [ 3082.268871][T30147] delete_channel: no stack [ 3082.394173][T30150] FAULT_INJECTION: forcing a failure. [ 3082.394173][T30150] name failslab, interval 1, probability 0, space 0, times 0 [ 3082.420221][T30150] CPU: 1 PID: 30150 Comm: syz.1.18625 Not tainted syzkaller #0 [ 3082.427850][T30150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3082.437942][T30150] Call Trace: [ 3082.441251][T30150] [ 3082.444215][T30150] dump_stack_lvl+0x188/0x24e [ 3082.448939][T30150] ? asm_sysvec_call_function_single+0x16/0x20 [ 3082.455136][T30150] ? show_regs_print_info+0x12/0x12 [ 3082.460385][T30150] ? load_image+0x400/0x400 [ 3082.464990][T30150] should_fail_ex+0x399/0x4d0 [ 3082.469751][T30150] should_failslab+0x5/0x20 [ 3082.474300][T30150] slab_pre_alloc_hook+0x59/0x310 [ 3082.479379][T30150] ? dccp_feat_entry_new+0x169/0x3d0 [ 3082.484718][T30150] __kmem_cache_alloc_node+0x4f/0x260 [ 3082.490143][T30150] ? dccp_feat_entry_new+0x169/0x3d0 [ 3082.495475][T30150] kmalloc_trace+0x26/0xe0 [ 3082.499944][T30150] dccp_feat_entry_new+0x169/0x3d0 [ 3082.505121][T30150] __feat_register_sp+0x20b/0x410 [ 3082.510200][T30150] dccp_setsockopt_cscov+0x248/0x2e0 [ 3082.515550][T30150] dccp_setsockopt+0x608/0x840 [ 3082.520374][T30150] ? aa_af_perm+0x340/0x340 [ 3082.524933][T30150] ? dccp_ioctl+0x1d0/0x1d0 [ 3082.529479][T30150] ? aa_sock_opt_perm+0x74/0x100 [ 3082.534466][T30150] ? sock_common_setsockopt+0x32/0xb0 [ 3082.539883][T30150] ? sock_common_recvmsg+0x190/0x190 [ 3082.545218][T30150] __sys_setsockopt+0x2bf/0x3d0 [ 3082.550126][T30150] __x64_sys_setsockopt+0xb1/0xc0 [ 3082.555208][T30150] do_syscall_64+0x4c/0xa0 [ 3082.559660][T30150] ? clear_bhb_loop+0x60/0xb0 [ 3082.564373][T30150] ? clear_bhb_loop+0x60/0xb0 [ 3082.569099][T30150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3082.575032][T30150] RIP: 0033:0x7f46bff9aeb9 [ 3082.579493][T30150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3082.599140][T30150] RSP: 002b:00007f46c0f43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3082.607599][T30150] RAX: ffffffffffffffda RBX: 00007f46c0215fa0 RCX: 00007f46bff9aeb9 [ 3082.615612][T30150] RDX: 000000000000000a RSI: 000000000000010d RDI: 000000000000000e [ 3082.623627][T30150] RBP: 00007f46c0f43090 R08: 0000000000000004 R09: 0000000000000000 [ 3082.631640][T30150] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3082.639649][T30150] R13: 00007f46c0216038 R14: 00007f46c0215fa0 R15: 00007ffd8c05fd18 [ 3082.647715][T30150] [ 3082.878092][T30159] netlink: 'syz.3.18627': attribute type 10 has an invalid length. [ 3083.541005][T30176] netlink: 'syz.2.18634': attribute type 4 has an invalid length. [ 3083.572813][T30176] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18634'. [ 3083.666834][T30178] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18635'. [ 3083.740698][T30182] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18637'. [ 3083.762425][T30177] delete_channel: no stack [ 3083.763705][T30181] delete_channel: no stack [ 3084.255605][T30190] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.18640'. [ 3084.645465][T30203] netlink: 'syz.0.18644': attribute type 10 has an invalid length. [ 3087.737191][T30219] netlink: 'syz.0.18649': attribute type 4 has an invalid length. [ 3087.752917][T30219] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18649'. [ 3087.777401][T30217] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18650'. [ 3087.797366][T30216] delete_channel: no stack [ 3088.067337][T30227] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18654'. [ 3088.111124][T30226] delete_channel: no stack [ 3088.586777][T30241] netlink: 'syz.2.18659': attribute type 10 has an invalid length. [ 3088.820443][T30253] FAULT_INJECTION: forcing a failure. [ 3088.820443][T30253] name failslab, interval 1, probability 0, space 0, times 0 [ 3088.850522][T30253] CPU: 1 PID: 30253 