last executing test programs: 5m57.349158079s ago: executing program 3 (id=4861): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b40)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294682a863e792c9932ef30201ce11d93738e74851a3e1fe94c9fdeae7f0d17b0900095a025f0c9e6a7715b8eb54d136d1153ba90ef88d951", 0x65}], 0x1}, 0x0) 5m55.276755119s ago: executing program 3 (id=4866): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="61127d000000000061138c0000000000bf2000000000000016000700071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070300000fff0700670200000c000000360600000ee600f0bf050000000000000f250000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc44}, 0x48) r0 = socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000003001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) 5m51.689763086s ago: executing program 3 (id=4871): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x300, 0x808e}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x98cd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x24, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x24, 0x0, 0x25) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 5m49.019577491s ago: executing program 3 (id=4878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m48.790028777s ago: executing program 3 (id=4880): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)="a8eea696b875d68bebcb5e8c178bd285fa38eed15ca583", 0x17}, {&(0x7f0000000300)="6b75e77a2a023e716e806b6f71192788b1d6ee501af7fd166791089de7a76e568069337ae2bca54f752defa8ebf2bdaf4a34a5da1ad32783450e0672d0bb7565e25ad42cae98f7f4c3592f4ad0337ecd47bc104e2495777b988f06594899a98366a7e43af238fe4557c783aa049a9ffb05f9df3a6a8589b75b9c5dd603cfeb6400e536c1b36e4f5306999753f8c058f0d31257fe565196603c92b984201e1c4b2fc6ee9930c9a79fe06ea34d38eed7707b533a245aa6fbfc4956e53a4595eaa21a5f6475e272f2a93db013b072be5fd7e506c4228991f32cd196ce393fe5940cc4a69fa8f48304370c3f", 0xea}], 0x2, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}], 0x20, 0x4000000}, 0x90) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x2138a100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) 5m33.192255807s ago: executing program 32 (id=4880): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)="a8eea696b875d68bebcb5e8c178bd285fa38eed15ca583", 0x17}, {&(0x7f0000000300)="6b75e77a2a023e716e806b6f71192788b1d6ee501af7fd166791089de7a76e568069337ae2bca54f752defa8ebf2bdaf4a34a5da1ad32783450e0672d0bb7565e25ad42cae98f7f4c3592f4ad0337ecd47bc104e2495777b988f06594899a98366a7e43af238fe4557c783aa049a9ffb05f9df3a6a8589b75b9c5dd603cfeb6400e536c1b36e4f5306999753f8c058f0d31257fe565196603c92b984201e1c4b2fc6ee9930c9a79fe06ea34d38eed7707b533a245aa6fbfc4956e53a4595eaa21a5f6475e272f2a93db013b072be5fd7e506c4228991f32cd196ce393fe5940cc4a69fa8f48304370c3f", 0xea}], 0x2, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}], 0x20, 0x4000000}, 0x90) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x2138a100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) 3.112731884s ago: executing program 1 (id=6638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8, 0xc, 0x80000000, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0xfffffdc8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180001000000009f000000000000000000181100ffab11540862bdf34a6e84e35ea5ae08b1301c64c18c1fb7a008d7a59a0bae859af847f994b2aec66d390e", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10100) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x10, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x4e, 0xfc, 0x2, 0x0, 0x0, 0x800000000000210b, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x4010, 0x30, 0x10000, 0x1, 0x3, 0x90000000, 0x6, 0x0, 0x80000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x24, 0x0, 0x25) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3.088877475s ago: executing program 2 (id=6639): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x8) sendmsg$inet(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="165b8943d3cc0d1f8abf245b3e9b7fa7b0100314bd7efa6cb8c6ef2f998762ae", 0x20}], 0x1}, 0x4000084) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd03d, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 3.075061796s ago: executing program 0 (id=6640): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000, 0x4}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r5, 0x1c) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.039340876s ago: executing program 4 (id=6641): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x82, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x9, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.86886267s ago: executing program 2 (id=6642): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xb, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.658074356s ago: executing program 4 (id=6643): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffff1f}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.544916949s ago: executing program 1 (id=6644): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 2.544631309s ago: executing program 4 (id=6645): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x1000}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)=0x604) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x52}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.318587974s ago: executing program 4 (id=6646): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a003000005"], 0x48) socket$kcm(0xa, 0x3, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x18, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000008000000850000009500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095", @ANYRES8=r0, @ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x29, 0x7, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r4, 0x58, &(0x7f0000000700)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x6, [@fwd={0xf}, @typedef={0xb}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x33, 0x4}, @enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x2, 0x1, 0xc}]}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x4}}]}, {0x0, [0x30, 0x30, 0x61, 0x61]}}, &(0x7f0000000880)=""/11, 0xb2, 0xb, 0x0, 0xfffffab8, 0x10000}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000800007910000000000000c303e0ff0000000095"], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0xfffffffffffffe99}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0080e2ffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r11}, &(0x7f0000000a00), &(0x7f0000000400)=r10}, 0x20) 2.013820302s ago: executing program 1 (id=6647): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) 1.977155492s ago: executing program 0 (id=6648): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x8020008, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff4, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}, {0x95, 0x0, 0x0, 0xc603}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) 1.772839487s ago: executing program 1 (id=6649): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x18, 0x800, 0x3, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0xfffffffffffffc73, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r6 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0xfffe}, r6, 0xffffffffffffffff, r0, 0x0) 1.66218284s ago: executing program 2 (id=6650): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x8) sendmsg$inet(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="165b8943d3cc0d1f8abf245b3e9b7fa7b0100314bd7efa6cb8c6ef2f998762ae", 0x20}], 0x1}, 0x4000084) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd03d, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 1.556546733s ago: executing program 0 (id=6651): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x82, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x9, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.400583317s ago: executing program 4 (id=6652): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf900}, 0x94) 1.351847237s ago: executing program 2 (id=6653): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) (async) socket$kcm(0xa, 0x1, 0x106) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) (async) socket$kcm(0x21, 0x2, 0x2) (async) setsockopt$sock_attach_bpf(r2, 0x110, 0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 977.371176ms ago: executing program 0 (id=6654): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x1000}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)=0x604) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x52}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 886.624749ms ago: executing program 1 (id=6655): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 886.226509ms ago: executing program 4 (id=6656): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000, 0x4}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r5, 0x1c) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 668.318494ms ago: executing program 2 (id=6657): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) 662.561534ms ago: executing program 0 (id=6658): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x86}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x100b6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x4, &(0x7f0000000000), 0x18) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 512.640798ms ago: executing program 2 (id=6659): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000130000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000020038ea9c198ec5be0ed5f8131f000000000761cbdd84b4a7db88048000"/51], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000d18120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="17", 0x1}], 0x1}, 0xc000) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 476.325939ms ago: executing program 1 (id=6660): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81200, 0x0) (rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) (rerun: 64) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x7, 0xffeff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) (async) ioctl$TUNGETVNETLE(r5, 0x40107446, &(0x7f0000000180)) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r7, &(0x7f0000000280), 0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r4, @ANYRES8=r4], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x35, 0x1, 0x3}, {0x4d, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x4}, {}, {0x6}]}) 0s ago: executing program 0 (id=6661): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x8) sendmsg$inet(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="165b8943d3cc0d1f8abf245b3e9b7fa7b0100314bd7efa6cb8c6ef2f998762ae", 0x20}], 0x1}, 0x4000084) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd03d, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) kernel console output (not intermixed with test programs): king state [ 930.969812][ T7946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.054219][T16874] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.061759][T16874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.122654][ T5781] Bluetooth: hci4: command tx timeout [ 931.220939][T20402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 931.241947][T20402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 932.242412][T20595] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4972'. [ 932.358067][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.366086][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.414515][T20598] netlink: 'syz.2.4973': attribute type 21 has an invalid length. [ 932.551099][T20599] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4972'. [ 932.573274][T20595] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4972'. [ 932.723784][T20602] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4972'. [ 932.799962][T20402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.816293][T20606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4974'. [ 932.839481][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.863059][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.898854][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.932652][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.995405][ T9563] veth1_vlan: left promiscuous mode [ 933.001080][ T9563] veth0_vlan: left promiscuous mode [ 933.492992][T20619] netlink: 'syz.2.4977': attribute type 29 has an invalid length. [ 934.137291][ T9563] team0 (unregistering): Port device team_slave_1 removed [ 934.206425][ T9563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.275488][ T9563] bond0 (unregistering): (slave 30): Releasing backup interface [ 934.343869][ T9563] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 934.709387][ T9563] bond0 (unregistering): Released all slaves [ 934.760389][T20605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.762125][T20619] netlink: 'syz.2.4977': attribute type 29 has an invalid length. [ 935.063357][T20638] netlink: 'syz.1.4978': attribute type 3 has an invalid length. [ 935.094305][T20638] netlink: 'syz.1.4978': attribute type 1 has an invalid length. [ 935.169236][T20638] netlink: 'syz.1.4978': attribute type 2 has an invalid length. [ 935.475134][T20402] veth0_vlan: entered promiscuous mode [ 935.539022][T20657] netlink: 'syz.1.4983': attribute type 3 has an invalid length. [ 935.563212][T20657] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4983'. [ 935.610917][T20402] veth1_vlan: entered promiscuous mode [ 935.654812][T20659] netlink: 'syz.2.4984': attribute type 21 has an invalid length. [ 935.934289][T20402] veth0_macvtap: entered promiscuous mode [ 935.960739][T20402] veth1_macvtap: entered promiscuous mode [ 936.015758][T20402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.049579][T20402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.069237][T20402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.095304][T20402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.118566][T20402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.156540][T20402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.193770][T20402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.221688][T20402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.242160][T20402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.263574][T20402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.284582][T20402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.307442][T20402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.327051][T20402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.346150][T20402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.664668][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.703437][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.785589][T20698] netlink: 62903 bytes leftover after parsing attributes in process `syz.1.4991'. [ 936.834886][T20698] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4991'. [ 936.975336][T20700] netlink: 'syz.0.4993': attribute type 29 has an invalid length. [ 937.091069][ T9563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.118070][ T9563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.217107][T20700] netlink: 'syz.0.4993': attribute type 29 has an invalid length. [ 937.667658][T20702] syzkaller0: entered promiscuous mode [ 937.700119][T20702] syzkaller0: entered allmulticast mode [ 938.065969][T20722] netlink: 'syz.4.4999': attribute type 21 has an invalid length. [ 938.092680][T20722] IPv6: NLM_F_CREATE should be specified when creating new route [ 938.852874][T19963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 938.866887][T19963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 938.877409][T19963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 938.899240][T19963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 938.909724][T19963] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 938.921335][T19963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 940.964594][T19963] Bluetooth: hci0: command tx timeout [ 942.017739][T16873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.345853][T16873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.387094][T20773] netlink: 'syz.4.5009': attribute type 21 has an invalid length. [ 942.718952][T16873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.894241][T16873] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.050481][T19963] Bluetooth: hci0: command tx timeout [ 943.149365][T20740] chnl_net:caif_netlink_parms(): no params data found [ 943.767584][T20740] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.780236][T20740] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.809857][T20740] bridge_slave_0: entered allmulticast mode [ 943.818448][T20740] bridge_slave_0: entered promiscuous mode [ 943.836361][T20808] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5015'. [ 943.850364][T16873] tipc: Left network mode [ 943.889570][T20808] netlink: 22808 bytes leftover after parsing attributes in process `syz.0.5015'. [ 