last executing test programs: 5.189313672s ago: executing program 0 (id=9547): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1400000004000000000000070000000000000000bf91222993bcc95d0a1298ba1174bb8da51d731871b36428c6f4bf2612752399acb51ad47aeb3d1ae6bae99bc2ff4adcf8173e5c2880312d95c0503c5095d2143d3589d25a1e8a9c968fe031ff62fad2e53fcf0bfc3a7cadda29709c6659e192db2fa63a", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000010000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0xfffffffd, 0x9, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x5}, 0x10, 0x28002, r3, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5], 0x0, 0x10, 0x462}, 0x94) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0xb7b9, 0xd}, 0x0, 0xffffffffffffffff, r7, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000800), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.154010843s ago: executing program 3 (id=9548): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000001800000400000000080000000200000000000000002e3000000000005f2e00000000ab0000000000000000000000002decd1ef2f"], &(0x7f0000002600)=""/4081, 0x3b, 0xff1, 0x1}, 0xffffffffffffffe5) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x5, 0x0, 0x4) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000007f6cb3970000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400"], 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) socket$kcm(0xa, 0x5, 0x0) r5 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x4}, 0x26, 0x200000000000000, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)}], 0x1}, 0x4044) 4.852975479s ago: executing program 0 (id=9551): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f0000", 0x17}], 0x1}, 0x0) 4.679333554s ago: executing program 3 (id=9555): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r5, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffa}, [@ldst={0x1, 0x3, 0x7, 0x5, 0x6, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x31, &(0x7f00000002c0)=""/49, 0x41100, 0x10, '\x00', r6, @fallback=0x49, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0xf, 0x1, 0x8}, 0x10, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000b00)=[r3, r4, r7, r4, r4, r4, r5, r3, r3], &(0x7f0000000b40)=[{0x5, 0x5, 0x7, 0xc}, {0x2, 0x1, 0xb, 0x4}, {0x4, 0x5, 0xb, 0x7}, {0x3, 0x2, 0x0, 0x5}], 0x10, 0x4}, 0x94) 4.676204674s ago: executing program 0 (id=9556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="850000002e0000009c0000000000000025000000000000009500000d000000005872ddc66deec54d3c1092af07ab5b713ea5fea36bbd78fc45cc1abe2593748ea52e95a8b37f4f77be3270ae6ed41b99d8218bddeea2f9"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xc, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x82, &(0x7f0000000240)=""/130, 0x0, 0xe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000001bc0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) mkdir(0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916630000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x40001) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20004000) socket$kcm(0x11, 0x2, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, {0xa, 0x4e24, 0x2, @private1, 0x2}}}, 0x80, 0x0}, 0x2000f761) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r10, &(0x7f0000001ac0)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000240)=""/165, 0xa5}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001a00)=""/183, 0xb7}, 0x2) socketpair(0x10, 0x3, 0x3, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000004000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.474897718s ago: executing program 2 (id=9557): perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x20000000, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007311310000000000851000000242b0a62fc6011500000085000000050000009500fc"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x63}, 0x600, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[], 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x36, &(0x7f0000000000)=r6, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x1}, 0xa0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 3.813698673s ago: executing program 3 (id=9561): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000010100750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000032000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 3.606466718s ago: executing program 3 (id=9563): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x6, 0x0, &(0x7f0000000000)="e0b9547ed387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x69, &(0x7f00000002c0)=""/105, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) 3.459375971s ago: executing program 2 (id=9565): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x6, 'cpuset'}, {0x0, 'io'}, {0x2d, 'blkio'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'cpuset'}, {0x2d, 'net_prio'}]}, 0x36) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x35, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', r1, 0x4000, r1}, 0x18) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000740)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(serpent-generic)\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="aa9470cf337d7115b8e9ae71f619e3a41e0981db00d484894c70664da5f4b944198b9ff31c48cfa7f88814358fa06fa4de5f1151", 0x34}, {&(0x7f00000003c0)="2a31251d1f9b4318a5b7bbbe1eb34a5142f9a547ddebdbd9d285aae21708282aafd28805e1e9aa7e1eb4fe163080111a376f60b1280fc2aab19b34871ab2bd0b811c8457350079be57ed18812e8e1b68aa8af9f4976b474609494584ed9efc54f9628f067a065d671f46aeacc02960562bf15098107f8f68da2a567dab31d7ccc7372b1524b39762cdc2f283f5e9b891f0c04bb4f02740f300aa0137", 0x9c}, {&(0x7f0000000480)="a482347b86fc464c8b1a599ffe359d58017c288b269b0b3a257b9e0e8b0a095a41345493425c87f5e06ff4f4d16e570af03541cf37fbcc293d1216dd544a1c62ad882032b0077575c8d8f3059c91b1e1b363", 0x52}], 0x3, &(0x7f0000000540)=[{0xd0, 0x112, 0x4000000, "76567a19301fd67953ba5d5707f0511e29a5a275a6cf9f06dcba0780403607acfe608e78628df39dcdf5300facfbfcd8f4741089402063ff76930a33fdeee74dd9258a5cc252b334fa7af4af4c27c72b48756d56f9518ad448cea03db107f0189deeb6a04cde882702d1645376868296298b759bb887175d9e15bd02fee240c52b9e07203ab71fcfa3f7d9fc2d7fc3beaebfa4a5dd2cd5da33b954a3b32711ab541c1d3c11eb49f32e9976f4014fbe46ad44b8177832fff5040815920f8d9b"}, {0x90, 0x101, 0x7, "1d0e2c51e9e2449f387899952a50ab55f3c6dc0ef02320b32218f1bceda70bd8c52a4946ca5bc1a3d90045607ccfce89faa89decea1d66bbc4bf21399876562deeca6852437fab138d8f686a174b8429ccdf46533e955aa2e11727270988d3b1702bd6b3bea81d64e70fff6f7b7098bbd7760c0f8080862565da5e2e"}, {0xa0, 0x191, 0x6, "45ac46c3f15d6e938cf23d6a308c048cbef0fb5833114336938b28b85aadadb47c5b9fb13168b1915684620535119d2cee8210fc77348b4f2f2ffc61d06bd77ef4aeeb8a45db3316d9a657ea2cc84c3a8331ce8fbc364d11b5a85832523d741d6492fda4b7a83c4b331dd6991e3cb2b5d5bc70e4c7b57be1d28cfdac5d9ed39aba5d29b5a97bcb4e9d4c2c8c"}], 0x200}, 0x40004) recvmsg$kcm(r3, &(0x7f0000000c80)={&(0x7f0000000780)=@caif=@dbg, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/31, 0x1f}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/234, 0xea}, {&(0x7f0000000a00)=""/249, 0xf9}, {&(0x7f0000000b00)=""/69, 0x45}], 0x5, &(0x7f0000000c00)=""/71, 0x47}, 0x302) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000cc0)=r3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000f40)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0xcb, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x5, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000001280)='GPL\x00', 0xc, 0xf4, &(0x7f00000012c0)=""/244, 0x41000, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000013c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001400)=[{0x5, 0x1, 0x2, 0x2}, {0x2, 0x5, 0x8, 0xa}, {0x0, 0x5, 0xa, 0x7}, {0x0, 0x2, 0x7, 0x8}, {0x0, 0x1, 0x7, 0x7}, {0x2, 0x3, 0xe, 0x1}], 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x12, 0xd, &(0x7f0000000d00)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x12f}}], &(0x7f0000000d80)='syzkaller\x00', 0x3, 0xb1, &(0x7f0000000dc0)=""/177, 0x41100, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0x3, 0x1}, 0x10, r5, r6, 0x4, &(0x7f0000001540)=[r1, r1, r0, r1, r1, r1, r0], &(0x7f0000001580)=[{0x2, 0x1, 0xc, 0xc}, {0x1, 0x4, 0x6, 0xb}, {0x0, 0x2, 0x10, 0xa}, {0x1, 0x4, 0xd, 0x6}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001680)={0x9, 0x0}, 0x8) sendmsg$sock(r3, &(0x7f0000001d80)={&(0x7f00000016c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001740)="7f4f837c8c5d4df7ce53a3d7b8151057dba443d0cfa8bd14dbe9a4fee1002d6836ab5150aed1d775d1dd64b4415d9753594eb5686adc3176ccff732588310e91dc4b4bbc541b73903ae8992d79a2f94dd2dc0b9f39967baa42eb75bba5eb44c93c3362a88ac4a2228b122983c76fae4848c798ae9d88f4ca98210b238e2548afe84a3797fecf3ee0a03f", 0x8a}, {&(0x7f0000001800)="4715c05bdacf4bf27c7590043da632709c8ae202ded8745ccb75ae5f037c2ddeaf8c249961fedc72f6e8ddd9658d6167e0af9963363a7f4edf98e597075d1dabb1e0c3f0833fc85de7a185cd4e7c65436bf248a7221ab1457d70aff656388becc20788f1a21034197903c39fd6d901f8775a50c693ff1e2b7f17e1e584a9ddbdc1b5b9aae0645b88cdac2507d8927ed04b5ac4251fd8a231c383150383b3cd2adb", 0xa1}, {&(0x7f00000018c0)="0b928f75a407388e94538d9ac288de593a406d6d3da8897e9aae9a31cb1673869362b6f4dfb98a9c798b39598d3412cf30a3f56b1a8e59474d6b4d24ac3bd344b92f7dc9f9609ac5c3e9a8573db3ea8dff9e3de2ae685c3fda70e1a0dcbba96720d15e12e6b294d91120178b2893a1ee3eb3ed6e2518bb8d84111a8ed75cf528d83fbfad207fea19fab969f8f69b095dc1346b5a26ba4fa072e48778ea95fe687049809c47522c8fba4a1002ecd896f173e1d1295a1d9c0e27bb5ebaf2349b2767ca2d2abecd0e6e89195c6c430c150ffe4ccefb0eee01308f11f08e8a19b9c95bb7fbde9e40ed40c748665a8fa2f8cca43fbab92d7dd8f2", 0xf8}, {&(0x7f00000019c0)="e575e689a01b5cea3cd7a3f8fc3a16d825cb923154c3594d3f471ff0994f27b4a7df3c6d9e7eba80c3d03f407ef88170b48d5695c30a0fee1442d787dd3f50434e6ae40fb61300739e292e6a43ec4c4d4d5215727f9509dd4fa16f32782a782a05ee900d384368091a1324345cb3fff812ae6d98f5b2dc257a8676ed7c723e99ba8575667df9ddec83e9cf5aa6023fb606d2a099298a80c9844f420bfc427e80d9a73ee3d1f670d2f44ff15270ac9572adc1997d48a0084750db28f26b26cceb5717ad3470c0bfd34d9fea21dab5", 0xce}, {&(0x7f0000001ac0)="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", 0xfa}, {&(0x7f0000001bc0)="3d5813ebb99b7224ae2df9655a77a5ebd0e803573afd0fb9bf8947788a8627cb54afeea602c567ac7936e67f338b394a456963663c8cee3984774e2da214923eafe7e0f0d144065ddd96f7bff8c272e2cc56786d73e5f677e8f86135bbf42368903246a74263822033f480b6443a4ed863dfab45bbf85db8997a8440c8f2ec0c8d30ced56212a5b6e21fc539", 0x8c}], 0x6, &(0x7f0000001d00)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x60}, 0x24004884) r9 = openat$cgroup_ro(r1, &(0x7f0000001e00)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001dc0)={@cgroup=r9, r6, 0x2a, 0x1c, 0x0, @void, @value=r7, @void, @void, r2}, 0x20) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f40), 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002040)={0x6, 0x10, &(0x7f0000001e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4130, 0x0, 0x0, 0x0, 0x97}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001ec0)='GPL\x00', 0xd8, 0x5, &(0x7f0000001f00)=""/5, 0x41000, 0x66, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000001f80)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001fc0)=[{0x5, 0x4, 0xe, 0x9}, {0x3, 0x4, 0xa}, {0x0, 0x4, 0x3, 0x3}, {0x3, 0x1, 0x2, 0x6}, {0x5, 0x2, 0xc, 0xa}], 0x10, 0x64}, 0x94) ioctl$TUNSETDEBUG(r9, 0x400454c9, &(0x7f0000002100)) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002300)={r8}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002340)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002400)=@bpf_ext={0x1c, 