Comm: syz.1.18663 Not tainted syzkaller #0 [ 3088.858123][T30253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3088.868198][T30253] Call Trace: [ 3088.871494][T30253] [ 3088.874451][T30253] dump_stack_lvl+0x188/0x24e [ 3088.879165][T30253] ? show_regs_print_info+0x12/0x12 [ 3088.884393][T30253] ? load_image+0x400/0x400 [ 3088.888928][T30253] ? __might_sleep+0xd0/0xd0 [ 3088.893542][T30253] ? __lock_acquire+0x7d10/0x7d10 [ 3088.898602][T30253] should_fail_ex+0x399/0x4d0 [ 3088.903316][T30253] should_failslab+0x5/0x20 [ 3088.907847][T30253] slab_pre_alloc_hook+0x59/0x310 [ 3088.912990][T30253] ? tipc_node_find+0xb0/0x480 [ 3088.917785][T30253] kmem_cache_alloc_node+0x5a/0x320 [ 3088.923005][T30253] ? __lock_acquire+0x7d10/0x7d10 [ 3088.928053][T30253] ? __alloc_skb+0xfc/0x7e0 [ 3088.932577][T30253] __alloc_skb+0xfc/0x7e0 [ 3088.936923][T30253] tipc_msg_build+0xc9/0xde0 [ 3088.941519][T30253] ? tipc_node_get_mtu+0x2a0/0x2a0 [ 3088.946633][T30253] ? tipc_nametbl_lookup_anycast+0x11a/0x1030 [ 3088.952702][T30253] __tipc_sendmsg+0x1933/0x2c90 [ 3088.957561][T30253] ? rht_lock+0x150/0x150 [ 3088.961882][T30253] ? verify_lock_unused+0x140/0x140 [ 3088.967084][T30253] ? __lock_acquire+0x7d10/0x7d10 [ 3088.972105][T30253] ? mark_lock+0x94/0x320 [ 3088.976440][T30253] ? migrate_enable+0x148/0x220 [ 3088.981284][T30253] ? trace_call_bpf+0xbf/0x6b0 [ 3088.986047][T30253] ? trace_call_bpf+0xbf/0x6b0 [ 3088.990806][T30253] ? trace_call_bpf+0x5d6/0x6b0 [ 3088.995648][T30253] ? trace_call_bpf+0xbf/0x6b0 [ 3089.000405][T30253] ? __lock_acquire+0x13cf/0x7d10 [ 3089.005443][T30253] ? trace_call_bpf+0xbf/0x6b0 [ 3089.010204][T30253] ? __lock_acquire+0x7d10/0x7d10 [ 3089.015231][T30253] ? trace_call_bpf+0x5d6/0x6b0 [ 3089.020086][T30253] ? trace_call_bpf+0xbf/0x6b0 [ 3089.024854][T30253] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3089.030832][T30253] ? wait_woken+0x1c0/0x1c0 [ 3089.035329][T30253] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 3089.041240][T30253] __tipc_sendstream+0x10bb/0x12f0 [ 3089.046368][T30253] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 3089.052192][T30253] ? mark_lock+0x94/0x320 [ 3089.056525][T30253] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3089.062523][T30253] ? lock_chain_count+0x20/0x20 [ 3089.067465][T30253] ? tsk_advance_rx_queue+0x390/0x390 [ 3089.072845][T30253] ? __local_bh_enable_ip+0x136/0x1c0 [ 3089.078206][T30253] ? _local_bh_enable+0xa0/0xa0 [ 3089.083143][T30253] tipc_send_packet+0x78/0x90 [ 3089.087810][T30253] ? tipc_sk_send_ack+0x580/0x580 [ 3089.092825][T30253] ____sys_sendmsg+0x5be/0x970 [ 3089.097589][T30253] ? __sys_sendmsg_sock+0x30/0x30 [ 3089.102607][T30253] ? __import_iovec+0x315/0x500 [ 3089.107461][T30253] ? import_iovec+0x6f/0xa0 [ 3089.111960][T30253] ___sys_sendmsg+0x2a2/0x360 [ 3089.116636][T30253] ? __sys_sendmsg+0x290/0x290 [ 3089.121415][T30253] ? trace_call_bpf+0xbf/0x6b0 [ 3089.126190][T30253] __se_sys_sendmsg+0x1bb/0x2a0 [ 3089.131041][T30253] ? __x64_sys_sendmsg+0x80/0x80 [ 3089.135989][T30253] ? lockdep_hardirqs_on+0x94/0x140 [ 3089.141194][T30253] do_syscall_64+0x4c/0xa0 [ 3089.145605][T30253] ? clear_bhb_loop+0x60/0xb0 [ 3089.150282][T30253] ? clear_bhb_loop+0x60/0xb0 [ 3089.154954][T30253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3089.160844][T30253] RIP: 0033:0x7f46bff9aeb9 [ 3089.165251][T30253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3089.184849][T30253] RSP: 002b:00007f46c0f43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3089.193259][T30253] RAX: ffffffffffffffda RBX: 00007f46c0215fa0 RCX: 00007f46bff9aeb9 [ 3089.201229][T30253] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 3089.209198][T30253] RBP: 00007f46c0f43090 R08: 0000000000000000 R09: 0000000000000000 [ 3089.217158][T30253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3089.225126][T30253] R13: 00007f46c0216038 