943.955637][T20740] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.963433][T20740] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.970997][T20740] bridge_slave_1: entered allmulticast mode [ 943.978888][T20740] bridge_slave_1: entered promiscuous mode [ 944.110091][T20788] netlink: 'syz.1.5012': attribute type 10 has an invalid length. [ 944.286109][T20788] team0: Device ipvlan1 failed to register rx_handler [ 945.125112][T19963] Bluetooth: hci0: command tx timeout [ 945.167828][T20740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.179353][T20816] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5019'. [ 945.197442][T20820] netlink: 'syz.1.5021': attribute type 21 has an invalid length. [ 945.221926][T20820] IPv6: NLM_F_CREATE should be specified when creating new route [ 945.334728][T20824] netlink: 62903 bytes leftover after parsing attributes in process `syz.0.5019'. [ 945.385311][T20740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.642222][T20816] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 945.735780][T20740] team0: Port device team_slave_0 added [ 945.909585][T20740] team0: Port device team_slave_1 added [ 946.104340][T20847] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5027'. [ 946.156953][T20847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 946.199464][T20850] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5027'. [ 946.323729][T20740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.351001][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.428168][T20740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.520263][T20740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.549868][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.610275][T20740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.792181][T20868] netlink: 'syz.0.5032': attribute type 21 has an invalid length. [ 946.884603][T20869] netlink: 'syz.4.5029': attribute type 10 has an invalid length. [ 946.930210][T20869] team0: Device ipvlan1 failed to register rx_handler [ 947.131497][T20740] hsr_slave_0: entered promiscuous mode [ 947.138832][T20740] hsr_slave_1: entered promiscuous mode [ 947.156696][T20740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.177552][T20740] Cannot create hsr debugfs directory [ 947.201732][T19963] Bluetooth: hci0: command tx timeout [ 947.761413][T20887] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5035'. [ 947.862573][T20893] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5037'. [ 948.410609][T20888] veth1_macvtap: left promiscuous mode [ 948.418672][T20888] macsec0: entered promiscuous mode [ 948.439558][T20888] macsec0: entered allmulticast mode [ 948.542714][T20886] netlink: 62903 bytes leftover after parsing attributes in process `syz.4.5035'. [ 948.603528][T20893] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5037'. [ 948.745008][T20887] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 950.172786][T20920] netlink: 'syz.1.5044': attribute type 10 has an invalid length. [ 950.785861][T20924] netlink: 'syz.0.5043': attribute type 10 has an invalid length. [ 950.916812][T20924] team0: Device ipvlan1 failed to register rx_handler [ 951.369490][T20740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 951.399613][T20740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 951.432918][T20740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 951.571728][T20740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 951.633155][T20950] veth1_macvtap: left promiscuous mode [ 951.639009][T20950] macsec0: entered promiscuous mode [ 951.691247][T20950] macsec0: entered allmulticast mode [ 952.347934][T16873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.355713][T16873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.364859][T16873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.372784][T16873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.381408][T16873] bridge_slave_0: left promiscuous mode [ 952.387900][T16873] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.409036][T16873] veth1_macvtap: left promiscuous mode [ 952.414897][T16873] veth0_macvtap: left promiscuous mode [ 953.218033][T16873] team0 (unregistering): Port device team_slave_1 removed [ 953.290792][T16873] team0 (unregistering): Port device team_slave_0 removed [ 953.355294][T16873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.416355][T16873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.483692][T16873] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 953.888569][T16873] bond0 (unregistering): Released all slaves [ 954.016030][T20973] netlink: 'syz.0.5055': attribute type 10 has an invalid length. [ 954.086013][T20740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.200052][T20740] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.233197][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.240460][ T7946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.295606][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.302898][T16877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.710449][T20740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.787655][T20740] veth0_vlan: entered promiscuous mode [ 954.808769][T20740] veth1_vlan: entered promiscuous mode [ 954.868402][T20740] veth0_macvtap: entered promiscuous mode [ 954.885103][T20740] veth1_macvtap: entered promiscuous mode [ 954.914231][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.928743][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.940193][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.951467][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.964529][T20740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.995286][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.008482][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.021408][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.038180][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.064704][T20740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.089136][T20740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.098975][T20740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.108125][T20740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.117941][T20740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.243339][T16869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.251439][T16869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.309908][T16869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.318590][T16869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.844603][T21011] netlink: 'syz.4.5064': attribute type 10 has an invalid length. [ 955.990790][T21011] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.101053][T21011] bridge_slave_1: left allmulticast mode [ 956.122518][T21011] bridge_slave_1: left promiscuous mode [ 956.130120][T21011] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.368142][T21011] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 956.500467][T21024] netlink: 'syz.1.5057': attribute type 21 has an invalid length. [ 956.636542][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 956.661791][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 956.672404][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 956.680884][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 956.691268][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 956.699195][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 956.729563][T21016] netlink: 'syz.2.5056': attribute type 10 has an invalid length. [ 956.798291][T21016] team0: Device ipvlan1 failed to register rx_handler [ 957.737249][T21034] chnl_net:caif_netlink_parms(): no params data found [ 957.939841][T21034] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.957464][T21034] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.965397][T21034] bridge_slave_0: entered allmulticast mode [ 957.973328][T21034] bridge_slave_0: entered promiscuous mode [ 957.983516][T21034] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.990904][T21034] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.998378][T21034] bridge_slave_1: entered allmulticast mode [ 958.007045][T21034] bridge_slave_1: entered promiscuous mode [ 958.113326][T21070] netlink: 'syz.1.5070': attribute type 21 has an invalid length. [ 958.240906][T21034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.276911][T21034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.388411][T21034] team0: Port device team_slave_0 added [ 958.433633][T21034] team0: Port device team_slave_1 added [ 958.507156][T21034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.522519][T21034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.596200][T21034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.652120][T21034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.728478][T21034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.802742][T19963] Bluetooth: hci1: command tx timeout [ 958.907531][T21034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.047687][T21034] hsr_slave_0: entered promiscuous mode [ 959.083015][T21034] hsr_slave_1: entered promiscuous mode [ 959.100391][T21034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.118724][T21034] Cannot create hsr debugfs directory [ 959.143317][T21093] netlink: 'syz.1.5081': attribute type 21 has an invalid length. [ 960.089351][T21110] netlink: 'syz.1.5077': attribute type 12 has an invalid length. [ 960.106076][T21110] __nla_validate_parse: 1 callbacks suppressed [ 960.106099][T21110] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5077'. [ 960.320272][T21034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.560026][T21034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.808639][T21034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.825337][T21131] netlink: 'syz.1.5083': attribute type 9 has an invalid length. [ 960.855744][T21131] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5083'. [ 960.866453][T21130] netlink: 'syz.4.5084': attribute type 10 has an invalid length. [ 960.885007][T19963] Bluetooth: hci1: command tx timeout [ 961.002557][T21130] team0: Device hsr_slave_0 failed to register rx_handler [ 961.119979][T21133] netlink: 'syz.2.5085': attribute type 21 has an invalid length. [ 961.130622][T21133] IPv6: NLM_F_CREATE should be specified when creating new route [ 961.337924][T21034] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.579932][T21034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 961.607633][T21034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 961.628114][T21034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 961.650650][T21034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 961.936211][T21034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.983817][T21034] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.998203][ T9579] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.005933][ T9579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.053054][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.061204][T16877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.094135][T21153] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5092'. [ 962.122966][T21153] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5092'. [ 962.134611][T21153] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5092'. [ 962.166938][T21153] bond0: (slave bond_slave_0): Releasing backup interface [ 962.176714][T21159] sctp: [Deprecated]: syz.4.5092 (pid 21159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 962.176714][T21159] Use struct sctp_sack_info instead [ 962.221456][T21153] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 962.926493][T21178] netlink: 'syz.1.5098': attribute type 21 has an invalid length. [ 962.964561][T19963] Bluetooth: hci1: command tx timeout [ 963.155747][T21034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.317159][T21034] veth0_vlan: entered promiscuous mode [ 963.394664][T21034] veth1_vlan: entered promiscuous mode [ 963.515797][T21034] veth0_macvtap: entered promiscuous mode [ 963.590837][T21034] veth1_macvtap: entered promiscuous mode [ 963.738140][T21034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.777513][T21034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.801810][T21034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.812670][T21034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.823195][T21034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.833865][T21034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.847686][T21034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.881528][T21034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.906915][T21034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.941719][T21034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.970984][T21034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.995110][T21034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.017207][T21034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.049342][T21034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.077779][T21034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.096891][T21034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.151736][T21034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.192728][T21034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.314999][T21212] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5107'. [ 964.357235][T21212] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5107'. [ 964.394198][T21212] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5107'. [ 964.658817][ T9563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.698230][ T9563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.797589][ T9563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.840508][ T9563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.848690][T21231] netlink: 'syz.2.5111': attribute type 21 has an invalid length. [ 965.042420][T19963] Bluetooth: hci1: command tx timeout [ 965.154151][T21243] netlink: 'syz.4.5114': attribute type 3 has an invalid length. [ 965.189371][T21243] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5114'. [ 965.406294][T21251] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.5065'. [ 965.444557][T21249] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.5065'. [ 966.453660][T21279] netlink: 'syz.1.5120': attribute type 9 has an invalid length. [ 966.481960][T21279] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5120'. [ 966.847884][T21293] netlink: 'syz.0.5126': attribute type 21 has an invalid length. [ 966.914500][T21293] IPv6: NLM_F_CREATE should be specified when creating new route [ 967.123226][T21301] netlink: 'syz.2.5128': attribute type 33 has an invalid length. [ 967.131357][T21301] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5128'. [ 967.211272][T21304] wlan0: mtu greater than device maximum [ 967.332985][T21307] netlink: 'syz.4.5130': attribute type 29 has an invalid length. [ 967.372162][T21307] netlink: 'syz.4.5130': attribute type 29 has an invalid length. [ 967.433910][T21312] netlink: 'syz.1.5131': attribute type 3 has an invalid length. [ 967.453738][T21312] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5131'. [ 968.059243][T21307] syzkaller0: entered promiscuous mode [ 968.068963][T21307] syzkaller0: entered allmulticast mode [ 968.244975][T21328] netlink: 'syz.1.5133': attribute type 3 has an invalid length. [ 968.273181][T21328] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5133'. [ 971.437099][T21334] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 971.447288][T21345] netlink: 'syz.2.5137': attribute type 10 has an invalid length. [ 971.461750][T21345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5137'. [ 971.495414][T21345] batman_adv: batadv0: Adding interface: veth0_vlan [ 971.512466][T21345] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.539274][T21345] batman_adv: batadv0: Interface activated: veth0_vlan [ 972.095336][T21365] netlink: 'syz.0.5143': attribute type 3 has an invalid length. [ 972.199283][T21365] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5143'. [ 972.487563][T21381] netlink: 'syz.4.5146': attribute type 10 has an invalid length. [ 972.519046][T21381] netlink: 'syz.4.5146': attribute type 4 has an invalid length. [ 972.545491][T21381] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5146'. [ 972.587899][T21381] : renamed from team0 (while UP) [ 972.633480][T21381] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 973.895131][T21412] netlink: 'syz.1.5156': attribute type 12 has an invalid length. [ 973.941754][T21412] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.5156'. [ 975.197693][T21439] netlink: 'syz.2.5162': attribute type 39 has an invalid length. [ 975.438327][T21441] : renamed from bond_slave_0 (while UP) [ 975.710518][T21441] netlink: 209680 bytes leftover after parsing attributes in process `syz.2.5162'. [ 976.160213][T21455] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.5164'. [ 