0x4, &(0x7f0000002140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@jmp={0x5, 0x1, 0x4, 0x8, 0xb, 0x0, 0xfffffffffffffff5}]}, &(0x7f0000002180)='syzkaller\x00', 0x7, 0x89, &(0x7f00000021c0)=""/137, 0x40f00, 0x40, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000022c0)={0x3, 0xa, 0x1, 0x3}, 0x10, 0x28055, r12, 0x1, &(0x7f0000002380)=[r1, r13, r9, r9, r0, r9, r11, r1, r0], &(0x7f00000023c0)=[{0x1, 0x2, 0x0, 0x4}], 0x10, 0xc3}, 0x94) perf_event_open(&(0x7f0000002500)={0x0, 0x80, 0x2, 0x8, 0xb3, 0x3, 0x0, 0x7, 0x40120, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000024c0), 0x2}, 0x2082, 0xd, 0xf, 0x0, 0x8000, 0x2, 0x8000, 0x0, 0xa0c, 0x0, 0xffff}, 0xffffffffffffffff, 0x7, r9, 0x1) r14 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r14, &(0x7f0000003b40)={&(0x7f0000002580)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x2, 0x4, {0xa, 0x4e23, 0x4, @private1, 0x9}}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000002600)="8ca58899a83f763c9d8b590a56a71d0190c424e902f93fa39ecf341b31fea5c261aed067df51a5b5b7de24f2ad66a349b908162de224216639ccbeae335689dbeb43b8141a07b3e3035942f2e94fe4e8501bc6cb9178ed46727b80f602", 0x5d}, {&(0x7f0000002680)="7e859473945c7587e9615efc5f566f67f476e84ffe40552a7d5f55375d06308a07045b186519e9788ab0117fb2ad5c4a8e4ed434a5f9dbffacc2a0a451b0ca573f535e9a3f6e6d9b97d26a0d13ed77087da9ed05f563da24c5cb528d555960b6ddb8017deb90267d8302201efd53a0d6ca25492237f5ffbf26ffa95ca4977655f62e7e5523e6", 0x86}, {&(0x7f0000002740)}, {&(0x7f0000002780)="a1c098b0c16c47f283a3051aae1b716de75e91e50046472d2cb1071bc14499dbae31dc8177bfff900e5de9babc3a1c7a5f145290b996e340c35da3abf815d5dbe76780c5b33c0c26a41ef1c78a74d8342daf3e79283d073314fce02fd5496cf6f9ea18438f169f5bdc15fa01e60319e56d92e870906e6f76bf0c9cc0d8a9714ad37eabd97337d4b2fc908b66fe74102b4286a7d6721319f3920c975ec0aba699b6ec", 0xa2}, {&(0x7f0000002840)="bfabfacccb4fbbb7dda7779d22be524cbf63a7e19316a477e807c05c34d415fe87885426fefad84997511dc8281a3e0564e6bdc5589d4bbc15b172b4ec10d13c89bdfcf6ae0b9dbbbf89e546d703478ccfe5e11dbad4bf303c6d010d5d8e198409bbbded0eff26fe643c3515247b9e45bd3b631439ae51010703a5ed71160233ba807ab2b9aa2b1a124d97f82681d96728c359ffd224e1f9fbea35597eb0ea0c20824cd856a86a31d7427f0221d719303cea3a1d40e15f01221dc3c701eeec24d680a4076a68703e801164301748a4e918af479a5352978d400e6f8c8b947935b457716ffeb03a8f0dc4a34878400d88449fb304a14543442267bd92e6d061de8840fb18b372d02a7e59d9ef3fc71cd716d4c50280af5315f9cf90c7810b0e6e128af520ced98820f7df0a1da5bb539b92fb1db09b85e43aa794b17337900fb4eeb3e5fe1b831bab114d0e78e57617d598a12216df26964ecc3f3c92a321919560048adaf8ba8081d0e1bfb1d7b5ce6de2a3fb2c5aaa96f969714f228d2df84732c230c7ef5e731c539559ff4d27f3ba34376c0ad8372d2d3b304beb98fc4cfeb14bfb4efe914be1a2588fccd0d4a6188b75a5330b72a7f9ce7ae4409bd19886772e6ede235a8f7a738f052158e6ef326c03ad550e8529b5d85bc0950d98bf64e8a9bea5840d0ed2aabb6d84df1b4d0f19f51ace13a9a85065e8ac0bc93ef449946a44d2f569cfb81d56956dd060f89ee6bc54f8f8e3471a977453c4088257337771b1dbfd8296572edf3d23b0f29b7ddd894a01bc8eb2319142b388c97f2f8b6f45f7ad3c0284584ad3d7371b0d0322cde246f1957943c651ab03faa979d4d680926eee669bdd73f544dd5e50f56d51f908e51ef09d316989913df386edb356f636cafa2632f32e4b8639783dcb325c2eef8889643b1a89cdc549450f1e647d78312e1a1675f2edb7207722eedf881ce49269b522bec2884ea465ec5bea58b0d44962b43332700b35049009bb3a1655c1db43a78c745c977e187d76385b1aa9b3e7b5660039a03c027054e617e600e82841a890ca65060abde015ec34c9286d9165cd70777edb8093e4ebcde2e36e3134cf8884b3556af2d6e01e965bbd84ce1f8bc4bf606922c82cfca56a0cad6b70e3bf0c042d940fd7659e6bc9b7292750d44ff848b1f71ec0f5358b2bc9d607742a234999f27f46a6c00866bd077cec8c63c9faf96466a4c2202a9a42c2c651ebab4695ee9eb9b0d743860b5e6a5f6480dcee28b3f778bd294894aee3afda88465113e665800a6d9bc3fcfa70084c7f201013eda30d7fe62cd7db3e2fbc27f4fc1e9b480d41adc3bf2df3b31a448075e9206f6c6270a24092690e553ca229573a54cf75bc5eca2cda7d85261d36b3814818f2a233050090af2cd817ca9e2b164ee11ff28e9e2e67db6d4d5cece364e5b234238fa7221546a9624cade5c0dbe2b4e23799d9e21e77aafa7824869f7b69e65fa2adabdf42d0de81db02767c4bf0f1d2cce0d244891efa24ed91b303cc115419a16590123c66ba92d3224be505394045ef1d0cf15a4884a8a2405469be209bdf6ff53f02c23863fd5575361dff1bd248b7c1f2ddab813c3773eea3c519f9c95c5c2192703510dfb680aabb5106dd410a26f0e442aaaa4f6bfb1c7762de65f78b49c023680463b76e9a33167e0b6f4d035705831d504537d7dad5e7a990fe758e8d8aaea91f21b9030a520410b2d16ff1058d5dffa10cca23a702dc29567f4d711ec99bef51f87861b6fd64e86910b038a07c066e1f8a5d75761d27e902a98e800f3a0904901b1ffce4704acc6c80ca449dd9b265e49e954ec73908d0188cb6fd44ebcd0c532aacae8a81e0c1b6d02ac1a3493a1f3bd94ef6ff523ad296f4a3d88833e10ce5c6206b78d4a99904b43996c2322ff61946239aa8bf57140d73caa6135f958acddbdb6894702338d8ef546b67f3a8946db40e441bebd1f3a2ce3a5e0c76215bff73ad38dcdefa503189dd8969604f26800c767d224962e57856b190026ea2dc606a9f84f627e64e6953901bd5e3b3a3aeab24c0d5573b936a97d216fd5169e9c2136661721c98adfa7ba9bb237c286759f664400e69bd647433ae5e19b885d6bccb545ed28ab1b6b29cd061578449a65cedbb745c2706b0688a21c426448985544b6138b3a5d94edefec829c81d7bb6c74f4913b0ffb5cb4255a039b1ff4a55a57707a3a304db312753e08572014a97392ea832d5a8b89342ffe91d64d64f3bafeb05270ec9f066e8e5d6c3cb16d10f74c0336ec764b80d7fb6e85d266955453cc3a970478d7f32f7c2560240ed42b40177d5538d1b0f9ea1bf4ff71813d3eb644b36ea4792681ce493a1073edfbbab79fa979bca90e1c66285a37feef9728b8d3b9f499f6d2e681eb99ca0ae0e60fd24e41342c44b91a46e0532ff1114e576db12a879360b743baf3de089d8ef2e156afe4ad95015e2b1a7c4d805ddb6ec5d7839ade5eacabac341b63dd44efefb30800b36507b4aec901caa281a227bec4d0a135c56a873a61120b68d78c9a961dacb8c233c0e9a4e6a4d538d55b376c69ad781525366b410689db146a5c70ffeeb61709baea5802e31b175c4ff4e0ef09c90b1905f2f399121a4f33789996a456fc60d607c4435b3f30f7766e5fed41a622b94bd18df1231248d49fb8537d8cf3ae3d21171a94f5d98bfadbf9bee0dfa96deae2560d56ddcc56fcc81f24153320ec4b342353c8164ff11876c293b20eca0719a660f6f7429e57b9b1c65b11ef08bd2b1d54708f7823cdbe95faf0043992dd8004da8b2e7836a94c3709af3baa8532ae956c46507ff160ae99bec00f94b2e88183727b74b66133b844d41662cdd6d6aeeb6cf2e4daf331af3464042f1da5b9b20902d78619955e3acc5fdfdd51e9bf92ed431ade40611a9f2cc8ac9339223ed31ee9559a64849e6f60fb1d1dcde20913cc161bc2419859c4b0f605e4ce5bbb6b6ce6e395737e0ce82d61b8398b44d894c26ec8735eaf9abc6b75dcd22ef9aba284614221e8491f1d7a02f03798ae2b174a86d1795de73792d83ad85812d74b1eb75b575848185eb9f32319c38a433c587e0fb098d011fc458e9e5c9908fe2facada51ff2de84de5e74b37400d306161a5092d742881a99c64f942cf07632c4e7c221dd5882a79fe31eba09d43f79aa5ae54dbc3c1862429e3ba89adc6a50d9f61d49d57cd24e3aaabf1daccbca5c52920b302b79911c899df033b3bd8b86aa80937553d5db5cdecb694f44fa3eeff40af6254790906085b16abd612e34bf9ada1a80a3d221fb54e897ca47af848fd21370a3eab3b58ef0ebefcec67be3a56593e21ac2c77e75a3bd91f5e5f597d65c7ed0649b825e8538af69cf99770e6bf60e5a2ce5f2d470ab0383e80072ffcbb26de6454af7188d1e57f2d54a6ca14626304c80f2228fd7b25c0d34abc846c8ee44d991b35a4b632fbaf9e813f8dd535e555e60f349aafa612fce283500fff55ef5b471f86b320f8c44bcd490b5a6f5cf61ebde840a54c0ff297ea301a9e4147fe60edcb6d3321e926beccdaad97dad648cb0f2949a087f5f1abd6fbdce0d46ac0e196101fbccd356b16d42cfbb95d175f8f302376e17f8d64b545b5592b648a1c7e51404cc09a90b74c669538e8d1c6ff8d57143cfc749bcbcbb09f91bb3676e304660d123c39299fea767c9ec626d115595fc289114f94745bff6218442ca445100e50f9dcaa014e821a624f3ab51885571b7fab527bcb0050f499ceb50bdfee351750b2663ef1fc7cc308b39a52eaec1573bdfbf7ba6fc8f430ff3084eba59e256685333bae99c634213197a23f2344b3bbd2736d8584b5d2cb2219f4da5e810b416d451e945a6cc95aafa63fa9ba7d356f693d0b4412cf657ad1c3963d21d19e8cd57d1e19c63d76456fb14813f2327415624feeb80c8859ef681352cb9f5d29c618b74abf4c4eda90a08c6bc2ce359b32963e0809b21db74d143a2b1abebc68bca54cf78b1bf15df814bcbd57b3063e9b26c9763999c1a2ec03d82f83767453681bd6c3219e7e86545d6536c8d5d7b7a1bedb3620e3d491c54339438b4ff1c95b175b9bdae97477973b3ad0afd4ae7d654baeaea996b8e27769063e39f5c7e7ac9489b25ad6e1ac27077c1aafb881963f5473d21c8d7b78213e00fc977422f6531ff954e7c82dc4e098bd6bdb45e3c0d192fc1a96e973e693808b140706114bfc73f85bc00f7b51cb6292ffb33b4424daa19a8d294493ab4a61dfa2fad099e28a1edac6dd2a92fdb9209cd7f8a12599adaefd7a993e8710c001f31ed7f740cc8f4a070521b4bc27db2ff5e887b1f54439fbb266f1d248305ee0af8cc1b2297cbab9495f00cefeeb01596faa8710dd7950fc4b98077db3db8d13b2fd045613f40a0859eb6060578e7d999bb306cb42837db1bc5db812495582313d39a089b76ec8c17aa86c8cfaa9bec0fc965beadf22edd1f8da283e9eb92df1669f5bcc53ffbeb20b493e61e21e77af52d70438831ffce891fd4d26a2924bb8c2b39192bce7a45191acfbbb78f2f5c00427cdadcd81b9dd3048e95c242d26f9dcea0f2155f110ca6ea61ce46c8d49e3ba402c8d5d2ccaa8c67427c0606feb9a189edfa1705c748d07d97e25c156b3fefb318de7e50c9f86169535a51ec2fceaa5877d97c68b1ee1e9ab146073a84257a433411cabfb9f02b78c8ad686884af523d04708bc37b17e1947c05d9ca2e0042059473ee899e5f8c58e72d03379bcc5efadcb58af6a4ece1a645e44f4f84b3e5bc5f037cb285759f712f8e8ba47f790eb675364f5089c35fc7ba907edd9f50f9d0008d525e90507c9835b8a4447bef8ec175517539bc739c983f61a9c97cde9aebe52620bee26882945e20004ce2250dfd54e798ceb3ad2acb29bccacf6efb0ef8b89684a5ea58088b290d04d3d352e048f76bf77299914780b315dd3bb6861c98cbebe9ebb3dbe78183dd4c6e3f74f21f336f47509c1545b204b096d877668b4c7566038b0b0e75f2467f99ee295b3fa93a5afdd392c99dbfe5e636aff5bba5581cc6057971e1bfc7f9588470629ce6bac3a5367a86f975e789c052851ebdcf5d70b8c2d97d84c0b438b5408e604bfa71b2ae02073b8c0bfa2b804cdec9a589ce74ef1f25d184c49b4a2e655b4fa3f5c32bd30035a735e5f19c6b4109576ed78731848a82e034f9bed4ef2374cbaa59b5eb23252dfa34e67c9515a7545a02da274283291a49812d2d001a9f629aa80e7b315665615f77f7389a63a8e8168be03e6a190fd0a9df62f64c5e4212f282dea8f1440d7131f2028f43e8a790bfe32c55f7a55e165fa91efa149d01700accf00255812be5c6e4907b77920f33e934927262cb91371f25251a846ed9bb840391b455a1347dd0141945adfdfeb94a299dac741733197165ce2c55a829190f838a465a2225268628cc11864021590eae30e983998803250350c8539fc7513eb037ad4797be8a124e0258a684cabbbe400f034020fedc0f9cf55f548d7c7c9d63fe0197f157c113e02f85d14168e970c9e729e4e682ca25d2beaeaf04c3d5a8b9abdc07cd58059ac1d965c4bea951750dbfee29d9bcc37d868dcd99985d3320a90db6dccd79ddf72b3763114f5a241680546d8ebe08fad6fef916b72608185115425574a9699993f9a72d96bb3be173ec52df365392adc1be9a4847e82d23703ea491a76cdf1a99fc415e6bbe568e5ea5b8d53876300e4e4988eeab87def158e731f759fb9a54d439e04ed75f3e48b68", 0x1000}], 0x5, &(0x7f00000038c0)=[{0x40, 0x11, 0x6, "1d21c3a6295186b89ccaab8e6714222e3dfaf1c1c4632340dd8f26dba5ffed2ae60de00bd7458cafa24186ab"}, {0xe8, 0x114, 0x4, "34b22b998983048c83072f406fdf9396e4e049195ad5cdb359b2d622842cc1ad7ad6ad9b2c3a828ee65c1cb766784aacf1b6119b3abca487ef199e28378072c84ca96c59a5b86021b054d09ad6f7f628c2be0e84f7980b95de67716d8ba778295fbf34b52cbc6819176aaa9c80c4380309ee3b030cce08581f83f6f8728ac73e9ff2c49ce8db88c0cba3ff79bcda24e026b719cd2a82b2f6def4c87365a65e714d07718abb7194178fb10f1265d10fa2badd78f8645721352446fe57d39259c0069cc442447303cad197220cb853bfd9e4"}, {0x48, 0x6, 0x2, "1b548805a3a7681e975c9b30b1e53a2feac9f2e61d75e19d4bd82e931e1fe0697957083104fea0209493d8549c442a5ec52597e625e47c8f"}, {0xe8, 0x102, 0x7ae, "0a15775f753c9a2836ea43ce5a289163cfcc3f0f28ee53e690fbec069b7510844571e861d04641dd84642c8a2bb254ec44354a913acb42c96e5b10b59ac72cf938af7f08534d8d546ca53048ad6bc1f73fdbd073b8241a7c2fa602b63bf263866c3591992ef7b9f9a55dde8293304a4314204b71ba7e37d4ab61ba5054babdc27bf2eff236075b4c7bb126d30441142b49eae7e43e32a3a90d31f37717abaafa83498be7e7f6c39495a6cc10acf9e9a4569f3504ddb74c6f7e90ae61d2e54625120e62d47ab20afdb582dc3b069ea27c719911bd5c"}], 0x258}, 0x40) socketpair(0x1e, 0x5, 0x9b7f, &(0x7f0000003b80)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003e00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000003bc0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000003c00)='GPL\x00', 0x4, 0x9b, &(0x7f0000003c40)=""/155, 0x41000, 0x56, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003d00)={0x4, 0xf, 0x400, 0x4c50}, 0x10, 0x669b, 