last executing test programs: 6.721968089s ago: executing program 1 (id=8218): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9, 0x34, 0x2, 0xc, 0x0, 0x7fff, 0x2000, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xbfb, 0x2}, 0x100070, 0x7, 0x3782e7ae, 0x5, 0x2, 0x9b3, 0xde7a, 0x0, 0x200, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 6.099661375s ago: executing program 1 (id=8222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x15, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1be, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x3f, 0xd0, &(0x7f0000000540)=""/208, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x5, 0x5, 0x7, 0x5}, {0x0, 0x2, 0xf}, {0x5, 0x1, 0xc, 0x6}], 0x10, 0x5d}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 6.031655452s ago: executing program 0 (id=8223): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 5.884007075s ago: executing program 0 (id=8225): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000700053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc", 0x13}], 0x1}, 0x2404c084) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x814) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x6, 0x8, r1, 0x8, '\x00', r6, r4, 0x0, 0x3, 0x0, 0xd}, 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2019c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) ioctl$TUNSETIFINDEX(r7, 0x5450, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 5.711580403s ago: executing program 3 (id=8226): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 5.448341604s ago: executing program 3 (id=8228): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xa1, 0x10, &(0x7f00000003c0)="f691d3b86ee37e7155fd2b5688980b35bdfceaf3cf835d8b893a18069ee95fa94716b3b8638d4496433a5ee3cbea38d0669bba68da54b1fcd53f8d0aa42360cea4a64ec3b1099f0c65867f3b663721b6dd3b05e51ff71bca12164a347833dd105f97a1ab062a31fa242b4198939b05487f16cf07228a5dc2e64eec0071310b48fb75145ee773288d1d17615331c20eaa7f27ed22a0e21bc01ec603b8d79f5ba0a9", &(0x7f0000000480)=""/16, 0x8, 0x0, 0xad, 0x32, &(0x7f00000004c0)="a77d14892d9d3bc2dcae326b732d4aea1336554573bb7dbd39fc20f6347418ed2932c2732a5c1b58f6fa488fee4425c12a928992ba9b33c59907984d1783ff5a47d1c5b0d6f7285c5b94c975647b400e28f28d650ac5bd400dae5814f093453c450b51bc4eccd02e2e2439ef5b0d2093ba88c4212e6083e1f3a5863336e61d29bf70e993fba058b665155732f8c6627cfb5947e80ef665483678ff532a1b005a44662e823d6843af56fa28b57d", &(0x7f0000000580)="b205d729aebe5403e65a1fb72eb03e1cdc3ca2253694cfb1814df74a59301c972a5569aefc1e23119cac0579f6a593288bb3", 0x0, 0x0, 0x6}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x1}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8927, &(0x7f0000000280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'dummy0\x00', 0x800}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4008000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x2, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000020000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085001600170000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000700)='io.pressure\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r10) socket$kcm(0x23, 0x5, 0x0) write$cgroup_type(r10, &(0x7f0000000080), 0x11ffffce1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 2.732202744s ago: executing program 2 (id=8230): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 2.730853664s ago: executing program 0 (id=8238): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000700053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc", 0x13}], 0x1}, 0x2404c084) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x814) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x6, 0x8, r1, 0x8, '\x00', r6, r4, 0x0, 0x3, 0x0, 0xd}, 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2019c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) ioctl$TUNSETIFINDEX(r7, 0x5450, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 2.523657145s ago: executing program 3 (id=8231): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9, 0x34, 0x2, 0xc, 0x0, 0x7fff, 0x2000, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xbfb, 0x2}, 0x100070, 0x7, 0x3782e7ae, 0x5, 0x2, 0x9b3, 0xde7a, 0x0, 0x200, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 2.520709475s ago: executing program 1 (id=8240): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xa1, 0x10, &(0x7f00000003c0)="f691d3b86ee37e7155fd2b5688980b35bdfceaf3cf835d8b893a18069ee95fa94716b3b8638d4496433a5ee3cbea38d0669bba68da54b1fcd53f8d0aa42360cea4a64ec3b1099f0c65867f3b663721b6dd3b05e51ff71bca12164a347833dd105f97a1ab062a31fa242b4198939b05487f16cf07228a5dc2e64eec0071310b48fb75145ee773288d1d17615331c20eaa7f27ed22a0e21bc01ec603b8d79f5ba0a9", &(0x7f0000000480)=""/16, 0x8, 0x0, 0xad, 0x32, &(0x7f00000004c0)="a77d14892d9d3bc2dcae326b732d4aea1336554573bb7dbd39fc20f6347418ed2932c2732a5c1b58f6fa488fee4425c12a928992ba9b33c59907984d1783ff5a47d1c5b0d6f7285c5b94c975647b400e28f28d650ac5bd400dae5814f093453c450b51bc4eccd02e2e2439ef5b0d2093ba88c4212e6083e1f3a5863336e61d29bf70e993fba058b665155732f8c6627cfb5947e80ef665483678ff532a1b005a44662e823d6843af56fa28b57d", &(0x7f0000000580)="b205d729aebe5403e65a1fb72eb03e1cdc3ca2253694cfb1814df74a59301c972a5569aefc1e23119cac0579f6a593288bb3", 0x0, 0x0, 0x6}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x1}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8927, &(0x7f0000000280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'dummy0\x00', 0x800}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4008000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x2, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000020000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085001600170000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000700)='io.pressure\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r10) socket$kcm(0x23, 0x5, 0x0) write$cgroup_type(r10, &(0x7f0000000080), 0x11ffffce1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 2.200417626s ago: executing program 0 (id=8232): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x7, &(0x7f0000000880)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x48}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc9, &(0x7f00000008c0)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000feffdfff0000000000000800850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0xc, 0x7, 0x0, 0x80000000, 0xa8e4242b05975b15, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000a00), 0x2}, 0x104005, 0x8001, 0xff, 0x9, 0x40, 0x8, 0x4, 0x0, 0x8, 0x0, 0x10}, r2, 0xa, r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000002000000", @ANYRES32, @ANYBLOB="9931e5f88d149717360b6ce9db9f66fc4eacf4f560f40f90a59651192922abe0be0e1e0d4a62cbd0b0678b1b8dd886663e38ac50d40432627e349589a5cf70194c4b35ca7bc533c3208c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$kcm(0x10, 0x2, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000084000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8064}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000680)=""/168, 0xa8}, {&(0x7f0000000740)=""/181, 0xb5}], 0x2, &(0x7f00000004c0)=""/47, 0x2f}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) sendmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="ef", 0x1}], 0x1}, 0x40000) 2.200109276s ago: executing program 2 (id=8233): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 1.223478146s ago: executing program 3 (id=8234): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 1.221720265s ago: executing program 2 (id=8235): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)}, 0xe0) 1.214815284s ago: executing program 0 (id=8236): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 1.08339064s ago: executing program 1 (id=8237): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 980.907401ms ago: executing program 3 (id=8239): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000700053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc", 0x13}], 0x1}, 0x2404c084) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x814) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x6, 0x8, r1, 0x8, '\x00', r6, r4, 0x0, 0x3, 0x0, 0xd}, 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2019c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) ioctl$TUNSETIFINDEX(r7, 0x5450, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 972.642189ms ago: executing program 2 (id=8248): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{0x0}], 0x1}, 0xe0) 614.434774ms ago: executing program 0 (id=8241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x15, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1be, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x3f, 0xd0, &(0x7f0000000540)=""/208, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x5, 0x5, 0x7, 0x5}, {0x0, 0x2, 0xf}, {0x5, 0x1, 0xc, 0x6}], 0x10, 0x5d}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 470.302497ms ago: executing program 2 (id=8242): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000700053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc", 0x13}], 0x1}, 0x2404c084) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x814) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x6, 0x8, r1, 0x8, '\x00', r6, r4, 0x0, 0x3, 0x0, 0xd}, 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2019c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) ioctl$TUNSETIFINDEX(r7, 0x5450, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 162.68428ms ago: executing program 3 (id=8243): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3948, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$kcm(0x2c, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8) 161.90459ms ago: executing program 1 (id=8252): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000300721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x3}, 0x0) 477.47µs ago: executing program 1 (id=8244): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000700053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc", 0x13}], 0x1}, 0x2404c084) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x814) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x6, 0x8, r1, 0x8, '\x00', r6, r4, 0x0, 0x3, 0x0, 0xd}, 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2019c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) ioctl$TUNSETIFINDEX(r7, 0x5450, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 0s ago: executing program 2 (id=8245): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x8a, 0x10, &(0x7f00000003c0)="f691d3b86ee37e7155fd2b5688980b35bdfceaf3cf835d8b893a18069ee95fa94716b3b8638d4496433a5ee3cbea38d0669bba68da54b1fcd53f8d0aa42360cea4a64ec3b1099f0c65867f3b663721b6dd3b05e51ff71bca12164a347833dd105f97a1ab062a31fa242b4198939b05487f16cf07228a5dc2e64eec0071310b48fb75145ee773288d1d17", &(0x7f0000000480)=""/16, 0x8, 0x0, 0xad, 0x32, &(0x7f00000004c0)="a77d14892d9d3bc2dcae326b732d4aea1336554573bb7dbd39fc20f6347418ed2932c2732a5c1b58f6fa488fee4425c12a928992ba9b33c59907984d1783ff5a47d1c5b0d6f7285c5b94c975647b400e28f28d650ac5bd400dae5814f093453c450b51bc4eccd02e2e2439ef5b0d2093ba88c4212e6083e1f3a5863336e61d29bf70e993fba058b665155732f8c6627cfb5947e80ef665483678ff532a1b005a44662e823d6843af56fa28b57d", &(0x7f0000000580)="b205d729aebe5403e65a1fb72eb03e1cdc3ca2253694cfb1814df74a59301c972a5569aefc1e23119cac0579f6a593288bb3", 0x0, 0x0, 0x6}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x1}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8927, &(0x7f0000000280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'dummy0\x00', 0x800}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4008000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x2, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000020000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085001600170000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000700)='io.pressure\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r10) socket$kcm(0x23, 0x5, 0x0) write$cgroup_type(r10, &(0x7f0000000080), 0x11ffffce1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) kernel console output (not intermixed with test programs): d blocking state [ 1552.627427][T27879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.634738][T27879] bridge_slave_0: entered allmulticast mode [ 1552.652605][T27879] bridge_slave_0: entered promiscuous mode [ 1552.682390][T27879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.725127][T27879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.765183][T27879] bridge_slave_1: entered allmulticast mode [ 1552.772808][T27879] bridge_slave_1: entered promiscuous mode [ 1552.949363][T20531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.049533][T27879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.101720][T27879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1553.489086][T20531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.654735][T27905] syzkaller0: entered promiscuous mode [ 1553.660765][T27905] syzkaller0: entered allmulticast mode [ 1553.679639][T27879] team0: Port device team_slave_0 added [ 1553.690306][T27914] netlink: 'syz.1.7003': attribute type 3 has an invalid length. [ 1553.696719][T27879] team0: Port device team_slave_1 added [ 1553.708822][T27914] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7003'. [ 1553.740922][T20531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.929788][T20531] bond0: (slave netdevsim0): Releasing backup interface [ 1553.954063][T20531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.107828][T13230] Bluetooth: hci1: command tx timeout [ 1555.887373][T27948] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7014'. [ 1555.897573][T27948] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1556.154084][T27950] netlink: 'syz.2.7015': attribute type 3 has an invalid length. [ 1556.165096][T27950] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7015'. [ 1556.201409][T13230] Bluetooth: hci1: command tx timeout [ 1557.338734][T27879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.345972][T27879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.372733][T27879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.385716][T27879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.392713][T27879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.428751][T27879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.446436][T27930] netlink: 'syz.1.7008': attribute type 10 has an invalid length. [ 1557.590175][T27879] hsr_slave_0: entered promiscuous mode [ 1557.605734][T27879] hsr_slave_1: entered promiscuous mode [ 1557.612945][T27879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1557.654890][T27879] Cannot create hsr debugfs directory [ 1558.270356][T13230] Bluetooth: hci1: command tx timeout [ 1558.474542][T27995] netlink: 'syz.0.7026': attribute type 3 has an invalid length. [ 1558.500991][T27995] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7026'. [ 1560.345271][T13230] Bluetooth: hci1: command tx timeout [ 1561.778019][T28049] netlink: 'syz.1.7037': attribute type 2 has an invalid length. [ 1561.792143][T28049] netlink: 'syz.1.7037': attribute type 1 has an invalid length. [ 1561.821967][T28049] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7037'. [ 1561.951989][T28052] syzkaller0: entered promiscuous mode [ 1561.957792][T28052] syzkaller0: entered allmulticast mode [ 1561.965514][T27879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1562.058650][T27879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1565.647160][T27879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1565.670224][T28057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1565.716436][T27879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1565.967551][T28086] netlink: 'syz.2.7051': attribute type 29 has an invalid length. [ 1565.985360][T28086] netlink: 'syz.2.7051': attribute type 29 has an invalid length. [ 1566.006150][T28086] netlink: 'syz.2.7051': attribute type 29 has an invalid length. [ 1566.034158][T28086] netlink: 'syz.2.7051': attribute type 29 has an invalid length. [ 1566.138849][T28086] netlink: 'syz.2.7051': attribute type 29 has an invalid length. [ 1566.148145][T28091] netlink: 'syz.0.7053': attribute type 3 has an invalid length. [ 1566.163916][T28091] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7053'. [ 1566.444631][T20531] hsr_slave_0: left promiscuous mode [ 1566.463285][T20531] hsr_slave_1: left promiscuous mode [ 