976.418307][T21468] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.5169'. [ 976.458838][T21468] netlink: zone id is out of range [ 976.490711][T21468] netlink: zone id is out of range [ 976.504433][T21468] netlink: zone id is out of range [ 976.515272][T21468] netlink: zone id is out of range [ 976.532329][T21468] netlink: zone id is out of range [ 976.538371][T21468] netlink: zone id is out of range [ 976.547356][T21468] netlink: zone id is out of range [ 976.557269][T21468] netlink: zone id is out of range [ 976.568242][T21468] netlink: zone id is out of range [ 977.082409][T21485] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5173'. [ 977.119949][T21489] netlink: 'syz.1.5172': attribute type 9 has an invalid length. [ 977.141777][T21489] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5172'. [ 977.181024][T21488] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5174'. [ 977.272996][T21492] netlink: 'syz.4.5174': attribute type 10 has an invalid length. [ 977.381373][T21492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.416356][T21492] : Port device bond0 added [ 978.714746][T21513] netlink: 'syz.2.5181': attribute type 21 has an invalid length. [ 978.786045][T21513] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5181'. [ 979.178536][T21501] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.5177'. [ 979.416590][T21522] netlink: 'syz.2.5185': attribute type 3 has an invalid length. [ 979.425907][T21522] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5185'. [ 979.636623][T21534] netlink: 'syz.1.5186': attribute type 10 has an invalid length. [ 982.308868][T21574] syzkaller0: entered promiscuous mode [ 982.315401][T21574] syzkaller0: entered allmulticast mode [ 987.247063][T21595] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5207'. [ 987.258662][T21595] bond0: (slave 30): Releasing backup interface [ 987.269300][T21595] net_ratelimit: 24 callbacks suppressed [ 987.269319][T21595] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 987.305980][T21600] netlink: 'syz.2.5207': attribute type 10 has an invalid length. [ 987.350795][T21600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.383741][T21600] team0: Port device bond0 added [ 987.869042][T21623] netlink: 'syz.4.5215': attribute type 10 has an invalid length. [ 988.846816][T21645] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.5220'. [ 989.003044][T21645] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.5220'. [ 991.902903][T21686] netlink: 763 bytes leftover after parsing attributes in process `syz.4.5234'. [ 993.116458][T21685] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5233'. [ 993.202633][T21685] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5233'. [ 993.253903][T21682] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5233'. [ 993.326243][T21687] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5233'. [ 993.783821][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.790524][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.463083][T21708] netlink: 'syz.1.5238': attribute type 10 has an invalid length. [ 996.183577][T21727] netlink: 'syz.1.5245': attribute type 3 has an invalid length. [ 996.212130][T21727] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5245'. [ 998.664433][T21752] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5254'. [ 999.146901][T21759] syz.2.5256[21759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.147412][T21759] syz.2.5256[21759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.429176][T21763] netlink: 'syz.1.5255': attribute type 9 has an invalid length. [ 999.462790][T21763] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5255'. [ 1002.912155][T21782] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5265'. [ 1002.998945][T21782] bridge_slave_1: default FDB implementation only supports local addresses [ 1003.926696][T21806] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5271'. [ 1003.982434][T21807] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5271'. [ 1006.772280][T16869] veth0_macvtap: left promiscuous mode [ 1006.778222][T16869] veth1_vlan: left promiscuous mode [ 1006.787821][T16869] veth0_vlan: left promiscuous mode [ 1009.676738][T16869] team0 (unregistering): Port device virt_wifi0 removed [ 1010.649789][T16869] team0 (unregistering): Port device team_slave_1 removed [ 1010.740527][T16869] team0 (unregistering): Port device team_slave_0 removed [ 1010.834850][T16869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.945415][T16869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.035316][T16869] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1011.504143][T16869] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1011.517354][T16869] bond0 (unregistering): Released all slaves [ 1011.635369][T21853] netlink: 'syz.4.5288': attribute type 10 has an invalid length. [ 1011.645443][T21853] : Device hsr_slave_0 failed to register rx_handler [ 1011.671520][T21856] netlink: 'syz.1.5289': attribute type 10 has an invalid length. [ 1011.948931][T21873] netlink: 'syz.2.5292': attribute type 12 has an invalid length. [ 1011.957731][T21873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5292'. [ 1012.577578][T21888] netlink: 'syz.1.5297': attribute type 29 has an invalid length. [ 1012.593847][T21888] netlink: 'syz.1.5297': attribute type 29 has an invalid length. [ 1013.136395][T21888] syzkaller0: entered promiscuous mode [ 1013.152393][T21888] syzkaller0: entered allmulticast mode [ 1013.329622][T21897] netlink: 'syz.2.5299': attribute type 10 has an invalid length. [ 1013.393700][T21897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.430996][T21897] bridge_slave_1: left allmulticast mode [ 1013.437605][T21897] bridge_slave_1: left promiscuous mode [ 1013.450501][T21897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.701183][T21897] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1016.327705][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 1017.186606][T21909] netlink: 'syz.2.5302': attribute type 10 has an invalid length. [ 1017.202043][T21913] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5303'. [ 1017.220601][T21917] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5303'. [ 1017.233922][T21918] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.5303'. [ 1017.443854][T21937] netlink: 'syz.2.5309': attribute type 21 has an invalid length. [ 1017.462411][T21938] netlink: 'syz.2.5309': attribute type 21 has an invalid length. [ 1018.759911][T21953] netlink: 'syz.4.5312': attribute type 9 has an invalid length. [ 1018.768226][T21953] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5312'. [ 1021.229165][T21967] netlink: 'syz.4.5316': attribute type 3 has an invalid length. [ 1021.252404][T21967] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.5316'. [ 1021.445582][T21970] netlink: 'syz.0.5319': attribute type 3 has an invalid length. [ 1021.454421][T21970] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5319'. [ 1021.928222][T21980] netlink: 'syz.1.5323': attribute type 153 has an invalid length. [ 1021.937518][T21980] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5323'. [ 1022.074654][T21986] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1022.105274][T21986] veth0_vlan: entered allmulticast mode [ 1022.596228][T22002] pim6reg0: tun_chr_ioctl cmd 1074025692 [ 1023.938271][T22025] netlink: 'syz.1.5339': attribute type 29 has an invalid length. [ 1023.972495][T22025] netlink: 'syz.1.5339': attribute type 29 has an invalid length. [ 1024.526076][T22041] netlink: 'syz.0.5341': attribute type 3 has an invalid length. [ 1024.551747][T22041] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.5341'. [ 1024.639364][T22025] syzkaller0: entered promiscuous mode [ 1024.646795][T22025] syzkaller0: entered allmulticast mode [ 1024.705664][T22037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1024.713362][T22037] syzkaller1: linktype set to 769 [ 1028.690845][T22086] netlink: 763 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1030.625923][T22130] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5374'. [ 1031.361472][T22139] netlink: 'syz.1.5378': attribute type 3 has an invalid length. [ 1031.399757][T22139] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5378'. [ 1032.498684][T22181] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5393'. [ 1032.525179][T22185] netlink: 'syz.2.5394': attribute type 11 has an invalid length. [ 1032.565686][T22185] netlink: 169672 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1035.299368][T22236] netlink: 'syz.2.5412': attribute type 4 has an invalid length. [ 1035.345708][T22236] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5412'. [ 1036.037498][T22256] syzkaller0: entered promiscuous mode [ 1036.061832][T22256] syzkaller0: entered allmulticast mode [ 1036.644810][T22276] netlink: 'syz.2.5426': attribute type 9 has an invalid length. [ 1036.653259][T22276] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5426'. [ 1037.492176][T22293] netlink: 'syz.4.5435': attribute type 29 has an invalid length. [ 1037.562688][T22293] netlink: 'syz.4.5435': attribute type 29 has an invalid length. [ 1037.727753][T22301] netlink: 'syz.0.5439': attribute type 3 has an invalid length. [ 1037.767361][T22301] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5439'. [ 1040.019048][T22341] syzkaller0: entered promiscuous mode [ 1040.129940][T22341] syzkaller0: entered allmulticast mode [ 1040.169364][T22345] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5452'. [ 1040.187497][T22345] netlink: get zone limit has 4 unknown bytes [ 1041.728248][T22388] netlink: 'syz.0.5466': attribute type 3 has an invalid length. [ 1041.743191][T22388] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5466'. [ 1042.005721][T22398] netlink: 'syz.4.5471': attribute type 29 has an invalid length. [ 1045.148857][T22398] netlink: 'syz.4.5471': attribute type 29 has an invalid length. [ 1045.292349][T22402] syzkaller0: entered promiscuous mode [ 1045.298265][T22402] syzkaller0: entered allmulticast mode [ 1047.051656][ T5781] Bluetooth: hci4: command 0x0406 tx timeout [ 1051.155707][T22498] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5503'. [ 1051.208790][T22498] bridge_slave_1: default FDB implementation only supports local addresses [ 1052.593390][T22521] netlink: 'syz.1.5512': attribute type 9 has an invalid length. [ 1052.611863][T22521] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1052.938367][T22536] netlink: 'syz.0.5516': attribute type 10 has an invalid length. [ 1052.988601][T22536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.037599][T22536] team0: Port device bond0 added [ 1053.650776][T22546] netlink: 'syz.4.5519': attribute type 41 has an invalid length. [ 1053.667260][T22548] FAULT_INJECTION: forcing a failure. [ 1053.667260][T22548] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.682491][T22548] CPU: 0 PID: 22548 Comm: syz.1.5520 Not tainted syzkaller #0 [ 1053.690115][T22548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.700327][T22548] Call Trace: [ 1053.703637][T22548] [ 1053.706599][T22548] dump_stack_lvl+0x18c/0x250 [ 1053.711406][T22548] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1053.717783][T22548] ? show_regs_print_info+0x20/0x20 [ 1053.723085][T22548] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1053.729273][T22548] should_fail_ex+0x394/0x4c0 [ 1053.734152][T22548] should_failslab+0x9/0x20 [ 1053.738770][T22548] slab_pre_alloc_hook+0x59/0x300 [ 1053.743818][T22548] ? __get_vm_area_node+0x125/0x370 [ 1053.750224][T22548] __kmem_cache_alloc_node+0x53/0x250 [ 1053.755872][T22548] ? __get_vm_area_node+0x125/0x370 [ 1053.761547][T22548] kmalloc_node_trace+0x26/0xe0 [ 1053.766728][T22548] __get_vm_area_node+0x125/0x370 [ 1053.771809][T22548] __vmalloc_node_range+0x36f/0x1320 [ 1053.777111][T22548] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1053.782780][T22548] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1053.788731][T22548] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1053.794737][T22548] ? free_vm_area+0x50/0x50 [ 1053.799279][T22548] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1053.805721][T22548] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1053.811283][T22548] __vmalloc+0x7a/0x90 [ 1053.815385][T22548] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1053.821035][T22548] bpf_prog_alloc_no_stats+0x46/0x430 [ 1053.826526][T22548] bpf_prog_alloc+0x3d/0x1a0 [ 1053.831306][T22548] bpf_prog_load+0x6b2/0x1610 [ 1053.836030][T22548] ? lock_chain_count+0x20/0x20 [ 1053.841000][T22548] ? map_freeze+0x420/0x420 [ 1053.845528][T22548] ? __might_fault+0xaa/0x120 [ 1053.850522][T22548] ? __lock_acquire+0x7d80/0x7d80 [ 1053.855663][T22548] ? lock_acquire+0x237/0x420 [ 1053.860441][T22548] ? __might_fault+0xaa/0x120 [ 1053.865223][T22548] ? __might_fault+0xc6/0x120 [ 1053.869916][T22548] ? __might_fault+0xaa/0x120 [ 1053.874601][T22548] ? bpf_lsm_bpf+0x9/0x10 [ 1053.879035][T22548] ? security_bpf+0x7e/0xa0 [ 1053.883585][T22548] __sys_bpf+0x5ba/0x890 [ 1053.888088][T22548] ? bpf_link_show_fdinfo+0x390/0x390 [ 1053.893587][T22548] ? lock_chain_count+0x20/0x20 [ 1053.898497][T22548] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1053.904553][T22548] __x64_sys_bpf+0x7c/0x90 [ 1053.909103][T22548] do_syscall_64+0x55/0xb0 [ 1053.913567][T22548] ? clear_bhb_loop+0x40/0x90 [ 1053.918289][T22548] ? clear_bhb_loop+0x40/0x90 [ 1053.923091][T22548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.929010][T22548] RIP: 0033:0x7fcd8479e0d9 [ 1053.933890][T22548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.953739][T22548] RSP: 002b:00007fcd856b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1053.962377][T22548] RAX: ffffffffffffffda RBX: 00007fcd84a25fa0 RCX: 00007fcd8479e0d9 [ 1053.970803][T22548] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1053.979088][T22548] RBP: 00007fcd856b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.988293][T22548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.996380][T22548] R13: 00007fcd84a26038 R14: 00007fcd84a25fa0 R15: 00007fff2f7beaf8 [ 1054.004395][T22548] [ 1054.017919][T22548] syz.1.5520: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1054.034900][T22547] netlink: 'syz.4.5519': attribute type 10 has an invalid length. [ 1054.066684][T22548] CPU: 1 PID: 22548 Comm: syz.1.5520 Not tainted syzkaller #0 [ 1054.074343][T22548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1054.084661][T22548] Call Trace: [ 1054.087982][T22548] [ 1054.091198][T22548] dump_stack_lvl+0x18c/0x250 [ 1054.096126][T22548] ? show_regs_print_info+0x20/0x20 [ 1054.101559][T22548] ? load_image+0x420/0x420 [ 1054.106162][T22548] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1054.112813][T22548] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1054.119352][T22548] warn_alloc+0x246/0x340 [ 1054.123793][T22548] ? __get_vm_area_node+0x125/0x370 [ 1054.129022][T22548] ? zone_watermark_ok_safe+0x230/0x230 [ 1054.134682][T22548] ? rcu_is_watching+0x15/0xb0 [ 1054.139480][T22548] ? __get_vm_area_node+0x356/0x370 [ 1054.144714][T22548] __vmalloc_node_range+0x394/0x1320 [ 1054.150203][T22548] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1054.156061][T22548] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1054.162375][T22548] ? free_vm_area+0x50/0x50 [ 1054.166916][T22548] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1054.173267][T22548] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1054.179019][T22548] __vmalloc+0x7a/0x90 [ 1054.183193][T22548] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1054.188837][T22548] bpf_prog_alloc_no_stats+0x46/0x430 [ 1054.194384][T22548] bpf_prog_alloc+0x3d/0x1a0 [ 1054.199019][T22548] bpf_prog_load+0x6b2/0x1610 [ 1054.203894][T22548] ? lock_chain_count+0x20/0x20 [ 1054.208951][T22548] ? map_freeze+0x420/0x420 [ 1054.213493][T22548] ? __might_fault+0xaa/0x120 [ 1054.218187][T22548] ? __lock_acquire+0x7d80/0x7d80 [ 1054.223267][T22548] ? lock_acquire+0x237/0x420 [ 1054.228223][T22548] ? __might_fault+0xaa/0x120 [ 1054.232916][T22548] ? __might_fault+0xc6/0x120 [ 1054.237691][T22548] ? __might_fault+0xaa/0x120 [ 1054.242641][T22548] ? bpf_lsm_bpf+0x9/0x10 [ 1054.247000][T22548] ? security_bpf+0x7e/0xa0 [ 1054.251522][T22548] __sys_bpf+0x5ba/0x890 [ 1054.255790][T22548] ? bpf_link_show_fdinfo+0x390/0x390 [ 1054.261271][T22548] ? lock_chain_count+0x20/0x20 [ 1054.266168][T22548] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1054.272315][T22548] __x64_sys_bpf+0x7c/0x90 [ 1054.276880][T22548] do_syscall_64+0x55/0xb0 [ 1054.281433][T22548] ? clear_bhb_loop+0x40/0x90 [ 1054.286254][T22548] ? clear_bhb_loop+0x40/0x90 [ 1054.291019][T22548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.297032][T22548] RIP: 0033:0x7fcd8479e0d9 [ 1054.301461][T22548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.321348][T22548] RSP: 002b:00007fcd856b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1054.329783][T22548] RAX: ffffffffffffffda RBX: 00007fcd84a25fa0 RCX: 00007fcd8479e0d9 [ 1054.337891][T22548] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1054.345976][T22548] RBP: 00007fcd856b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.353984][T22548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.361971][T22548] R13: 00007fcd84a26038 R14: 00007fcd84a25fa0 R15: 00007fff2f7beaf8 [ 1054.369972][T22548] [ 1054.387204][T22547] : Device vxcan1 is of different type [ 1054.409095][T22548] Mem-Info: [ 1054.427051][T22548] active_anon:6637 inactive_anon:0 isolated_anon:0 [ 1054.427051][T22548] active_file:18903 inactive_file:40339 isolated_file:0 [ 1054.427051][T22548] unevictable:768 dirty:91 writeback:0 [ 1054.427051][T22548] slab_reclaimable:11206 slab_unreclaimable:96961 [ 1054.427051][T22548] mapped:24596 shmem:1373 pagetables:622 [ 1054.427051][T22548] sec_pagetables:0 bounce:0 [ 1054.427051][T22548] kernel_misc_reclaimable:0 [ 1054.427051][T22548] free:1329721 free_pcp:14291 free_cma:0 [ 1054.483242][T22548] Node 0 active_anon:26448kB inactive_anon:0kB active_file:75612kB inactive_file:161156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98384kB dirty:364kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10700kB pagetables:2388kB sec_pagetables:0kB all_unreclaimable? no [ 1054.562093][T22548] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1054.617324][T22548] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1054.695230][T22548] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1054.701358][T22548] Node 0 DMA32 free:1405116kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26332kB inactive_anon:0kB active_file:75612kB inactive_file:160344kB unevictable:1536kB writepending:380kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:36264kB local_pcp:15172kB free_cma:0kB [ 1054.740886][T22548] lowmem_reserve[]: 0 0 0 0 0 [ 1054.750859][T22548] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1054.816256][T22548] lowmem_reserve[]: 0 0 0 0 0 [ 1054.839042][T22548] Node 1 Normal free:3898408kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20784kB local_pcp:8968kB free_cma:0kB [ 1054.915140][T22548] lowmem_reserve[]: 0 0 0 0 0 [ 1054.920232][T22548] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1054.956554][T22565] netlink: 'syz.4.5525': attribute type 8 has an invalid length. [ 1054.965151][T22548] Node 0 DMA32: 1085*4kB (UME) 915*8kB (UME) 1099*16kB (UME) 774*32kB (UME) 263*64kB (UME) 196*128kB (UME) 66*256kB (UME) 36*512kB (UM) 16*1024kB (UM) 10*2048kB (UME) 302*4096kB (UM) = 1405116kB [ 1055.011984][T22565] netlink: 'syz.4.5525': attribute type 6 has an invalid length. [ 1055.019854][T22548] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1055.055162][T22548] Node 1 Normal: 238*4kB (UM) 60*8kB (UME) 43*16kB (UME) 41*32kB (UME) 17*64kB (UE) 3*128kB (ME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3898408kB [ 1055.062407][T22565] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.5525'. [ 1055.096017][T22548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.145434][T22548] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1055.190881][T22548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.206834][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.213894][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.266465][T22548] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1055.291713][T22548] 60617 total pagecache pages [ 1055.300992][T22548] 0 pages in swap cache [ 1055.308812][T22548] Free swap = 124996kB [ 1055.317631][T22548] Total swap = 124996kB [ 1055.327515][T22548] 2097051 pages RAM [ 1055.352414][T22548] 0 pages HighMem/MovableOnly [ 1055.364251][T22548] 416958 pages reserved [ 1055.379404][T22548] 0 pages cma reserved [ 1060.175498][T22619] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5543'. [ 1060.229050][T22619] bridge_slave_1: default FDB implementation only supports local addresses [ 1060.877901][T22639] netlink: 763 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1061.305073][T22665] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5559'. [ 1061.507341][T22665] delete_channel: no stack [ 1061.520694][T22665] delete_channel: no stack [ 1061.553494][T22665] delete_channel: no stack [ 1061.558381][T22665] delete_channel: no stack [ 1061.608947][T22665] delete_channel: no stack [ 1061.623210][T22665] delete_channel: no stack [ 1061.628055][T22665] delete_channel: no stack [ 1061.672293][T22665] delete_channel: no stack [ 1061.677688][T22665] delete_channel: no stack [ 1061.691256][T22665] delete_channel: no stack [ 1061.700057][T22665] delete_channel: no stack [ 1061.710913][T22665] delete_channel: no stack [ 1061.721098][T22665] delete_channel: no stack [ 1061.771996][T22665] delete_channel: no stack [ 1061.777053][T22665] delete_channel: no stack [ 1061.852860][T22665] delete_channel: no stack [ 1061.903611][T22665] delete_channel: no stack [ 1061.908392][T22665] delete_channel: no stack [ 1061.943996][T22665] delete_channel: no stack [ 1061.948979][T22665] delete_channel: no stack [ 1061.987038][T22669] netlink: 'syz.1.5561': attribute type 9 has an invalid length. [ 1062.011889][T22665] delete_channel: no stack [ 1062.012166][T22665] delete_channel: no stack [ 1062.012344][T22665] delete_channel: no stack [ 1062.012528][T22665] delete_channel: no stack [ 1062.012704][T22665] delete_channel: no stack [ 1062.012882][T22665] delete_channel: no stack [ 1062.013057][T22665] delete_channel: no stack [ 1062.013234][T22665] delete_channel: no stack [ 1062.013408][T22665] delete_channel: no stack [ 1062.013595][T22665] delete_channel: no stack [ 1062.013789][T22665] delete_channel: no stack [ 1062.013961][T22665] delete_channel: no stack [ 1062.014135][T22665] delete_channel: no stack [ 1062.014309][T22665] delete_channel: no stack [ 1062.014491][T22665] delete_channel: no stack [ 1062.014798][T22665] delete_channel: no stack [ 1062.014974][T22665] delete_channel: no stack [ 1062.015152][T22665] delete_channel: no stack [ 1062.015332][T22665] delete_channel: no stack [ 1062.015514][T22665] delete_channel: no stack [ 1062.015688][T22665] delete_channel: no stack [ 1062.017063][T22665] delete_channel: no stack [ 1062.017241][T22665] delete_channel: no stack [ 1062.017417][T22665] delete_channel: no stack [ 1062.017599][T22665] delete_channel: no stack [ 1062.017775][T22665] delete_channel: no stack [ 1062.017951][T22665] delete_channel: no stack [ 1062.019354][T22665] delete_channel: no stack [ 1062.019540][T22665] delete_channel: no stack [ 1062.019715][T22665] delete_channel: no stack [ 1062.019890][T22665] delete_channel: no stack [ 1062.020072][T22665] delete_channel: no stack [ 1062.022715][T22665] delete_channel: no stack [ 1062.022910][T22665] delete_channel: no stack [ 1062.023083][T22665] delete_channel: no stack [ 1062.023255][T22665] delete_channel: no stack [ 1062.023433][T22665] delete_channel: no stack [ 1062.032872][T22665] delete_channel: no stack [ 1062.204080][T22669] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5561'. [ 1062.242116][T22665] delete_channel: no stack [ 1062.246932][T22665] delete_channel: no stack [ 1062.301712][T22665] delete_channel: no stack [ 1062.312304][T22665] delete_channel: no stack [ 1062.317764][T22665] delete_channel: no stack [ 1062.327001][T22665] delete_channel: no stack [ 1062.344489][T22665] delete_channel: no stack [ 1062.401893][T19963] Bluetooth: hci0: command 0x0406 tx timeout [ 1067.720308][T22724] netlink: 'syz.1.5581': attribute type 1 has an invalid length. [ 1067.742204][T22724] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5581'. [ 1068.404729][T22750] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.5591'. [ 1068.973892][T22773] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1069.195898][T22778] netlink: 'syz.1.5602': attribute type 9 has an invalid length. [ 1069.220432][T22778] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5602'. [ 1069.675423][T22781] netlink: 'syz.2.5604': attribute type 2 has an invalid length. [ 1069.762089][T22781] netlink: 'syz.2.5604': attribute type 3 has an invalid length. [ 1069.774629][T22781] netlink: 'syz.2.5604': attribute type 4 has an invalid length. [ 1069.783159][T22781] netlink: 198036 bytes leftover after parsing attributes in process `syz.2.5604'. [ 1070.358245][T22790] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5605'. [ 1070.833255][T22789] netlink: 'syz.2.5606': attribute type 9 has an invalid length. [ 1070.857195][T22789] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5606'. [ 1071.450396][T22790] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5605'. [ 1071.671100][T22806] netlink: 'syz.0.5611': attribute type 21 has an invalid length. [ 1071.699089][T22806] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1071.872809][T22813] netlink: 'syz.4.5613': attribute type 10 has an invalid length. [ 1072.227228][T22806] netlink: 'syz.0.5611': attribute type 3 has an invalid length. [ 1072.292325][T22806] netlink: 137972 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1072.396164][T22817] netlink: 'syz.1.5614': attribute type 3 has an invalid length. [ 1073.336992][T22833] netlink: 'syz.0.5626': attribute type 3 has an invalid length. [ 1073.408403][T22833] __nla_validate_parse: 1 callbacks suppressed [ 1073.408519][T22833] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1073.740007][T22841] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5621'. [ 1073.768610][T22846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5622'. [ 1074.888079][T22846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5622'. [ 1074.950231][T22859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5629'. [ 1075.797011][T22869] netlink: 'syz.2.5632': attribute type 3 has an invalid length. [ 1075.833378][T22869] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5632'. [ 1076.133167][T22877] netlink: 'syz.4.5635': attribute type 3 has an invalid length. [ 1076.173866][T22877] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5635'. [ 1076.536196][T22891] netlink: 'syz.4.5640': attribute type 9 has an invalid length. [ 1076.556453][T22891] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5640'. [ 1077.323404][T22894] netlink: 'syz.0.5642': attribute type 2 has an invalid length. [ 1077.331281][T22894] netlink: 'syz.0.5642': attribute type 8 has an invalid length. [ 1077.371726][T22894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5642'. [ 1077.557137][T22904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5643'. [ 1077.997757][T22917] netlink: 'syz.0.5648': attribute type 9 has an invalid length. [ 1079.185654][T22939] netlink: 'syz.2.5657': attribute type 29 has an invalid length. [ 1079.204712][T22939] netlink: 'syz.2.5657': attribute type 29 has an invalid length. [ 1079.275703][T22940] netlink: 'syz.1.5655': attribute type 3 has an invalid length. [ 1079.292570][T22940] __nla_validate_parse: 2 callbacks suppressed [ 1079.292594][T22940] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1079.600872][T22945] netlink: 'syz.0.5658': attribute type 9 has an invalid length. [ 1079.628212][T22945] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5658'. [ 1079.879804][T22939] syzkaller0: entered promiscuous mode [ 1079.886641][T22939] syzkaller0: entered allmulticast mode [ 1080.609159][T22961] netlink: 'syz.4.5662': attribute type 3 has an invalid length. [ 1080.626812][T22961] netlink: 137972 bytes leftover after parsing attributes in process `syz.4.5662'. [ 1082.894168][T19963] Bluetooth: hci1: command 0x0406 tx timeout [ 1083.767227][T22957] netlink: 'syz.4.5662': attribute type 21 has an invalid length. [ 1083.775955][T22957] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.5662'. [ 1083.887667][T22977] syz.1.5667: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1083.908320][T22977] CPU: 1 PID: 22977 Comm: syz.1.5667 Not tainted syzkaller #0 [ 1083.915930][T22977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1083.926244][T22977] Call Trace: [ 1083.929619][T22977] [ 1083.932711][T22977] dump_stack_lvl+0x18c/0x250 [ 1083.937835][T22977] ? show_regs_print_info+0x20/0x20 [ 1083.943120][T22977] ? load_image+0x420/0x420 [ 1083.947815][T22977] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1083.954495][T22977] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1083.961094][T22977] warn_alloc+0x246/0x340 [ 1083.965545][T22977] ? stack_trace_save+0xaa/0x100 [ 1083.970591][T22977] ? zone_watermark_ok_safe+0x230/0x230 [ 1083.976296][T22977] ? kasan_set_track+0x5f/0x70 [ 1083.982490][T22977] ? kasan_set_track+0x4e/0x70 [ 1083.987519][T22977] ? __kasan_kmalloc+0x8f/0xa0 [ 1083.992380][T22977] ? xsk_init_queue+0xad/0x100 [ 1083.997247][T22977] ? xsk_setsockopt+0x4c9/0x750 [ 1084.002180][T22977] ? do_sock_setsockopt+0x175/0x1a0 [ 1084.007464][T22977] ? __x64_sys_setsockopt+0x182/0x200 [ 1084.012947][T22977] __vmalloc_node_range+0x129/0x1320 [ 1084.018428][T22977] ? free_vm_area+0x50/0x50 [ 1084.023064][T22977] vmalloc_user+0x74/0x80 [ 1084.027471][T22977] ? xskq_create+0xbf/0x170 [ 1084.032122][T22977] xskq_create+0xbf/0x170 [ 1084.036534][T22977] xsk_init_queue+0xad/0x100 [ 1084.041492][T22977] xsk_setsockopt+0x4c9/0x750 [ 1084.046426][T22977] ? xsk_poll+0x670/0x670 [ 1084.050838][T22977] ? __fget_files+0x28/0x460 [ 1084.055470][T22977] ? aa_sock_opt_perm+0x74/0x100 [ 1084.060454][T22977] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1084.066042][T22977] ? security_socket_setsockopt+0x7e/0xa0 [ 1084.072143][T22977] ? xsk_poll+0x670/0x670 [ 1084.076696][T22977] do_sock_setsockopt+0x175/0x1a0 [ 1084.082115][T22977] ? __fdget+0x180/0x210 [ 1084.086537][T22977] __x64_sys_setsockopt+0x182/0x200 [ 1084.091835][T22977] do_syscall_64+0x55/0xb0 [ 1084.096400][T22977] ? clear_bhb_loop+0x40/0x90 [ 1084.101419][T22977] ? clear_bhb_loop+0x40/0x90 [ 1084.106306][T22977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1084.112340][T22977] RIP: 0033:0x7fcd8479e0d9 [ 1084.116810][T22977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.136669][T22977] RSP: 002b:00007fcd856b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1084.145166][T22977] RAX: ffffffffffffffda RBX: 00007fcd84a25fa0 RCX: 00007fcd8479e0d9 [ 1084.153173][T22977] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1084.161368][T22977] RBP: 00007fcd84835024 R08: 0000000000004a00 R09: 0000000000000000 [ 1084.169483][T22977] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1084.177577][T22977] R13: 00007fcd84a26038 R14: 00007fcd84a25fa0 R15: 00007fff2f7beaf8 [ 1084.185713][T22977] [ 1084.200118][T22977] Mem-Info: [ 1084.204161][T22977] active_anon:6556 inactive_anon:0 isolated_anon:0 [ 1084.204161][T22977] active_file:18903 inactive_file:40351 isolated_file:0 [ 1084.204161][T22977] unevictable:768 dirty:107 writeback:0 [ 1084.204161][T22977] slab_reclaimable:11220 slab_unreclaimable:97926 [ 1084.204161][T22977] mapped:24528 shmem:1373 pagetables:574 [ 1084.204161][T22977] sec_pagetables:0 bounce:0 [ 1084.204161][T22977] kernel_misc_reclaimable:0 [ 1084.204161][T22977] free:1335408 free_pcp:8410 free_cma:0 [ 1084.393418][T22977] Node 0 active_anon:26324kB inactive_anon:0kB active_file:75612kB inactive_file:161204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98112kB dirty:428kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10508kB pagetables:2296kB sec_pagetables:0kB all_unreclaimable? no [ 1084.551741][T22977] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1084.592206][T22977] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1084.660617][T22977] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1084.712854][T22977] Node 0 DMA32 free:1427928kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26448kB inactive_anon:0kB active_file:75612kB inactive_file:160384kB unevictable:1536kB writepending:440kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:11732kB local_pcp:5088kB free_cma:0kB [ 1084.822346][T22977] lowmem_reserve[]: 0 0 0 0 0 [ 1084.852648][T22977] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1084.953140][T22977] lowmem_reserve[]: 0 0 0 0 0 [ 1084.958345][T22977] Node 1 Normal free:3898408kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20788kB local_pcp:8968kB free_cma:0kB [ 1084.997680][T22977] lowmem_reserve[]: 0 0 0 0 0 [ 1085.032008][T22977] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1085.050450][T22977] Node 0 DMA32: 2060*4kB (UME) 2011*8kB (UME) 1167*16kB (UME) 1001*32kB (UME) 249*64kB (UME) 181*128kB (UME) 62*256kB (UME) 37*512kB (UM) 21*1024kB (UM) 10*2048kB (UME) 302*4096kB (UM) = 1427928kB [ 1085.101689][T22977] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1085.121693][T22977] Node 1 Normal: 238*4kB (UM) 60*8kB (UME) 43*16kB (UME) 41*32kB (UME) 17*64kB (UE) 3*128kB (ME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3898408kB [ 1085.201830][T22977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.226288][T22977] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1085.259773][T22977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.321834][T22977] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1085.351000][T22977] 