0xffffffffffffffff, 0x7, &(0x7f0000003d40)=[r9, r0], &(0x7f0000003d80)=[{0x2, 0x2, 0x4, 0x2}, {0x0, 0x4, 0xe, 0xb}, {0x0, 0x5, 0xb, 0xb}, {0x3, 0x2, 0xe, 0x8}, {0x5, 0x3, 0x1, 0x1}, {0x0, 0x5, 0x9, 0x7}, {0x3, 0x4, 0x9, 0xa}], 0x10, 0x81}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003f40)={{r13, 0xffffffffffffffff}, &(0x7f0000003ec0), &(0x7f0000003f00)='%-010d \x00'}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000005180)={&(0x7f0000003f80)="002243fbc553f9dd3f0ae5c726dfa11397b0020d3eceb1c757f23ccc3712b3bd6ce50e443931955973451b30ff93ca35189609dfe435cd1d3c73aa4fbcf15938ba237b60166e09669fd61ce87a577b8e6fe9f340f60f326fe5b64ca9e28cf69c17392379cdce5e25f9b9425ecc1f1394b27a239b1751fa83f59059da6bc762ffd39b9743901e773095507d49d7e156209c9a32e45fac12c272eb8d23a386c3e924a7e1270f13085361d9d52f7c57632a7d33b7758b85ab8389fa17dba86a9baf410a268316a0a5056ce5bd775cc3dd9caec9881c1672ddd75315365c2cb8b0de0d2c510cb0aac25f7ba5e6bf", &(0x7f0000004080)=""/84, &(0x7f0000004100)="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", &(0x7f0000005100)="8e71dcec639eef1e44aef3c00a996ee5e0894f18b31e9b83f39c282b75f28c680a9e30c356b168458c9e48b6331159d765b33932124c1905032a064eb7361195b25120eeed9a835a4bb78e6cb78303", 0x2, r15, 0x4}, 0x38) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000051c0)={'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3.442507042s ago: executing program 0 (id=9566): sendmsg(0xffffffffffffffff, 0x0, 0x400c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000600)=[{0xb1, 0x0, 0x2, 0x2}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2], 0x31) socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000308000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3406c012) 3.313517084s ago: executing program 4 (id=9567): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)}, 0x0) 3.289683545s ago: executing program 2 (id=9568): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x7, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x10c002, 0xac61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 3.289178556s ago: executing program 3 (id=9569): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x82}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b7080000000000007baaf8ff0000000094080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0x8, 0xc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ffffffff0000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000001b000000b70000000000000018010000e920752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x7040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r2) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021dd4000000000003b810000850000006d000000850000000700000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x29, 0x7, 0x0) 3.239322826s ago: executing program 1 (id=9570): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="897a00ccf6042d99f4d6f22f03b6eef3a30574a9", 0x14}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.159039158s ago: executing program 4 (id=9571): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x4000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.969907572s ago: executing program 4 (id=9572): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x7400feff}, 0x10) 2.968735463s ago: executing program 1 (id=9573): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, {0xa, 0x4e24, 0x2, @private1, 0x7}}}, 0x80, 0x0}, 0x2000f761) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000940)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0xdc050000) 2.697518129s ago: executing program 1 (id=9574): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2.697064159s ago: executing program 4 (id=9575): perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x20000000, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007311310000000000851000000242b0a62fc6011500000085000000050000009500fc"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x63}, 0x600, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[], 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x36, &(0x7f0000000000)=r6, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x1}, 0xa0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 2.693238298s ago: executing program 3 (id=9576): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x27, 0x40, 0x7, 0x0, 0x0, 0xd085, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x1f502, 0x6, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x2600, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.569344252s ago: executing program 1 (id=9577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="850000002e0000009c0000000000000025000000000000009500000d000000005872ddc66deec54d3c1092af07ab5b713ea5fea36bbd78fc45cc1abe2593748ea52e95a8b37f4f77be3270ae6ed41b99d8218bddeea2f9"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xc, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x82, &(0x7f0000000240)=""/130, 0x0, 0xe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000001bc0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) mkdir(0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916630000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x40001) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20004000) socket$kcm(0x11, 0x2, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, {0xa, 0x4e24, 0x2, @private1, 0x2}}}, 0x80, 0x0}, 0x2000f761) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r10, &(0x7f0000001ac0)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000240)=""/165, 0xa5}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001a00)=""/183, 0xb7}, 0x2) socketpair(0x10, 0x3, 0x3, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000004000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.228962969s ago: executing program 0 (id=9578): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x6, 0x0, &(0x7f0000000000)="e0b9547ed387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x69, &(0x7f00000002c0)=""/105, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) 1.75883343s ago: executing program 4 (id=9579): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x38, 0x0, 0xfffffffffffffffe}}, 0x10) recvmsg(r1, &(0x7f0000000980)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/66, 0x42}], 0x7, &(0x7f00000008c0)=""/138, 0x8a}, 0x2100) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0xfffffffe, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b22000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 637.590605ms ago: executing program 2 (id=9580): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x6800}], 0x1}, 0x200000000000000) 637.085745ms ago: executing program 2 (id=9581): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)}, 0x0) 514.203088ms ago: executing program 0 (id=9582): syz_clone(0x200000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x4020940d, 0x337) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000007c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4, 0x1}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000080)="c88a728518d852a28d4d65a0dca84d9eadd2fef348ed1baf836ef0665c5e00d9da6bb111e2ee40a1b493fb08126c589f9cfd90dac2595ee8304ef87f4b653b22c6f6d03ba8cd0747ac79a74549ec5f21797d1cf6a3fc20b92f7e932628d00d4ccd", 0x61}, {&(0x7f0000000100)="9d8205d8775738bd7ddf472ed4003960d9292936355f21cd15b2602f005f9a376470dc55fff0242c8dc32b72e044d55222e50b33c8e9cbe946195e2cb72cfad310bec7a970f3b472d66ac3e0e8dca7944446426c1d5bc698dcc0d148bcf0d21bfea7f3d57990c59dba3cff9d6c5bf951254621fded4935d9ef59d0ffd8140eff79b95afb7634a9d40e4c", 0x8a}, {&(0x7f00000001c0)="c100da07570381e5b8cce0ba9b23bf0d4e21f4b984c54a8ee2d80b7566459f8dcbd778b951a0922c5ebe60685bad2d4a49d601081a911cf1dbbbfce668f608232f56df84db27e770bee2ca6d5b99d4c4b0379e5e6b7361abff35ae28c396564b1fb28fa81d87f01e3f202c3f5872456d6e32d51e7188ad2d4a19300a21de18914060bf8254e63366463146c28c70bad1d2de345cd24d813b63a2a0f215b254dbf1e934e1859fc21a488801de18dfb3f777e6616114f80734b28f787ad0386eb564376273bd0467ccede708cc6f7757daa6a3d04bee31f234f9be419bd960037f", 0xe0}, {&(0x7f00000002c0)="30f4cf17ea06a4c5ec91ed3d2d7ee849d9823a9f8017e5f24a22f6473a8afb395309a051f814117ab5b2843073956a8ef9ef94436b39e85d4799d5ac51e91211d41fbe157ad7c60c73a575e4941fea6b62a1b039b474ff870b680f3176b6094a805fd6ba002a45acf3de8d0d7d351f12fecdf6340768b6879be93d0a57385f69e6cc881a6a341b582697245ee1bea5cb67fac0143d84dffcd58df71f176c627ac239200c1b1eb1758f0bfab983435142aec3f59ac6614e44b21a2b0db761ada08dbbba7ecf34e2ed052d38784bab2d91", 0xd0}, {&(0x7f00000003c0)="4b3cc28dd1ed3e395931146e8a5d82cd2885c7d9b748881c066410eed5e478967bbf04aa65e7139d4b5713067cf97524675155c6d4f3fb08616319ca39410c4ace070e3332891703ce8102d10b2ee4b603894c002c0ca94ead74345d0cf71ab31145ad86e7e578926c0d1a29afd43c5cb19f32d2c41d18e2929c230411b8c7f437a63f7480497343e1408e710fb2849f9d82ea4eeee1dc67e74585b68303da5a4cefaaff54f9125c6dcf7d10276a014fdcecd4487023bfa84b58792d18eeab1716fd423f90bf6b36b12ab8365f", 0xcd}, {&(0x7f00000004c0)="ed73fbe5485782ba4169ed6e6b94545612e7d61a97de86131de9d922d51dd5aa6559a82bbc9f4beff0bdef000b0b011d657e04e20bb19c848398fd3ad5af8ad9ec8b5ceecd2a6084a7c763e98cfbe62ffb739ff8e3d827a0ae46c4d0702acbabfcc1f14a6cf158ce6e1e3548634f47f660caf4f5b9e9a650e3534d4dacbfe0cf64168f10114a68cafb46686432", 0x8d}, {&(0x7f0000000580)="eab618c57bfc45170411ac96d0c9fc827fff2db653575cd06d12b1eb759d062f90aa5d736e9d7e1c612472f4350588dfdf3e4b05601136b0706028d84a92ec2420b468dc9910d724a27241be098da42b52610025b5067d43d002390b0a16fe45bb16d4318f0af86cfa356a8a0137acc191edc34fb3363450cbd114249901cc4142627283f0b066b431f87238eeca6b0e573d2d820d756b94905309eb20a31409b1cd1030c7a5dd5546281c59e6d8941c879a995c08a2d6fb66413ec9a1d0709e17706b59c35a217f9b1329deacc61cf34a19241588efd2e023f198077e331f66725e1035fc871d6686d0ccd5", 0xec}, {&(0x7f0000000680)="c6c595ade2fbe7221e9b", 0xa}], 0x8, &(0x7f0000000740)="968c2c0c26a461fd5084c2fb0fb4f3c2b5ed5072b28fcf0e03194b7c1500827b495f774184a9929d67f4a82781192de4eac26d81e671316769a6df807befac36414f56e6ee717d8f7815053273313407", 0x50, 0x20060800}, 0x20000000) 452.54292ms ago: executing program 2 (id=9583): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xf9d9}, 0x1001, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x41, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff0, 0x2000000}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 415.136441ms ago: executing program 1 (id=9584): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="897a00ccf6042d99f4d6f22f03b6eef3a30574a9", 0x14}], 0x1, 0x0, 0x0, 0x900}, 0x60) 177.520536ms ago: executing program 4 (id=9585): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8000) recvmsg(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8912, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=9586): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x82}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b7080000000000007baaf8ff0000000094080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0x8, 0xc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ffffffff0000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000001b000000b70000000000000018010000e920752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x7040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r2) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021dd4000000000003b810000850000006d000000850000000700000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x29, 0x7, 0x0) kernel console output (not intermixed with test programs): /0x2b0 [ 1711.120890][T30443] ? __x64_sys_sendmsg+0x80/0x80 [ 1711.125892][T30443] ? lockdep_hardirqs_on+0x94/0x140 [ 1711.131118][T30443] do_syscall_64+0x4c/0xa0 [ 