R14: 00007f46c0215fa0 R15: 00007ffd8c05fd18 [ 3089.233127][T30253] [ 3089.303142][T30256] netlink: 'syz.4.18664': attribute type 10 has an invalid length. [ 3089.328448][T30256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18664'. [ 3089.347369][T30256] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3089.433437][T30263] netlink: 'syz.2.18665': attribute type 4 has an invalid length. [ 3089.510246][T30263] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18665'. [ 3089.564150][T30264] netlink: 'syz.1.18666': attribute type 10 has an invalid length. [ 3091.050382][T30294] netlink: 'syz.2.18675': attribute type 10 has an invalid length. [ 3091.149532][T30300] netlink: 'syz.4.18677': attribute type 10 has an invalid length. [ 3091.289701][T30307] netlink: 'syz.1.18679': attribute type 4 has an invalid length. [ 3091.316861][T30307] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18679'. [ 3093.066928][T30339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18691'. [ 3093.117619][T30339] tc_dump_action: action bad kind [ 3093.169174][T30339] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.18691'. [ 3093.602358][T30344] netlink: 'syz.3.18692': attribute type 10 has an invalid length. [ 3093.851679][T30348] netlink: 'syz.4.18693': attribute type 4 has an invalid length. [ 3093.863091][T30348] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18693'. [ 3093.975359][T30352] netlink: 'syz.1.18694': attribute type 10 has an invalid length. [ 3094.362378][T30360] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18699'. [ 3095.291333][T30383] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18706'. [ 3095.305518][T30382] delete_channel: no stack [ 3095.320742][T30385] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18709'. [ 3095.345890][T30384] delete_channel: no stack [ 3095.554368][T30393] netlink: 'syz.0.18711': attribute type 4 has an invalid length. [ 3095.563446][T30393] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18711'. [ 3095.666215][T30400] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18712'. [ 3096.822257][T30415] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18721'. [ 3096.874217][T30413] delete_channel: no stack [ 3096.955958][T30418] netlink: 'syz.1.18722': attribute type 10 has an invalid length. [ 3097.700107][T30437] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18727'. [ 3097.743231][T30439] netlink: 'syz.0.18738': attribute type 4 has an invalid length. [ 3098.335880][T30440] delete_channel: no stack [ 3098.587792][T30449] __nla_validate_parse: 2 callbacks suppressed [ 3098.587811][T30449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18732'. [ 3098.704132][T30449] tc_dump_action: action bad kind [ 3098.741073][T30449] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.18732'. [ 3099.322894][ T7561] Bluetooth: hci2: command 0x0406 tx timeout [ 3099.723303][T30465] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18736'. [ 3099.739401][T30471] netlink: 'syz.2.18740': attribute type 10 has an invalid length. [ 3099.759405][T30464] delete_channel: no stack [ 3101.965576][T30508] netlink: 'syz.3.18753': attribute type 4 has an invalid length. [ 3101.973646][T30508] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18753'. [ 3102.061771][T30511] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18755'. [ 3102.120589][T30510] delete_channel: no stack [ 3102.434389][T30530] netlink: 'syz.3.18764': attribute type 10 has an invalid length. [ 3103.829147][T30559] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18776'. [ 3103.864781][T30557] delete_channel: no stack [ 3103.937267][T30570] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18779'. [ 3104.903625][T30570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3104.926668][T30570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3104.964912][T30570] bond0 (unregistering): (slave team0): Releasing backup interface [ 3104.995221][T30570] bond0 (unregistering): Released all slaves [ 3105.141108][T30591] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18789'. [ 3105.306227][T30595] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18790'. [ 3105.334920][T30594] delete_channel: no stack [ 3106.801755][T30634] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18804'. [ 3107.435483][T30643] netlink: 'syz.1.18806': attribute type 10 has an invalid length. [ 3107.559436][T30647] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18808'. [ 3107.605376][T30646] delete_channel: no stack [ 3107.965385][T30677] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18816'. [ 3108.052328][T30681] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18818'. [ 3108.720471][T30671] delete_channel: no stack [ 3109.127038][T30694] netlink: 'syz.4.18824': attribute type 4 has an invalid length. [ 3109.150654][T30694] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18824'. [ 3110.577122][T30722] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18838'. [ 3110.599137][T30720] delete_channel: no stack [ 3110.667271][T30730] netlink: 'syz.3.18841': attribute type 4 has an invalid length. [ 3110.675648][T30730] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18841'. [ 3110.922506][T30737] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18844'. [ 3112.201371][T30759] netlink: 'syz.3.18854': attribute type 4 has an invalid length. [ 3112.326115][T30759] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18854'. [ 3113.752980][T30794] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18866'. [ 3116.588416][T30834] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18884'. [ 3116.628992][T30833] delete_channel: no stack [ 3116.672529][T30838] netlink: 'syz.3.18885': attribute type 4 has an invalid length. [ 3116.686852][T30838] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18885'. [ 3117.362824][T30854] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18892'. [ 3117.382285][T30853] delete_channel: no stack [ 3118.244458][T30865] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18898'. [ 3118.266785][T30863] delete_channel: no stack [ 3118.330320][T30871] netlink: 'syz.0.18899': attribute type 4 has an invalid length. [ 3118.347048][T30871] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18899'. [ 3118.569599][T30878] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18904'. [ 3119.046570][T30884] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18905'. [ 3119.073221][T30880] delete_channel: no stack [ 3119.802843][ T7561] Bluetooth: hci4: command 0x0406 tx timeout [ 3120.459063][T30918] netlink: 'syz.4.18917': attribute type 4 has an invalid length. [ 3120.476794][T30918] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18917'. [ 3120.496019][T30916] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18915'. [ 3120.519348][T30915] delete_channel: no stack [ 3120.567629][T30923] netlink: 'syz.0.18919': attribute type 3 has an invalid length. [ 3120.662309][T30925] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18920'. [ 3120.685697][T30924] delete_channel: no stack [ 3121.739492][T30948] netlink: 'syz.1.18928': attribute type 2 has an invalid length. [ 3121.761916][T30948] netlink: 'syz.1.18928': attribute type 1 has an invalid length. [ 3121.790578][T30948] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.18928'. [ 3121.841732][T30953] netlink: 'syz.2.18930': attribute type 4 has an invalid length. [ 3121.883001][T30953] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18930'. [ 3122.320614][T30968] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18937'. [ 3122.355426][T30967] delete_channel: no stack [ 3122.695252][T15855] tipc: Subscription rejected, illegal request [ 3122.917866][T30991] netlink: 