60627 total pagecache pages [ 1085.366844][T22977] 0 pages in swap cache [ 1085.371213][T22977] Free swap = 124996kB [ 1085.411883][T22977] Total swap = 124996kB [ 1085.416186][T22977] 2097051 pages RAM [ 1085.420095][T22977] 0 pages HighMem/MovableOnly [ 1085.451801][T22977] 416958 pages reserved [ 1085.456203][T22977] 0 pages cma reserved [ 1085.535712][T23002] netlink: 'syz.0.5675': attribute type 10 has an invalid length. [ 1085.656152][T23002] team0: Device hsr_slave_0 failed to register rx_handler [ 1085.755107][T23003] netlink: 'syz.2.5674': attribute type 21 has an invalid length. [ 1085.778702][T23003] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5674'. [ 1086.119449][T23024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5680'. [ 1086.829141][T23050] netlink: 'syz.1.5685': attribute type 9 has an invalid length. [ 1086.870573][T23050] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5685'. [ 1087.292549][T23058] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5689'. [ 1087.352310][T23058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1087.375204][T23057] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5689'. [ 1087.416149][T23057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1087.579211][T23063] netlink: 'syz.2.5691': attribute type 3 has an invalid length. [ 1087.592913][T23063] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5691'. [ 1088.363258][T23077] syz.4.5697 (23077) used greatest stack depth: 19048 bytes left [ 1088.460279][T23086] netlink: 'syz.2.5700': attribute type 3 has an invalid length. [ 1088.472056][T23086] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5700'. [ 1091.786959][T23137] netlink: 'syz.1.5716': attribute type 21 has an invalid length. [ 1091.830979][T23137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5716'. [ 1091.902755][T23142] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5719'. [ 1092.420910][T23149] netlink: 'syz.2.5721': attribute type 3 has an invalid length. [ 1092.448801][T23149] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5721'. [ 1092.571008][T23166] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1093.211324][T23177] netlink: 'syz.4.5730': attribute type 9 has an invalid length. [ 1093.242959][T23177] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5730'. [ 1093.294307][T23182] netlink: 'syz.1.5733': attribute type 3 has an invalid length. [ 1093.347344][T23182] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5733'. [ 1094.046513][T23192] netlink: 76612 bytes leftover after parsing attributes in process `syz.2.5736'. [ 1101.200918][T23252] netlink: 'syz.0.5756': attribute type 9 has an invalid length. [ 1101.222085][T23252] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5756'. [ 1101.523684][T23255] bridge_slave_0: left allmulticast mode [ 1101.547048][T23255] bridge_slave_0: left promiscuous mode [ 1101.602148][T23255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.808010][T23261] netlink: 'syz.4.5758': attribute type 3 has an invalid length. [ 1101.819552][T23261] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5758'. [ 1102.109411][T23267] netlink: 'syz.2.5759': attribute type 9 has an invalid length. [ 1102.153530][T23267] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5759'. [ 1103.292024][T23296] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5770'. [ 1103.367131][T23296] netlink: 'syz.1.5770': attribute type 17 has an invalid length. [ 1103.406281][T23296] netlink: 'syz.1.5770': attribute type 16 has an invalid length. [ 1103.438640][T23296] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5770'. [ 1103.554372][T23307] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.5775'. [ 1103.586258][T23309] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.5775'. [ 1104.205017][T23333] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5785'. [ 1104.214559][T23331] netlink: 'syz.4.5784': attribute type 10 has an invalid length. [ 1105.326648][T23361] netlink: 'syz.2.5793': attribute type 3 has an invalid length. [ 1105.340889][T23361] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5793'. [ 1105.406575][T23370] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5796'. [ 1106.060072][T23394] netlink: 'syz.2.5805': attribute type 29 has an invalid length. [ 1106.083118][T23394] netlink: 'syz.2.5805': attribute type 29 has an invalid length. [ 1106.293018][T23405] syzkaller0: entered promiscuous mode [ 1106.298599][T23405] syzkaller0: entered allmulticast mode [ 1106.600803][T23415] __nla_validate_parse: 1 callbacks suppressed [ 1106.600824][T23415] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5812'. [ 1111.639761][T23450] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5825'. [ 1111.656584][T23455] netlink: 'syz.4.5826': attribute type 10 has an invalid length. [ 1111.668683][T23455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5826'. [ 1111.679062][T23455] bond0: entered promiscuous mode [ 1111.689967][T23455] bond_slave_1: entered promiscuous mode [ 1111.697698][T23455] bridge_slave_1: entered promiscuous mode [ 1111.739449][T23455] : Port device bond0 removed [ 1111.747864][T23455] bridge0: port 2(bond0) entered blocking state [ 1111.756416][T23455] bridge0: port 2(bond0) entered disabled state [ 1111.780671][T23455] bond0: entered allmulticast mode [ 1111.790596][T23455] bond_slave_1: entered allmulticast mode [ 1111.800876][T23455] bridge_slave_1: entered allmulticast mode [ 1112.793911][T23495] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1113.468720][T23509] netlink: 'syz.2.5846': attribute type 10 has an invalid length. [ 1113.488928][T23509] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5846'. [ 1114.450075][T23527] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5853'. [ 1114.467222][T23531] netlink: 'syz.4.5855': attribute type 3 has an invalid length. [ 1114.482678][T23531] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.5855'. [ 1114.538263][T23533] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5856'. [ 1117.393850][T23538] netlink: 'syz.0.5854': attribute type 3 has an invalid length. [ 1118.543988][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.551000][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.682250][T23538] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5854'. [ 1120.446964][T23560] netlink: 'syz.4.5865': attribute type 21 has an invalid length. [ 1120.687422][T23570] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5867'. [ 1120.723982][T23572] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5866'. [ 1120.795696][T23572] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5866'. [ 1120.953344][T23582] netlink: 'syz.1.5871': attribute type 29 has an invalid length. [ 1120.963730][T23582] netlink: 'syz.1.5871': attribute type 29 has an invalid length. [ 1121.312915][T23582] syzkaller0: entered promiscuous mode [ 1121.318967][T23582] syzkaller0: entered allmulticast mode [ 1125.165969][T23606] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5880'. [ 1125.290410][T23621] netlink: 'syz.0.5884': attribute type 21 has an invalid length. [ 1125.399740][T23624] netlink: 'syz.2.5885': attribute type 21 has an invalid length. [ 1125.706460][T23640] netlink: 'syz.4.5888': attribute type 9 has an invalid length. [ 1125.717814][T23640] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5888'. [ 1125.757069][T23633] syzkaller0: entered promiscuous mode [ 1125.762920][T23633] syzkaller0: entered allmulticast mode [ 1129.237338][T23649] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5892'. [ 1129.246918][T23649] bridge_slave_1: default FDB implementation only supports local addresses [ 1129.256657][T23643] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5889'. [ 1129.573359][T23665] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1129.612056][T23665] netlink: get zone limit has 4 unknown bytes [ 1129.760543][T23669] netlink: 'syz.2.5897': attribute type 21 has an invalid length. [ 1130.367635][T23682] netlink: 'syz.0.5901': attribute type 2 has an invalid length. [ 1130.541806][T23682] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5901'. [ 1131.455045][T23700] netlink: 'syz.2.5908': attribute type 4 has an invalid length. [ 1131.470483][T23700] netlink: 'syz.2.5908': attribute type 16 has an invalid length. [ 1131.479105][T23700] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5908'. [ 1131.724090][T23708] netlink: 'syz.1.5912': attribute type 21 has an invalid length. [ 1132.141349][T23689] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5904'. [ 1132.184727][T23689] bridge_slave_1: default FDB implementation only supports local addresses [ 1132.528408][T23726] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5918'. [ 1134.590709][T23735] netlink: 'syz.0.5919': attribute type 3 has an invalid length. [ 1134.619881][T23735] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5919'. [ 1134.713546][T23746] FAULT_INJECTION: forcing a failure. [ 1134.713546][T23746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.738467][T23746] CPU: 1 PID: 23746 Comm: syz.1.5923 Not tainted syzkaller #0 [ 1134.746120][T23746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1134.756580][T23746] Call Trace: [ 1134.759940][T23746] [ 1134.763003][T23746] dump_stack_lvl+0x18c/0x250 [ 1134.767914][T23746] ? show_regs_print_info+0x20/0x20 [ 1134.773206][T23746] ? load_image+0x420/0x420 [ 1134.777777][T23746] ? __might_fault+0xaa/0x120 [ 1134.782606][T23746] ? __lock_acquire+0x7d80/0x7d80 [ 1134.788467][T23746] should_fail_ex+0x394/0x4c0 [ 1134.793374][T23746] _copy_from_user+0x2f/0xe0 [ 1134.798525][T23746] ___sys_sendmsg+0x1c7/0x360 [ 1134.803249][T23746] ? get_pid_task+0x20/0x1e0 [ 1134.808046][T23746] ? __sys_sendmsg+0x2b0/0x2b0 [ 1134.812843][T23746] ? __lock_acquire+0x7d80/0x7d80 [ 1134.817905][T23746] __se_sys_sendmsg+0x1d0/0x2c0 [ 1134.822949][T23746] ? __x64_sys_sendmsg+0x80/0x80 [ 1134.827921][T23746] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.833177][T23746] do_syscall_64+0x55/0xb0 [ 1134.837709][T23746] ? clear_bhb_loop+0x40/0x90 [ 1134.842515][T23746] ? clear_bhb_loop+0x40/0x90 [ 1134.847207][T23746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.853109][T23746] RIP: 0033:0x7fcd8479e0d9 [ 1134.857625][T23746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.877325][T23746] RSP: 002b:00007fcd856b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.886109][T23746] RAX: ffffffffffffffda RBX: 00007fcd84a25fa0 RCX: 00007fcd8479e0d9 [ 1134.894305][T23746] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1134.902304][T23746] RBP: 00007fcd856b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.910292][T23746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.918393][T23746] R13: 00007fcd84a26038 R14: 00007fcd84a25fa0 R15: 00007fff2f7beaf8 [ 1134.926782][T23746] [ 1135.611718][T23755] netlink: 'syz.0.5928': attribute type 21 has an invalid length. [ 1136.431620][T23771] netlink: 'syz.4.5932': attribute type 2 has an invalid length. [ 1136.511855][T23771] netlink: 'syz.4.5932': attribute type 1 has an invalid length. [ 1136.512107][T23779] sit0: entered allmulticast mode [ 1136.520517][T23771] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5932'. [ 1137.715217][T23798] netlink: 'syz.4.5943': attribute type 21 has an invalid length. [ 1139.242055][T23834] netlink: 'syz.2.5955': attribute type 29 has an invalid length. [ 1139.250416][T23834] netlink: 'syz.2.5955': attribute type 29 has an invalid length. [ 1139.306015][T23833] netlink: 'syz.2.5955': attribute type 29 has an invalid length. [ 1139.337855][T23833] netlink: 'syz.2.5955': attribute type 29 has an invalid length. [ 1139.369517][T23833] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.5955'. [ 1139.418024][T23841] FAULT_INJECTION: forcing a failure. [ 1139.418024][T23841] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.437810][T23823] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1139.450913][T23823] bridge_slave_1: default FDB implementation only supports local addresses [ 1139.472068][T23841] CPU: 0 PID: 23841 Comm: syz.0.5958 Not tainted syzkaller #0 [ 1139.479758][T23841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1139.489885][T23841] Call Trace: [ 1139.493268][T23841] [ 1139.496250][T23841] dump_stack_lvl+0x18c/0x250 [ 1139.501000][T23841] ? show_regs_print_info+0x20/0x20 [ 1139.506458][T23841] ? load_image+0x420/0x420 [ 1139.511301][T23841] ? __might_sleep+0xe0/0xe0 [ 1139.516053][T23841] ? __lock_acquire+0x7d80/0x7d80 [ 1139.521163][T23841] should_fail_ex+0x394/0x4c0 [ 1139.526205][T23841] should_failslab+0x9/0x20 [ 1139.531305][T23841] slab_pre_alloc_hook+0x59/0x300 [ 1139.536569][T23841] ? __lock_acquire+0x7d80/0x7d80 [ 1139.541949][T23841] kmem_cache_alloc_node+0x5e/0x310 [ 1139.547404][T23841] ? __alloc_skb+0x103/0x2c0 [ 1139.552224][T23841] __alloc_skb+0x103/0x2c0 [ 1139.557853][T23841] netlink_sendmsg+0x66a/0xbf0 [ 1139.562772][T23841] ? netlink_getsockopt+0x590/0x590 [ 1139.568185][T23841] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1139.573844][T23841] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1139.579259][T23841] ? security_socket_sendmsg+0x80/0xa0 [ 1139.585304][T23841] ? netlink_getsockopt+0x590/0x590 [ 1139.591208][T23841] ____sys_sendmsg+0x61b/0x980 [ 1139.596288][T23841] ? __asan_memset+0x22/0x40 [ 1139.601270][T23841] ? __sys_sendmsg_sock+0x30/0x30 [ 1139.606407][T23841] ? __import_iovec+0x5f2/0x850 [ 1139.611293][T23841] ? import_iovec+0x73/0xa0 [ 1139.616061][T23841] ___sys_sendmsg+0x2a6/0x360 [ 1139.620918][T23841] ? __sys_sendmsg+0x2b0/0x2b0 [ 1139.626106][T23841] ? __lock_acquire+0x7d80/0x7d80 [ 1139.631192][T23841] __se_sys_sendmsg+0x1d0/0x2c0 [ 1139.636076][T23841] ? __x64_sys_sendmsg+0x80/0x80 [ 1139.641491][T23841] ? lockdep_hardirqs_on+0x98/0x150 [ 1139.646821][T23841] do_syscall_64+0x55/0xb0 [ 1139.651264][T23841] ? clear_bhb_loop+0x40/0x90 [ 1139.656789][T23841] ? clear_bhb_loop+0x40/0x90 [ 1139.662053][T23841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.668075][T23841] RIP: 0033:0x7ff696d9e0d9 [ 1139.672541][T23841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.692987][T23841] RSP: 002b:00007ff697cdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.701531][T23841] RAX: ffffffffffffffda RBX: 00007ff697025fa0 RCX: 00007ff696d9e0d9 [ 1139.709522][T23841] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1139.717513][T23841] RBP: 00007ff697cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.725502][T23841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.733488][T23841] R13: 00007ff697026038 R14: 00007ff697025fa0 R15: 00007ffcfd1562c8 [ 1139.741500][T23841] [ 1139.776703][T23843] netlink: 'syz.4.5959': attribute type 21 has an invalid length. [ 1140.259665][T23856] netlink: 'syz.2.5960': attribute type 21 has an invalid length. [ 1140.268286][T23856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5960'. [ 1141.624525][T23871] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5966'. [ 1141.888129][T23871] team0: Port device team_slave_0 removed [ 1141.900781][T23871] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1141.931748][T23887] validate_nla: 1 callbacks suppressed [ 1141.931774][T23887] netlink: 'syz.2.5973': attribute type 21 has an invalid length. [ 1144.338329][T23927] netlink: 'syz.0.5985': attribute type 21 has an invalid length. [ 1145.355168][T23958] can: request_module (can-proto-0) failed. [ 1145.779931][T23976] netlink: 'syz.2.6002': attribute type 21 has an invalid length. [ 1147.188469][T24009] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6011'. [ 1147.315544][ T5781] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 1148.333219][T24026] netlink: 'syz.2.6016': attribute type 12 has an invalid length. [ 1148.352344][T24026] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6016'. [ 1148.376216][T24033] netlink: 'syz.0.6018': attribute type 21 has an invalid length. [ 1149.438748][T24050] netlink: 'syz.0.6023': attribute type 2 has an invalid length. [ 1151.700662][T24072] netlink: 'syz.0.6031': attribute type 21 has an invalid length. [ 1155.324398][T24107] netlink: 'syz.2.6040': attribute type 9 has an invalid length. [ 1155.340325][T24107] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1156.346704][T24137] netlink: 'syz.2.6051': attribute type 3 has an invalid length. [ 1156.357557][T24137] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6051'. [ 1157.787161][T24159] netlink: 'syz.1.6058': attribute type 9 has an invalid length. [ 1157.800615][T24159] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6058'. [ 1157.995294][T24163] netlink: 'syz.4.6060': attribute type 9 has an invalid length. [ 1158.028190][T24163] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6060'. [ 1158.486938][T24177] FAULT_INJECTION: forcing a failure. [ 