1711.135567][T30443] ? clear_bhb_loop+0x60/0xb0 [ 1711.140280][T30443] ? clear_bhb_loop+0x60/0xb0 [ 1711.144997][T30443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1711.150921][T30443] RIP: 0033:0x7fa48fb9de99 [ 1711.155363][T30443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.174990][T30443] RSP: 002b:00007fa4909d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1711.183428][T30443] RAX: ffffffffffffffda RBX: 00007fa48fe25fa0 RCX: 00007fa48fb9de99 [ 1711.191428][T30443] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1711.199427][T30443] RBP: 00007fa4909d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.207416][T30443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.215412][T30443] R13: 00007fa48fe26038 R14: 00007fa48fe25fa0 R15: 00007ffead0e6458 [ 1711.223414][T30443] [ 1711.526201][T30448] netlink: 'syz.2.8533': attribute type 4 has an invalid length. [ 1711.554069][T30449] netlink: 'syz.0.8532': attribute type 2 has an invalid length. [ 1711.662202][T30449] netlink: 'syz.0.8532': attribute type 8 has an invalid length. [ 1711.723910][T30449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8532'. [ 1711.808939][T30457] netlink: 'syz.1.8535': attribute type 10 has an invalid length. [ 1711.827825][T30457] bridge0: port 3(dummy0) entered disabled state [ 1711.834606][T30457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.181989][T30469] FAULT_INJECTION: forcing a failure. [ 1712.181989][T30469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1712.266812][T30469] CPU: 1 PID: 30469 Comm: syz.3.8540 Not tainted syzkaller #0 [ 1712.274375][T30469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1712.284485][T30469] Call Trace: [ 1712.287812][T30469] [ 1712.290837][T30469] dump_stack_lvl+0x188/0x24e [ 1712.295595][T30469] ? show_regs_print_info+0x12/0x12 [ 1712.300844][T30469] ? load_image+0x410/0x410 [ 1712.305411][T30469] ? __lock_acquire+0x7c40/0x7c40 [ 1712.310501][T30469] ? memcpy+0x3c/0x60 [ 1712.314540][T30469] should_fail_ex+0x390/0x4c0 [ 1712.319286][T30469] _copy_to_user+0x2c/0x130 [ 1712.323837][T30469] map_lookup_elem+0x481/0x600 [ 1712.328666][T30469] __sys_bpf+0x546/0x780 [ 1712.332980][T30469] ? bpf_link_show_fdinfo+0x380/0x380 [ 1712.338465][T30469] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1712.344684][T30469] __x64_sys_bpf+0x78/0x90 [ 1712.349156][T30469] do_syscall_64+0x4c/0xa0 [ 1712.353662][T30469] ? clear_bhb_loop+0x60/0xb0 [ 1712.358399][T30469] ? clear_bhb_loop+0x60/0xb0 [ 1712.363139][T30469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1712.369089][T30469] RIP: 0033:0x7fa48fb9de99 [ 1712.373557][T30469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.393231][T30469] RSP: 002b:00007fa4909d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1712.401705][T30469] RAX: ffffffffffffffda RBX: 00007fa48fe25fa0 RCX: 00007fa48fb9de99 [ 1712.409729][T30469] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000001 [ 1712.417747][T30469] RBP: 00007fa4909d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1712.425771][T30469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1712.433789][T30469] R13: 00007fa48fe26038 R14: 00007fa48fe25fa0 R15: 00007ffead0e6458 [ 1712.441828][T30469] [ 1712.570362][T30468] netlink: 'syz.0.8541': attribute type 16 has an invalid length. [ 1712.578495][T30468] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8541'. [ 1712.699443][T30461] netlink: 'syz.2.8538': attribute type 10 has an invalid length. [ 1712.804529][T30461] device bridge_slave_1 left promiscuous mode [ 1712.824177][T30461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.973338][T30479] netlink: 'syz.3.8544': attribute type 10 has an invalid length. [ 1713.090203][T30479] device wlan1 left promiscuous mode [ 1713.756208][T30493] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8548'. [ 1714.638915][T30504] netlink: 'syz.3.8551': attribute type 10 has an invalid length. [ 1716.184346][T30532] netlink: 'syz.4.8556': attribute type 39 has an invalid length. [ 1718.582927][T30546] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.8563'. [ 1718.794603][T30552] netlink: 'syz.0.8564': attribute type 29 has an invalid length. [ 1718.841150][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8564'. [ 1718.881736][T30552] netlink: 'syz.0.8564': attribute type 29 has an invalid length. [ 1718.911352][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8564'. [ 1719.251363][T30561] netlink: 'syz.0.8567': attribute type 10 has an invalid length. [ 1719.259581][T30561] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8567'. [ 1719.269563][T30557] netlink: 'syz.1.8566': attribute type 10 has an invalid length. [ 1719.311772][T30562] netlink: 'syz.3.8562': attribute type 10 has an invalid length. [ 1719.327465][T30562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8562'. [ 1719.400773][T30562] device dummy0 entered promiscuous mode [ 1719.422443][T30562] bridge0: port 2(dummy0) entered blocking state [ 1719.432678][T30562] bridge0: port 2(dummy0) entered disabled state [ 1719.457138][T30562] bridge0: port 2(dummy0) entered blocking state [ 1719.464529][T30562] bridge0: port 2(dummy0) entered forwarding state [ 1719.761808][T30568] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.8570'. [ 1720.691364][T30601] netlink: 'syz.1.8577': attribute type 29 has an invalid length. [ 1720.812302][T30601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8577'. [ 1721.570751][T30615] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.8584'. [ 1721.573795][T30614] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.8584'. [ 1723.988911][T30601] netlink: 'syz.1.8577': attribute type 29 has an invalid length. [ 1723.996829][T30601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8577'. [ 1724.006355][T30619] netlink: 'syz.3.8585': attribute type 10 has an invalid length. [ 1724.028801][T30619] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8585'. [ 1724.064744][T30627] netlink: 'syz.2.8587': attribute type 10 has an invalid length. [ 1724.667003][T30644] netlink: 'syz.0.8589': attribute type 10 has an invalid length. [ 1725.333561][T30647] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.8595'. [ 1725.790075][T30652] netlink: 'syz.2.8593': attribute type 29 has an invalid length. [ 1725.798009][T30652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8593'. [ 1725.870471][T30652] netlink: 'syz.2.8593': attribute type 29 has an invalid length. [ 1725.878391][T30652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8593'. [ 1726.602433][T30654] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8596'. [ 1726.613177][T30654] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8596'. [ 1726.624384][T30654] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8596'. [ 1726.636163][T30654] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8596'. [ 1727.615567][T30662] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.8600'. [ 1728.148860][T30678] netlink: 'syz.4.8603': attribute type 10 has an invalid length. [ 1728.310272][T30681] netlink: 'syz.2.8606': attribute type 2 has an invalid length. [ 1728.318138][T30681] netlink: 'syz.2.8606': attribute type 1 has an invalid length. [ 1728.378223][T30681] netlink: 'syz.2.8606': attribute type 4 has an invalid length. [ 1729.152463][T30701] __nla_validate_parse: 2 callbacks suppressed [ 1729.152481][T30701] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.8613'. [ 1730.331009][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.337497][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.380786][T30711] netlink: 'syz.2.8617': attribute type 4 has an invalid length. [ 1731.566311][T30716] netlink: 'syz.0.8618': attribute type 4 has an invalid length. [ 1731.582442][T30715] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.8619'. [ 1732.883498][T30733] netlink: 'syz.0.8622': attribute type 10 has an invalid length. [ 1732.945724][T30738] netlink: 'syz.1.8626': attribute type 2 has an invalid length. [ 1732.980508][T30738] netlink: 'syz.1.8626': attribute type 8 has an invalid length. [ 1732.989213][T30738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8626'. [ 1733.195962][T30747] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8630'. [ 1733.372847][T30749] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.8632'. [ 1733.632888][T30762] netlink: 'syz.3.8636': attribute type 10 has an invalid length. [ 1733.943842][T30773] netlink: 'syz.3.8640': attribute type 2 has an invalid length. [ 1733.959754][T30773] netlink: 'syz.3.8640': attribute type 8 has an invalid length. [ 1733.988475][T30773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8640'. [ 1734.174134][T30781] netlink: 'syz.4.8641': attribute type 10 has an invalid length. [ 1734.643943][T30791] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.8645'. [ 1736.141199][T30819] netlink: 'syz.2.8656': attribute type 2 has an invalid length. [ 1736.169746][T30819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8656'. [ 1736.378698][T30823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1736.389169][T30823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1736.398559][T21913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1736.409603][T21913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1736.419634][T21913] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1736.427281][T21913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1736.712103][T30826] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.8654'. [ 1737.015714][T30822] chnl_net:caif_netlink_parms(): no params data found [ 1737.373265][T30822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.388922][T30822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.398158][T30822] device bridge_slave_0 entered promiscuous mode [ 1737.421491][T30822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.428652][T30822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.451715][T30822] device bridge_slave_1 entered promiscuous mode [ 1737.562344][T30822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1737.610757][T30822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1738.043896][T30822] team0: Port device team_slave_0 added [ 1738.075035][T30822] team0: Port device team_slave_1 added [ 1738.280083][T30822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1738.287224][T30822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.343856][T30822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1738.374806][T30822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1738.382055][T30822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.438810][T30822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.489666][T21913] Bluetooth: hci5: command 0x0409 tx timeout [ 1738.633921][T16546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.871854][T16546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.054844][T30822] device hsr_slave_0 entered promiscuous mode [ 1739.083649][T30822] device hsr_slave_1 entered promiscuous mode [ 1739.113004][T30822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1739.144714][T30822] Cannot create hsr debugfs directory [ 1739.339790][T16546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.519914][T16546] device netdevsim0 left promiscuous mode [ 1739.532633][T16546] bridge0: port 3(netdevsim0) entered disabled state [ 1739.570225][T16546] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.570177][T21913] Bluetooth: hci5: command 0x041b tx timeout [ 1741.109904][T30915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8679'. [ 