10 bytes leftover after parsing attributes in process `syz.4.18945'. [ 3123.071719][T30995] netlink: 'syz.1.18947': attribute type 4 has an invalid length. [ 3123.105799][T30995] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18947'. [ 3123.511382][T31009] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18950'. [ 3123.563318][T31003] delete_channel: no stack [ 3123.803476][T31017] netlink: 'syz.2.18955': attribute type 16 has an invalid length. [ 3123.826460][T31017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18955'. [ 3124.061486][T31029] netlink: 'syz.0.18960': attribute type 10 has an invalid length. [ 3124.146757][T31034] netlink: 'syz.2.18961': attribute type 4 has an invalid length. [ 3124.179972][T31034] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18961'. [ 3125.541975][T31064] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18972'. [ 3125.560112][T31063] delete_channel: no stack [ 3125.702995][T31071] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18974'. [ 3125.777551][T31070] delete_channel: no stack [ 3125.857889][T31078] netlink: 'syz.3.18976': attribute type 4 has an invalid length. [ 3126.089348][T31083] netlink: 'syz.1.18977': attribute type 16 has an invalid length. [ 3126.509511][T31103] delete_channel: no stack [ 3126.539233][T31108] netlink: 'syz.2.18990': attribute type 4 has an invalid length. [ 3127.221850][T31130] __nla_validate_parse: 5 callbacks suppressed [ 3127.222034][T31130] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18998'. [ 3127.412069][T31139] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19010'. [ 3127.629622][T31151] netlink: 188 bytes leftover after parsing attributes in process `syz.4.19004'. [ 3127.654749][T31149] delete_channel: no stack [ 3127.670992][T31153] netlink: 188 bytes leftover after parsing attributes in process `syz.3.19003'. [ 3127.682297][T31150] netlink: 188 bytes leftover after parsing attributes in process `syz.0.19015'. [ 3127.686323][T31152] delete_channel: no stack [ 3127.708641][T31148] delete_channel: no stack [ 3129.037406][T31181] netlink: 'syz.2.19018': attribute type 10 has an invalid length. [ 3129.097643][T31182] netlink: 188 bytes leftover after parsing attributes in process `syz.1.19020'. [ 3129.128963][T31185] netlink: 188 bytes leftover after parsing attributes in process `syz.4.19021'. [ 3129.142165][T31180] delete_channel: no stack [ 3129.155865][T31183] delete_channel: no stack [ 3129.222569][T31190] netlink: 188 bytes leftover after parsing attributes in process `syz.3.19023'. [ 3129.251123][T31189] delete_channel: no stack [ 3129.432598][T31199] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19027'. [ 3130.472305][T31210] netlink: 'syz.0.19031': attribute type 16 has an invalid length. [ 3130.493361][T31210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19031'. [ 3130.652971][T31220] delete_channel: no stack [ 3130.796073][T31227] delete_channel: no stack [ 3130.919476][T31233] delete_channel: no stack [ 3131.959004][T31248] FAULT_INJECTION: forcing a failure. [ 3131.959004][T31248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3131.975764][T31248] CPU: 1 PID: 31248 Comm: syz.2.19044 Not tainted syzkaller #0 [ 3131.980547][T31250] netlink: 'syz.3.19046': attribute type 4 has an invalid length. [ 3131.983520][T31248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3131.983541][T31248] Call Trace: [ 3131.983549][T31248] [ 3131.983556][T31248] dump_stack_lvl+0x188/0x24e [ 3131.983586][T31248] ? show_regs_print_info+0x12/0x12 [ 3131.983606][T31248] ? load_image+0x400/0x400 [ 3131.983626][T31248] ? __lock_acquire+0x7d10/0x7d10 [ 3131.983653][T31248] should_fail_ex+0x399/0x4d0 [ 3131.983681][T31248] _copy_from_user+0x2c/0x170 [ 3131.983704][T31248] __sys_bpf+0x2ea/0x780 [ 3131.983728][T31248] ? bpf_link_show_fdinfo+0x380/0x380 [ 