1158.486938][T24177] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.532960][T24177] CPU: 0 PID: 24177 Comm: syz.1.6068 Not tainted syzkaller #0 [ 1158.540637][T24177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.551188][T24177] Call Trace: [ 1158.555062][T24177] [ 1158.558306][T24177] dump_stack_lvl+0x18c/0x250 [ 1158.563318][T24177] ? show_regs_print_info+0x20/0x20 [ 1158.568588][T24177] ? load_image+0x420/0x420 [ 1158.573154][T24177] ? __might_sleep+0xe0/0xe0 [ 1158.578102][T24177] ? __lock_acquire+0x7d80/0x7d80 [ 1158.583397][T24177] should_fail_ex+0x394/0x4c0 [ 1158.588230][T24177] should_failslab+0x9/0x20 [ 1158.592879][T24177] slab_pre_alloc_hook+0x59/0x300 [ 1158.598106][T24177] ? rcu_is_watching+0x15/0xb0 [ 1158.603890][T24177] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1158.610449][T24177] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1158.616742][T24177] __kmem_cache_alloc_node+0x53/0x250 [ 1158.622379][T24177] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1158.628678][T24177] __kmalloc+0xa7/0x240 [ 1158.632897][T24177] ? __netlink_dump_start+0xf4/0x7a0 [ 1158.638244][T24177] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1158.644472][T24177] genl_start+0x180/0x6c0 [ 1158.648857][T24177] __netlink_dump_start+0x43c/0x7a0 [ 1158.654124][T24177] genl_family_rcv_msg_dumpit+0x214/0x310 [ 1158.660080][T24177] ? genl_rcv_msg+0x7a0/0x7a0 [ 1158.664994][T24177] ? genl_get_cmd+0x693/0x930 [ 1158.669834][T24177] ? genl_family_rcv_msg_doit+0x310/0x310 [ 1158.675614][T24177] ? genl_start+0x6c0/0x6c0 [ 1158.680174][T24177] ? genl_dumpit+0x1a0/0x1a0 [ 1158.684896][T24177] genl_rcv_msg+0x5de/0x7a0 [ 1158.689494][T24177] ? genl_bind+0x360/0x360 [ 1158.693964][T24177] ? ethnl_default_doit+0xba0/0xba0 [ 1158.699210][T24177] ? ethnl_default_start+0x560/0x560 [ 1158.704537][T24177] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 1158.710052][T24177] ? ref_tracker_free+0x686/0x830 [ 1158.715319][T24177] netlink_rcv_skb+0x235/0x4c0 [ 1158.720127][T24177] ? genl_bind+0x360/0x360 [ 1158.724563][T24177] ? netlink_ack+0x1160/0x1160 [ 1158.729389][T24177] ? __lock_acquire+0x7d80/0x7d80 [ 1158.734948][T24177] ? down_read+0x1ac/0x2e0 [ 1158.739423][T24177] genl_rcv+0x28/0x40 [ 1158.743452][T24177] netlink_unicast+0x7b1/0x930 [ 1158.748428][T24177] netlink_sendmsg+0x8d0/0xbf0 [ 1158.753412][T24177] ? netlink_getsockopt+0x590/0x590 [ 1158.758670][T24177] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1158.764366][T24177] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1158.769949][T24177] ? security_socket_sendmsg+0x80/0xa0 [ 1158.775429][T24177] ? netlink_getsockopt+0x590/0x590 [ 1158.780675][T24177] ____sys_sendmsg+0x61b/0x980 [ 1158.785493][T24177] ? __asan_memset+0x22/0x40 [ 1158.790182][T24177] ? __sys_sendmsg_sock+0x30/0x30 [ 1158.795786][T24177] ? __import_iovec+0x5f2/0x850 [ 1158.800693][T24177] ? import_iovec+0x73/0xa0 [ 1158.805229][T24177] ___sys_sendmsg+0x2a6/0x360 [ 1158.810099][T24177] ? get_pid_task+0x20/0x1e0 [ 1158.815033][T24177] ? __sys_sendmsg+0x2b0/0x2b0 [ 1158.819832][T24177] ? __lock_acquire+0x7d80/0x7d80 [ 1158.824900][T24177] __se_sys_sendmsg+0x1d0/0x2c0 [ 1158.829924][T24177] ? __x64_sys_sendmsg+0x80/0x80 [ 1158.834983][T24177] ? lockdep_hardirqs_on+0x98/0x150 [ 1158.840206][T24177] do_syscall_64+0x55/0xb0 [ 1158.844835][T24177] ? clear_bhb_loop+0x40/0x90 [ 1158.849737][T24177] ? clear_bhb_loop+0x40/0x90 [ 1158.854541][T24177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1158.860481][T24177] RIP: 0033:0x7fcd8479e0d9 [ 1158.865005][T24177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.885253][T24177] RSP: 002b:00007fcd856b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.893799][T24177] RAX: ffffffffffffffda RBX: 00007fcd84a25fa0 RCX: 00007fcd8479e0d9 [ 1158.902226][T24177] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1158.910212][T24177] RBP: 00007fcd856b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.918753][T24177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.927051][T24177] R13: 00007fcd84a26038 R14: 00007fcd84a25fa0 R15: 00007fff2f7beaf8 [ 1158.935245][T24177] [ 1159.828118][T24200] netlink: 'syz.4.6077': attribute type 9 has an invalid length. [ 1159.871466][T24200] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6077'. [ 1159.974958][T24208] netlink: 'syz.0.6079': attribute type 9 has an invalid length. [ 1160.022110][T24208] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1160.313634][T24214] netlink: 'syz.4.6084': attribute type 21 has an invalid length. [ 1160.741997][T24236] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1161.278839][T24247] netlink: 'syz.1.6095': attribute type 3 has an invalid length. [ 1161.288634][T24247] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6095'. [ 1161.333813][T24250] netlink: 'syz.2.6094': attribute type 9 has an invalid length. [ 1161.362430][T24250] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6094'. [ 1161.484268][T24252] netlink: 'syz.4.6097': attribute type 21 has an invalid length. [ 1161.854889][T24266] pimreg1: tun_chr_ioctl cmd 2147767517 [ 1162.045378][T24275] netlink: 'syz.4.6108': attribute type 29 has an invalid length. [ 1162.062417][T24275] netlink: 'syz.4.6108': attribute type 29 has an invalid length. [ 1162.510205][T24275] syzkaller0: entered promiscuous mode [ 1162.519459][T24275] syzkaller0: entered allmulticast mode [ 1162.566275][T24290] netlink: 'syz.1.6111': attribute type 21 has an invalid length. [ 1162.663935][T24300] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6115'. [ 1162.769815][T24307] netlink: 'syz.2.6116': attribute type 21 has an invalid length. [ 1166.038587][T24365] netlink: 'syz.2.6137': attribute type 9 has an invalid length. [ 1166.051715][T24365] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6137'. [ 1167.306879][T24333] netlink: 'syz.1.6125': attribute type 21 has an invalid length. [ 1167.315126][T24343] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6128'. [ 1167.587470][T24377] netlink: 'syz.2.6141': attribute type 21 has an invalid length. [ 1167.771019][T24385] FAULT_INJECTION: forcing a failure. [ 1167.771019][T24385] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.811748][T24385] CPU: 1 PID: 24385 Comm: syz.0.6143 Not tainted syzkaller #0 [ 1167.819318][T24385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1167.829870][T24385] Call Trace: [ 1167.833200][T24385] [ 1167.836171][T24385] dump_stack_lvl+0x18c/0x250 [ 1167.840927][T24385] ? show_regs_print_info+0x20/0x20 [ 1167.846273][T24385] ? load_image+0x420/0x420 [ 1167.850854][T24385] ? __might_sleep+0xe0/0xe0 [ 1167.855694][T24385] ? __lock_acquire+0x7d80/0x7d80 [ 1167.860857][T24385] should_fail_ex+0x394/0x4c0 [ 1167.865584][T24385] should_failslab+0x9/0x20 [ 1167.870118][T24385] slab_pre_alloc_hook+0x59/0x300 [ 1167.875214][T24385] ? ethnl_default_start+0x135/0x560 [ 1167.880740][T24385] ? ethnl_default_start+0x135/0x560 [ 1167.886094][T24385] __kmem_cache_alloc_node+0x53/0x250 [ 1167.891519][T24385] ? ethnl_default_start+0x135/0x560 [ 1167.896840][T24385] __kmalloc+0xa7/0x240 [ 1167.901025][T24385] ethnl_default_start+0x135/0x560 [ 1167.906173][T24385] genl_start+0x4b4/0x6c0 [ 1167.910553][T24385] __netlink_dump_start+0x43c/0x7a0 [ 1167.915859][T24385] genl_family_rcv_msg_dumpit+0x214/0x310 [ 1167.921601][T24385] ? genl_rcv_msg+0x7a0/0x7a0 [ 1167.926312][T24385] ? genl_get_cmd+0x693/0x930 [ 1167.931011][T24385] ? genl_family_rcv_msg_doit+0x310/0x310 [ 1167.936845][T24385] ? genl_start+0x6c0/0x6c0 [ 1167.941363][T24385] ? genl_dumpit+0x1a0/0x1a0 [ 1167.945982][T24385] genl_rcv_msg+0x5de/0x7a0 [ 1167.950699][T24385] ? genl_bind+0x360/0x360 [ 1167.955128][T24385] ? ethnl_default_doit+0xba0/0xba0 [ 1167.960423][T24385] ? ethnl_default_start+0x560/0x560 [ 1167.966205][T24385] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 1167.971720][T24385] ? ref_tracker_free+0x686/0x830 [ 1167.976874][T24385] netlink_rcv_skb+0x235/0x4c0 [ 1167.981778][T24385] ? genl_bind+0x360/0x360 [ 1167.986298][T24385] ? netlink_ack+0x1160/0x1160 [ 1167.991168][T24385] ? __lock_acquire+0x7d80/0x7d80 [ 1167.996341][T24385] ? down_read+0x1ac/0x2e0 [ 1168.000803][T24385] genl_rcv+0x28/0x40 [ 1168.004930][T24385] netlink_unicast+0x7b1/0x930 [ 1168.009754][T24385] netlink_sendmsg+0x8d0/0xbf0 [ 1168.014559][T24385] ? netlink_getsockopt+0x590/0x590 [ 1168.019806][T24385] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1168.025429][T24385] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1168.030764][T24385] ? security_socket_sendmsg+0x80/0xa0 [ 1168.036239][T24385] ? netlink_getsockopt+0x590/0x590 [ 1168.041542][T24385] ____sys_sendmsg+0x61b/0x980 [ 1168.046414][T24385] ? __asan_memset+0x22/0x40 [ 1168.051111][T24385] ? __sys_sendmsg_sock+0x30/0x30 [ 1168.056243][T24385] ? __import_iovec+0x5f2/0x850 [ 1168.061130][T24385] ? import_iovec+0x73/0xa0 [ 1168.065836][T24385] ___sys_sendmsg+0x2a6/0x360 [ 1168.070681][T24385] ? get_pid_task+0x20/0x1e0 [ 1168.075584][T24385] ? __sys_sendmsg+0x2b0/0x2b0 [ 1168.080505][T24385] ? __lock_acquire+0x7d80/0x7d80 [ 1168.086072][T24385] __se_sys_sendmsg+0x1d0/0x2c0 [ 1168.091530][T24385] ? __x64_sys_sendmsg+0x80/0x80 [ 1168.096592][T24385] ? lockdep_hardirqs_on+0x98/0x150 [ 1168.101902][T24385] do_syscall_64+0x55/0xb0 [ 1168.106683][T24385] ? clear_bhb_loop+0x40/0x90 [ 1168.111468][T24385] ? clear_bhb_loop+0x40/0x90 [ 1168.116190][T24385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1168.122107][T24385] RIP: 0033:0x7ff696d9e0d9 [ 1168.126652][T24385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.146452][T24385] RSP: 002b:00007ff697cdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.155154][T24385] RAX: ffffffffffffffda RBX: 00007ff697025fa0 RCX: 00007ff696d9e0d9 [ 1168.163504][T24385] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1168.171595][T24385] RBP: 00007ff697cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.179599][T24385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.187691][T24385] R13: 00007ff697026038 R14: 00007ff697025fa0 R15: 00007ffcfd1562c8 [ 1168.195803][T24385] [ 1168.263169][T24391] netlink: 'syz.2.6147': attribute type 21 has an invalid length. [ 1168.437488][T24397] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6148'. [ 1169.242682][T24426] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6158'. [ 1169.816737][T24444] netlink: 'syz.0.6166': attribute type 21 has an invalid length. [ 1170.554572][T24460] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6172'. [ 1171.354724][T24470] netlink: 'syz.4.6175': attribute type 9 has an invalid length. [ 1171.362985][T24470] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6175'. [ 1171.472599][T24482] FAULT_INJECTION: forcing a failure. [ 1171.472599][T24482] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.501780][T24482] CPU: 1 PID: 24482 Comm: syz.1.6181 Not tainted syzkaller #0 [ 1171.509439][T24482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1171.519642][T24482] Call Trace: [ 1171.523137][T24482] [ 1171.526205][T24482] dump_stack_lvl+0x18c/0x250 [ 1171.530931][T24482] ? show_regs_print_info+0x20/0x20 [ 1171.536332][T24482] ? load_image+0x420/0x420 [ 1171.540883][T24482] ? __might_sleep+0xe0/0xe0 [ 1171.545670][T24482] ? __lock_acquire+0x7d80/0x7d80 [ 1171.550808][T24482] should_fail_ex+0x394/0x4c0 [ 1171.555602][T24482] should_failslab+0x9/0x20 [ 1171.560330][T24482] slab_pre_alloc_hook+0x59/0x300 [ 1171.565574][T24482] ? ethnl_default_start+0x166/0x560 [ 1171.570896][T24482] ? ethnl_default_start+0x166/0x560 [ 1171.576542][T24482] __kmem_cache_alloc_node+0x53/0x250 [ 1171.582172][T24482] ? ethnl_default_start+0x166/0x560 [ 1171.587703][T24482] __kmalloc+0xa7/0x240 [ 1171.591992][T24482] ethnl_default_start+0x166/0x560 [ 1171.597303][T24482] genl_start+0x4b4/0x6c0 [ 1171.602226][T24482] __netlink_dump_start+0x43c/0x7a0 [ 1171.607676][T24482] genl_family_rcv_msg_dumpit+0x214/0x310 [ 1171.614066][T24482] ? genl_rcv_msg+0x7a0/0x7a0 [ 1171.618940][T24482] ? genl_get_cmd+0x693/0x930 [ 1171.623737][T24482] ? genl_family_rcv_msg_doit+0x310/0x310 [ 1171.629824][T24482] ? genl_start+0x6c0/0x6c0 [ 1171.634346][T24482] ? genl_dumpit+0x1a0/0x1a0 [ 1171.639058][T24482] genl_rcv_msg+0x5de/0x7a0 [ 1171.643719][T24482] ? genl_bind+0x360/0x360 [ 1171.648247][T24482] ? ethnl_default_doit+0xba0/0xba0 [ 1171.653721][T24482] ? ethnl_default_start+0x560/0x560 [ 1171.659130][T24482] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 1171.664942][T24482] ? ref_tracker_free+0x686/0x830 [ 1171.670307][T24482] netlink_rcv_skb+0x235/0x4c0 [ 1171.675527][T24482] ? genl_bind+0x360/0x360 [ 1171.680114][T24482] ? netlink_ack+0x1160/0x1160 [ 1171.685207][T24482] ? __lock_acquire+0x7d80/0x7d80 [ 1171.690395][T24482] ? down_read+0x1ac/0x2e0 [ 1171.695142][T24482] genl_rcv+0x28/0x40 [ 1171.699332][T24482] netlink_unicast+0x7b1/0x930 [ 1171.704316][T24482] netlink_sendmsg+0x8d0/0xbf0 [ 1171.709114][T24482] ? netlink_getsockopt+0x590/0x590 [ 1171.714614][T24482] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1171.720317][T24482] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1171.725913][T24482] ? security_socket_sendmsg+0x80/0xa0 [ 1171.731684][T24482] ? netlink_getsockopt+0x590/0x590 [ 1171.737128][T24482] ____sys_sendmsg+0x61b/0x980 [ 1171.741949][T24482] ? __asan_memset+0x22/0x40 [ 1171.747143][T24482] ? __sys_sendmsg_sock+0x30/0x30 [ 1171.752662][T24482] ? __import_iovec+0x5f2/0x850 [ 1171.757737][T24482] ? import_iovec+0x73/0xa0 [ 1171.762528][T24482] ___sys_sendmsg+0x2a6/0x360 [ 1171.767329][T24482] ? get_pid_task+0x20/0x1e0 [ 1171.772015][T24482] ? __sys_sendmsg+0x2b0/0x2b0 [ 1171.777027][T24482] ? __lock_acquire+0x7d80/0x7d80 [ 1171.782125][T24482] __se_sys_sendmsg+0x1d0/0x2c0 [ 1171.787140][T24482] ? __x64_sys_sendmsg+0x80/0x80 [ 1171.792303][T24482] ? lockdep_hardirqs_on+0x98/0x150 [ 1171.797578][T24482] do_syscall_64+0x55/0xb0 [ 1171.802119][T24482] ? clear_bhb_loop+0x40/0x90 [ 1171.806862][T24482] ? clear_bhb_loop+0x40/0x90 [ 1171.811701][T24482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1171.817660][T24482] RIP: 0033:0x7fcd8479e0d9 [ 1171.822188][T24482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.842177][T24482] RSP: 002b:00007fcd856b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.850766][T24482] RAX: ffffffffffffffda RBX: 00007fcd84a25fa0 RCX: 00007fcd8479e0d9 [ 1171.858891][T24482] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1171.866916][T24482] RBP: 00007fcd856b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.875029][T24482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.883210][T24482] R13: 00007fcd84a26038 R14: 00007fcd84a25fa0 R15: 00007fff2f7beaf8 [ 1171.891215][T24482] [ 1171.906810][T24484] netlink: 'syz.2.6182': attribute type 21 has an invalid length. [ 1172.077138][T24488] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6183'. [ 1173.355891][T24522] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6193'. [ 1173.476095][T24528] netlink: 'syz.2.6196': attribute type 10 has an invalid length. [ 1173.585233][T24528] team0: Port device wlan1 added [ 1173.623070][T24529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6196'. [ 1173.665109][T24533] netlink: 'syz.1.6197': attribute type 21 has an invalid length. [ 1173.721915][ T5781] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 1174.678880][T24551] netlink: 'syz.2.6203': attribute type 10 has an invalid length. [ 1174.722066][T24551] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.6203'. [ 1174.746178][T24557] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6205'. [ 1178.086453][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.093417][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.283150][T24583] netlink: 'syz.0.6213': attribute type 21 has an invalid length. [ 1178.888887][T24595] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6217'. [ 1180.010942][T24620] netlink: 'syz.4.6227': attribute type 21 has an invalid length. [ 1180.045972][T24616] netlink: 'syz.2.6226': attribute type 3 has an invalid length. [ 1180.054742][T24616] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6226'. [ 1180.217330][T24624] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1181.046090][T24635] netlink: 'syz.2.6232': attribute type 10 has an invalid length. [ 1181.347589][T24647] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6237'. [ 1181.775093][T24657] netlink: 'syz.2.6242': attribute type 21 has an invalid length. [ 1182.842669][T24684] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6249'. [ 1183.683793][T24706] netlink: 'syz.4.6258': attribute type 21 has an invalid length. [ 1183.837947][T24712] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.6260'. [ 1183.876893][T24712] bridge: RTM_NEWNEIGH with invalid ether address [ 1184.150107][T24724] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1184.874643][T24742] mac80211_hwsim hwsim143 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1184.902803][T24740] netlink: 'syz.4.6269': attribute type 3 has an invalid