1741.135971][T30915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8679'. [ 1741.235358][T30919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8679'. [ 1741.265769][T30915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8679'. [ 1741.306195][T30922] net_ratelimit: 81 callbacks suppressed [ 1741.306217][T30922] ip6_tunnel: non-ECT from 0000:0000:0000:00fc:0000:0000:ac14:140a with DS=0x31 [ 1742.416768][T30822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1742.474024][T30822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1742.658949][T21913] Bluetooth: hci5: command 0x040f tx timeout [ 1742.794296][T30822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1743.018658][T30822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1743.390287][T30822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.569570][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1743.587999][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1743.631765][T30822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.654194][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1743.670598][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1743.689374][T27533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.696644][T27533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1743.710715][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1743.739041][T30978] validate_nla: 1 callbacks suppressed [ 1743.739062][T30978] netlink: 'syz.2.8696': attribute type 10 has an invalid length. [ 1743.776085][T30978] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8696'. [ 1743.786178][T30984] sock: sock_set_timeout: `syz.1.8697' (pid 30984) tries to set negative timeout [ 1743.819148][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1743.850934][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1743.891297][T26074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.898459][T26074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1743.920041][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1744.233922][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1744.280370][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1744.294482][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1744.315979][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1744.335257][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1744.351046][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1744.379660][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1744.406455][T30822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1744.436159][T30822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1744.563594][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1744.573238][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1744.585465][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1744.729537][T21913] Bluetooth: hci5: command 0x0419 tx timeout [ 1745.593014][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1745.605602][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1745.673409][T30822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1745.850267][T31013] FAULT_INJECTION: forcing a failure. [ 1745.850267][T31013] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1745.915613][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1745.926127][T31013] CPU: 0 PID: 31013 Comm: syz.4.8706 Not tainted syzkaller #0 [ 1745.933683][T31013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1745.943795][T31013] Call Trace: [ 1745.947122][T31013] [ 1745.950190][T31013] dump_stack_lvl+0x188/0x24e [ 1745.954949][T31013] ? show_regs_print_info+0x12/0x12 [ 1745.960212][T31013] ? load_image+0x410/0x410 [ 1745.964793][T31013] ? get_user_pages_fast_only+0x40/0x40 [ 1745.970411][T31013] should_fail_ex+0x390/0x4c0 [ 1745.975152][T31013] get_futex_key+0x922/0x1000 [ 1745.979908][T31013] ? futex_setup_timer+0xc0/0xc0 [ 1745.984915][T31013] ? perf_trace_lock+0xf8/0x390 [ 1745.989838][T31013] futex_wake+0x123/0x4f0 [ 1745.994225][T31013] ? futex_wake_mark+0x150/0x150 [ 1745.999234][T31013] do_futex+0x2e2/0x320 [ 1746.003451][T31013] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1746.009413][T31013] ? __might_fault+0xc2/0x120 [ 1746.014140][T31013] mm_release+0x20a/0x330 [ 1746.018520][T31013] ? exit_robust_list+0x2ce/0x2f0 [ 1746.023596][T31013] ? exit_mm_release+0x30/0x30 [ 1746.028412][T31013] ? lockdep_hardirqs_on+0x94/0x140 [ 1746.033680][T31013] exit_mm+0xa0/0x350 [ 1746.037732][T31013] ? do_exit+0x2570/0x2570 [ 1746.042336][T31013] ? taskstats_exit+0x355/0x9e0 [ 1746.047262][T31013] do_exit+0x958/0x2570 [ 1746.051527][T31013] ? put_task_struct+0x80/0x80 [ 1746.052577][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1746.056333][T31013] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1746.056370][T31013] ? _raw_spin_lock_irq+0x86/0xf0 [ 1746.075547][T31013] ? lock_chain_count+0x20/0x20 [ 1746.080480][T31013] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1746.085572][T31013] do_group_exit+0x229/0x2e0 [ 1746.090223][T31013] ? lockdep_hardirqs_on+0x94/0x140 [ 1746.095472][T31013] get_signal+0x1259/0x1340 [ 1746.100072][T31013] arch_do_signal_or_restart+0xc4/0x1310 [ 1746.105760][T31013] ? kick_process+0xd4/0x140 [ 1746.110451][T31013] ? task_work_add+0x2cb/0x330 [ 1746.115376][T31013] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 1746.120819][T31013] ? get_sigframe_size+0x10/0x10 [ 1746.125816][T31013] ? fput+0x157/0x1a0 [ 1746.129864][T31013] ? exit_to_user_mode_loop+0x3b/0x110 [ 1746.135399][T31013] exit_to_user_mode_loop+0x70/0x110 [ 1746.140752][T31013] exit_to_user_mode_prepare+0xee/0x180 [ 1746.146354][T31013] syscall_exit_to_user_mode+0x16/0x40 [ 1746.151865][T31013] do_syscall_64+0x58/0xa0 [ 1746.156338][T31013] ? clear_bhb_loop+0x60/0xb0 [ 1746.161073][T31013] ? clear_bhb_loop+0x60/0xb0 [ 1746.165814][T31013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1746.171765][T31013] RIP: 0033:0x7fc8e8d9de99 [ 1746.176227][T31013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1746.195981][T31013] RSP: 002b:00007fc8e9d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1746.204459][T31013] RAX: fffffffffffffe00 RBX: 00007fc8e9025fa0 RCX: 00007fc8e8d9de99 [ 1746.212529][T31013] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 1746.220566][T31013] RBP: 00007fc8e9d13090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.228587][T31013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.236610][T31013] R13: 00007fc8e9026038 R14: 00007fc8e9025fa0 R15: 00007ffe6d9f6fe8 [ 1746.244667][T31013] [ 1746.438018][T31028] netlink: 'syz.1.8708': attribute type 2 has an invalid length. [ 1746.458882][T31028] netlink: 'syz.1.8708': attribute type 8 has an invalid length. [ 1746.466704][T31028] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8708'. [ 1746.991431][T16546] team0: Port device wlan1 removed [ 1747.034957][T30822] device veth0_vlan entered promiscuous mode [ 1747.082614][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1747.130547][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1747.149028][T31037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8711'. [ 1747.186710][T30822] device veth1_vlan entered promiscuous mode [ 1747.232530][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1747.261810][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1747.293690][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1747.328031][T31037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8711'. [ 1747.390019][T31040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8711'. [ 1747.446884][T31042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8711'. [ 1747.994151][T31044] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8712'. [ 1748.037241][T16548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1748.057525][T16548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1748.093555][T16548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1748.399664][T16546] device hsr_slave_0 left promiscuous mode [ 1748.453954][T16546] device hsr_slave_1 left promiscuous mode [ 1748.467816][T16546] bridge0: port 5(dummy0) entered disabled state [ 1748.493050][T16546] device bridge_slave_0 left promiscuous mode [ 1748.509867][T16546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.600124][T16546] device veth1_macvtap left promiscuous mode [ 1748.619240][T16546] device veth0_macvtap left promiscuous mode [ 1749.152299][T31057] can: request_module (can-proto-0) failed. [ 1749.902738][T16546] team0 (unregistering): Port device team_slave_1 removed [ 1750.063966][T16546] team0 (unregistering): Port device team_slave_0 removed [ 1751.140662][T30822] device veth0_macvtap entered promiscuous mode [ 1751.188393][T16548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1751.209801][T31059] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8715'. [ 1751.262868][T30822] device veth1_macvtap entered promiscuous mode [ 1751.442071][T30822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1751.489127][T30822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1751.522910][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1751.534137][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1751.550936][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1751.590625][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1751.621175][T30822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.643666][T30822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.654237][T30822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.666167][T30822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.734770][T31070] netlink: 'syz.2.8720': attribute type 2 has an invalid length. [ 1751.750630][T31070] netlink: 'syz.2.8720': attribute type 8 has an invalid length. [ 1751.759773][T31070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8720'. [ 1751.927285][T26074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.988774][T26074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.116563][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1752.190840][T31087] netlink: 'syz.1.8723': attribute type 2 has an invalid length. [ 1752.218965][T31087] netlink: 'syz.1.8723': attribute type 1 has an invalid length. [ 1752.282805][T31089] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.8724'. [ 1755.051570][T26074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.082692][T26074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.108068][T26074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1755.334117][T31103] netlink: 'syz.1.8727': attribute type 10 has an invalid length. [ 1755.715955][T31112] netlink: 'syz.1.8731': attribute type 2 has an invalid length. [ 1755.788210][T31112] netlink: 'syz.1.8731': attribute type 8 has an invalid length. [ 1755.850451][T31112] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8731'. [ 1755.991983][T31110] netlink: 'syz.3.8732': attribute type 10 has an invalid length. [ 1756.323747][T31120] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1756.443159][T31122] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8736'. [ 1756.724291][T31124] netlink: 'syz.4.8728': attribute type 4 has an invalid length. [ 1756.801615][T31130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1756.830438][T31130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1756.881653][T31130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1756.916774][T31130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1757.427364][T31150] netlink: 'syz.2.8746': attribute type 2 has an invalid length. [ 1757.435440][T31150] netlink: 'syz.2.8746': attribute