1566.612578][T28095] netlink: 'syz.2.7055': attribute type 3 has an invalid length. [ 1566.642771][T28095] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7055'. [ 1566.666021][T20531] veth1_macvtap: left promiscuous mode [ 1566.671807][T20531] veth0_macvtap: left promiscuous mode [ 1566.684133][T20531] veth0_vlan: left promiscuous mode [ 1567.590332][T20531] hsr0 (unregistering): left promiscuous mode [ 1567.607515][T20531] team0 (unregistering): Port device hsr0 removed [ 1567.895020][T13230] Bluetooth: hci2: unexpected event 0x17 length: 15 > 6 [ 1567.900803][T20531] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1567.993852][T20531] team_slave_1 (unregistering): left promiscuous mode [ 1568.011742][T20531] team0 (unregistering): Port device team_slave_1 removed [ 1568.188485][T20531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.639749][T28125] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7064'. [ 1568.661643][T28125] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1568.780584][T20531] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1568.894434][T20531] bond0 (unregistering): Released all slaves [ 1569.082699][T27879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.154334][T27879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.192634][T20523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.199864][T20523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.268742][T20523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.275993][T20523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1569.498402][T28138] netlink: 'syz.0.7068': attribute type 3 has an invalid length. [ 1569.538283][T28138] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1570.046332][T28147] netlink: 'syz.1.7067': attribute type 2 has an invalid length. [ 1570.185894][T28147] netlink: 'syz.1.7067': attribute type 8 has an invalid length. [ 1570.285536][T28147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7067'. [ 1570.523241][T27879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.646087][T27879] veth0_vlan: entered promiscuous mode [ 1570.675345][T27879] veth1_vlan: entered promiscuous mode [ 1570.730370][T28163] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7073'. [ 1570.743381][T28163] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1570.753079][T27879] veth0_macvtap: entered promiscuous mode [ 1570.800384][T28164] syzkaller0: entered promiscuous mode [ 1570.806290][T28164] syzkaller0: entered allmulticast mode [ 1570.822341][T27879] veth1_macvtap: entered promiscuous mode [ 1570.856214][T27879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1570.868711][T27879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.879235][T27879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1570.889805][T27879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.902914][T27879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.922630][T27879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.933308][T27879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.950373][T27879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.971594][T27879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.981865][T27879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1571.013936][T27879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.099125][T27879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1571.169350][T27879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.180018][T27879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.203891][T27879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.220169][T27879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.304561][T28173] netlink: 'syz.0.7077': attribute type 3 has an invalid length. [ 1571.324568][T28173] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7077'. [ 1574.043167][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.082015][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.205138][T28188] netlink: 'syz.1.7079': attribute type 3 has an invalid length. [ 1574.213307][ T9583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.213332][ T9583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.344400][T28188] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7079'. [ 1574.404451][T13230] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 1574.590841][T28198] netlink: 'syz.2.7081': attribute type 2 has an invalid length. [ 1574.612958][T28198] netlink: 'syz.2.7081': attribute type 8 has an invalid length. [ 1574.632576][T28198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1574.771639][T28202] netlink: 'syz.3.7082': attribute type 3 has an invalid length. [ 1574.795358][T28202] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7082'. [ 1575.252341][T28209] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.7086'. [ 1575.419779][T28211] netlink: 'syz.3.7088': attribute type 3 has an invalid length. [ 1575.496119][T28211] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7088'. [ 1576.439112][T27880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1576.449217][T27880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1576.459793][T27880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1576.476170][T27880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1576.484439][T27880] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1576.493531][T27880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1576.538117][T20533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.650077][T20533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.679467][T28234] netlink: 'syz.1.7093': attribute type 10 has an invalid length. [ 1577.688534][T28234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.704989][T28234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.833852][T20533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.879976][T28237] netlink: 'syz.0.7094': attribute type 2 has an invalid length. [ 1577.928266][T28237] netlink: 'syz.0.7094': attribute type 8 has an invalid length. [ 1577.961979][T28237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7094'. [ 1578.079597][T28244] netlink: 'syz.1.7096': attribute type 3 has an invalid length. [ 1578.106690][T28244] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7096'. [ 1578.107060][T28240] netlink: 'syz.3.7095': attribute type 3 has an invalid length. [ 1578.134512][T20533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.146301][T28240] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7095'. [ 1578.585861][T27880] Bluetooth: hci3: command tx timeout [ 1578.901341][T28225] chnl_net:caif_netlink_parms(): no params data found [ 1579.408215][T28265] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7100'. [ 1579.463912][T28265] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1580.181517][T28277] netlink: 'syz.3.7102': attribute type 3 has an invalid length. [ 1580.191775][T28277] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7102'. [ 1580.344395][T28225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.351958][T28225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.361013][T28225] bridge_slave_0: entered allmulticast mode [ 1580.371066][T28225] bridge_slave_0: entered promiscuous mode [ 1580.523903][T28225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.544975][T28225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.552292][T28225] bridge_slave_1: entered allmulticast mode [ 1580.580825][T28225] bridge_slave_1: entered promiscuous mode [ 1580.666062][T27880] Bluetooth: hci3: command tx timeout [ 1580.814992][T28225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.833774][T28225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.108807][T28225] team0: Port device team_slave_0 added [ 1581.225542][T28225] team0: Port device team_slave_1 added [ 1581.290482][T28293] sit0: entered promiscuous mode [ 1581.600041][T28225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.609565][T28225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.643395][T28225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.659361][T28225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.676299][T28225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.712652][T28225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.870416][T28225] hsr_slave_0: entered promiscuous mode [ 1581.882025][T28225] hsr_slave_1: entered promiscuous mode [ 1582.253136][T20533] hsr_slave_0: left promiscuous mode [ 1582.271498][T20533] hsr_slave_1: left promiscuous mode [ 1582.284366][T20533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1582.291972][T20533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.302932][T20533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1582.318809][T20533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.331876][T20533] bond0: left allmulticast mode [ 1582.338333][T20533] bond_slave_1: left allmulticast mode [ 1582.343854][T20533] dummy0: left allmulticast mode [ 1582.353796][T20533] batadv0: left allmulticast mode [ 1582.359413][T20533] bridge0: port 3(bond0) entered disabled state [ 1582.375254][T20533] bridge_slave_1: left allmulticast mode [ 1582.381059][T20533] bridge_slave_1: left promiscuous mode [ 1582.387100][T20533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.402589][T20533] bridge_slave_0: left allmulticast mode [ 1582.410148][T20533] bridge_slave_0: left promiscuous mode [ 1582.423103][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.452930][T20533] veth1_macvtap: left promiscuous mode [ 1582.459879][T20533] veth0_macvtap: left promiscuous mode [ 1582.467404][T20533] veth1_vlan: left promiscuous mode [ 1582.746333][T27880] Bluetooth: hci3: command tx timeout [ 1583.023444][T20533] hsr0 (unregistering): left promiscuous mode [ 1583.033432][T20533] team0 (unregistering): Port device hsr0 removed [ 1583.269514][T20533] team_slave_1 (unregistering): left promiscuous mode [ 1583.279549][T20533] team0 (unregistering): Port device team_slave_1 removed [ 1583.390454][T20533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.401029][T20533] bond_slave_1 (unregistering): left promiscuous mode [ 1583.740918][T20533] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1583.749367][T20533] batadv0 (unregistering): left promiscuous mode [ 1583.814012][T20533] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1583.823262][T20533] dummy0 (unregistering): left promiscuous mode [ 1583.894104][T20533] bond0 (unregistering): Released all slaves [ 1584.598600][T28225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1584.611501][T28225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1584.622733][T28225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1584.640183][T28225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1584.778922][T28225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.810008][T28225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.824261][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.831576][T10458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.839234][T27880] Bluetooth: hci3: command tx timeout [ 1584.850851][T20523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.858275][T20523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.199199][T28225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1585.263782][T28225] veth0_vlan: entered promiscuous mode [ 1585.281977][T28225] veth1_vlan: entered promiscuous mode [ 1585.333219][T28225] veth0_macvtap: entered promiscuous mode [ 1585.347279][T28225] veth1_macvtap: entered promiscuous mode [ 1585.377436][T28225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.391151][T28225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.410264][T28225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.427757][T28225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.441204][T28225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.453931][T28225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.469752][T28225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.481940][T28225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.493178][T28225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.509099][T28225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.521839][T28225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.531654][T28225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.540837][T28225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.550474][T28225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.653759][ T9595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.665242][ T9595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.713557][ T9583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.726799][ T9583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.639568][T28371] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.7085'. [ 1586.805239][T28371] openvswitch: netlink: Duplicate key (type 0). [ 1587.468100][T28385] netlink: 'syz.2.7107': attribute type 3 has an invalid length. [ 1587.514397][T28385] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7107'. [ 1587.683885][T28393] netlink: 'syz.0.7108': attribute type 3 has an invalid length. [ 1587.720272][T28393] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7108'. [ 1588.171517][T28405] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7112'. [ 1588.221769][T28405] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1589.014235][T28423] syzkaller0: entered promiscuous mode [ 1589.095646][T28423] syzkaller0: entered allmulticast mode [ 1590.687330][T28454] netlink: 'syz.1.7129': attribute type 3 has an invalid length. [ 1590.707122][T28454] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7129'. [ 1591.552722][T28460] netlink: 'syz.2.7130': attribute type 3 has an invalid length. [ 1591.561318][T28460] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7130'. [ 1594.045053][T28487] netlink: 'syz.2.7137': attribute type 7 has an invalid length. [ 1595.082303][T28487] pim6reg1: entered promiscuous mode [ 1595.095921][T28487] pim6reg1: entered allmulticast mode [ 1595.440436][T28502] syzkaller0: entered promiscuous mode [ 1595.483316][T28502] syzkaller0: entered allmulticast mode [ 1595.485156][T28505] netlink: 'syz.3.7142': attribute type 3 has an invalid length. [ 1595.505089][T28505] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7142'. [ 1595.667070][T28503] netlink: 'syz.0.7140': attribute type 3 has an invalid length. [ 1595.735439][T28503] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7140'. [ 1601.019836][T28557] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1601.074946][T28557] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1604.241032][T28598] netlink: 'syz.0.7162': attribute type 10 has an invalid length. [ 1604.420561][T28602] netlink: 'syz.0.7164': attribute type 3 has an invalid length. [ 1604.468006][T28603] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.7164'. [ 1604.503607][T28607] netlink: 'syz.1.7165': attribute type 7 has an invalid length. [ 1604.503745][T28602] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7164'. [ 1604.583930][T28604] netlink: 'syz.0.7164': attribute type 17 has an invalid length. [ 1604.615776][T28604] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7164'. [ 1607.777369][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.787725][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.944056][T28607] pim6reg1: entered promiscuous mode [ 1607.949794][T28607] pim6reg1: entered allmulticast mode [ 1607.964865][T28617] netlink: 'syz.3.7167': attribute type 7 has an invalid length. [ 1607.986670][T28625] netlink: 'syz.2.7168': attribute type 10 has an invalid length. [ 1608.013289][T28625] team0: Port device dummy0 added [ 1608.020834][T28627] netlink: 'syz.2.7168': attribute type 10 has an invalid length. [ 1608.049679][T28627] team0: Port device dummy0 removed [ 1608.074526][T28627] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1608.090399][T28626] pim6reg1: entered promiscuous mode [ 1608.105016][T28626] pim6reg1: entered allmulticast mode [ 1608.792049][T28652] netlink: 'syz.2.7180': attribute type 4 has an invalid length. [ 1608.811119][T28652] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7180'. [ 1608.842217][T28652] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1609.584196][T28670] netlink: 'syz.1.7184': attribute type 7 has an invalid length. [ 