length. [ 1184.912507][T24740] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6269'. [ 1185.284881][T24759] netlink: 'syz.1.6273': attribute type 9 has an invalid length. [ 1185.301630][T24759] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1185.384120][T24760] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1185.396250][T24764] netlink: 'syz.4.6277': attribute type 21 has an invalid length. [ 1186.432474][T24791] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6286'. [ 1186.467943][T24793] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6287'. [ 1186.779667][T24802] netlink: 'syz.1.6288': attribute type 9 has an invalid length. [ 1186.787823][T24802] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6288'. [ 1187.165473][T24813] netlink: 'syz.0.6295': attribute type 21 has an invalid length. [ 1187.859097][T24826] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6299'. [ 1187.880622][T24828] FAULT_INJECTION: forcing a failure. [ 1187.880622][T24828] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.896179][T24828] CPU: 1 PID: 24828 Comm: syz.1.6301 Not tainted syzkaller #0 [ 1187.903814][T24828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1187.914227][T24828] Call Trace: [ 1187.917537][T24828] [ 1187.920491][T24828] dump_stack_lvl+0x18c/0x250 [ 1187.925202][T24828] ? show_regs_print_info+0x20/0x20 [ 1187.930689][T24828] ? load_image+0x420/0x420 [ 1187.935480][T24828] ? perf_trace_lock+0xfc/0x3b0 [ 1187.940374][T24828] should_fail_ex+0x394/0x4c0 [ 1187.945581][T24828] should_failslab+0x9/0x20 [ 1187.950992][T24828] slab_pre_alloc_hook+0x59/0x300 [ 1187.956554][T24828] kmem_cache_alloc+0x5a/0x2c0 [ 1187.961361][T24828] ? skb_clone+0x1eb/0x370 [ 1187.966103][T24828] skb_clone+0x1eb/0x370 [ 1187.970372][T24828] __netlink_deliver_tap+0x411/0x7f0 [ 1187.976527][T24828] ? netlink_deliver_tap+0x2e/0x1b0 [ 1187.981965][T24828] netlink_deliver_tap+0x19c/0x1b0 [ 1187.987116][T24828] __netlink_sendskb+0x4b/0x90 [ 1187.991999][T24828] netlink_dump+0xab3/0xec0 [ 1187.996530][T24828] ? netlink_lookup+0x200/0x200 [ 1188.001555][T24828] ? genl_start+0x571/0x6c0 [ 1188.006185][T24828] __netlink_dump_start+0x57c/0x7a0 [ 1188.011521][T24828] genl_family_rcv_msg_dumpit+0x214/0x310 [ 1188.017268][T24828] ? genl_rcv_msg+0x7a0/0x7a0 [ 1188.021960][T24828] ? genl_get_cmd+0x693/0x930 [ 1188.026741][T24828] ? genl_family_rcv_msg_doit+0x310/0x310 [ 1188.032745][T24828] ? genl_start+0x6c0/0x6c0 [ 1188.037351][T24828] ? genl_dumpit+0x1a0/0x1a0 [ 1188.042077][T24828] genl_rcv_msg+0x5de/0x7a0 [ 1188.046697][T24828] ? genl_bind+0x360/0x360 [ 1188.051145][T24828] ? ethnl_default_doit+0xba0/0xba0 [ 1188.056358][T24828] ? ethnl_default_start+0x560/0x560 [ 1188.061830][T24828] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 1188.067220][T24828] ? perf_trace_lock+0xfc/0x3b0 [ 1188.072109][T24828] netlink_rcv_skb+0x235/0x4c0 [ 1188.077100][T24828] ? genl_bind+0x360/0x360 [ 1188.081719][T24828] ? netlink_ack+0x1160/0x1160 [ 1188.086733][T24828] ? __lock_acquire+0x7d80/0x7d80 [ 1188.092178][T24828] ? down_read+0x1ac/0x2e0 [ 1188.096642][T24828] genl_rcv+0x28/0x40 [ 1188.100705][T24828] netlink_unicast+0x7b1/0x930 [ 1188.105778][T24828] netlink_sendmsg+0x8d0/0xbf0 [ 1188.110606][T24828] ? netlink_getsockopt+0x590/0x590 [ 1188.116087][T24828] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1188.121655][T24828] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1188.126993][T24828] ? security_socket_sendmsg+0x80/0xa0 [ 1188.132554][T24828] ? netlink_getsockopt+0x590/0x590 [ 1188.137775][T24828] ____sys_sendmsg+0x61b/0x980 [ 1188.142569][T24828] ? __asan_memset+0x22/0x40 [ 1188.147192][T24828] ? __sys_sendmsg_sock+0x30/0x30 [ 1188.152243][T24828] ? __import_iovec+0x5f2/0x850 [ 1188.157121][T24828] ? import_iovec+0x73/0xa0 [ 1188.161656][T24828] ___sys_sendmsg+0x2a6/0x360 [ 1188.166476][T24828] ? __sys_sendmsg+0x2b0/0x2b0 [ 1188.171278][T24828] ? __lock_acquire+0x7d80/0x7d80 [ 1188.176357][T24828] __se_sys_sendmsg+0x1d0/0x2c0 [ 1188.181230][T24828] ? __x64_sys_sendmsg+0x80/0x80 [ 1188.186437][T24828] ? lockdep_hardirqs_on+0x98/0x150 [ 1188.191673][T24828] do_syscall_64+0x55/0xb0 [ 1188.196218][T24828] ? clear_bhb_loop+0x40/0x90 [ 1188.200929][T24828] ? clear_bhb_loop+0x40/0x90 [ 1188.205714][T24828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1188.211974][T24828] RIP: 0033:0x7fcd8479e0d9 [ 1188.216772][T24828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.236596][T24828] RSP: 002b:00007fcd856b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1188.245126][T24828] RAX: ffffffffffffffda RBX: 00007fcd84a25fa0 RCX: 00007fcd8479e0d9 [ 1188.253213][T24828] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1188.261213][T24828] RBP: 00007fcd856b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.269300][T24828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.277287][T24828] R13: 00007fcd84a26038 R14: 00007fcd84a25fa0 R15: 00007fff2f7beaf8 [ 1188.285319][T24828] [ 1190.807555][T24863] netlink: 'syz.1.6315': attribute type 9 has an invalid length. [ 1190.828538][T24863] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6315'. [ 1190.871011][T24866] netlink: 'syz.4.6311': attribute type 21 has an invalid length. [ 1190.935402][T24864] netlink: 'syz.0.6309': attribute type 9 has an invalid length. [ 1190.959587][T24864] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6309'. [ 1191.069640][T24873] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6313'. [ 1191.943337][T24891] netlink: 'syz.4.6322': attribute type 3 has an invalid length. [ 1192.088283][T24894] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1192.781241][T24910] FAULT_INJECTION: forcing a failure. [ 1192.781241][T24910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.815122][T24910] CPU: 0 PID: 24910 Comm: syz.1.6329 Not tainted syzkaller #0 [ 1192.822970][T24910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.833178][T24910] Call Trace: [ 1192.836605][T24910] [ 1192.839668][T24910] dump_stack_lvl+0x18c/0x250 [ 1192.844408][T24910] ? show_regs_print_info+0x20/0x20 [ 1192.849669][T24910] ? load_image+0x420/0x420 [ 1192.854335][T24910] ? __lock_acquire+0x7d80/0x7d80 [ 1192.859411][T24910] ? snprintf+0xe9/0x140 [ 1192.863687][T24910] should_fail_ex+0x394/0x4c0 [ 1192.868412][T24910] _copy_to_user+0x2f/0xa0 [ 1192.872934][T24910] simple_read_from_buffer+0xe7/0x150 [ 1192.878608][T24910] proc_fail_nth_read+0x1e8/0x260 [ 1192.884044][T24910] ? proc_fault_inject_write+0x360/0x360 [ 1192.889762][T24910] ? fsnotify_perm+0x271/0x5e0 [ 1192.894568][T24910] ? proc_fault_inject_write+0x360/0x360 [ 1192.900229][T24910] vfs_read+0x298/0x990 [ 1192.904501][T24910] ? kernel_read+0x1e0/0x1e0 [ 1192.909287][T24910] ? __fget_files+0x28/0x460 [ 1192.913918][T24910] ? __fget_files+0x3fc/0x460 [ 1192.918713][T24910] ? __fdget_pos+0x2a3/0x330 [ 1192.924508][T24910] ? ksys_read+0x74/0x260 [ 1192.929128][T24910] ksys_read+0x151/0x260 [ 1192.933390][T24910] ? vfs_write+0x9a0/0x9a0 [ 1192.938391][T24910] ? lockdep_hardirqs_on+0x98/0x150 [ 1192.943619][T24910] do_syscall_64+0x55/0xb0 [ 1192.948058][T24910] ? clear_bhb_loop+0x40/0x90 [ 1192.952771][T24910] ? clear_bhb_loop+0x40/0x90 [ 1192.958161][T24910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.964160][T24910] RIP: 0033:0x7fcd8475e90e [ 1192.968682][T24910] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1192.988566][T24910] RSP: 002b:00007fcd856b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1192.997000][T24910] RAX: ffffffffffffffda RBX: 00007fcd856b26c0 RCX: 00007fcd8475e90e [ 1193.005157][T24910] RDX: 000000000000000f RSI: 00007fcd856b20a0 RDI: 0000000000000004 [ 1193.013318][T24910] RBP: 00007fcd856b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.021474][T24910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1193.029554][T24910] R13: 00007fcd84a26038 R14: 00007fcd84a25fa0 R15: 00007fff2f7beaf8 [ 1193.037552][T24910] [ 1193.067358][T24913] netlink: 'syz.0.6330': attribute type 21 has an invalid length. [ 1193.217657][T24917] netlink: 'syz.2.6327': attribute type 9 has an invalid length. [ 1193.226406][T24917] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6327'. [ 1193.543825][T24921] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6332'. [ 1195.225359][T24953] netlink: 'syz.4.6342': attribute type 9 has an invalid length. [ 1195.241802][T24953] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6342'. [ 1195.242037][T24952] netlink: 'syz.1.6345': attribute type 21 has an invalid length. [ 1195.521332][T24961] netlink: 'syz.0.6344': attribute type 9 has an invalid length. [ 1195.530384][T24961] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6344'. [ 1195.998456][T24973] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1196.285343][T24979] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.6353'. [ 1196.301717][T24979] netlink: zone id is out of range [ 1196.600746][T24995] netlink: 'syz.0.6361': attribute type 21 has an invalid length. [ 1196.870667][T25000] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6363'. [ 1197.860201][T25030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6373'. [ 1197.983143][T25032] netlink: 'syz.1.6371': attribute type 3 has an invalid length. [ 1197.991240][T25032] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1198.013166][T25033] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6374'. [ 1198.346504][T25044] netlink: 'syz.2.6377': attribute type 21 has an invalid length. [ 1199.366813][T25066] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6386'. [ 1199.710265][T25073] netlink: 'syz.1.6388': attribute type 2 has an invalid length. [ 1199.731337][T25073] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6388'. [ 1199.889564][T25084] netlink: 'syz.2.6391': attribute type 9 has an invalid length. [ 1199.915702][T25084] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6391'. [ 1199.983954][T25089] netlink: 'syz.1.6394': attribute type 21 has an invalid length. [ 1200.396825][T25098] netlink: 'syz.0.6395': attribute type 3 has an invalid length. [ 1200.415931][T25098] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6395'. [ 1201.075690][T25116] netlink: 'syz.2.6402': attribute type 3 has an invalid length. [ 1201.084461][T25116] __nla_validate_parse: 3 callbacks suppressed [ 1201.084478][T25116] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.6402'. [ 1201.559868][T25131] netlink: 'syz.4.6405': attribute type 3 has an invalid length. [ 1201.618799][T25131] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6405'. [ 1201.629722][T25133] netlink: 'syz.0.6409': attribute type 21 has an invalid length. [ 1202.005648][T25138] netlink: 'syz.2.6410': attribute type 3 has an invalid length. [ 1202.015756][T25138] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6410'. [ 1202.199584][T25151] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6415'. [ 1203.243566][T25159] netlink: 'syz.1.6417': attribute type 1 has an invalid length. [ 1203.275823][T25159] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6417'. [ 1203.751894][T25183] FAULT_INJECTION: forcing a failure. [ 1203.751894][T25183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.768442][T25183] CPU: 0 PID: 25183 Comm: syz.2.6426 Not tainted syzkaller #0 [ 1203.776070][T25183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.786274][T25183] Call Trace: [ 1203.789606][T25183] [ 1203.792597][T25183] dump_stack_lvl+0x18c/0x250 [ 1203.797415][T25183] ? show_regs_print_info+0x20/0x20 [ 1203.802657][T25183] ? load_image+0x420/0x420 [ 1203.807208][T25183] ? __might_fault+0xaa/0x120 [ 1203.811935][T25183] ? __lock_acquire+0x7d80/0x7d80 [ 1203.817206][T25183] should_fail_ex+0x394/0x4c0 [ 1203.821946][T25183] _copy_from_user+0x2f/0xe0 [ 1203.826599][T25183] __sys_bpf+0x23e/0x890 [ 1203.831158][T25183] ? bpf_link_show_fdinfo+0x390/0x390 [ 1203.833622][T25186] netlink: 'syz.0.6427': attribute type 21 has an invalid length. [ 1203.836580][T25183] ? lock_chain_count+0x20/0x20 [ 1203.849371][T25183] __x64_sys_bpf+0x7c/0x90 [ 1203.854260][T25183] do_syscall_64+0x55/0xb0 [ 1203.858875][T25183] ? clear_bhb_loop+0x40/0x90 [ 1203.863745][T25183] ? clear_bhb_loop+0x40/0x90 [ 1203.868455][T25183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.874505][T25183] RIP: 0033:0x7f734319e0d9 [ 1203.879046][T25183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.899403][T25183] RSP: 002b:00007f7343fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1203.908197][T25183] RAX: ffffffffffffffda RBX: 00007f7343425fa0 RCX: 00007f734319e0d9 [ 1203.916449][T25183] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1203.924443][T25183] RBP: 00007f7343fab090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.932457][T25183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.940711][T25183] R13: 00007f7343426038 R14: 00007f7343425fa0 R15: 00007ffd1edf3798 [ 1203.948996][T25183] [ 1204.207798][T25192] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.6429'. [ 1204.924237][T25200] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6432'. [ 1204.963851][T25200] openvswitch: netlink: Flow key attribute not present in set flow. [ 1206.305198][T25228] netlink: 'syz.2.6441': attribute type 21 has an invalid length. [ 1206.432647][T25240] netlink: 'syz.1.6444': attribute type 10 has an invalid length. [ 1206.458572][T25240] team0: Port device netdevsim0 added [ 1209.756923][T25291] netlink: 'syz.0.6462': attribute type 21 has an invalid length. [ 1210.194532][T25299] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.6463'. [ 1210.767281][T25310] netlink: 279 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1210.923243][T25310] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1211.326977][T25328] netlink: 'syz.0.6472': attribute type 9 has an invalid length. [ 1211.378721][T25328] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1212.370218][T25341] netlink: 'syz.0.6477': attribute type 29 has an invalid length. [ 1212.576384][T25341] netlink: 'syz.0.6477': attribute type 29 has an invalid length. [ 1212.696534][T25348] netlink: 'syz.2.6480': attribute type 3 has an invalid length. [ 1212.720153][T25348] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6480'. [ 1212.788406][T25343] syzkaller0: entered promiscuous mode [ 1212.794981][T25343] syzkaller0: entered allmulticast mode [ 1213.022073][T25363] netlink: 'syz.2.6485': attribute type 21 has an invalid length. [ 1214.448106][T25376] netlink: 'syz.2.6486': attribute type 29 has an invalid length. [ 1218.291246][T25376] netlink: 'syz.2.6486': attribute type 29 has an invalid length. [ 1218.619981][T25388] netlink: 'syz.0.6488': attribute type 10 has an invalid length. [ 1218.643191][T25388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1218.693908][T25388] batman_adv: batadv0: Adding interface: veth0_vlan [ 1218.701004][T25388] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1024) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.772270][T25388] batman_adv: batadv0: Interface activated: veth0_vlan [ 1218.944615][T25399] netlink: 'syz.0.6494': attribute type 21 has an invalid length. [ 1219.031041][T25402] netlink: 'syz.1.6495': attribute type 19 has an invalid length. [ 1219.039856][T25402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6495'. [ 1219.649359][T25415] netlink: 'syz.1.6497': attribute type 29 has an invalid length. [ 1219.672767][T25415] netlink: 'syz.1.6497': attribute type 29 has an invalid length. [ 1220.665570][T25417] syzkaller0: entered promiscuous mode [ 1220.681201][T25417] syzkaller0: entered allmulticast mode [ 1220.835663][T25430] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1225.577364][T25476] netlink: 'syz.0.6516': attribute type 29 has an invalid length. [ 1225.593432][T25476] netlink: 'syz.0.6516': attribute type 29 has an invalid length. [ 1226.288819][T25481] syzkaller0: entered promiscuous mode [ 1226.311979][T25481] syzkaller0: entered allmulticast mode [ 1226.593902][T25504] netlink: 'syz.4.6523': attribute type 29 has an invalid length. [ 1229.779477][T25504] netlink: 'syz.4.6523': attribute type 29 has an invalid length. [ 1229.787788][T25506] netlink: 'syz.2.6522': attribute type 6 has an invalid length. [ 1229.799757][T25506] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6522'. [ 1230.642389][T25529] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1230.673797][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1230.738289][T25529] netlink: 'syz.1.6529': attribute type 21 has an invalid length. [ 1230.752164][T25529] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1231.235407][T25541] netlink: 'syz.0.6532': attribute type 3 has an invalid length. [ 1231.259700][T25541] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6532'. [ 1231.524632][ T5781] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 1231.557263][T25546] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.6534'. [ 1231.685183][T25546] netlink: 'syz.2.6534': attribute type 4 has an invalid length. [ 