type 8 has an invalid length. [ 1757.449313][T31150] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8746'. [ 1757.829453][T31159] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.8748'. [ 1757.890099][T31161] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.8750'. [ 1758.325635][T31176] netlink: 'syz.4.8754': attribute type 29 has an invalid length. [ 1758.397503][T31177] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.8754'. [ 1758.419032][T31176] netlink: 'syz.4.8754': attribute type 29 has an invalid length. [ 1758.454449][T31173] netlink: 'syz.4.8754': attribute type 29 has an invalid length. [ 1758.518233][T31165] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1758.763789][T31182] netlink: 'syz.0.8758': attribute type 2 has an invalid length. [ 1758.968197][T31165] device syzkaller0 entered promiscuous mode [ 1759.141875][T31176] netlink: 'syz.4.8754': attribute type 4 has an invalid length. [ 1759.155993][T31176] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8754'. [ 1759.436114][T31204] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.8764'. [ 1759.742925][T31210] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.8766'. [ 1761.872447][T31189] netlink: 'syz.1.8760': attribute type 2 has an invalid length. [ 1761.881494][T31189] netlink: 'syz.1.8760': attribute type 8 has an invalid length. [ 1761.889757][T31189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8760'. [ 1761.901977][T31216] netlink: 'syz.0.8769': attribute type 10 has an invalid length. [ 1761.910125][T31216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8769'. [ 1761.928926][T31216] device dummy0 entered promiscuous mode [ 1761.940251][T31216] bridge0: port 3(dummy0) entered blocking state [ 1761.957029][T31216] bridge0: port 3(dummy0) entered disabled state [ 1761.970805][T31216] bridge0: port 3(dummy0) entered blocking state [ 1761.977331][T31216] bridge0: port 3(dummy0) entered forwarding state [ 1762.005424][T31218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8768'. [ 1762.455910][T31235] validate_nla: 3 callbacks suppressed [ 1762.456124][T31235] netlink: 'syz.1.8776': attribute type 10 has an invalid length. [ 1763.129633][T31249] FAULT_INJECTION: forcing a failure. [ 1763.129633][T31249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.159036][T31249] CPU: 1 PID: 31249 Comm: syz.3.8781 Not tainted syzkaller #0 [ 1763.166587][T31249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1763.176700][T31249] Call Trace: [ 1763.180025][T31249] [ 1763.183034][T31249] dump_stack_lvl+0x188/0x24e [ 1763.187782][T31249] ? show_regs_print_info+0x12/0x12 [ 1763.193030][T31249] ? load_image+0x410/0x410 [ 1763.197618][T31249] ? __lock_acquire+0x7c40/0x7c40 [ 1763.202711][T31249] should_fail_ex+0x390/0x4c0 [ 1763.207439][T31249] _copy_to_user+0x2c/0x130 [ 1763.211972][T31249] inet_gifconf+0x334/0x500 [ 1763.216536][T31249] ? inet_make_mask+0x70/0x70 [ 1763.221300][T31249] dev_ifconf+0x202/0x300 [ 1763.225688][T31249] ? sock_diag_rcv_msg+0x5e0/0x5e0 [ 1763.230853][T31249] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1763.236889][T31249] ? lock_chain_count+0x20/0x20 [ 1763.241791][T31249] ? rcu_is_watching+0x11/0xa0 [ 1763.246610][T31249] sock_ioctl+0x286/0x700 [ 1763.250991][T31249] ? sock_poll+0x420/0x420 [ 1763.255464][T31249] ? security_file_ioctl+0x34/0xa0 [ 1763.260625][T31249] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1763.265636][T31249] ? security_file_ioctl+0x7c/0xa0 [ 1763.270791][T31249] ? sock_poll+0x420/0x420 [ 1763.275236][T31249] __se_sys_ioctl+0xfa/0x170 [ 1763.279853][T31249] do_syscall_64+0x4c/0xa0 [ 1763.284288][T31249] ? clear_bhb_loop+0x60/0xb0 [ 1763.288979][T31249] ? clear_bhb_loop+0x60/0xb0 [ 1763.293670][T31249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.299601][T31249] RIP: 0033:0x7fa48fb9de99 [ 1763.304030][T31249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1763.323689][T31249] RSP: 002b:00007fa4909d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.332119][T31249] RAX: ffffffffffffffda RBX: 00007fa48fe25fa0 RCX: 00007fa48fb9de99 [ 1763.340117][T31249] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000005 [ 1763.348107][T31249] RBP: 00007fa4909d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1763.356099][T31249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1763.364105][T31249] R13: 00007fa48fe26038 R14: 00007fa48fe25fa0 R15: 00007ffead0e6458 [ 1763.372149][T31249] [ 1763.587955][T31259] netlink: 'syz.4.8784': attribute type 4 has an invalid length. [ 1763.724201][T31265] __nla_validate_parse: 2 callbacks suppressed [ 1763.724221][T31265] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.8789'. [ 1764.191067][T31280] netlink: 'syz.1.8793': attribute type 10 has an invalid length. [ 1765.595829][T31304] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.8802'. [ 1766.411001][ T4318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1766.423749][ T4318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1766.434908][ T4318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1766.444307][ T4318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1766.452673][ T4318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1766.460962][ T4318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1767.064907][T31309] chnl_net:caif_netlink_parms(): no params data found [ 1767.269413][T31309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.276882][T31309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.331821][T31309] device bridge_slave_0 entered promiscuous mode [ 1767.352201][T31309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.379020][T31309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.393759][T31309] device bridge_slave_1 entered promiscuous mode [ 1767.481076][T31309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.511299][T31309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.571117][T31309] team0: Port device team_slave_0 added [ 1767.591659][T31309] team0: Port device team_slave_1 added [ 1767.630697][T31309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1767.637749][T31309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1767.688938][T31309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.711542][T31309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1767.718593][T31309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1767.765176][T31309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1768.424816][T31309] device hsr_slave_0 entered promiscuous mode [ 1768.480643][T31309] device hsr_slave_1 entered promiscuous mode [ 1768.488911][T21913] Bluetooth: hci1: command 0x0409 tx timeout [ 1768.685687][T31320] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8808'. [ 1769.461071][T31320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1769.491663][T31320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1769.513086][T31320] bond0 (unregistering): Released all slaves [ 1769.547677][T31317] netlink: 'syz.3.8805': attribute type 2 has an invalid length. [ 1769.559218][T31317] netlink: 'syz.3.8805': attribute type 8 has an invalid length. [ 1769.567027][T31317] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8805'. [ 1769.744560][T27537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.841154][T31334] netlink: 'syz.1.8811': attribute type 10 has an invalid length. [ 1769.991416][T27537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.054125][T31345] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.8814'. [ 1770.331751][T31347] netlink: 'syz.0.8815': attribute type 4 has an invalid length. [ 1770.428426][T27537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.511559][T27537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.570451][T21913] Bluetooth: hci1: command 0x041b tx timeout [ 1770.638490][T31355] netlink: 'syz.2.8820': attribute type 10 has an invalid length. [ 1770.646736][T31355] team0: Device wlan1 is up. Set it down before adding it as a team port [ 1770.684462][T31353] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.8819'. [ 1770.910667][T31359] netlink: 'syz.2.8822': attribute type 2 has an invalid length. [ 1770.918731][T31359] netlink: 'syz.2.8822': attribute type 8 has an invalid length. [ 1770.970762][T31359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8822'. [ 1771.123475][T27537] device .*! left promiscuous mode [ 1772.410217][T31394] netlink: 'syz.0.8828': attribute type 10 has an invalid length. [ 1772.462014][T31394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.494788][T31394] device bridge_slave_1 left promiscuous mode [ 1772.524625][T31394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.651312][T21913] Bluetooth: hci1: command 0x040f tx timeout [ 1772.851774][T31309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1773.029620][T31309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1773.047336][T31309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1773.160975][T31309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1773.380236][T31427] netlink: 'syz.0.8835': attribute type 2 has an invalid length. [ 1773.494149][T31427] netlink: 'syz.0.8835': attribute type 8 has an invalid length. [ 1773.508213][T31427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8835'. [ 1773.835476][T31309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1773.897570][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1773.930581][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1773.972445][T31309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1774.728867][T21913] Bluetooth: hci1: command 0x0419 tx timeout [ 1774.740432][T31464] netlink: 'syz.0.8846': attribute type 29 has an invalid length. [ 1774.768798][T31464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8846'. [ 1776.704144][T31468] netlink: 'syz.1.8845': attribute type 10 has an invalid length. [ 1776.729096][T31464] netlink: 'syz.0.8846': attribute type 29 has an invalid length. [ 1776.736997][T31464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8846'. [ 1776.824415][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1776.835446][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1776.852209][T16546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.859504][T16546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.898018][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1776.938595][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1776.959413][T16546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.966637][T16546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.047127][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1777.076347][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1777.088340][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1777.112962][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1777.144495][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1777.220170][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1777.233028][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1777.259960][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1777.280159][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1777.310501][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1777.373997][T31309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1777.406568][T31309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1777.419793][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1777.429866][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1777.452955][T31484] netlink: 'syz.0.8851': attribute type 4 has an invalid length. [ 