1609.721892][T28670] pim6reg1: entered promiscuous mode [ 1609.741323][T28670] pim6reg1: entered allmulticast mode [ 1611.607672][T28705] netlink: 'syz.1.7201': attribute type 7 has an invalid length. [ 1611.713011][T28701] netlink: 'syz.2.7193': attribute type 3 has an invalid length. [ 1611.722916][T28701] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7193'. [ 1611.744123][T28705] pim6reg1: entered promiscuous mode [ 1611.763261][T28705] pim6reg1: entered allmulticast mode [ 1612.282323][T28718] netlink: 'syz.0.7199': attribute type 3 has an invalid length. [ 1612.327153][T28718] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7199'. [ 1617.543469][T28757] netlink: 'syz.3.7210': attribute type 7 has an invalid length. [ 1617.598112][T28764] pim6reg1: entered promiscuous mode [ 1617.608430][T28764] pim6reg1: entered allmulticast mode [ 1617.877148][T28768] netlink: 'syz.0.7212': attribute type 3 has an invalid length. [ 1617.895157][T28768] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7212'. [ 1618.126730][T28778] netlink: 'syz.2.7214': attribute type 3 has an invalid length. [ 1618.185355][T28778] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7214'. [ 1621.088281][T28806] netlink: 'syz.1.7223': attribute type 7 has an invalid length. [ 1621.314302][T28806] pim6reg1: entered promiscuous mode [ 1621.333454][T28806] pim6reg1: entered allmulticast mode [ 1622.539120][T28816] netlink: 'syz.2.7227': attribute type 3 has an invalid length. [ 1622.596678][T28816] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1625.239831][T28856] -1: renamed from syzkaller0 [ 1625.324412][T28861] netlink: 'syz.1.7241': attribute type 7 has an invalid length. [ 1625.793988][T28861] pim6reg1: entered promiscuous mode [ 1625.820232][T28861] pim6reg1: entered allmulticast mode [ 1627.744212][T28895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.840115][T28903] netlink: 'syz.1.7250': attribute type 10 has an invalid length. [ 1630.015204][T28921] pim6reg1: entered promiscuous mode [ 1630.074892][T28921] pim6reg1: entered allmulticast mode [ 1633.708036][T28954] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7267'. [ 1633.765418][T28954] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1634.777412][T28969] pim6reg1: entered promiscuous mode [ 1634.803283][T28969] pim6reg1: entered allmulticast mode [ 1636.068643][T28997] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7278'. [ 1636.164929][T28997] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1636.536524][T29008] can: request_module (can-proto-0) failed. [ 1637.179215][T29019] netlink: 'syz.1.7287': attribute type 2 has an invalid length. [ 1637.225732][T29019] netlink: 'syz.1.7287': attribute type 8 has an invalid length. [ 1637.266992][T29019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7287'. [ 1637.698340][T29022] pim6reg1: entered promiscuous mode [ 1637.725263][T29022] pim6reg1: entered allmulticast mode [ 1638.565304][T29026] syzkaller0: entered promiscuous mode [ 1638.570954][T29026] syzkaller0: entered allmulticast mode [ 1646.092796][T29074] netlink: 'syz.0.7304': attribute type 29 has an invalid length. [ 1646.125379][T29074] netlink: 'syz.0.7304': attribute type 29 has an invalid length. [ 1646.182061][T29074] netlink: 'syz.0.7304': attribute type 29 has an invalid length. [ 1646.223527][T29074] netlink: 'syz.0.7304': attribute type 29 has an invalid length. [ 1646.309422][T29074] netlink: 'syz.0.7304': attribute type 29 has an invalid length. [ 1646.666650][T29078] pim6reg1: entered promiscuous mode [ 1646.672046][T29078] pim6reg1: entered allmulticast mode [ 1647.607975][T27880] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 1648.121679][T29108] netlink: 'syz.3.7316': attribute type 3 has an invalid length. [ 1648.165274][T29108] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7316'. [ 1648.247010][T29113] netlink: 'syz.2.7318': attribute type 3 has an invalid length. [ 1648.274912][T29113] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7318'. [ 1648.882822][T29124] pim6reg1: entered promiscuous mode [ 1648.898554][T29124] pim6reg1: entered allmulticast mode [ 1649.347221][T29130] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7322'. [ 1649.364640][T29130] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1651.251095][T29150] netlink: 'syz.1.7328': attribute type 2 has an invalid length. [ 1651.284347][T29150] netlink: 'syz.1.7328': attribute type 8 has an invalid length. [ 1651.292942][T29150] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7328'. [ 1651.511794][T29157] netlink: 'syz.1.7330': attribute type 10 has an invalid length. [ 1651.547148][T29157] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1651.576837][T29155] netlink: 'syz.2.7329': attribute type 3 has an invalid length. [ 1651.605234][T29155] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7329'. [ 1651.719079][T27880] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 1652.123437][T29166] pim6reg1: entered promiscuous mode [ 1652.175096][T29166] pim6reg1: entered allmulticast mode [ 1652.674914][T29182] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7339'. [ 1655.235456][T27880] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 1655.924555][T29220] pim6reg1: entered promiscuous mode [ 1656.087021][T29220] pim6reg1: entered allmulticast mode [ 1658.179930][T29252] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7357'. [ 1658.727141][T29257] netlink: 'syz.3.7359': attribute type 3 has an invalid length. [ 1658.801530][T29257] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7359'. [ 1658.968604][T29252] team0: Port device team_slave_0 removed [ 1659.084610][T29252] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1659.225195][T29259] netlink: 'syz.1.7360': attribute type 5 has an invalid length. [ 1659.647908][T29266] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7363'. [ 1659.725800][T29262] pim6reg1: entered promiscuous mode [ 1659.731799][T29262] pim6reg1: entered allmulticast mode [ 1660.522748][T29267] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7361'. [ 1661.731472][T29284] syzkaller0: entered promiscuous mode [ 1661.805174][T29284] syzkaller0: entered allmulticast mode [ 1666.910354][T29310] netlink: 'syz.0.7375': attribute type 21 has an invalid length. [ 1666.918774][T29310] netlink: 'syz.0.7375': attribute type 6 has an invalid length. [ 1666.933471][T29310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7375'. [ 1667.152158][T29312] pim6reg1: entered promiscuous mode [ 1667.184961][T29312] pim6reg1: entered allmulticast mode [ 1668.800867][T29350] netlink: 'syz.1.7389': attribute type 3 has an invalid length. [ 1668.816824][T29350] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7389'. [ 1668.828046][T29342] syzkaller0: entered promiscuous mode [ 1668.843484][T29342] syzkaller0: entered allmulticast mode [ 1669.150274][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.157556][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.121789][T29399] syzkaller0: entered promiscuous mode [ 1674.364858][T29399] syzkaller0: entered allmulticast mode [ 1676.442768][T27880] Bluetooth: hci1: command 0x0406 tx timeout [ 1678.528647][T29419] pim6reg1: entered promiscuous mode [ 1678.534113][T29419] pim6reg1: entered allmulticast mode [ 1679.167814][T29434] FAULT_INJECTION: forcing a failure. [ 1679.167814][T29434] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.238527][T29434] CPU: 0 PID: 29434 Comm: syz.3.7409 Not tainted syzkaller #0 [ 1679.246091][T29434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1679.256292][T29434] Call Trace: [ 1679.259703][T29434] [ 1679.262675][T29434] dump_stack_lvl+0x18c/0x250 [ 1679.267414][T29434] ? show_regs_print_info+0x20/0x20 [ 1679.272675][T29434] ? load_image+0x400/0x400 [ 1679.277242][T29434] ? should_fail_ex+0x34a/0x4d0 [ 1679.282148][T29434] should_fail_ex+0x39d/0x4d0 [ 1679.286881][T29434] should_failslab+0x9/0x20 [ 1679.291432][T29434] slab_pre_alloc_hook+0x59/0x310 [ 1679.296515][T29434] ? perf_swevent_event+0x5bd/0x630 [ 1679.301757][T29434] ? __get_vm_area_node+0x125/0x370 [ 1679.307007][T29434] __kmem_cache_alloc_node+0x53/0x250 [ 1679.312441][T29434] ? __get_vm_area_node+0x125/0x370 [ 1679.317696][T29434] kmalloc_node_trace+0x26/0xe0 [ 1679.322601][T29434] __get_vm_area_node+0x125/0x370 [ 1679.327777][T29434] __vmalloc_node_range+0x36e/0x1330 [ 1679.333107][T29434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1679.338700][T29434] ? mark_lock+0x94/0x320 [ 1679.343089][T29434] ? __lock_acquire+0x1347/0x7d40 [ 1679.348185][T29434] ? free_vm_area+0x50/0x50 [ 1679.352814][T29434] ? end_current_label_crit_section+0x170/0x170 [ 1679.359202][T29434] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1679.365314][T29434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1679.370875][T29434] __vmalloc+0x7a/0x90 [ 1679.374965][T29434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1679.380527][T29434] bpf_prog_alloc_no_stats+0x47/0x440 [ 1679.385914][T29434] ? bpf_prog_alloc+0x2b/0x1a0 [ 1679.390906][T29434] bpf_prog_alloc+0x3d/0x1a0 [ 1679.395618][T29434] bpf_prog_load+0x6eb/0x1670 [ 1679.400351][T29434] ? map_freeze+0x420/0x420 [ 1679.404962][T29434] ? __might_fault+0xaa/0x120 [ 1679.409652][T29434] ? __lock_acquire+0x7d40/0x7d40 [ 1679.414783][T29434] ? __might_fault+0xaa/0x120 [ 1679.419473][T29434] ? __might_fault+0xc6/0x120 [ 1679.424343][T29434] ? __might_fault+0xaa/0x120 [ 1679.429043][T29434] ? bpf_lsm_bpf+0x9/0x10 [ 1679.433386][T29434] ? security_bpf+0x7e/0xa0 [ 1679.437906][T29434] __sys_bpf+0x5ba/0x890 [ 1679.442171][T29434] ? bpf_link_show_fdinfo+0x390/0x390 [ 1679.447575][T29434] ? lock_chain_count+0x20/0x20 [ 1679.452454][T29434] __x64_sys_bpf+0x7c/0x90 [ 1679.456975][T29434] do_syscall_64+0x55/0xa0 [ 1679.461410][T29434] ? clear_bhb_loop+0x40/0x90 [ 1679.466106][T29434] ? clear_bhb_loop+0x40/0x90 [ 1679.470827][T29434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1679.476766][T29434] RIP: 0033:0x7fbaa179c799 [ 1679.481236][T29434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.500880][T29434] RSP: 002b:00007fbaa25b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1679.509319][T29434] RAX: ffffffffffffffda RBX: 00007fbaa1a15fa0 RCX: 00007fbaa179c799 [ 1679.517312][T29434] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1679.525292][T29434] RBP: 00007fbaa25b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.533272][T29434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1679.541254][T29434] R13: 00007fbaa1a16038 R14: 00007fbaa1a15fa0 R15: 00007ffeae10ce08 [ 1679.549260][T29434] [ 1679.585382][T29434] syz.3.7409: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1679.623844][T29434] CPU: 1 PID: 29434 Comm: syz.3.7409 Not tainted syzkaller #0 [ 1679.631491][T29434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1679.641693][T29434] Call Trace: [ 1679.645012][T29434] [ 1679.648059][T29434] dump_stack_lvl+0x18c/0x250 [ 1679.652784][T29434] ? show_regs_print_info+0x20/0x20 [ 1679.658035][T29434] ? load_image+0x400/0x400 [ 1679.662589][T29434] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1679.669143][T29434] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1679.675699][T29434] warn_alloc+0x246/0x340 [ 1679.680081][T29434] ? __get_vm_area_node+0x125/0x370 [ 1679.685338][T29434] ? zone_watermark_ok_safe+0x230/0x230 [ 1679.690930][T29434] ? rcu_is_watching+0x15/0xb0 [ 1679.695750][T29434] ? __get_vm_area_node+0x356/0x370 [ 1679.701022][T29434] __vmalloc_node_range+0x393/0x1330 [ 1679.706390][T29434] ? mark_lock+0x94/0x320 [ 1679.710778][T29434] ? __lock_acquire+0x1347/0x7d40 [ 1679.715884][T29434] ? free_vm_area+0x50/0x50 [ 1679.720450][T29434] ? end_current_label_crit_section+0x170/0x170 [ 1679.726740][T29434] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1679.732949][T29434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1679.738543][T29434] __vmalloc+0x7a/0x90 [ 1679.742838][T29434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1679.748430][T29434] bpf_prog_alloc_no_stats+0x47/0x440 [ 1679.753846][T29434] ? bpf_prog_alloc+0x2b/0x1a0 [ 1679.758658][T29434] bpf_prog_alloc+0x3d/0x1a0 [ 1679.763298][T29434] bpf_prog_load+0x6eb/0x1670 [ 1679.768140][T29434] ? map_freeze+0x420/0x420 [ 1679.772714][T29434] ? __might_fault+0xaa/0x120 [ 1679.777528][T29434] ? __lock_acquire+0x7d40/0x7d40 [ 1679.782605][T29434] ? __might_fault+0xaa/0x120 [ 1679.787322][T29434] ? __might_fault+0xc6/0x120 [ 1679.792265][T29434] ? __might_fault+0xaa/0x120 [ 1679.797006][T29434] ? bpf_lsm_bpf+0x9/0x10 [ 1679.801390][T29434] ? security_bpf+0x7e/0xa0 [ 1679.805948][T29434] __sys_bpf+0x5ba/0x890 [ 1679.810249][T29434] ? bpf_link_show_fdinfo+0x390/0x390 [ 1679.815690][T29434] ? lock_chain_count+0x20/0x20 [ 1679.820610][T29434] __x64_sys_bpf+0x7c/0x90 [ 1679.825070][T29434] do_syscall_64+0x55/0xa0 [ 1679.829628][T29434] ? clear_bhb_loop+0x40/0x90 [ 1679.834439][T29434] ? clear_bhb_loop+0x40/0x90 [ 1679.839235][T29434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1679.845174][T29434] RIP: 0033:0x7fbaa179c799 [ 1679.849646][T29434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.869313][T29434] RSP: 002b:00007fbaa25b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1679.878230][T29434] RAX: ffffffffffffffda RBX: 00007fbaa1a15fa0 RCX: 00007fbaa179c799 [ 1679.886251][T29434] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1679.894697][T29434] RBP: 00007fbaa25b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.902722][T29434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1679.910740][T29434] R13: 00007fbaa1a16038 R14: 00007fbaa1a15fa0 R15: 00007ffeae10ce08 [ 1679.918783][T29434] [ 1679.984993][T29434] Mem-Info: [ 1680.020046][T29434] active_anon:7235 inactive_anon:0 isolated_anon:0 [ 1680.020046][T29434] active_file:18972 inactive_file:40549 isolated_file:0 [ 1680.020046][T29434] unevictable:768 dirty:42 writeback:0 [ 1680.020046][T29434] slab_reclaimable:10874 slab_unreclaimable:96238 [ 1680.020046][T29434] mapped:23928 shmem:1561 pagetables:546 [ 1680.020046][T29434] sec_pagetables:0 bounce:0 [ 1680.020046][T29434] kernel_misc_reclaimable:0 [ 1680.020046][T29434] free:1340846 free_pcp:9080 free_cma:0 [ 1680.114874][T29434] Node 0 active_anon:29640kB inactive_anon:0kB active_file:75888kB inactive_file:161988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95912kB dirty:168kB writeback:0kB shmem:5208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11032kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 1680.148710][T29434] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1680.205293][T29434] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.248828][T29434] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1680.259280][T29434] Node 0 DMA32 free:1449596kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30944kB inactive_anon:0kB active_file:75888kB inactive_file:161156kB unevictable:1536kB writepending:172kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:12996kB local_pcp:352kB free_cma:0kB [ 1680.294414][ T9583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.336339][T13230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1680.345182][T29434] lowmem_reserve[]: 0 0 0 0 0 [ 1680.350784][T29434] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.361834][T13230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1680.405323][T13230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1680.424898][T13230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1680.432480][T29434] lowmem_reserve[]: 0 0 0 0 0 [ 1680.432985][T13230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1680.456579][T13230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1680.463867][T29434] Node 1 Normal free:3895432kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21824kB local_pcp:9728kB free_cma:0kB [ 1680.556554][T29434] lowmem_reserve[]: 0 0 0 0 0 [ 1680.595686][T29434] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1680.614879][T29434] Node 0 DMA32: 3*4kB (UE) 992*8kB (UME) 1440*16kB (UME) 1166*32kB (UME) 1162*64kB (UME) 555*128kB (UME) 291*256kB (UME) 122*512kB (UM) 56*1024kB (UM) 11*2048kB (UM) 248*4096kB (UM) = 1446348kB [ 1680.637972][ T9583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.668406][T29434] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1680.694980][T29434] Node 1 Normal: 260*4kB (UME) 55*8kB (UME) 50*16kB (UME) 53*32kB (UME) 22*64kB (UME) 7*128kB (UE) 0*256kB 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895432kB [ 1680.732159][T29434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.760818][T29434] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1680.803535][T29434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.842742][T29434] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1680.859349][T29434] 63183 total pagecache pages [ 1680.864096][T29434] 0 pages in swap cache [ 1680.872619][ T9583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.890398][T29434] Free swap = 124996kB [ 1680.894701][T29434] Total swap = 124996kB [ 1680.925186][T29434] 2097051 pages RAM [ 1680.934809][T29434] 0 pages HighMem/MovableOnly [ 1680.939696][T29434] 416924 pages reserved [ 1680.943884][T29434] 0 pages cma reserved [ 1680.950462][T29455] netlink: 'syz.1.7414': attribute type 4 has an invalid length. [ 1680.979687][T29455] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1681.023389][T29455] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1681.327082][ T9583] bond0: (slave netdevsim0): Releasing backup interface [ 1681.370421][ T9583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.532515][T29459] syzkaller0: entered promiscuous mode [ 1681.538296][T29459] syzkaller0: entered allmulticast mode [ 1682.585434][T13230] Bluetooth: hci2: command tx timeout [ 1684.664950][T13230] Bluetooth: hci2: command tx timeout [ 1684.731095][T29471] syzkaller0: entered promiscuous mode [ 1684.742840][T29471] syzkaller0: entered allmulticast mode [ 1684.847876][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7417'. [ 1685.028432][T29477] netlink: 'syz.3.7416': attribute type 3 has an invalid length. [ 1685.087220][T29477] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7416'. [ 1686.754914][T27880] Bluetooth: hci2: command tx timeout [ 1688.261385][T29449] chnl_net:caif_netlink_parms(): no params data found [ 1688.349883][T29509] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7420'. [ 1688.825194][T27880] Bluetooth: hci2: command tx timeout [ 1688.849997][T29518] netlink: 'syz.3.7422': attribute type 33 has an invalid length. [ 1688.885860][T29518] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7422'. [ 1689.031407][T29449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.058571][T29449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.075060][T29449] bridge_slave_0: entered allmulticast mode [ 1689.091400][T29449] bridge_slave_0: entered promiscuous mode [ 1689.158512][ T9583] gretap0 (unregistering): left allmulticast mode [ 1689.174162][ T9583] gretap0 (unregistering): left promiscuous mode [ 1689.184385][ T9583] Ÿë: port 1(gretap0) entered disabled state [ 1689.243964][T29449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.283828][T29449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.325001][T29449] bridge_slave_1: entered allmulticast mode [ 1689.338038][T29449] bridge_slave_1: entered promiscuous mode [ 1689.572273][T29449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.703626][T29536] syzkaller0: entered promiscuous mode [ 1689.727657][T29536] syzkaller0: entered allmulticast mode [ 1689.767926][T29449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.301599][T29449] team0: Port device team_slave_0 added [ 1694.481702][T29449] team0: Port device team_slave_1 added [ 1694.563948][T29449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.625124][T29449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.666079][T29449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.683313][T29587] netlink: 'syz.3.7433': attribute type 3 has an invalid length. [ 1694.702930][T29449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.737963][T29449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.768835][T29587] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7433'. [ 1694.813392][T29449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.170482][T29449] hsr_slave_0: entered promiscuous mode [ 1695.187539][T29449] hsr_slave_1: entered promiscuous mode [ 1695.201728][T29449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1695.217156][T29449] Cannot create hsr debugfs directory [ 1695.498192][ T9583] hsr_slave_0: left promiscuous mode [ 1695.522713][ T9583] hsr_slave_1: left promiscuous mode [ 1695.536392][ T9583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1695.577137][ T9583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1695.639449][ T9583] bridge_slave_1: left allmulticast mode [ 1695.652852][ T9583] bridge_slave_1: left promiscuous mode [ 1695.675200][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.766037][ T9583] bridge_slave_0: left promiscuous mode [ 1695.771971][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.044711][ T9583] veth1_macvtap: left promiscuous mode [ 1696.065009][ T9583] veth0_macvtap: left promiscuous mode [ 1696.071587][ T9583] veth1_vlan: left promiscuous mode [ 1696.095131][ T9583] veth0_vlan: left promiscuous mode [ 1699.896045][ T9583] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1699.963891][ T9583] team0 (unregistering): Port device team_slave_1 removed [ 1700.073918][ T9583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.480741][ T9583] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1700.521014][ T9583] bond0 (unregistering): (slave team0): Releasing backup interface [ 1700.568992][ T9583] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1700.578560][ T9583] bond0 (unregistering): Released all slaves [ 1700.712724][T29610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1700.865878][T29636] pim6reg1: entered promiscuous mode [ 1700.871266][T29636] pim6reg1: entered allmulticast mode [ 1701.124083][T29647] syzkaller0: entered promiscuous mode [ 1701.130059][T29647] syzkaller0: entered allmulticast mode [ 1701.254068][T29645] syzkaller0: entered promiscuous mode [ 1701.274885][T29645] syzkaller0: entered allmulticast mode [ 1701.945190][T13230] Bluetooth: hci3: command 0x0406 tx timeout [ 1704.218081][T29657] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7445'. [ 1709.403112][T29449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1709.448961][T29449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1709.482118][T29449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1709.517595][T29449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1709.669828][T29710] netlink: 'syz.3.7449': attribute type 3 has an invalid length. [ 1709.725083][T29710] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7449'. [ 1709.946176][T29713] syzkaller0: entered promiscuous mode [ 1709.953325][T29713] syzkaller0: entered allmulticast mode [ 1710.405986][T29734] netlink: 'syz.3.7457': attribute type 3 has an invalid length. [ 1710.438976][T29734] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7457'. [ 1710.743208][T29739] netlink: 'syz.2.7458': attribute type 1 has an invalid length. [ 1710.753789][T29739] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7458'. [ 1713.109030][T29449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.174308][T29449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1713.211558][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.218790][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1713.257724][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.264950][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1713.339936][T29449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1713.383995][T29449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1713.809375][T29747] pim6reg1: entered promiscuous mode [ 1713.865290][T29747] pim6reg1: entered allmulticast mode [ 1714.641893][T29449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.713310][T29768] netlink: 'syz.3.7464': attribute type 21 has an invalid length. [ 1714.738044][T29768] netlink: 'syz.3.7464': attribute type 6 has an invalid length. [ 1714.756948][T29768] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1714.884893][T29770] netlink: 'syz.3.7464': attribute type 13 has an invalid length. [ 1714.915187][T29770] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1715.038665][T29779] netlink: 'syz.2.7466': attribute type 3 has an invalid length. [ 1715.116208][T29779] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7466'. [ 1715.151312][T29782] netlink: 'syz.1.7467': attribute type 3 has an invalid length. [ 1715.190522][T29770] macvlan1: entered promiscuous mode [ 1715.211682][T29782] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7467'. [ 1715.237023][T29770] macvlan1: entered allmulticast mode [ 1715.242490][T29770] veth1_vlan: entered allmulticast mode [ 1715.468289][T29449] veth0_vlan: entered promiscuous mode [ 1715.522743][T29449] veth1_vlan: entered promiscuous mode [ 1715.570269][T29449] veth0_macvtap: entered promiscuous mode [ 1715.597498][T29449] veth1_macvtap: entered promiscuous mode [ 1715.656639][T29449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.673263][T29449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.683781][T29449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.714778][T29449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.758134][T29449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1715.813541][T29449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.844868][T29449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.892985][T29449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.954030][T29449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.974353][T29449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.994903][T29449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.027797][T29449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.043279][T29449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.052548][T29449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.065237][T29449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.085284][T29449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.360906][T29788] syzkaller0: entered promiscuous mode [ 1716.373064][T29788] syzkaller0: entered allmulticast mode [ 1719.187298][T29807] pim6reg1: entered promiscuous mode [ 1719.192670][T29807] pim6reg1: entered allmulticast mode [ 1719.346019][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.353920][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.459397][ T9583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.485037][ T9583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.845080][T29830] netlink: 'syz.3.7475': attribute type 1 has an invalid length. [ 1719.879530][T29830] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7475'. [ 1720.118193][T29827] pim6reg1: entered promiscuous mode [ 1720.123605][T29827] pim6reg1: entered allmulticast mode [ 1720.286853][T29840] netlink: 'syz.1.7476': attribute type 3 has an invalid length. [ 1720.298033][T29839] netlink: 'syz.0.7477': attribute type 3 has an invalid length. [ 1720.315174][T29839] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7477'. [ 1720.319564][T29840] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7476'. [ 1721.826474][T29864] syzkaller0: entered promiscuous mode [ 1721.849799][T29864] syzkaller0: entered allmulticast mode [ 1722.176567][T29889] netlink: 'syz.3.7490': attribute type 3 has an invalid length. [ 1722.209899][T29889] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7490'. [ 1725.124091][T29951] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7499'. [ 1726.729450][T29951] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7499'. [ 1728.201853][T29990] syzkaller0: entered promiscuous mode [ 1728.242031][T29990] syzkaller0: entered allmulticast mode [ 1728.525749][T30002] netlink: 'syz.1.7511': attribute type 7 has an invalid length. [ 1728.956400][T29993] syzkaller0: entered promiscuous mode [ 1728.975071][T29993] syzkaller0: entered allmulticast mode [ 1730.643931][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.650506][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.080644][T13230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1731.105097][T13230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1731.124755][T13230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1731.142939][T13230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1731.152519][T13230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1731.160365][T13230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1733.240578][T27880] Bluetooth: hci0: command tx timeout [ 1733.516525][T20522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.632351][T30061] FAULT_INJECTION: forcing a failure. [ 1733.632351][T30061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1733.665019][T30061] CPU: 1 PID: 30061 Comm: syz.2.7523 Not tainted syzkaller #0 [ 1733.672751][T30061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1733.683130][T30061] Call Trace: [ 1733.686450][T30061] [ 1733.689575][T30061] dump_stack_lvl+0x18c/0x250 [ 1733.694370][T30061] ? show_regs_print_info+0x20/0x20 [ 1733.699593][T30061] ? load_image+0x400/0x400 [ 1733.704319][T30061] ? __might_fault+0xaa/0x120 [ 1733.709189][T30061] ? __lock_acquire+0x7d40/0x7d40 [ 1733.714583][T30061] should_fail_ex+0x39d/0x4d0 [ 1733.719286][T30061] _copy_from_user+0x2f/0xe0 [ 1733.724067][T30061] generic_map_update_batch+0x59a/0x810 [ 1733.729819][T30061] ? rcu_read_unlock+0xa0/0xa0 [ 1733.734784][T30061] ? __fdget+0x180/0x210 [ 1733.739231][T30061] ? rcu_read_unlock+0xa0/0xa0 [ 1733.744124][T30061] bpf_map_do_batch+0x3d7/0x610 [ 1733.748996][T30061] __sys_bpf+0x381/0x890 [ 1733.753342][T30061] ? bpf_link_show_fdinfo+0x390/0x390 [ 1733.758768][T30061] ? lock_chain_count+0x20/0x20 [ 1733.763735][T30061] __x64_sys_bpf+0x7c/0x90 [ 1733.768345][T30061] do_syscall_64+0x55/0xa0 [ 1733.772845][T30061] ? clear_bhb_loop+0x40/0x90 [ 1733.777811][T30061] ? clear_bhb_loop+0x40/0x90 [ 1733.782619][T30061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1733.788555][T30061] RIP: 0033:0x7f36da79c799 [ 1733.792996][T30061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1733.812681][T30061] RSP: 002b:00007f36db6fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1733.821540][T30061] RAX: ffffffffffffffda RBX: 00007f36daa15fa0 RCX: 00007f36da79c799 [ 1733.829587][T30061] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1733.837658][T30061] RBP: 00007f36db6fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1733.845742][T30061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.853905][T30061] R13: 00007f36daa16038 R14: 00007f36daa15fa0 R15: 00007ffc98bc70c8 [ 1733.862088][T30061] [ 1733.938586][T20522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.999126][T30065] netlink: 'syz.0.7525': attribute type 3 has an invalid length. [ 1734.008411][T30065] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7525'. [ 1734.130581][T20522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.307508][T20522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.338370][T30072] netlink: 'syz.2.7527': attribute type 5 has an invalid length. [ 1734.347081][T30072] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7527'. [ 1734.589753][T30051] chnl_net:caif_netlink_parms(): no params data found [ 1734.649238][T30083] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.7531'. [ 1734.702553][T30084] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.7531'. [ 1735.305190][T27880] Bluetooth: hci0: command tx timeout [ 1736.011243][T30051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.028222][T30051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.051122][T30051] bridge_slave_0: entered allmulticast mode [ 1736.069809][T30051] bridge_slave_0: entered promiscuous mode [ 1736.171908][T30121] FAULT_INJECTION: forcing a failure. [ 1736.171908][T30121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.188321][T30051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.205177][T30051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.212291][T30121] CPU: 0 PID: 30121 Comm: syz.0.7536 Not tainted syzkaller #0 [ 1736.212320][T30121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1736.212333][T30121] Call Trace: [ 1736.212342][T30121] [ 1736.212352][T30121] dump_stack_lvl+0x18c/0x250 [ 1736.212391][T30121] ? show_regs_print_info+0x20/0x20 [ 1736.212420][T30121] ? load_image+0x400/0x400 [ 1736.212447][T30121] ? __might_fault+0xaa/0x120 [ 1736.212471][T30121] ? __lock_acquire+0x7d40/0x7d40 [ 1736.212501][T30121] should_fail_ex+0x39d/0x4d0 [ 1736.212537][T30121] _copy_from_user+0x2f/0xe0 [ 1736.212564][T30121] __sys_bpf+0x23e/0x890 [ 1736.212600][T30121] ? bpf_link_show_fdinfo+0x390/0x390 [ 1736.212641][T30121] ? lock_chain_count+0x20/0x20 [ 1736.212676][T30121] __x64_sys_bpf+0x7c/0x90 [ 1736.212699][T30121] do_syscall_64+0x55/0xa0 [ 1736.212726][T30121] ? clear_bhb_loop+0x40/0x90 [ 1736.212749][T30121] ? clear_bhb_loop+0x40/0x90 [ 1736.212776][T30121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1736.212798][T30121] RIP: 0033:0x7fc9a479c799 [ 1736.212819][T30121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.212836][T30121] RSP: 002b:00007fc9a5646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1736.212861][T30121] RAX: ffffffffffffffda RBX: 00007fc9a4a15fa0 RCX: 00007fc9a479c799 [ 1736.212877][T30121] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 1736.212891][T30121] RBP: 00007fc9a5646090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.212905][T30121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.212918][T30121] R13: 00007fc9a4a16038 R14: 00007fc9a4a15fa0 R15: 00007fff1a53aa28 [ 1736.212954][T30121] [ 1736.396343][T30051] bridge_slave_1: entered allmulticast mode [ 1736.404171][T30051] bridge_slave_1: entered promiscuous mode [ 1736.556223][T30131] netlink: 'syz.2.7539': attribute type 1 has an invalid length. [ 1736.564306][T30131] netlink: 'syz.2.7539': attribute type 4 has an invalid length. [ 1736.573299][T30131] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7539'. [ 1736.586277][T30051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1736.724351][T30051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.927730][T30051] team0: Port device team_slave_0 added [ 1736.961252][T30144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7544'. [ 1737.019588][T30051] team0: Port device team_slave_1 added [ 1737.034125][T30144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7544'. [ 1737.127455][T30137] pim6reg1: entered promiscuous mode [ 1737.133827][T30137] pim6reg1: entered allmulticast mode [ 1737.143411][T30147] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7544'. [ 1737.165994][T30144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7544'. [ 1737.207994][T30051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.220261][T30051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1737.255487][T30051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.269370][T30051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.277924][T30051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1737.314827][T30051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.373409][T27880] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 1737.395016][T27880] Bluetooth: hci0: command tx timeout [ 1737.560054][T30051] hsr_slave_0: entered promiscuous mode [ 1737.602943][T30051] hsr_slave_1: entered promiscuous mode [ 1737.621282][T30051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1737.632710][T30051] Cannot create hsr debugfs directory [ 1738.260380][T30175] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7549'. [ 1738.442217][T30186] netlink: 'syz.0.7552': attribute type 2 has an invalid length. [ 1738.455096][T30186] netlink: 'syz.0.7552': attribute type 8 has an invalid length. [ 1738.614974][T20522] hsr_slave_0: left promiscuous mode [ 1738.627324][T20522] hsr_slave_1: left promiscuous mode [ 1738.637970][T20522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1738.646754][T20522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1738.655473][T20522] bridge_slave_1: left allmulticast mode [ 1738.661530][T20522] bridge_slave_1: left promiscuous mode [ 1738.668719][T20522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.678892][T20522] bridge_slave_0: left allmulticast mode [ 1738.684955][T20522] bridge_slave_0: left promiscuous mode [ 1738.691563][T20522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.756584][T20522] veth1_macvtap: left promiscuous mode [ 1738.762236][T20522] veth0_macvtap: left promiscuous mode [ 1738.775077][T20522] veth1_vlan: left promiscuous mode [ 1738.784981][T20522] veth0_vlan: left promiscuous mode [ 1739.465042][T27880] Bluetooth: hci0: command tx timeout [ 1739.748100][T20522] team0 (unregistering): Port device team_slave_1 removed [ 1739.864587][T20522] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.253214][T20522] .` (unregistering): (slave batadv0): Releasing backup interface [ 1740.350195][T20522] .` (unregistering): (slave team0): Releasing backup interface [ 1740.399551][T20522] .` (unregistering): Released all slaves [ 1740.549989][T30191] netlink: 'syz.3.7553': attribute type 21 has an invalid length. [ 1740.561734][T30191] __nla_validate_parse: 1 callbacks suppressed [ 1740.561752][T30191] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7553'. [ 1740.903252][T30215] netlink: 'syz.0.7557': attribute type 3 has an invalid length. [ 1740.917167][T30215] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7557'. [ 1742.981696][T30051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1743.007811][T30247] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7566'. [ 1743.030269][T30243] pim6reg1: entered promiscuous mode [ 1743.050128][T30243] pim6reg1: entered allmulticast mode [ 1743.061218][T30051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1743.227809][T30051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1743.282551][T30051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1743.418171][T30257] netlink: 'syz.2.7569': attribute type 17 has an invalid length. [ 1743.515061][T30257] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7569'. [ 1743.782074][T30267] netlink: 'syz.3.7571': attribute type 46 has an invalid length. [ 1743.838306][T30267] netlink: 'syz.3.7571': attribute type 46 has an invalid length. [ 1744.110952][T30051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1744.259933][T30051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1744.302227][T20522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.309604][T20522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1744.366852][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.374153][ T9583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1744.544010][T30051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1744.574814][T30051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1745.202479][T30301] syzkaller0: entered promiscuous mode [ 1745.228590][T30301] syzkaller0: entered allmulticast mode [ 1745.581605][T30303] pim6reg1: entered promiscuous mode [ 1745.595091][T30303] pim6reg1: entered allmulticast mode [ 1745.771847][T30316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7579'. [ 1745.815106][T30316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7579'. [ 1745.846092][T30321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7579'. [ 1745.907019][T30051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1745.928617][T30316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7579'. [ 1746.250442][T30051] veth0_vlan: entered promiscuous mode [ 1746.300991][T30051] veth1_vlan: entered promiscuous mode [ 1746.456864][T30051] veth0_macvtap: entered promiscuous mode [ 1746.468189][T30329] netlink: 'syz.3.7582': attribute type 3 has an invalid length. [ 1746.499389][T30051] veth1_macvtap: entered promiscuous mode [ 1746.515654][T30329] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7582'. [ 1746.579578][T30051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1746.606901][T30051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.617878][T30051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1746.629138][T30051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.640166][T30051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1746.651914][T30051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.676947][T30051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1746.730568][T30051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1746.755698][T30051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.779526][T30051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1746.790895][T30051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.801506][T30051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1746.813597][T30051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.826490][T30051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1746.850314][T30340] netlink: 'syz.2.7584': attribute type 21 has an invalid length. [ 1746.860218][T30340] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1746.877868][T30051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.888340][T30051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.899454][T30051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.910128][T30051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.052000][T30345] netlink: 'syz.3.7586': attribute type 21 has an invalid length. [ 1747.079354][T30345] netlink: 'syz.3.7586': attribute type 6 has an invalid length. [ 1747.093978][T30345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7586'. [ 1747.113788][T27880] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1747.178593][T20522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.187225][T20522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.313889][T20516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.351687][T20516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.551051][T30351] pim6reg1: entered promiscuous mode [ 1747.570218][T30351] pim6reg1: entered allmulticast mode [ 1748.808130][T30374] bridge_slave_1: left allmulticast mode [ 1748.837750][T30374] bridge_slave_1: left promiscuous mode [ 1748.894793][T30374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.146076][T27880] Bluetooth: hci3: command 0x0406 tx timeout [ 1749.160407][T30374] bridge_slave_0: left allmulticast mode [ 1749.169176][T30374] bridge_slave_0: left promiscuous mode [ 1749.201159][T30374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.273598][T30385] netlink: 'syz.1.7600': attribute type 3 has an invalid length. [ 1749.453299][T30385] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7600'. [ 1749.695232][T30375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7597'. [ 1749.709346][T30380] netlink: 'syz.3.7599': attribute type 10 has an invalid length. [ 1749.868362][T30390] pim6reg1: entered promiscuous mode [ 1749.890098][T30390] pim6reg1: entered allmulticast mode [ 1750.488126][T30395] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.7604'. [ 1750.663304][T30408] netlink: 'syz.1.7610': attribute type 3 has an invalid length. [ 1750.795266][T30412] netlink: 'syz.3.7612': attribute type 10 has an invalid length. [ 1750.860059][T30412] team0: Port device dummy0 added [ 1750.878379][T30415] netlink: 'syz.3.7612': attribute type 10 has an invalid length. [ 1750.974514][T30417] netlink: 'syz.2.7613': attribute type 3 has an invalid length. [ 1750.980029][T30415] team0: Port device dummy0 removed [ 1750.983538][T30417] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7613'. [ 1751.028788][T30415] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1751.443457][T30431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7615'. [ 1751.601322][T30431] caif0: entered promiscuous mode [ 1751.622355][T30431] caif0: entered allmulticast mode [ 1751.635100][T30431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1751.795259][T30428] pim6reg1: entered promiscuous mode [ 1751.806033][T30428] pim6reg1: entered allmulticast mode [ 1752.050590][T30441] syzkaller1: entered promiscuous mode [ 1752.057232][T30441] syzkaller1: entered allmulticast mode [ 1752.239843][T30447] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7623'. [ 1752.335687][T30451] validate_nla: 1 callbacks suppressed [ 1752.335710][T30451] netlink: 'syz.0.7625': attribute type 4 has an invalid length. [ 1752.371234][T30451] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7625'. [ 1752.401028][T30451] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1752.537166][T30457] netlink: 'syz.2.7627': attribute type 3 has an invalid length. [ 1752.560848][T30457] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1752.845704][T30463] syzkaller0: entered promiscuous mode [ 1752.858594][T30463] syzkaller0: entered allmulticast mode [ 1756.218566][T30471] IPv6: rose0: Disabled Multicast RS [ 1756.232742][T30480] netlink: 'syz.3.7634': attribute type 2 has an invalid length. [ 1756.245429][T30480] netlink: 'syz.3.7634': attribute type 8 has an invalid length. [ 1756.253419][T30480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7634'. [ 1756.347479][T30483] netlink: 'syz.0.7635': attribute type 10 has an invalid length. [ 1756.436218][T30483] veth0_macvtap: left promiscuous mode [ 1757.191255][T30497] netlink: 'syz.3.7640': attribute type 3 has an invalid length. [ 1757.258654][T30497] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7640'. [ 1757.513610][T30508] netlink: 'syz.1.7644': attribute type 10 has an invalid length. [ 1757.587712][T30508] team0: Device wg1 is of different type [ 1757.751804][T30505] syzkaller0: entered promiscuous mode [ 1757.772133][T30505] syzkaller0: entered allmulticast mode [ 1758.373121][T30533] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7650'. [ 1760.871338][T30515] sit0: entered promiscuous mode [ 1760.876852][T30515] sit0: entered allmulticast mode [ 1760.940572][T30533] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7650'. [ 1761.138153][T30542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7652'. [ 1761.582152][T30546] netlink: 'syz.2.7653': attribute type 3 has an invalid length. [ 1761.653829][T30546] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7653'. [ 1762.141316][T30544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7654'. [ 1762.677680][T30564] syzkaller0: entered promiscuous mode [ 1762.689721][T30564] syzkaller0: entered allmulticast mode [ 1762.929831][T30573] netlink: 'syz.3.7661': attribute type 3 has an invalid length. [ 1762.980288][T30573] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7661'. [ 1766.123489][T30585] netlink: 'syz.0.7665': attribute type 3 has an invalid length. [ 1766.588816][T30585] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7665'. [ 1766.642981][T30583] pim6reg1: entered promiscuous mode [ 1766.650237][T30583] pim6reg1: entered allmulticast mode [ 1767.942856][T30614] syzkaller0: entered promiscuous mode [ 1767.957888][T30614] syzkaller0: entered allmulticast mode [ 1773.210580][T30638] pim6reg1: entered promiscuous mode [ 1773.226727][T30638] pim6reg1: entered allmulticast mode [ 1773.330296][T30646] netlink: 'syz.2.7682': attribute type 4 has an invalid length. [ 1773.344593][T30646] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7682'. [ 1773.362189][T30646] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1773.487702][T30649] netlink: 'syz.1.7684': attribute type 8 has an invalid length. [ 1773.505284][T30649] netlink: 'syz.1.7684': attribute type 3 has an invalid length. [ 1773.513088][T30649] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7684'. [ 1774.065854][T30664] syzkaller0: entered promiscuous mode [ 1774.080281][T30664] syzkaller0: entered allmulticast mode [ 1774.111869][T30658] netlink: 'syz.3.7689': attribute type 10 has an invalid length. [ 1774.143643][T30658] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7689'. [ 1775.139001][T30687] FAULT_INJECTION: forcing a failure. [ 1775.139001][T30687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.161041][T30687] CPU: 1 PID: 30687 Comm: syz.3.7697 Not tainted syzkaller #0 [ 1775.168672][T30687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1775.179304][T30687] Call Trace: [ 1775.182907][T30690] netlink: 'syz.1.7698': attribute type 1 has an invalid length. [ 1775.183659][T30687] [ 1775.183675][T30687] dump_stack_lvl+0x18c/0x250 [ 1775.192305][T30690] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.7698'. [ 1775.194999][T30687] ? show_regs_print_info+0x20/0x20 [ 1775.195034][T30687] ? load_image+0x400/0x400 [ 1775.195063][T30687] ? __might_fault+0xaa/0x120 [ 1775.223873][T30687] ? __lock_acquire+0x7d40/0x7d40 [ 1775.228935][T30687] should_fail_ex+0x39d/0x4d0 [ 1775.233637][T30687] _copy_from_user+0x2f/0xe0 [ 1775.238600][T30687] __sys_bpf+0x23e/0x890 [ 1775.243232][T30687] ? bpf_link_show_fdinfo+0x390/0x390 [ 1775.248792][T30687] ? __fdget_pos+0x241/0x330 [ 1775.253501][T30687] ? lock_chain_count+0x20/0x20 [ 1775.258472][T30687] __x64_sys_bpf+0x7c/0x90 [ 1775.262902][T30687] do_syscall_64+0x55/0xa0 [ 1775.267429][T30687] ? clear_bhb_loop+0x40/0x90 [ 1775.272306][T30687] ? clear_bhb_loop+0x40/0x90 [ 1775.277259][T30687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1775.283193][T30687] RIP: 0033:0x7fbaa179c799 [ 1775.287802][T30687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.308641][T30687] RSP: 002b:00007fbaa25b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1775.317516][T30687] RAX: ffffffffffffffda RBX: 00007fbaa1a15fa0 RCX: 00007fbaa179c799 [ 1775.325952][T30687] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1775.334760][T30687] RBP: 00007fbaa25b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.343291][T30687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1775.351717][T30687] R13: 00007fbaa1a16038 R14: 00007fbaa1a15fa0 R15: 00007ffeae10ce08 [ 1775.359812][T30687] [ 1778.413966][T30697] netlink: 'syz.1.7701': attribute type 10 has an invalid length. [ 1778.422158][T30697] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7701'. [ 1778.658285][T30706] syzkaller0: entered promiscuous mode [ 1778.685248][T30706] syzkaller0: entered allmulticast mode [ 1782.088792][T30738] netlink: 'syz.0.7714': attribute type 10 has an invalid length. [ 1782.097685][T30738] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7714'. [ 1782.451728][T30741] syzkaller0: entered promiscuous mode [ 1782.480825][T30741] syzkaller0: entered allmulticast mode [ 1786.083334][T30768] netlink: 'syz.2.7725': attribute type 39 has an invalid length. [ 1787.960187][T30808] syzkaller0: entered promiscuous mode [ 1787.984777][T30808] syzkaller0: entered allmulticast mode [ 1788.378717][T30821] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.7739'. [ 1792.041369][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.050315][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.412288][T30874] syzkaller0: entered promiscuous mode [ 1794.428319][T30874] syzkaller0: entered allmulticast mode [ 1794.515569][T30876] netlink: 'syz.3.7759': attribute type 2 has an invalid length. [ 1794.524089][T30876] netlink: 'syz.3.7759': attribute type 8 has an invalid length. [ 1794.595169][T30876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7759'. [ 1794.904264][T30884] aaaaaaaaaaaaaaa: entered promiscuous mode [ 1799.297322][T30908] netlink: 'syz.3.7768': attribute type 21 has an invalid length. [ 1799.890902][T30919] netlink: 'syz.2.7771': attribute type 3 has an invalid length. [ 1800.003786][T30919] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7771'. [ 1800.064325][T30916] pim6reg1: entered promiscuous mode [ 1800.072867][T30916] pim6reg1: entered allmulticast mode [ 1801.187077][T30951] netlink: 'syz.3.7778': attribute type 29 has an invalid length. [ 1801.238822][T30949] syzkaller0: entered promiscuous mode [ 1801.244469][T30949] syzkaller0: entered allmulticast mode [ 1801.264285][T30951] netlink: 'syz.3.7778': attribute type 29 has an invalid length. [ 1801.279897][T30957] netlink: 'syz.3.7778': attribute type 29 has an invalid length. [ 1801.374146][T30951] netlink: 'syz.3.7778': attribute type 29 has an invalid length. [ 1804.355055][T13230] Bluetooth: hci2: command 0x0406 tx timeout [ 1804.949067][T30972] netlink: 'syz.2.7784': attribute type 3 has an invalid length. [ 1804.963642][T30972] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7784'. [ 1805.169365][T30979] pim6reg1: entered promiscuous mode [ 1805.205109][T30979] pim6reg1: entered allmulticast mode [ 1806.257183][T30993] FAULT_INJECTION: forcing a failure. [ 1806.257183][T30993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1806.314311][T30993] CPU: 0 PID: 30993 Comm: syz.2.7791 Not tainted syzkaller #0 [ 1806.321943][T30993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1806.332298][T30993] Call Trace: [ 1806.335613][T30993] [ 1806.338606][T30993] dump_stack_lvl+0x18c/0x250 [ 1806.343817][T30993] ? show_regs_print_info+0x20/0x20 [ 1806.349152][T30993] ? load_image+0x400/0x400 [ 1806.353719][T30993] ? __might_fault+0xaa/0x120 [ 1806.358548][T30993] ? __lock_acquire+0x7d40/0x7d40 [ 1806.363662][T30993] should_fail_ex+0x39d/0x4d0 [ 1806.368496][T30993] _copy_from_user+0x2f/0xe0 [ 1806.373149][T30993] generic_map_update_batch+0x54b/0x810 [ 1806.379113][T30993] ? rcu_read_unlock+0xa0/0xa0 [ 1806.384108][T30993] ? __fdget+0x180/0x210 [ 1806.388475][T30993] ? rcu_read_unlock+0xa0/0xa0 [ 1806.393371][T30993] bpf_map_do_batch+0x3d7/0x610 [ 1806.398288][T30993] __sys_bpf+0x381/0x890 [ 1806.402938][T30993] ? bpf_link_show_fdinfo+0x390/0x390 [ 1806.408598][T30993] ? lock_chain_count+0x20/0x20 [ 1806.413616][T30993] __x64_sys_bpf+0x7c/0x90 [ 1806.418164][T30993] do_syscall_64+0x55/0xa0 [ 1806.422630][T30993] ? clear_bhb_loop+0x40/0x90 [ 1806.427527][T30993] ? clear_bhb_loop+0x40/0x90 [ 1806.432351][T30993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1806.438469][T30993] RIP: 0033:0x7f36da79c799 [ 1806.443004][T30993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.463466][T30993] RSP: 002b:00007f36db6fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1806.472199][T30993] RAX: ffffffffffffffda RBX: 00007f36daa15fa0 RCX: 00007f36da79c799 [ 1806.480225][T30993] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1806.488346][T30993] RBP: 00007f36db6fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1806.496638][T30993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1806.505013][T30993] R13: 00007f36daa16038 R14: 00007f36daa15fa0 R15: 00007ffc98bc70c8 [ 1806.513499][T30993] [ 1806.831875][T31004] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7796'. [ 1806.947983][T31002] syzkaller0: entered promiscuous mode [ 1806.988355][T31009] netlink: 'syz.1.7797': attribute type 3 has an invalid length. [ 1806.996857][T31002] syzkaller0: entered allmulticast mode [ 1807.012670][T31009] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7797'. [ 1810.770084][T31027] netlink: 'syz.1.7801': attribute type 10 has an invalid length. [ 1810.778512][T31027] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7801'. [ 1814.039101][T31056] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7808'. [ 1814.192324][T31063] netlink: 'syz.2.7810': attribute type 3 has an invalid length. [ 1814.227218][T31063] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7810'. [ 1814.753957][T31069] syzkaller0: entered promiscuous mode [ 1814.759878][T31069] syzkaller0: entered allmulticast mode [ 1818.166550][T31093] FAULT_INJECTION: forcing a failure. [ 1818.166550][T31093] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.222011][T31093] CPU: 0 PID: 31093 Comm: syz.1.7818 Not tainted syzkaller #0 [ 1818.229786][T31093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1818.240118][T31093] Call Trace: [ 1818.243590][T31093] [ 1818.246733][T31093] dump_stack_lvl+0x18c/0x250 [ 1818.251687][T31093] ? show_regs_print_info+0x20/0x20 [ 1818.257507][T31093] ? load_image+0x400/0x400 [ 1818.262163][T31093] ? __might_sleep+0xe0/0xe0 [ 1818.266804][T31093] ? __lock_acquire+0x7d40/0x7d40 [ 1818.271875][T31093] ? mark_lock+0x94/0x320 [ 1818.276262][T31093] should_fail_ex+0x39d/0x4d0 [ 1818.281000][T31093] should_failslab+0x9/0x20 [ 1818.285907][T31093] slab_pre_alloc_hook+0x59/0x310 [ 1818.290980][T31093] ? __get_vm_area_node+0x125/0x370 [ 1818.296203][T31093] __kmem_cache_alloc_node+0x53/0x250 [ 1818.301683][T31093] ? __get_vm_area_node+0x125/0x370 [ 1818.306904][T31093] kmalloc_node_trace+0x26/0xe0 [ 1818.311774][T31093] __get_vm_area_node+0x125/0x370 [ 1818.316848][T31093] __vmalloc_node_range+0x36e/0x1330 [ 1818.322188][T31093] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1818.327776][T31093] ? mark_lock+0x94/0x320 [ 1818.332130][T31093] ? __lock_acquire+0x1347/0x7d40 [ 1818.337188][T31093] ? free_vm_area+0x50/0x50 [ 1818.341724][T31093] ? end_current_label_crit_section+0x170/0x170 [ 1818.347984][T31093] ? perf_trace_lock+0xfc/0x3b0 [ 1818.352860][T31093] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1818.358516][T31093] __vmalloc+0x7a/0x90 [ 1818.362599][T31093] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1818.368160][T31093] bpf_prog_alloc_no_stats+0x47/0x440 [ 1818.373645][T31093] ? bpf_prog_alloc+0x2b/0x1a0 [ 1818.378597][T31093] bpf_prog_alloc+0x3d/0x1a0 [ 1818.383463][T31093] bpf_prog_load+0x6eb/0x1670 [ 1818.388168][T31093] ? map_freeze+0x420/0x420 [ 1818.392811][T31093] ? __might_fault+0xaa/0x120 [ 1818.397586][T31093] ? __lock_acquire+0x7d40/0x7d40 [ 1818.402885][T31093] ? file_end_write+0x159/0x250 [ 1818.407760][T31093] ? __might_fault+0xaa/0x120 [ 1818.412736][T31093] ? __might_fault+0xc6/0x120 [ 1818.417436][T31093] ? __might_fault+0xaa/0x120 [ 1818.422128][T31093] ? bpf_lsm_bpf+0x9/0x10 [ 1818.426627][T31093] ? security_bpf+0x7e/0xa0 [ 1818.431235][T31093] __sys_bpf+0x5ba/0x890 [ 1818.435581][T31093] ? bpf_link_show_fdinfo+0x390/0x390 [ 1818.441075][T31093] ? lock_chain_count+0x20/0x20 [ 1818.446314][T31093] __x64_sys_bpf+0x7c/0x90 [ 1818.450847][T31093] do_syscall_64+0x55/0xa0 [ 1818.455379][T31093] ? clear_bhb_loop+0x40/0x90 [ 1818.460071][T31093] ? clear_bhb_loop+0x40/0x90 [ 1818.464858][T31093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1818.470863][T31093] RIP: 0033:0x7f476c99c799 [ 1818.475290][T31093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.495874][T31093] RSP: 002b:00007f476d8dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1818.504484][T31093] RAX: ffffffffffffffda RBX: 00007f476cc15fa0 RCX: 00007f476c99c799 [ 1818.512817][T31093] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 1818.521176][T31093] RBP: 00007f476d8dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.529343][T31093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.537935][T31093] R13: 00007f476cc16038 R14: 00007f476cc15fa0 R15: 00007ffc3e9b01d8 [ 1818.546029][T31093] [ 1818.563345][T31093] syz.1.7818: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1818.580713][T31093] CPU: 0 PID: 31093 Comm: syz.1.7818 Not tainted syzkaller #0 [ 1818.588417][T31093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1818.598533][T31093] Call Trace: [ 1818.601856][T31093] [ 1818.604821][T31093] dump_stack_lvl+0x18c/0x250 [ 1818.609550][T31093] ? show_regs_print_info+0x20/0x20 [ 1818.614813][T31093] ? load_image+0x400/0x400 [ 1818.619433][T31093] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1818.626308][T31093] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1818.633019][T31093] warn_alloc+0x246/0x340 [ 1818.637480][T31093] ? __get_vm_area_node+0x125/0x370 [ 1818.642714][T31093] ? zone_watermark_ok_safe+0x230/0x230 [ 1818.648376][T31093] ? rcu_is_watching+0x15/0xb0 [ 1818.653525][T31093] ? __get_vm_area_node+0x356/0x370 [ 1818.658926][T31093] __vmalloc_node_range+0x393/0x1330 [ 1818.664233][T31093] ? mark_lock+0x94/0x320 [ 1818.668942][T31093] ? __lock_acquire+0x1347/0x7d40 [ 1818.674170][T31093] ? free_vm_area+0x50/0x50 [ 1818.678710][T31093] ? end_current_label_crit_section+0x170/0x170 [ 1818.685042][T31093] ? perf_trace_lock+0xfc/0x3b0 [ 1818.692297][T31093] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1818.697873][T31093] __vmalloc+0x7a/0x90 [ 1818.701990][T31093] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1818.707765][T31093] bpf_prog_alloc_no_stats+0x47/0x440 [ 1818.713183][T31093] ? bpf_prog_alloc+0x2b/0x1a0 [ 1818.718064][T31093] bpf_prog_alloc+0x3d/0x1a0 [ 1818.722681][T31093] bpf_prog_load+0x6eb/0x1670 [ 1818.727478][T31093] ? map_freeze+0x420/0x420 [ 1818.732173][T31093] ? __might_fault+0xaa/0x120 [ 1818.736884][T31093] ? __lock_acquire+0x7d40/0x7d40 [ 1818.742024][T31093] ? file_end_write+0x159/0x250 [ 1818.746912][T31093] ? __might_fault+0xaa/0x120 [ 1818.751690][T31093] ? __might_fault+0xc6/0x120 [ 1818.756566][T31093] ? __might_fault+0xaa/0x120 [ 1818.761452][T31093] ? bpf_lsm_bpf+0x9/0x10 [ 1818.765797][T31093] ? security_bpf+0x7e/0xa0 [ 1818.770319][T31093] __sys_bpf+0x5ba/0x890 [ 1818.774705][T31093] ? bpf_link_show_fdinfo+0x390/0x390 [ 1818.780138][T31093] ? lock_chain_count+0x20/0x20 [ 1818.785031][T31093] __x64_sys_bpf+0x7c/0x90 [ 1818.789481][T31093] do_syscall_64+0x55/0xa0 [ 1818.794015][T31093] ? clear_bhb_loop+0x40/0x90 [ 1818.798708][T31093] ? clear_bhb_loop+0x40/0x90 [ 1818.803404][T31093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1818.809308][T31093] RIP: 0033:0x7f476c99c799 [ 1818.813744][T31093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.833452][T31093] RSP: 002b:00007f476d8dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1818.841883][T31093] RAX: ffffffffffffffda RBX: 00007f476cc15fa0 RCX: 00007f476c99c799 [ 1818.849876][T31093] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 1818.857879][T31093] RBP: 00007f476d8dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.865976][T31093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.874070][T31093] R13: 00007f476cc16038 R14: 00007f476cc15fa0 R15: 00007ffc3e9b01d8 [ 1818.882178][T31093] [ 1818.900773][T31093] Mem-Info: [ 1818.904188][T31093] active_anon:6962 inactive_anon:0 isolated_anon:0 [ 1818.904188][T31093] active_file:18972 inactive_file:40603 isolated_file:0 [ 1818.904188][T31093] unevictable:768 dirty:97 writeback:0 [ 1818.904188][T31093] slab_reclaimable:10481 slab_unreclaimable:95635 [ 1818.904188][T31093] mapped:24963 shmem:1361 pagetables:550 [ 1818.904188][T31093] sec_pagetables:0 bounce:0 [ 1818.904188][T31093] kernel_misc_reclaimable:0 [ 1818.904188][T31093] free:1340055 free_pcp:11575 free_cma:0 [ 1818.986019][T31093] Node 0 active_anon:27848kB inactive_anon:0kB active_file:75888kB inactive_file:162204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99852kB dirty:388kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10180kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no [ 1819.019406][T31093] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1819.055776][T31093] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.084047][T31093] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1819.090377][T31093] Node 0 DMA32 free:1449428kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27908kB inactive_anon:0kB active_file:75888kB inactive_file:161372kB unevictable:1536kB writepending:388kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:24400kB local_pcp:11772kB free_cma:0kB [ 1819.182691][T31093] lowmem_reserve[]: 0 0 0 0 0 [ 1819.188490][T31093] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.220573][T31093] lowmem_reserve[]: 0 0 0 0 0 [ 1819.225979][T31093] Node 1 Normal free:3895432kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21828kB local_pcp:12096kB free_cma:0kB [ 1819.260588][T31093] lowmem_reserve[]: 0 0 0 0 0 [ 1819.319870][T31093] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1819.354933][T31093] Node 0 DMA32: 2239*4kB (UME) 2057*8kB (UME) 1207*16kB (UME) 563*32kB (ME) 1213*64kB (UME) 571*128kB (UME) 296*256kB (UME) 126*512kB (UM) 58*1024kB (UM) 8*2048kB (UM) 249*4096kB (UM) = 1449428kB [ 1819.397310][T31103] netlink: 'syz.3.7822': attribute type 3 has an invalid length. [ 1819.400895][T31093] Node 0 [ 1819.406054][T31103] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7822'. [ 1819.607375][T31093] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1819.662426][T31093] Node 1 Normal: 260*4kB (UME) 55*8kB (UME) 50*16kB (UME) 53*32kB (UME) 22*64kB (UME) 7*128kB (UE) 0*256kB 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895432kB [ 1819.719126][T31093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1819.747567][T31093] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1819.790073][T31093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1819.800455][T31093] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1819.810325][T31093] 60936 total pagecache pages [ 1819.815780][T31093] 0 pages in swap cache [ 1819.820055][T31093] Free swap = 124996kB [ 1819.824238][T31093] Total swap = 124996kB [ 1819.831119][T31093] 2097051 pages RAM [ 1819.836381][T31093] 0 pages HighMem/MovableOnly [ 1819.851743][T31093] 416924 pages reserved [ 1819.861963][T31093] 0 pages cma reserved [ 1820.057916][T31124] pim6reg1: entered promiscuous mode [ 1820.063590][T31124] pim6reg1: entered allmulticast mode [ 1820.207537][T31126] syzkaller0: entered promiscuous mode [ 1820.213372][T31126] syzkaller0: entered allmulticast mode [ 