3131.983758][T31248] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3131.983790][T31248] __x64_sys_bpf+0x78/0x90 [ 3131.983812][T31248] do_syscall_64+0x4c/0xa0 [ 3131.983832][T31248] ? clear_bhb_loop+0x60/0xb0 [ 3131.983850][T31248] ? clear_bhb_loop+0x60/0xb0 [ 3131.983869][T31248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3131.983887][T31248] RIP: 0033:0x7f2023b9aeb9 [ 3131.983905][T31248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3131.983931][T31248] RSP: 002b:00007f2024ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3132.108964][T31248] RAX: ffffffffffffffda RBX: 00007f2023e15fa0 RCX: 00007f2023b9aeb9 [ 3132.116960][T31248] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 3132.124966][T31248] RBP: 00007f2024ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 3132.132952][T31248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3132.140926][T31248] R13: 00007f2023e16038 R14: 00007f2023e15fa0 R15: 00007ffd1d9afe28 [ 3132.148914][T31248] [ 3132.325454][T31261] __nla_validate_parse: 5 callbacks suppressed [ 3132.325474][T31261] netlink: 188 bytes leftover after parsing attributes in process `syz.3.19052'. [ 3132.369906][T31260] delete_channel: no stack [ 3132.464172][T31268] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19053'. [ 3134.078443][T31291] netlink: 'syz.4.19062': attribute type 4 has an invalid length. [ 3134.093838][T31291] netlink: 140 bytes leftover after parsing attributes in process `syz.4.19062'. [ 3134.570706][T31309] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19068'. [ 3134.732057][T31315] netlink: 188 bytes leftover after parsing attributes in process `syz.3.19071'. [ 3134.779204][T31313] delete_channel: no stack [ 3134.805320][T31321] FAULT_INJECTION: forcing a failure. [ 3134.805320][T31321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3134.832839][T31321] CPU: 1 PID: 31321 Comm: syz.4.19072 Not tainted syzkaller #0 [ 3134.840434][T31321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3134.850484][T31321] Call Trace: [ 3134.853764][T31321] [ 3134.856701][T31321] dump_stack_lvl+0x188/0x24e [ 3134.861380][T31321] ? show_regs_print_info+0x12/0x12 [ 3134.866601][T31321] ? load_image+0x400/0x400 [ 3134.871103][T31321] ? __lock_acquire+0x7d10/0x7d10 [ 3134.876136][T31321] should_fail_ex+0x399/0x4d0 [ 3134.880839][T31321] _copy_to_user+0x2c/0x130 [ 3134.885351][T31321] bpf_prog_test_run_syscall+0x332/0x4a0 [ 3134.891005][T31321] ? sock_gen_cookie+0x60/0x60 [ 3134.895764][T31321] ? sock_gen_cookie+0x60/0x60 [ 3134.900522][T31321] bpf_prog_test_run+0x31e/0x390 [ 3134.905472][T31321] __sys_bpf+0x62b/0x780 [ 3134.909716][T31321] ? bpf_link_show_fdinfo+0x380/0x380 [ 3134.915098][T31321] ? lock_chain_count+0x20/0x20 [ 3134.919951][T31321] __x64_sys_bpf+0x78/0x90 [ 3134.924373][T31321] do_syscall_64+0x4c/0xa0 [ 3134.928797][T31321] ? clear_bhb_loop+0x60/0xb0 [ 3134.933465][T31321] ? clear_bhb_loop+0x60/0xb0 [ 3134.938135][T31321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3134.944019][T31321] RIP: 0033:0x7f095339aeb9 [ 3134.948427][T31321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3134.968288][T31321] RSP: 002b:00007f0954260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3134.976693][T31321] RAX: ffffffffffffffda RBX: 00007f0953615fa0 RCX: 00007f095339aeb9 [ 3134.984660][T31321] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 3134.992626][T31321] RBP: 00007f0954260090 R08: 0000000000000000 R09: 0000000000000000 [ 3135.000591][T31321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3135.008552][T31321] R13: 00007f0953616038 R14: 00007f0953615fa0 R15: 00007fffff170b58 [ 3135.016552][T31321] [ 3135.572667][T31328] netlink: 'syz.3.19075': attribute type 4 has an invalid length. [ 3135.582875][T31328] netlink: 140 bytes leftover after parsing attributes in process `syz.3.19075'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.