1778.223063][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1778.247724][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1778.335071][T31309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1778.369638][T31502] netlink: 'syz.2.8857': attribute type 10 has an invalid length. [ 1778.383193][T31508] netlink: 'syz.3.8858': attribute type 2 has an invalid length. [ 1778.398080][T31508] netlink: 'syz.3.8858': attribute type 8 has an invalid length. [ 1778.426462][T31508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8858'. [ 1779.550608][T27537] device veth0_to_team left promiscuous mode [ 1779.585363][T27537] Ÿë: port 1(veth0_to_team) entered disabled state [ 1779.640409][T27537] device hsr_slave_0 left promiscuous mode [ 1779.647493][T27537] bridge0: port 3(dummy0) entered disabled state [ 1779.670622][T27537] device bridge_slave_0 left promiscuous mode [ 1779.705601][T27537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.864794][T27537] device veth1_macvtap left promiscuous mode [ 1779.872682][T27537] device veth0_macvtap left promiscuous mode [ 1780.294523][T31562] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8875'. [ 1780.335628][T31563] netlink: 'syz.3.8873': attribute type 29 has an invalid length. [ 1780.363451][T31563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8873'. [ 1780.510892][T31565] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.8876'. [ 1780.874065][T27537] device team_slave_1 left promiscuous mode [ 1780.889701][T27537] team0 (unregistering): Port device team_slave_1 removed [ 1780.960887][T27537] device team_slave_0 left promiscuous mode [ 1780.968327][T27537] team0 (unregistering): Port device team_slave_0 removed [ 1781.410805][T27537] device bridge0 left promiscuous mode [ 1781.417476][T27537] team0 (unregistering): Port device bridge0 removed [ 1781.575156][T31545] netlink: 'syz.0.8870': attribute type 10 has an invalid length. [ 1781.585142][T31545] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8870'. [ 1781.657477][T31563] netlink: 'syz.3.8873': attribute type 29 has an invalid length. [ 1781.670084][T31563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8873'. [ 1781.740522][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1781.760976][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1781.839399][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1781.870584][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1781.902400][T31309] device veth0_vlan entered promiscuous mode [ 1781.922097][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1781.969706][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1781.992603][T31309] device veth1_vlan entered promiscuous mode [ 1782.121247][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1782.142591][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1782.200378][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1782.267542][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1782.311357][T31309] device veth0_macvtap entered promiscuous mode [ 1782.330792][T31309] device veth1_macvtap entered promiscuous mode [ 1782.426158][T31309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1782.439181][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1782.453013][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1782.498104][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1782.536905][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1782.573152][T31309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.597820][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1782.618643][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1782.654357][T31580] netlink: 'syz.2.8882': attribute type 2 has an invalid length. [ 1782.727479][T31580] netlink: 'syz.2.8882': attribute type 8 has an invalid length. [ 1782.755053][T31580] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8882'. [ 1782.770431][T31587] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.8885'. [ 1782.783872][T31309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.819830][T31309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.850161][T31309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.873702][T31309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.938409][T31591] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.8886'. [ 1783.049338][T31594] FAULT_INJECTION: forcing a failure. [ 1783.049338][T31594] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.086117][T31594] CPU: 1 PID: 31594 Comm: syz.2.8887 Not tainted syzkaller #0 [ 1783.093680][T31594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1783.103796][T31594] Call Trace: [ 1783.107125][T31594] [ 1783.110099][T31594] dump_stack_lvl+0x188/0x24e [ 1783.114830][T31594] ? show_regs_print_info+0x12/0x12 [ 1783.120162][T31594] ? load_image+0x410/0x410 [ 1783.124759][T31594] ? perf_trace_lock+0xf8/0x390 [ 1783.129672][T31594] ? verify_lock_unused+0x140/0x140 [ 1783.134932][T31594] ? perf_trace_lock+0xf8/0x390 [ 1783.135941][T16546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.139825][T31594] should_fail_ex+0x390/0x4c0 [ 1783.139865][T31594] should_failslab+0x5/0x20 [ 1783.139885][T31594] slab_pre_alloc_hook+0x59/0x300 [ 1783.139916][T31594] kmem_cache_alloc+0x56/0x2f0 [ 1783.139937][T31594] ? skb_clone+0x1e7/0x370 [ 1783.139972][T31594] skb_clone+0x1e7/0x370 [ 1783.140003][T31594] __netlink_deliver_tap+0x3e4/0x7e0 [ 1783.140045][T31594] ? netlink_deliver_tap+0x2e/0x1b0 [ 1783.140078][T31594] netlink_deliver_tap+0x19c/0x1b0 [ 1783.140108][T31594] netlink_unicast+0x777/0x920 [ 1783.140145][T31594] netlink_sendmsg+0x8ad/0xbd0 [ 1783.156029][T16546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.157365][T31594] ? apparmor_socket_sendmsg+0x15/0x330 [ 1783.171607][T31594] ? netlink_getsockopt+0x550/0x550 [ 1783.181887][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1783.186470][T31594] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1783.186510][T31594] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1783.237582][T31594] ? security_socket_sendmsg+0x7c/0xa0 [ 1783.243100][T31594] ? netlink_getsockopt+0x550/0x550 [ 1783.248349][T31594] ____sys_sendmsg+0x5ed/0x9a0 [ 1783.253160][T31594] ? __sys_sendmsg_sock+0x30/0x30 [ 1783.258228][T31594] ? __import_iovec+0x306/0x510 [ 1783.263120][T31594] ? import_iovec+0x6f/0xa0 [ 1783.267665][T31594] ___sys_sendmsg+0x2a2/0x360 [ 1783.272384][T31594] ? __sys_sendmsg+0x2a0/0x2a0 [ 1783.277223][T31594] ? __lock_acquire+0x7c40/0x7c40 [ 1783.282305][T31594] __se_sys_sendmsg+0x1c3/0x2b0 [ 1783.287200][T31594] ? __x64_sys_sendmsg+0x80/0x80 [ 1783.292185][T31594] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1783.298133][T31594] do_syscall_64+0x4c/0xa0 [ 1783.302583][T31594] ? clear_bhb_loop+0x60/0xb0 [ 1783.307329][T31594] ? clear_bhb_loop+0x60/0xb0 [ 1783.312041][T31594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1783.317977][T31594] RIP: 0033:0x7f2e01f9de99 [ 1783.322424][T31594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1783.342109][T31594] RSP: 002b:00007f2e02f58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1783.350553][T31594] RAX: ffffffffffffffda RBX: 00007f2e02225fa0 RCX: 00007f2e01f9de99 [ 1783.358554][T31594] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1783.366586][T31594] RBP: 00007f2e02f58090 R08: 0000000000000000 R09: 0000000000000000 [ 1783.374591][T31594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1783.382640][T31594] R13: 00007f2e02226038 R14: 00007f2e02225fa0 R15: 00007ffd9e97ed98 [ 1783.390656][T31594] [ 1783.438388][T27537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.448454][T27537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.460513][T27533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1784.565609][T31617] netlink: 'syz.2.8894': attribute type 4 has an invalid length. [ 1784.804656][T31624] netlink: 'syz.0.8896': attribute type 2 has an invalid length. [ 1784.839938][T31624] netlink: 'syz.0.8896': attribute type 8 has an invalid length. [ 1784.864120][T31627] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.8899'. [ 1784.881923][T31624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8896'. [ 1784.984841][T31633] netlink: 'syz.1.8898': attribute type 10 has an invalid length. [ 1785.540136][T31651] netlink: 'syz.1.8906': attribute type 4 has an invalid length. [ 1786.223695][T31659] can: request_module (can-proto-0) failed. [ 1786.419557][T31662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8907'. [ 1786.710862][T31672] netlink: 'syz.0.8912': attribute type 2 has an invalid length. [ 1786.727883][T31677] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.8913'. [ 1786.738105][T31672] netlink: 'syz.0.8912': attribute type 8 has an invalid length. [ 1786.762381][T31672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8912'. [ 1786.869891][T31680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8915'. [ 1786.912339][T31680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8915'. [ 1786.961803][T31682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8915'. [ 1787.029432][T31680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8915'. [ 1787.754487][T31712] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.8928'. [ 1788.275558][T31721] netlink: 'syz.0.8929': attribute type 2 has an invalid length. [ 1788.321161][T31721] netlink: 'syz.0.8929': attribute type 8 has an invalid length. [ 1788.352155][T31721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8929'. [ 1788.634723][T31732] netlink: 'syz.3.8932': attribute type 4 has an invalid length. [ 1788.663167][T31732] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8932'. [ 1789.033003][T31720] device syzkaller0 entered promiscuous mode [ 1789.064447][T31743] netlink: 'syz.1.8937': attribute type 10 has an invalid length. [ 1789.584594][T31758] ip6_tunnel: non-ECT from 0000:0000:ff00:0000:0000:ffff:ac14:140a with DS=0x31 [ 1790.686651][T31777] netlink: 'syz.3.8947': attribute type 29 has an invalid length. [ 1791.775252][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.795203][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.159882][T31767] netlink: 'syz.4.8945': attribute type 1 has an invalid length. [ 1792.167692][T31767] __nla_validate_parse: 5 callbacks suppressed [ 1792.167707][T31767] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.8945'. [ 1792.223637][T31777] netlink: 'syz.3.8947': attribute type 29 has an invalid length. [ 1792.249049][T31777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8947'. [ 1792.377145][T31783] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.8948'. [ 1792.414083][T31779] netlink: 'syz.2.8950': attribute type 4 has an invalid length. [ 1792.446465][T31785] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.8951'. [ 1792.531960][T31787] netlink: 'syz.3.8952': attribute type 4 has an invalid length. [ 1792.714055][T31796] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.8953'. [ 1792.771337][T31796] netlink: zone id is out of range [ 1792.776542][T31796] netlink: zone id is out of range [ 1792.858543][T31796] netlink: zone id is out of range [ 1792.894199][T31796] netlink: zone id is out of range [ 1792.931482][T31796] netlink: zone id is out of range [ 1792.936689][T31796] netlink: zone id is out of range [ 1792.998061][T31796] netlink: zone id is out of range [ 1793.018749][T31801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1793.036769][T31796] netlink: zone id is out of range [ 1793.043260][T31801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1793.068790][T31796] netlink: zone id is out of range [ 