1821.304195][T27880] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 1823.306062][T31133] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7832'. [ 1823.451340][T31143] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7835'. [ 1823.641469][T31148] netlink: 'syz.1.7836': attribute type 3 has an invalid length. [ 1823.641828][T31143] team0: Port device team_slave_0 removed [ 1823.665212][T31143] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1823.674106][T31148] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7836'. [ 1824.304119][T31164] netlink: 'syz.3.7842': attribute type 17 has an invalid length. [ 1824.318363][T31164] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7842'. [ 1824.423683][T31167] netlink: 'syz.0.7844': attribute type 2 has an invalid length. [ 1824.445277][T31167] netlink: 'syz.0.7844': attribute type 8 has an invalid length. [ 1824.466920][T31167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7844'. [ 1824.650889][T31172] syzkaller0: entered promiscuous mode [ 1824.663661][T31172] syzkaller0: entered allmulticast mode [ 1824.695617][T31170] pim6reg1: entered promiscuous mode [ 1824.718265][T31170] pim6reg1: entered allmulticast mode [ 1825.120388][T31184] netlink: 'syz.0.7850': attribute type 3 has an invalid length. [ 1825.133358][T31184] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7850'. [ 1828.845501][T31213] netlink: 'syz.3.7860': attribute type 3 has an invalid length. [ 1828.881384][T31213] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7860'. [ 1828.942798][T31215] syzkaller0: entered promiscuous mode [ 1828.952755][T31215] syzkaller0: entered allmulticast mode [ 1828.969032][T31218] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7862'. [ 1829.100937][T31222] pim6reg1: entered promiscuous mode [ 1829.115427][T31222] pim6reg1: entered allmulticast mode [ 1834.652096][T31227] netlink: 'syz.3.7864': attribute type 10 has an invalid length. [ 1834.661299][T31227] bond0: (slave bond_slave_0): Releasing backup interface [ 1835.763443][T31251] netlink: 'syz.1.7873': attribute type 3 has an invalid length. [ 1835.796037][T31251] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7873'. [ 1835.987848][T31259] syzkaller0: entered promiscuous mode [ 1835.993716][T31259] syzkaller0: entered allmulticast mode [ 1836.172382][T31266] netlink: 'syz.1.7878': attribute type 7 has an invalid length. [ 1839.630467][T31291] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1840.000640][T31298] netlink: 'syz.0.7887': attribute type 3 has an invalid length. [ 1840.020842][T31298] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7887'. [ 1840.945431][T31320] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7895'. [ 1841.007221][T31320] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1841.927010][T31333] netlink: 'syz.2.7897': attribute type 7 has an invalid length. [ 1842.161150][T31334] syzkaller0: entered promiscuous mode [ 1842.166777][T31334] syzkaller0: entered allmulticast mode [ 1842.183976][T31336] netlink: 'syz.3.7899': attribute type 3 has an invalid length. [ 1842.208225][T31333] pim6reg1: entered promiscuous mode [ 1842.213621][T31333] pim6reg1: entered allmulticast mode [ 1842.223157][T31336] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7899'. [ 1846.299472][T31363] netlink: 'syz.2.7907': attribute type 29 has an invalid length. [ 1846.341434][T31356] netlink: 'syz.1.7904': attribute type 9 has an invalid length. [ 1846.357798][T31363] netlink: 'syz.2.7907': attribute type 29 has an invalid length. [ 1846.372488][T31356] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7904'. [ 1846.476144][T31356] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7904'. [ 1847.313368][T31378] netlink: 'syz.2.7910': attribute type 3 has an invalid length. [ 1847.421777][T31378] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7910'. [ 1847.799949][T31395] netlink: 'syz.0.7915': attribute type 7 has an invalid length. [ 1848.056331][T31395] pim6reg1: entered promiscuous mode [ 1848.061804][T31395] pim6reg1: entered allmulticast mode [ 1848.219246][T31400] syzkaller0: entered promiscuous mode [ 1848.229954][T31400] syzkaller0: entered allmulticast mode [ 1848.642487][T31414] netlink: 'syz.0.7919': attribute type 1 has an invalid length. [ 1848.662294][T31414] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.7919'. [ 1850.034541][T31430] netlink: 'syz.1.7924': attribute type 3 has an invalid length. [ 1850.044192][T31430] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7924'. [ 1851.596465][T31438] netlink: 'syz.0.7927': attribute type 7 has an invalid length. [ 1851.649437][T31444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7929'. [ 1851.659046][T31444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7929'. [ 1851.683790][T31444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7929'. [ 1851.713330][T31444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7929'. [ 1851.751977][T31438] pim6reg1: entered promiscuous mode [ 1851.758123][T31438] pim6reg1: entered allmulticast mode [ 1852.657477][T31462] netlink: 'syz.2.7935': attribute type 3 has an invalid length. [ 1852.678631][T31462] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7935'. [ 1852.963889][T31467] syzkaller0: entered promiscuous mode [ 1853.006496][T31467] syzkaller0: entered allmulticast mode [ 1853.525262][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.532023][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.563655][T13230] Bluetooth: hci0: command 0x0406 tx timeout [ 1856.330576][T31487] netlink: 'syz.0.7944': attribute type 7 has an invalid length. [ 1856.373223][T31498] pim6reg1: entered promiscuous mode [ 1856.394919][T31498] pim6reg1: entered allmulticast mode [ 1856.524523][T31509] netlink: 'syz.1.7949': attribute type 21 has an invalid length. [ 1856.544825][T31509] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7949'. [ 1856.639178][T31511] netlink: 'syz.3.7950': attribute type 3 has an invalid length. [ 1856.696371][T31511] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7950'. [ 1857.181357][T31524] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1857.616092][T31531] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7955'. [ 1858.564389][T31541] syzkaller0: entered promiscuous mode [ 1858.573079][T31541] syzkaller0: entered allmulticast mode [ 1860.241194][T31567] netlink: 'syz.0.7964': attribute type 3 has an invalid length. [ 1860.249269][T31567] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7964'. [ 1861.733395][T31546] netlink: 'syz.2.7960': attribute type 7 has an invalid length. [ 1862.211358][T31584] netlink: 'syz.2.7970': attribute type 15 has an invalid length. [ 1862.772591][T31596] syzkaller0: entered promiscuous mode [ 1862.782090][T31596] syzkaller0: entered allmulticast mode [ 1863.062502][T31604] netlink: 'syz.3.7977': attribute type 3 has an invalid length. [ 1863.080956][T31604] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7977'. [ 1865.960301][T31610] netlink: 'syz.1.7979': attribute type 7 has an invalid length. [ 1865.989281][T31620] netlink: 'syz.0.7981': attribute type 10 has an invalid length. [ 1866.015447][T31622] pim6reg1: entered promiscuous mode [ 1866.020919][T31622] pim6reg1: entered allmulticast mode [ 1868.821054][T31647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.881689][T31653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.889179][T31653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1869.203167][T31663] syzkaller0: entered promiscuous mode [ 1869.217484][T31663] syzkaller0: entered allmulticast mode [ 1869.295466][T31665] netlink: 'syz.3.7992': attribute type 3 has an invalid length. [ 1869.372356][T31665] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7992'. [ 1872.524609][T31676] lo: entered allmulticast mode [ 1872.536272][T31678] netlink: 'syz.0.7994': attribute type 7 has an invalid length. [ 1872.573062][T31681] netlink: 'syz.3.7996': attribute type 10 has an invalid length. [ 1872.623119][T31681] bond0: (slave dummy0): Releasing backup interface [ 1872.699482][T31681] team0: Port device dummy0 added [ 1872.754318][T31683] netlink: 'syz.3.7996': attribute type 10 has an invalid length. [ 1872.936448][T31683] team0: Port device dummy0 removed [ 1872.959865][T31683] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1873.263602][T31703] syzkaller0: entered promiscuous mode [ 1873.270328][T31703] syzkaller0: entered allmulticast mode [ 1873.398808][T31710] netlink: 'syz.1.8004': attribute type 3 has an invalid length. [ 1873.425034][T31710] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8004'. [ 1876.442139][T31715] syzkaller0: entered promiscuous mode [ 1876.447826][T31715] syzkaller0: entered allmulticast mode [ 1879.404943][T31734] netlink: 'syz.3.8011': attribute type 7 has an invalid length. [ 1879.475092][T31740] pim6reg1: entered promiscuous mode [ 1879.481274][T31740] pim6reg1: entered allmulticast mode [ 1879.861530][T31753] netlink: 'syz.0.8015': attribute type 3 has an invalid length. [ 1879.873589][T31753] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8015'. [ 1880.473282][T31768] netlink: 'syz.1.8019': attribute type 4 has an invalid length. [ 1880.502569][T31768] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8019'. [ 1880.563995][T31768] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1880.725550][T31774] syzkaller0: entered promiscuous mode [ 1880.731239][T31774] syzkaller0: entered allmulticast mode [ 1880.741271][T31773] netlink: 'syz.3.8023': attribute type 10 has an invalid length. [ 1880.775957][T31777] netlink: 'syz.2.8025': attribute type 7 has an invalid length. [ 1883.415148][T31791] pim6reg1: entered promiscuous mode [ 1883.420647][T31791] pim6reg1: entered allmulticast mode [ 1883.966181][T31803] netlink: 'syz.2.8031': attribute type 3 has an invalid length. [ 1883.983489][T31803] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8031'. [ 1884.802116][T31830] netlink: zone id is out of range [ 1884.816605][T31830] netlink: set zone limit has 8 unknown bytes [ 1884.928637][T31834] netlink: 'syz.2.8039': attribute type 7 has an invalid length. [ 1885.145653][T31836] syzkaller0: entered promiscuous mode [ 1885.151601][T31836] syzkaller0: entered allmulticast mode [ 1885.176949][T31834] pim6reg1: entered promiscuous mode [ 1885.182662][T31834] pim6reg1: entered allmulticast mode [ 1885.716492][T31847] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1885.743563][T31847] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8044'. [ 1889.782637][T31877] netlink: 'syz.2.8053': attribute type 7 has an invalid length. [ 1890.000061][T31877] pim6reg1: entered promiscuous mode [ 1890.033915][T31877] pim6reg1: entered allmulticast mode [ 1890.170778][T31882] netlink: 'syz.1.8055': attribute type 3 has an invalid length. [ 1890.195062][T31882] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8055'. [ 1890.514505][T31896] syzkaller0: entered promiscuous mode [ 1890.520436][T31896] syzkaller0: entered allmulticast mode [ 1891.587703][T31923] netlink: 'syz.0.8068': attribute type 3 has an invalid length. [ 1891.598912][T31923] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8068'. [ 1893.934920][T31932] netlink: 'syz.0.8070': attribute type 7 has an invalid length. [ 1895.086599][T31932] pim6reg1: entered promiscuous mode [ 1895.109392][T31932] pim6reg1: entered allmulticast mode [ 1895.214369][T31946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8075'. [ 1895.243785][T31948] sit0: left promiscuous mode [ 1895.253952][T31948] sit0: entered allmulticast mode [ 1895.262012][T31952] netlink: 'syz.2.8077': attribute type 33 has an invalid length. [ 1895.278713][T31952] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8077'. [ 1895.306245][T31948] sit0: entered promiscuous mode [ 1895.702437][T31958] netlink: 'syz.0.8078': attribute type 3 has an invalid length. [ 1895.743892][T31958] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8078'. [ 1896.609042][T31974] syzkaller0: entered promiscuous mode [ 1896.642506][T31974] syzkaller0: entered allmulticast mode [ 1896.957928][T31987] netlink: 'syz.0.8086': attribute type 7 has an invalid length. [ 1898.093048][T31995] delete_channel: no stack [ 1899.947508][T32004] netlink: 'syz.3.8090': attribute type 3 has an invalid length. [ 1899.965341][T32004] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1901.279174][T32027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1901.350068][T32027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1901.425577][T32027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1901.451159][T32033] netlink: 'syz.2.8100': attribute type 7 has an invalid length. [ 1901.548751][T32030] syzkaller0: entered promiscuous mode [ 1901.564319][T32030] syzkaller0: entered allmulticast mode [ 1901.811319][T32033] pim6reg1: entered promiscuous mode [ 1901.824802][T32033] pim6reg1: entered allmulticast mode [ 1902.858162][T32053] netlink: 'syz.1.8106': attribute type 3 has an invalid length. [ 1902.867928][T32053] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1908.758074][T32093] netlink: 'syz.0.8117': attribute type 3 has an invalid length. [ 1908.775198][T32093] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8117'. [ 1908.819068][T32090] syzkaller0: entered promiscuous mode [ 1908.825578][T32090] syzkaller0: entered allmulticast mode [ 1908.845413][T32099] netlink: 'syz.1.8119': attribute type 7 has an invalid length. [ 1911.960356][T32132] netlink: 'syz.0.8127': attribute type 4 has an invalid length. [ 1911.977324][T32132] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.8127'. [ 1912.180157][T32136] netlink: 'syz.1.8129': attribute type 3 has an invalid length. [ 1912.190139][T32136] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1913.562134][T32149] netlink: 'syz.1.8133': attribute type 21 has an invalid length. [ 1913.572645][T32149] netlink: 'syz.1.8133': attribute type 10 has an invalid length. [ 1913.584995][T32149] netlink: 'syz.1.8133': attribute type 12 has an invalid length. [ 1913.592990][T32149] netlink: 'syz.1.8133': attribute type 13 has an invalid length. [ 1913.601750][T32149] netlink: 'syz.1.8133': attribute type 14 has an invalid length. [ 1913.610237][T32149] netlink: 'syz.1.8133': attribute type 15 has an invalid length. [ 1913.624317][T32149] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.8133'. [ 1913.859374][T32156] syzkaller0: entered promiscuous mode [ 1913.872505][T32156] syzkaller0: entered allmulticast mode [ 1913.881394][T32160] validate_nla: 4 callbacks suppressed [ 1913.881415][T32160] netlink: 'syz.0.8137': attribute type 7 has an invalid length. [ 1914.004426][T32160] pim6reg1: entered promiscuous mode [ 1914.015113][T32160] pim6reg1: entered allmulticast mode [ 1914.157217][T32163] netlink: 'syz.2.8138': attribute type 3 has an invalid length. [ 1914.175523][T32163] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8138'. [ 1914.913093][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.924568][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.677869][T32173] netlink: 'syz.3.8141': attribute type 21 has an invalid length. [ 1916.687391][T32173] netlink: 'syz.3.8141': attribute type 30 has an invalid length. [ 1917.587445][T32193] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8148'. [ 1918.020990][T32200] netlink: 'syz.2.8150': attribute type 4 has an invalid length. [ 1918.235051][T32200] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8150'. [ 1918.244270][T32200] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1918.528580][T32203] netlink: 'syz.2.8151': attribute type 3 has an invalid length. [ 1918.537255][T32203] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8151'. [ 1918.647850][T32206] netlink: 'syz.0.8152': attribute type 8 has an invalid length. [ 1918.681163][T32206] netlink: 'syz.0.8152': attribute type 3 has an invalid length. [ 1918.704946][T32206] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8152'. [ 1918.774363][T32208] netlink: 'syz.1.8153': attribute type 7 has an invalid length. [ 1918.859156][T32210] syzkaller0: entered promiscuous mode [ 1918.879402][T32210] syzkaller0: entered allmulticast mode [ 1922.279524][T32208] pim6reg1: entered promiscuous mode [ 1922.285264][T32208] pim6reg1: entered allmulticast mode [ 1922.811128][T32250] netlink: 'syz.3.8165': attribute type 3 has an invalid length. [ 