1231.710206][T25546] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6534'. [ 1231.960110][T25546] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1233.373354][T25584] netlink: 206468 bytes leftover after parsing attributes in process `syz.4.6542'. [ 1233.405265][T25584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6542'. [ 1233.456119][T25584] netlink: 'syz.4.6542': attribute type 21 has an invalid length. [ 1233.469371][T25584] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6542'. [ 1233.759122][ T5781] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 1234.104291][T25600] netlink: 'syz.4.6551': attribute type 4 has an invalid length. [ 1234.263314][T25600] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1234.532269][T25613] netlink: 'syz.2.6554': attribute type 5 has an invalid length. [ 1236.812396][T25633] netlink: 'syz.2.6561': attribute type 21 has an invalid length. [ 1236.820371][T25633] __nla_validate_parse: 2 callbacks suppressed [ 1236.820384][T25633] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6561'. [ 1236.827012][T25630] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.6561'. [ 1236.827182][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6561'. [ 1236.874604][T25638] netlink: 'syz.4.6562': attribute type 9 has an invalid length. [ 1236.914670][T25638] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6562'. [ 1236.973531][ T5781] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 1237.610188][T25644] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.6565'. [ 1237.883373][T25644] netlink: 'syz.1.6565': attribute type 4 has an invalid length. [ 1237.894988][T25644] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6565'. [ 1238.133705][T25644] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1239.251544][T25673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.271960][T25673] bridge0: entered allmulticast mode [ 1239.528660][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.535816][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.734169][T25688] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1239.799273][T25688] netlink: 'syz.0.6581': attribute type 4 has an invalid length. [ 1239.832103][T25688] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1239.974355][T25688] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1241.649213][T25720] batadv0: entered promiscuous mode [ 1241.702032][T25720] batadv0: entered allmulticast mode [ 1242.215474][T25718] netlink: 'syz.4.6593': attribute type 9 has an invalid length. [ 1242.271633][T25718] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.6593'. [ 1242.391691][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6596'. [ 1242.443195][T25735] netlink: 'syz.0.6597': attribute type 21 has an invalid length. [ 1242.656400][T25742] netlink: 'syz.2.6601': attribute type 3 has an invalid length. [ 1242.668049][T25742] netlink: 'syz.2.6601': attribute type 6 has an invalid length. [ 1242.679514][T25742] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1243.756769][T25759] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.6605'. [ 1244.220598][T25774] netlink: 'syz.4.6612': attribute type 29 has an invalid length. [ 1244.236567][T25774] netlink: 'syz.4.6612': attribute type 29 has an invalid length. [ 1244.615360][T25776] syzkaller0: entered promiscuous mode [ 1244.627014][T25776] syzkaller0: entered allmulticast mode [ 1248.630733][T25784] netlink: 'syz.0.6615': attribute type 21 has an invalid length. [ 1249.357557][T25796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1249.370615][T25796] IPv6: NLM_F_CREATE should be set when creating new route [ 1249.378906][T25796] IPv6: NLM_F_CREATE should be set when creating new route [ 1249.386836][T25796] IPv6: NLM_F_CREATE should be set when creating new route [ 1249.984106][T25811] netlink: 'syz.1.6623': attribute type 1 has an invalid length. [ 1250.068699][T25808] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.6621'. [ 1250.079684][T25811] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6623'. [ 1250.150475][T25809] netlink: 'syz.2.6622': attribute type 3 has an invalid length. [ 1250.186749][T25809] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6622'. [ 1250.188319][T25811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.239282][T25811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.285589][T25811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1250.305300][T25811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.664189][T25820] netlink: 'syz.4.6625': attribute type 21 has an invalid length. [ 1251.631431][T25842] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.6633'. [ 1252.326534][T25860] netlink: 'syz.0.6640': attribute type 21 has an invalid length. [ 1254.470927][T25904] netlink: 'syz.4.6656': attribute type 21 has an invalid length. [ 1254.986226][T25918] netlink: 'syz.2.6659': attribute type 9 has an invalid length. [ 1255.005497][T25918] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6659'. [ 1255.285414][T25920] ================================================================== [ 1255.293951][T25920] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 1255.302026][T25920] Write of size 32 at addr ffff88806053c510 by task syz.1.6660/25920 [ 1255.310169][T25920] [ 1255.312527][T25920] CPU: 1 PID: 25920 Comm: syz.1.6660 Not tainted syzkaller #0 [ 1255.320032][T25920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1255.330491][T25920] Call Trace: [ 1255.334200][T25920] [ 1255.337268][T25920] dump_stack_lvl+0x18c/0x250 [ 1255.342194][T25920] ? read_lock_is_recursive+0x20/0x20 [ 1255.348034][T25920] ? show_regs_print_info+0x20/0x20 [ 1255.353683][T25920] ? load_image+0x420/0x420 [ 1255.358599][T25920] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1255.364202][T25920] ? __virt_addr_valid+0x10c/0x380 [ 1255.369543][T25920] ? __virt_addr_valid+0x10c/0x380 [ 1255.374879][T25920] ? __virt_addr_valid+0x10c/0x380 [ 1255.380046][T25920] print_report+0xa8/0x210 [ 1255.384522][T25920] ? __bpf_get_stackid+0x6c7/0x900 [ 1255.389860][T25920] kasan_report+0x117/0x150 [ 1255.394608][T25920] ? __bpf_get_stackid+0x6c7/0x900 [ 1255.399966][T25920] kasan_check_range+0x241/0x290 [ 1255.404953][T25920] ? __bpf_get_stackid+0x6c7/0x900 [ 1255.410118][T25920] __asan_memcpy+0x40/0x70 [ 1255.414762][T25920] __bpf_get_stackid+0x6c7/0x900 [ 1255.419933][T25920] bpf_get_stackid_pe+0x2f0/0x410 [ 1255.425026][T25920] bpf_prog_dc8122861f23e86a+0x33/0x43 [ 1255.430702][T25920] bpf_overflow_handler+0x43f/0x510 [ 1255.435963][T25920] ? bpf_overflow_handler+0xde/0x510 [ 1255.441312][T25920] ? tp_perf_event_destroy+0x20/0x20 [ 1255.446639][T25920] ? mark_lock+0x94/0x320 [ 1255.451076][T25920] ? verify_lock_unused+0x140/0x140 [ 1255.456300][T25920] ? __perf_event_account_interrupt+0x187/0x280 [ 1255.462723][T25920] __perf_event_overflow+0x461/0x660 [ 1255.468022][T25920] perf_swevent_overflow+0x274/0x340 [ 1255.473349][T25920] ? perf_event_switch_output+0x790/0x790 [ 1255.479237][T25920] ? rcu_is_watching+0x15/0xb0 [ 1255.484035][T25920] perf_swevent_event+0x45c/0x570 [ 1255.489177][T25920] ? perf_tp_event+0x1550/0x1550 [ 1255.494317][T25920] ___perf_sw_event+0x4ab/0x730 [ 1255.499203][T25920] ? vma_end_read+0x18/0x170 [ 1255.504161][T25920] ? ___perf_sw_event+0x19e/0x730 [ 1255.509322][T25920] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1255.515961][T25920] ? perf_trace_lock+0xfc/0x3b0 [ 1255.520910][T25920] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1255.527047][T25920] ? __lock_acquire+0x7d80/0x7d80 [ 1255.532107][T25920] ? lock_chain_count+0x20/0x20 [ 1255.537125][T25920] __perf_sw_event+0x139/0x270 [ 1255.541944][T25920] do_user_addr_fault+0x1242/0x12d0 [ 1255.547571][T25920] ? lock_chain_count+0x20/0x20 [ 1255.552646][T25920] ? rcu_is_watching+0x15/0xb0 [ 1255.557730][T25920] exc_page_fault+0x64/0x100 [ 1255.562456][T25920] asm_exc_page_fault+0x26/0x30 [ 1255.567692][T25920] RIP: 0033:0x7fff2f7f0a21 [ 1255.572404][T25920] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 1255.593376][T25920] RSP: 002b:00007fcd856b1ff0 EFLAGS: 00010202 [ 1255.600130][T25920] RAX: 000c57f2275f656c RBX: 00007fff2f7ec0b0 RCX: 0000000000000018 [ 1255.608242][T25920] RDX: 000000000cc06f83 RSI: 00007fcd856b2080 RDI: 7fffffffffffffff [ 1255.616363][T25920] RBP: 00007fcd856b2030 R08: 00000000000004e7 R09: 0000000000745d1e [ 1255.624391][T25920] R10: 000002880d2e73c2 R11: 000000000003bab0 R12: 0000000000000010 [ 1255.632410][T25920] R13: 00007fcd84a26038 R14: 00007fff2f7ec080 R15: 000000000003bab0 [ 1255.640413][T25920] [ 1255.643564][T25920] [ 1255.645899][T25920] Allocated by task 25921: [ 1255.650561][T25920] kasan_set_track+0x4e/0x70 [ 1255.655288][T25920] __kasan_kmalloc+0x8f/0xa0 [ 1255.660079][T25920] __kmalloc_node+0xb6/0x240 [ 1255.664777][T25920] bpf_map_area_alloc+0x5e/0x110 [ 1255.670166][T25920] prealloc_elems_and_freelist+0x86/0x1c0 [ 1255.676074][T25920] stack_map_alloc+0x32b/0x4b0 [ 1255.681070][T25920] map_create+0x877/0x12f0 [ 1255.686075][T25920] __sys_bpf+0x651/0x890 [ 1255.690994][T25920] __x64_sys_bpf+0x7c/0x90 [ 1255.695463][T25920] do_syscall_64+0x55/0xb0 [ 1255.700093][T25920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1255.706034][T25920] [ 1255.708382][T25920] Last potentially related work creation: [ 1255.714279][T25920] kasan_save_stack+0x3e/0x60 [ 1255.718974][T25920] __kasan_record_aux_stack+0xaf/0xc0 [ 1255.724562][T25920] call_rcu+0x153/0x900 [ 1255.728937][T25920] __nf_register_net_hook+0x787/0x910 [ 1255.734443][T25920] nf_register_net_hook+0xb2/0x190 [ 1255.739681][T25920] nf_register_net_hooks+0x44/0x1b0 [ 1255.744913][T25920] ebt_register_table+0xd12/0x10e0 [ 1255.750144][T25920] find_inlist_lock_noload+0x16a/0x250 [ 1255.755706][T25920] do_ebt_get_ctl+0x2d6/0x1d30 [ 1255.760659][T25920] nf_getsockopt+0x262/0x280 [ 1255.765544][T25920] ip_getsockopt+0x19f/0x230 [ 1255.770324][T25920] do_sock_getsockopt+0x379/0x450 [ 1255.775623][T25920] __x64_sys_getsockopt+0x1d6/0x280 [ 1255.780914][T25920] do_syscall_64+0x55/0xb0 [ 1255.785522][T25920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1255.791550][T25920] [ 1255.793917][T25920] The buggy address belongs to the object at ffff88806053c500 [ 1255.793917][T25920] which belongs to the cache kmalloc-cg-64 of size 64 [ 1255.808168][T25920] The buggy address is located 16 bytes inside of [ 1255.808168][T25920] allocated 40-byte region [ffff88806053c500, ffff88806053c528) [ 1255.823045][T25920] [ 1255.825388][T25920] The buggy address belongs to the physical page: [ 1255.831834][T25920] page:ffffea0001814f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6053c [ 1255.842368][T25920] memcg:ffff88802baf1c01 [ 1255.846704][T25920] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1255.854650][T25920] page_type: 0xffffffff() [ 1255.859292][T25920] raw: 00fff00000000800 ffff888017c4da00 ffffea0000c3b940 dead000000000004 [ 1255.868038][T25920] raw: 0000000000000000 0000000000200020 00000001ffffffff ffff88802baf1c01 [ 1255.877530][T25920] page dumped because: kasan: bad access detected [ 1255.884316][T25920] page_owner tracks the page as allocated [ 1255.890038][T25920] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 13142, tgid 13142 (syz-executor), ts 749690707813, free_ts 749674404519 [ 1255.910162][T25920] post_alloc_hook+0x1c1/0x200 [ 1255.915084][T25920] get_page_from_freelist+0x2181/0x22a0 [ 1255.920717][T25920] __alloc_pages+0x1f0/0x460 [ 1255.925412][T25920] alloc_slab_page+0x5d/0x180 [ 1255.930545][T25920] new_slab+0x87/0x2d0 [ 1255.934640][T25920] ___slab_alloc+0xc5c/0x12f0 [ 1255.939446][T25920] __kmem_cache_alloc_node+0x11f/0x250 [ 1255.944952][T25920] kmalloc_trace+0x2a/0xe0 [ 1255.949602][T25920] alloc_fdtable+0xca/0x2c0 [ 1255.955368][T25920] dup_fd+0x747/0xa20 [ 1255.959373][T25920] copy_files+0xaf/0x110 [ 1255.963802][T25920] copy_process+0x157d/0x3da0 [ 1255.968523][T25920] kernel_clone+0x24b/0x8a0 [ 1255.973120][T25920] __x64_sys_clone+0x1b7/0x230 [ 1255.977965][T25920] do_syscall_64+0x55/0xb0 [ 1255.982436][T25920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1255.988374][T25920] page last free stack trace: [ 1255.993444][T25920] free_unref_page_prepare+0x7d7/0x8f0 [ 1255.999104][T25920] free_unref_page_list+0xbe/0x860 [ 1256.004397][T25920] release_pages+0x208a/0x2300 [ 1256.009271][T25920] tlb_flush_mmu+0x379/0x510 [ 1256.013967][T25920] tlb_finish_mmu+0xf4/0x220 [ 1256.018748][T25920] exit_mmap+0x428/0xb90 [ 1256.023180][T25920] __mmput+0x118/0x3a0 [ 1256.027519][T25920] exit_mm+0x23f/0x340 [ 1256.031661][T25920] do_exit+0x909/0x2530 [ 1256.036088][T25920] do_group_exit+0x22d/0x2f0 [ 1256.040954][T25920] __x64_sys_exit_group+0x3f/0x40 [ 1256.046509][T25920] do_syscall_64+0x55/0xb0 [ 1256.051130][T25920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1256.057396][T25920] [ 1256.059745][T25920] Memory state around the buggy address: [ 1256.065485][T25920] ffff88806053c400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1256.073762][T25920] ffff88806053c480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1256.082221][T25920] >ffff88806053c500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1256.090894][T25920] ^ [ 1256.096453][T25920] ffff88806053c580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1256.104697][T25920] ffff88806053c600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1256.112938][T25920] ================================================================== [ 1256.121526][T25920] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1256.129036][T25920] CPU: 1 PID: 25920 Comm: syz.1.6660 Not tainted syzkaller #0 [ 1256.137056][T25920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1256.148030][T25920] Call Trace: [ 1256.151621][T25920] [ 1256.155118][T25920] dump_stack_lvl+0x18c/0x250 [ 1256.160067][T25920] ? show_regs_print_info+0x20/0x20 [ 1256.165395][T25920] ? load_image+0x420/0x420 [ 1256.170097][T25920] panic+0x2ca/0x720 [ 1256.174614][T25920] ? __lock_acquire+0x7d80/0x7d80 [ 1256.179937][T25920] ? bpf_jit_dump+0xd0/0xd0 [ 1256.184586][T25920] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1256.191031][T25920] ? _raw_spin_unlock+0x40/0x40 [ 1256.196164][T25920] ? __bpf_get_stackid+0x6c7/0x900 [ 1256.201591][T25920] check_panic_on_warn+0x84/0xa0 [ 1256.206590][T25920] ? __bpf_get_stackid+0x6c7/0x900 [ 1256.211731][T25920] end_report+0x6f/0x130 [ 1256.215987][T25920] kasan_report+0x128/0x150 [ 1256.220507][T25920] ? __bpf_get_stackid+0x6c7/0x900 [ 1256.225856][T25920] kasan_check_range+0x241/0x290 [ 1256.230829][T25920] ? __bpf_get_stackid+0x6c7/0x900 [ 1256.236136][T25920] __asan_memcpy+0x40/0x70 [ 1256.240572][T25920] __bpf_get_stackid+0x6c7/0x900 [ 1256.245540][T25920] bpf_get_stackid_pe+0x2f0/0x410 [ 1256.250684][T25920] bpf_prog_dc8122861f23e86a+0x33/0x43 [ 1256.256334][T25920] bpf_overflow_handler+0x43f/0x510 [ 1256.261863][T25920] ? bpf_overflow_handler+0xde/0x510 [ 1256.267833][T25920] ? tp_perf_event_destroy+0x20/0x20 [ 1256.273344][T25920] ? mark_lock+0x94/0x320 [ 1256.278206][T25920] ? verify_lock_unused+0x140/0x140 [ 1256.284133][T25920] ? __perf_event_account_interrupt+0x187/0x280 [ 1256.290602][T25920] __perf_event_overflow+0x461/0x660 [ 1256.295937][T25920] perf_swevent_overflow+0x274/0x340 [ 1256.301338][T25920] ? perf_event_switch_output+0x790/0x790 [ 1256.307162][T25920] ? rcu_is_watching+0x15/0xb0 [ 1256.311960][T25920] perf_swevent_event+0x45c/0x570 [ 1256.317013][T25920] ? perf_tp_event+0x1550/0x1550 [ 1256.322180][T25920] ___perf_sw_event+0x4ab/0x730 [ 1256.327183][T25920] ? vma_end_read+0x18/0x170 [ 1256.332226][T25920] ? ___perf_sw_event+0x19e/0x730 [ 1256.337349][T25920] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1256.344385][T25920] ? perf_trace_lock+0xfc/0x3b0 [ 1256.349524][T25920] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1256.356296][T25920] ? __lock_acquire+0x7d80/0x7d80 [ 1256.361439][T25920] ? lock_chain_count+0x20/0x20 [ 1256.366395][T25920] __perf_sw_event+0x139/0x270 [ 1256.371263][T25920] do_user_addr_fault+0x1242/0x12d0 [ 1256.376478][T25920] ? lock_chain_count+0x20/0x20 [ 1256.381343][T25920] ? rcu_is_watching+0x15/0xb0 [ 1256.386433][T25920] exc_page_fault+0x64/0x100 [ 1256.391369][T25920] asm_exc_page_fault+0x26/0x30 [ 1256.396404][T25920] RIP: 0033:0x7fff2f7f0a21 [ 1256.401232][T25920] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 1256.421794][T25920] RSP: 002b:00007fcd856b1ff0 EFLAGS: 00010202 [ 1256.427879][T25920] RAX: 000c57f2275f656c RBX: 00007fff2f7ec0b0 RCX: 0000000000000018 [ 1256.436563][T25920] RDX: 000000000cc06f83 RSI: 00007fcd856b2080 RDI: 7fffffffffffffff [ 1256.444558][T25920] RBP: 00007fcd856b2030 R08: 00000000000004e7 R09: 0000000000745d1e [ 1256.452726][T25920] R10: 000002880d2e73c2 R11: 000000000003bab0 R12: 0000000000000010 [ 1256.460705][T25920] R13: 00007fcd84a26038 R14: 00007fff2f7ec080 R15: 000000000003bab0 [ 1256.469250][T25920] [ 1256.472602][T25920] Kernel Offset: disabled [ 1256.477027][T25920] Rebooting in 86400 seconds..