1922.843990][T32250] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8165'. [ 1924.302459][T32265] FAULT_INJECTION: forcing a failure. [ 1924.302459][T32265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1924.377769][T32265] CPU: 0 PID: 32265 Comm: syz.0.8169 Not tainted syzkaller #0 [ 1924.385327][T32265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1924.395517][T32265] Call Trace: [ 1924.399883][T32265] [ 1924.402882][T32265] dump_stack_lvl+0x18c/0x250 [ 1924.407631][T32265] ? show_regs_print_info+0x20/0x20 [ 1924.412897][T32265] ? load_image+0x400/0x400 [ 1924.417627][T32265] ? __lock_acquire+0x7d40/0x7d40 [ 1924.422714][T32265] ? snprintf+0xe9/0x140 [ 1924.427183][T32265] should_fail_ex+0x39d/0x4d0 [ 1924.432090][T32265] _copy_to_user+0x2f/0xa0 [ 1924.436559][T32265] simple_read_from_buffer+0xe7/0x150 [ 1924.442002][T32265] proc_fail_nth_read+0x1e8/0x260 [ 1924.447089][T32265] ? proc_fault_inject_write+0x360/0x360 [ 1924.452997][T32265] ? fsnotify_perm+0x271/0x5e0 [ 1924.457814][T32265] ? proc_fault_inject_write+0x360/0x360 [ 1924.463598][T32265] vfs_read+0x28b/0x970 [ 1924.467803][T32265] ? kernel_read+0x1e0/0x1e0 [ 1924.472455][T32265] ? __fget_files+0x28/0x4b0 [ 1924.477104][T32265] ? __fget_files+0x28/0x4b0 [ 1924.481942][T32265] ? __fget_files+0x43d/0x4b0 [ 1924.486676][T32265] ? __fdget_pos+0x2a3/0x330 [ 1924.491634][T32265] ? ksys_read+0x75/0x260 [ 1924.495984][T32265] ksys_read+0x150/0x260 [ 1924.500421][T32265] ? vfs_write+0x990/0x990 [ 1924.504861][T32265] ? lockdep_hardirqs_on+0x98/0x150 [ 1924.510160][T32265] do_syscall_64+0x55/0xa0 [ 1924.514596][T32265] ? clear_bhb_loop+0x40/0x90 [ 1924.519378][T32265] ? clear_bhb_loop+0x40/0x90 [ 1924.524073][T32265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1924.530076][T32265] RIP: 0033:0x7fc9a475cfce [ 1924.534601][T32265] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1924.554408][T32265] RSP: 002b:00007fc9a5645fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1924.563288][T32265] RAX: ffffffffffffffda RBX: 00007fc9a56466c0 RCX: 00007fc9a475cfce [ 1924.571469][T32265] RDX: 000000000000000f RSI: 00007fc9a56460a0 RDI: 0000000000000008 [ 1924.579553][T32265] RBP: 00007fc9a5646090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.587546][T32265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1924.595525][T32265] R13: 00007fc9a4a16038 R14: 00007fc9a4a15fa0 R15: 00007fff1a53aa28 [ 1924.603656][T32265] [ 1924.759525][T32271] syzkaller0: entered promiscuous mode [ 1924.783674][T32271] syzkaller0: entered allmulticast mode [ 1924.882515][T32282] netlink: 'syz.3.8174': attribute type 7 has an invalid length. [ 1925.330719][T32291] netlink: 'syz.2.8176': attribute type 3 has an invalid length. [ 1925.479606][T32291] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8176'. [ 1928.694694][T32307] IPv6: Can't replace route, no match found [ 1928.702956][T32308] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1928.898916][T32315] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8181'. [ 1928.924877][T32315] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1929.038494][T32321] FAULT_INJECTION: forcing a failure. [ 1929.038494][T32321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1929.056530][T32321] CPU: 1 PID: 32321 Comm: syz.0.8183 Not tainted syzkaller #0 [ 1929.064076][T32321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1929.074281][T32321] Call Trace: [ 1929.077609][T32321] [ 1929.080592][T32321] dump_stack_lvl+0x18c/0x250 [ 1929.085347][T32321] ? show_regs_print_info+0x20/0x20 [ 1929.090636][T32321] ? load_image+0x400/0x400 [ 1929.095458][T32321] ? __might_fault+0xaa/0x120 [ 1929.100207][T32321] ? __lock_acquire+0x7d40/0x7d40 [ 1929.105396][T32321] should_fail_ex+0x39d/0x4d0 [ 1929.110148][T32321] _copy_from_user+0x2f/0xe0 [ 1929.114803][T32321] ___sys_sendmsg+0x1c7/0x360 [ 1929.119546][T32321] ? __sys_sendmsg+0x2a0/0x2a0 [ 1929.124412][T32321] ? __lock_acquire+0x7d40/0x7d40 [ 1929.129661][T32321] __se_sys_sendmsg+0x1c2/0x2b0 [ 1929.134580][T32321] ? __x64_sys_sendmsg+0x80/0x80 [ 1929.139619][T32321] ? lockdep_hardirqs_on+0x98/0x150 [ 1929.144893][T32321] do_syscall_64+0x55/0xa0 [ 1929.149396][T32321] ? clear_bhb_loop+0x40/0x90 [ 1929.154147][T32321] ? clear_bhb_loop+0x40/0x90 [ 1929.158887][T32321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1929.164930][T32321] RIP: 0033:0x7fc9a479c799 [ 1929.169497][T32321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.189164][T32321] RSP: 002b:00007fc9a5646028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1929.197740][T32321] RAX: ffffffffffffffda RBX: 00007fc9a4a15fa0 RCX: 00007fc9a479c799 [ 1929.205881][T32321] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1929.213926][T32321] RBP: 00007fc9a5646090 R08: 0000000000000000 R09: 0000000000000000 [ 1929.222047][T32321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1929.230091][T32321] R13: 00007fc9a4a16038 R14: 00007fc9a4a15fa0 R15: 00007fff1a53aa28 [ 1929.238170][T32321] [ 1929.249765][T32330] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8185'. [ 1929.261603][T32330] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1929.555357][T32334] syzkaller0: entered promiscuous mode [ 1929.564032][T32334] syzkaller0: entered allmulticast mode [ 1929.574870][T32338] netlink: 'syz.1.8190': attribute type 7 has an invalid length. [ 1929.695394][T32341] netlink: 'syz.3.8191': attribute type 3 has an invalid length. [ 1929.707472][T32341] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8191'. [ 1929.766556][T32346] FAULT_INJECTION: forcing a failure. [ 1929.766556][T32346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1929.780040][T32346] CPU: 0 PID: 32346 Comm: syz.2.8192 Not tainted syzkaller #0 [ 1929.787647][T32346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1929.798268][T32346] Call Trace: [ 1929.801586][T32346] [ 1929.804611][T32346] dump_stack_lvl+0x18c/0x250 [ 1929.809323][T32346] ? show_regs_print_info+0x20/0x20 [ 1929.814560][T32346] ? load_image+0x400/0x400 [ 1929.819224][T32346] ? __might_fault+0xaa/0x120 [ 1929.823937][T32346] ? __lock_acquire+0x7d40/0x7d40 [ 1929.828980][T32346] should_fail_ex+0x39d/0x4d0 [ 1929.833831][T32346] _copy_from_user+0x2f/0xe0 [ 1929.838558][T32346] __sys_bpf+0x23e/0x890 [ 1929.842845][T32346] ? bpf_link_show_fdinfo+0x390/0x390 [ 1929.848347][T32346] ? lock_chain_count+0x20/0x20 [ 1929.853371][T32346] __x64_sys_bpf+0x7c/0x90 [ 1929.857928][T32346] do_syscall_64+0x55/0xa0 [ 1929.862401][T32346] ? clear_bhb_loop+0x40/0x90 [ 1929.867294][T32346] ? clear_bhb_loop+0x40/0x90 [ 1929.871979][T32346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1929.877883][T32346] RIP: 0033:0x7f36da79c799 [ 1929.882306][T32346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.902293][T32346] RSP: 002b:00007f36db6fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1929.910756][T32346] RAX: ffffffffffffffda RBX: 00007f36daa15fa0 RCX: 00007f36da79c799 [ 1929.918935][T32346] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1929.926961][T32346] RBP: 00007f36db6fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1929.935065][T32346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1929.943090][T32346] R13: 00007f36daa16038 R14: 00007f36daa15fa0 R15: 00007ffc98bc70c8 [ 1929.951135][T32346] [ 1932.695368][T32350] pim6reg1: entered promiscuous mode [ 1932.709841][T32350] pim6reg1: entered allmulticast mode [ 1932.727407][T32365] mac80211_hwsim hwsim90 .3ãc¤±: renamed from wlan1 (while UP) [ 1934.530916][T32397] syzkaller0: entered promiscuous mode [ 1934.536856][T32397] syzkaller0: entered allmulticast mode [ 1938.143960][T32417] netlink: 'syz.3.8211': attribute type 7 has an invalid length. [ 1938.196128][T32425] pim6reg1: entered promiscuous mode [ 1938.201675][T32425] pim6reg1: entered allmulticast mode [ 1939.305995][T32445] netlink: 'syz.0.8217': attribute type 3 has an invalid length. [ 1939.314624][T32445] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8217'. [ 1939.820080][T32454] netlink: 'syz.3.8219': attribute type 3 has an invalid length. [ 1939.904285][T32454] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8219'. [ 1940.033088][T32465] syzkaller0: entered promiscuous mode [ 1940.044717][T32465] syzkaller0: entered allmulticast mode [ 1940.222274][T32472] netlink: 'syz.0.8225': attribute type 3 has an invalid length. [ 1940.235629][T32472] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8225'. [ 1940.764344][T32484] netlink: 'syz.2.8229': attribute type 3 has an invalid length. [ 1940.785023][T32484] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8229'. [ 1943.077435][T32480] netlink: 'syz.3.8228': attribute type 7 has an invalid length. [ 1943.302027][T32496] netlink: 'syz.0.8238': attribute type 3 has an invalid length. [ 1943.326552][T32496] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8238'. [ 1943.436875][T32499] netlink: 'syz.1.8240': attribute type 7 has an invalid length. [ 1943.772748][T32499] pim6reg1: entered promiscuous mode [ 1943.841661][T32499] pim6reg1: entered allmulticast mode [ 1945.276639][T32524] netlink: 'syz.3.8239': attribute type 3 has an invalid length. [ 1945.290918][T32524] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8239'. [ 1945.717507][T32529] syzkaller0: entered promiscuous mode [ 1945.734798][T32529] syzkaller0: entered allmulticast mode [ 1946.056464][T32542] netlink: 'syz.1.8244': attribute type 3 has an invalid length. [ 1946.077584][T32542] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8244'. [ 1946.790770][T32540] ------------[ cut here ]------------ [ 1946.796933][T32540] WARNING: CPU: 1 PID: 32540 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 1946.807028][T32540] Modules linked in: [ 1946.811054][T32540] CPU: 1 PID: 32540 Comm: syz.3.8243 Not tainted syzkaller #0 [ 1946.818877][T32540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1946.829407][T32540] RIP: 0010:perf_pending_task+0x35c/0x470 [ 1946.835439][T32540] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 1946.856209][T32540] RSP: 0018:ffffc900035e79c0 EFLAGS: 00010293 [ 1946.862401][T32540] RAX: ffffffff81b13c0c RBX: ffff88801f291098 RCX: ffff88805d2f9e00 [ 1946.870812][T32540] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1946.879004][T32540] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 1946.887080][T32540] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff88805d2f9e00 [ 1946.895152][T32540] R13: ffff8880258acd30 R14: ffff88801f290e58 R15: 1ffff11003e521cb [ 1946.903274][T32540] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1946.912643][T32540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1946.919729][T32540] CR2: 00007f71e07aae9c CR3: 0000000069cd1000 CR4: 00000000003506e0 [ 1946.928026][T32540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1946.936337][T32540] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1946.944449][T32540] Call Trace: [ 1946.948148][T32540] [ 1946.951270][T32540] task_work_run+0x1d4/0x260 [ 1946.956114][T32540] ? task_work_cancel+0x220/0x220 [ 1946.961328][T32540] do_exit+0x95a/0x2460 [ 1946.965760][T32540] ? put_task_struct+0xc0/0xc0 [ 1946.970676][T32540] ? preempt_schedule_common+0x82/0xc0 [ 1946.976363][T32540] ? preempt_schedule+0xc0/0xd0 [ 1946.981280][T32540] ? schedule_preempt_disabled+0x20/0x20 [ 1946.987343][T32540] ? lock_chain_count+0x20/0x20 [ 1946.992360][T32540] do_group_exit+0x21b/0x2d0 [ 1946.997203][T32540] get_signal+0x12fc/0x13f0 [ 1947.001784][T32540] arch_do_signal_or_restart+0xc2/0x800 [ 1947.007702][T32540] ? mutex_unlock+0x10/0x10 [ 1947.012268][T32540] ? get_sigframe_size+0x20/0x20 [ 1947.017512][T32540] ? ksys_write+0x1fb/0x260 [ 1947.022162][T32540] ? exit_to_user_mode_loop+0x3b/0x110 [ 1947.027756][T32540] exit_to_user_mode_loop+0x70/0x110 [ 1947.033273][T32540] exit_to_user_mode_prepare+0xee/0x180 [ 1947.038961][T32540] syscall_exit_to_user_mode+0x1a/0x50 [ 1947.044470][T32540] do_syscall_64+0x61/0xa0 [ 1947.049470][T32540] ? clear_bhb_loop+0x40/0x90 [ 1947.054198][T32540] ? clear_bhb_loop+0x40/0x90 [ 1947.059060][T32540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1947.065421][T32540] RIP: 0033:0x7fbaa179c799 [ 1947.069983][T32540] Code: Unable to access opcode bytes at 0x7fbaa179c76f. [ 1947.077843][T32540] RSP: 002b:00007fbaa25b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1947.086479][T32540] RAX: 0000000000000012 RBX: 00007fbaa1a15fa0 RCX: 00007fbaa179c799 [ 1947.094512][T32540] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1947.102886][T32540] RBP: 00007fbaa1832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1947.111131][T32540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1947.119330][T32540] R13: 00007fbaa1a16038 R14: 00007fbaa1a15fa0 R15: 00007ffeae10ce08 [ 1947.127547][T32540] [ 1947.130615][T32540] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1947.138019][T32540] CPU: 1 PID: 32540 Comm: syz.3.8243 Not tainted syzkaller #0 [ 1947.145864][T32540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1947.155961][T32540] Call Trace: [ 1947.159364][T32540] [ 1947.162338][T32540] dump_stack_lvl+0x18c/0x250 [ 1947.167083][T32540] ? show_regs_print_info+0x20/0x20 [ 1947.172344][T32540] ? load_image+0x400/0x400 [ 1947.176913][T32540] panic+0x2dc/0x730 [ 1947.180875][T32540] ? bpf_jit_dump+0xd0/0xd0 [ 1947.185537][T32540] __warn+0x2e0/0x470 [ 1947.189648][T32540] ? perf_pending_task+0x35c/0x470 [ 1947.194891][T32540] ? perf_pending_task+0x35c/0x470 [ 1947.200029][T32540] report_bug+0x2be/0x4f0 [ 1947.204370][T32540] ? perf_pending_task+0x35c/0x470 [ 1947.209587][T32540] ? perf_pending_task+0x35c/0x470 [ 1947.214713][T32540] ? perf_pending_task+0x35e/0x470 [ 1947.219929][T32540] handle_bug+0xcf/0x120 [ 1947.224187][T32540] exc_invalid_op+0x1a/0x50 [ 1947.228910][T32540] asm_exc_invalid_op+0x1a/0x20 [ 1947.233860][T32540] RIP: 0010:perf_pending_task+0x35c/0x470 [ 1947.239600][T32540] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 1947.259329][T32540] RSP: 0018:ffffc900035e79c0 EFLAGS: 00010293 [ 1947.265416][T32540] RAX: ffffffff81b13c0c RBX: ffff88801f291098 RCX: ffff88805d2f9e00 [ 1947.273391][T32540] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1947.281368][T32540] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 1947.289435][T32540] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff88805d2f9e00 [ 1947.297503][T32540] R13: ffff8880258acd30 R14: ffff88801f290e58 R15: 1ffff11003e521cb [ 1947.305494][T32540] ? perf_pending_task+0x35c/0x470 [ 1947.310906][T32540] task_work_run+0x1d4/0x260 [ 1947.315600][T32540] ? task_work_cancel+0x220/0x220 [ 1947.320696][T32540] do_exit+0x95a/0x2460 [ 1947.324878][T32540] ? put_task_struct+0xc0/0xc0 [ 1947.329841][T32540] ? preempt_schedule_common+0x82/0xc0 [ 1947.335404][T32540] ? preempt_schedule+0xc0/0xd0 [ 1947.340295][T32540] ? schedule_preempt_disabled+0x20/0x20 [ 1947.346010][T32540] ? lock_chain_count+0x20/0x20 [ 1947.351076][T32540] do_group_exit+0x21b/0x2d0 [ 1947.355783][T32540] get_signal+0x12fc/0x13f0 [ 1947.360392][T32540] arch_do_signal_or_restart+0xc2/0x800 [ 1947.365972][T32540] ? mutex_unlock+0x10/0x10 [ 1947.370581][T32540] ? get_sigframe_size+0x20/0x20 [ 1947.375558][T32540] ? ksys_write+0x1fb/0x260 [ 1947.380163][T32540] ? exit_to_user_mode_loop+0x3b/0x110 [ 1947.385742][T32540] exit_to_user_mode_loop+0x70/0x110 [ 1947.391145][T32540] exit_to_user_mode_prepare+0xee/0x180 [ 1947.396792][T32540] syscall_exit_to_user_mode+0x1a/0x50 [ 1947.402290][T32540] do_syscall_64+0x61/0xa0 [ 1947.406726][T32540] ? clear_bhb_loop+0x40/0x90 [ 1947.411412][T32540] ? clear_bhb_loop+0x40/0x90 [ 1947.416099][T32540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1947.422195][T32540] RIP: 0033:0x7fbaa179c799 [ 1947.426966][T32540] Code: Unable to access opcode bytes at 0x7fbaa179c76f. [ 1947.434163][T32540] RSP: 002b:00007fbaa25b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1947.442766][T32540] RAX: 0000000000000012 RBX: 00007fbaa1a15fa0 RCX: 00007fbaa179c799 [ 1947.450746][T32540] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1947.458751][T32540] RBP: 00007fbaa1832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1947.466826][T32540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1947.475160][T32540] R13: 00007fbaa1a16038 R14: 00007fbaa1a15fa0 R15: 00007ffeae10ce08 [ 1947.483421][T32540] [ 1947.487152][T32540] Kernel Offset: disabled [ 1947.491568][T32540] Rebooting in 86400 seconds..