1793.191481][T31801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1793.232097][T31801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1793.658237][T31805] netlink: 'syz.2.8958': attribute type 2 has an invalid length. [ 1793.667591][T31805] netlink: 'syz.2.8958': attribute type 8 has an invalid length. [ 1793.677466][T31805] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1793.900859][T31822] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.8965'. [ 1793.972370][T31828] netlink: 16198 bytes leftover after parsing attributes in process `syz.1.8967'. [ 1794.267488][T21913] Bluetooth: hci5: unexpected event 0x08 length: 151 > 4 [ 1794.270310][T31839] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.8972'. [ 1794.369789][T31846] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8975'. [ 1794.538143][T31852] netlink: 'syz.0.8977': attribute type 2 has an invalid length. [ 1794.578685][T31852] netlink: 'syz.0.8977': attribute type 8 has an invalid length. [ 1794.691896][T31862] netlink: 'syz.4.8979': attribute type 4 has an invalid length. [ 1797.661047][T31886] netlink: 'syz.3.8986': attribute type 2 has an invalid length. [ 1797.700176][T31886] netlink: 'syz.3.8986': attribute type 8 has an invalid length. [ 1797.757047][T31886] __nla_validate_parse: 5 callbacks suppressed [ 1797.757069][T31886] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8986'. [ 1797.814109][T31885] netlink: 'syz.1.8990': attribute type 10 has an invalid length. [ 1797.838862][T31885] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8990'. [ 1797.899521][T31894] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.8993'. [ 1797.906960][T31889] netlink: 'syz.4.8991': attribute type 2 has an invalid length. [ 1797.922989][T31889] netlink: 'syz.4.8991': attribute type 8 has an invalid length. [ 1797.933506][T31889] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8991'. [ 1798.152920][T31898] netlink: 'syz.3.8994': attribute type 2 has an invalid length. [ 1798.179576][T31898] netlink: 'syz.3.8994': attribute type 8 has an invalid length. [ 1798.187610][T31898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8994'. [ 1798.266338][T31906] netlink: 16198 bytes leftover after parsing attributes in process `syz.4.8997'. [ 1798.413703][T31907] netlink: 'syz.1.8995': attribute type 10 has an invalid length. [ 1799.377770][T31925] FAULT_INJECTION: forcing a failure. [ 1799.377770][T31925] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.409063][T31925] CPU: 1 PID: 31925 Comm: syz.2.9005 Not tainted syzkaller #0 [ 1799.416628][T31925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1799.426735][T31925] Call Trace: [ 1799.430062][T31925] [ 1799.433037][T31925] dump_stack_lvl+0x188/0x24e [ 1799.437785][T31925] ? show_regs_print_info+0x12/0x12 [ 1799.443041][T31925] ? load_image+0x410/0x410 [ 1799.447605][T31925] ? __might_sleep+0xd0/0xd0 [ 1799.452247][T31925] ? __lock_acquire+0x7c40/0x7c40 [ 1799.457345][T31925] should_fail_ex+0x390/0x4c0 [ 1799.462087][T31925] should_failslab+0x5/0x20 [ 1799.466638][T31925] slab_pre_alloc_hook+0x59/0x300 [ 1799.471710][T31925] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1799.477941][T31925] kmem_cache_alloc_node+0x5a/0x310 [ 1799.483231][T31925] ? __alloc_skb+0xf9/0x7d0 [ 1799.487798][T31925] __alloc_skb+0xf9/0x7d0 [ 1799.492193][T31925] netlink_dump+0x1e1/0xcd0 [ 1799.496759][T31925] ? __mutex_lock+0x3ba/0xae0 [ 1799.501502][T31925] ? __netlink_dump_start+0x11e/0x6f0 [ 1799.506945][T31925] ? netlink_lookup+0x200/0x200 [ 1799.511848][T31925] ? __netlink_lookup+0x2d/0x730 [ 1799.516854][T31925] ? netlink_lookup+0x30/0x200 [ 1799.521665][T31925] ? netlink_lookup+0x30/0x200 [ 1799.526502][T31925] __netlink_dump_start+0x52c/0x6f0 [ 1799.531802][T31925] rtnetlink_rcv_msg+0xe55/0xfb0 [ 1799.536797][T31925] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1799.541967][T31925] ? br_vlan_rtnl_init+0x60/0x60 [ 1799.547066][T31925] ? rtnetlink_bind+0x80/0x80 [ 1799.551793][T31925] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1799.557824][T31925] ? __lock_acquire+0x7c40/0x7c40 [ 1799.562905][T31925] ? lock_chain_count+0x20/0x20 [ 1799.567833][T31925] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1799.573773][T31925] ? lockdep_hardirqs_on+0x94/0x140 [ 1799.579024][T31925] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1799.585225][T31925] ? _raw_spin_unlock+0x40/0x40 [ 1799.590121][T31925] ? __dev_queue_xmit+0x1d84/0x3810 [ 1799.595392][T31925] ? rcu_preempt_deferred_qs_irqrestore+0x827/0xbd0 [ 1799.602063][T31925] ? rcu_read_unlock_special+0x510/0x510 [ 1799.607748][T31925] ? br_vlan_rtnl_init+0x60/0x60 [ 1799.612762][T31925] ? rcu_read_unlock_special+0xf9/0x510 [ 1799.618374][T31925] ? rcu_read_unlock_special+0xf9/0x510 [ 1799.623987][T31925] netlink_rcv_skb+0x1ef/0x440 [ 1799.628813][T31925] ? rtnetlink_bind+0x80/0x80 [ 1799.633549][T31925] ? netlink_ack+0x1160/0x1160 [ 1799.638475][T31925] ? __rcu_read_unlock+0x78/0xd0 [ 1799.643456][T31925] ? netlink_deliver_tap+0x2e/0x1b0 [ 1799.648734][T31925] netlink_unicast+0x7ad/0x920 [ 1799.653584][T31925] netlink_sendmsg+0x8ad/0xbd0 [ 1799.658426][T31925] ? netlink_getsockopt+0x550/0x550 [ 1799.663684][T31925] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1799.669287][T31925] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1799.674621][T31925] ? security_socket_sendmsg+0x7c/0xa0 [ 1799.680128][T31925] ? netlink_getsockopt+0x550/0x550 [ 1799.685389][T31925] ____sys_sendmsg+0x5ed/0x9a0 [ 1799.690257][T31925] ? __sys_sendmsg_sock+0x30/0x30 [ 1799.695414][T31925] ? __import_iovec+0x306/0x510 [ 1799.700366][T31925] ? import_iovec+0x6f/0xa0 [ 1799.704929][T31925] ___sys_sendmsg+0x2a2/0x360 [ 1799.709676][T31925] ? __sys_sendmsg+0x2a0/0x2a0 [ 1799.714560][T31925] ? __lock_acquire+0x7c40/0x7c40 [ 1799.719704][T31925] __se_sys_sendmsg+0x1c3/0x2b0 [ 1799.724616][T31925] ? __x64_sys_sendmsg+0x80/0x80 [ 1799.729674][T31925] ? lockdep_hardirqs_on+0x94/0x140 [ 1799.734959][T31925] do_syscall_64+0x4c/0xa0 [ 1799.739421][T31925] ? clear_bhb_loop+0x60/0xb0 [ 1799.744140][T31925] ? clear_bhb_loop+0x60/0xb0 [ 1799.748871][T31925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1799.754811][T31925] RIP: 0033:0x7f2e01f9de99 [ 1799.759277][T31925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.778944][T31925] RSP: 002b:00007f2e02f58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.787416][T31925] RAX: ffffffffffffffda RBX: 00007f2e02225fa0 RCX: 00007f2e01f9de99 [ 1799.795432][T31925] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1799.803449][T31925] RBP: 00007f2e02f58090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.811462][T31925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.819506][T31925] R13: 00007f2e02226038 R14: 00007f2e02225fa0 R15: 00007ffd9e97ed98 [ 1799.827564][T31925] [ 1800.727171][T31946] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.9012'. [ 1800.947656][T31953] netlink: 'syz.2.9013': attribute type 4 has an invalid length. [ 1801.435845][T31968] netlink: 'syz.3.9020': attribute type 4 has an invalid length. [ 1801.894524][T31974] netlink: 22 bytes leftover after parsing attributes in process `syz.3.9022'. [ 1804.734674][T31983] validate_nla: 1 callbacks suppressed [ 1804.734693][T31983] netlink: 'syz.2.9025': attribute type 21 has an invalid length. [ 1804.832520][T31991] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.9027'. [ 1805.094516][T31999] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.9031'. [ 1805.245691][T31996] can: request_module (can-proto-0) failed. [ 1805.312119][T32000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9029'. [ 1806.653367][T32030] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9042'. [ 1806.883884][T32034] netlink: 'syz.0.9043': attribute type 10 has an invalid length. [ 1806.924425][T32034] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9043'. [ 1807.020760][T32037] netlink: 'syz.4.9044': attribute type 2 has an invalid length. [ 1807.079164][T32037] netlink: 'syz.4.9044': attribute type 1 has an invalid length. [ 1807.249067][ T4318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1807.258063][ T4318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1807.271520][ T4318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1807.281197][ T4318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1807.289756][ T4318] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1807.297198][ T4318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1808.070124][T32031] netlink: 'syz.1.9040': attribute type 10 has an invalid length. [ 1808.211073][T23723] bond0: (slave syz_tun): Releasing backup interface [ 1808.584070][ T7743] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.705682][T32067] netlink: 'syz.2.9053': attribute type 4 has an invalid length. [ 1808.842653][ T7743] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.879795][T32044] chnl_net:caif_netlink_parms(): no params data found [ 1809.009255][ T7743] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.242847][ T7743] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.369000][ T4318] Bluetooth: hci3: command 0x0409 tx timeout [ 1809.436689][T32044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.444713][T32044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.455513][T32044] device bridge_slave_0 entered promiscuous mode [ 1809.467840][T32044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.475850][T32044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.486362][T32044] device bridge_slave_1 entered promiscuous mode [ 1809.535813][T32076] netlink: 'syz.2.9056': attribute type 2 has an invalid length. [ 1809.579283][T32076] netlink: 'syz.2.9056': attribute type 1 has an invalid length. [ 1809.622136][T32044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.661453][T32044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.826310][T32044] team0: Port device team_slave_0 added [ 1809.933782][T32044] team0: Port device team_slave_1 added [ 1810.067225][T32094] netlink: 'syz.2.9061': attribute type 10 has an invalid length. [ 1810.078993][T32094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9061'. [ 1810.100638][T32086] netlink: 'syz.0.9059': attribute type 10 has an invalid length. [ 1810.148951][ T7743] device .*! left promiscuous mode [ 1810.220644][T32044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1810.227706][T32044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1810.320898][T32044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1810.423591][T32044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1810.434290][T32044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1810.538723][T32044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1810.897325][T32114] netlink: 'syz.4.9068': attribute type 10 has an invalid length. [ 1810.932426][T32114] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9068'. [ 1811.086806][T32044] device hsr_slave_0 entered promiscuous mode [ 1811.107946][T32044] device hsr_slave_1 entered promiscuous mode [ 1811.165424][T32044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1811.175346][T32044] Cannot create hsr debugfs directory [ 1811.448937][ T4318] Bluetooth: hci3: command 0x041b tx timeout [ 1812.156262][T32148] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1812.668313][T32152] netlink: 13159 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1812.895489][T32163] netlink: 'syz.4.9080': attribute type 10 has an invalid length. [ 1813.121694][T32163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.173646][T32163] device bridge_slave_1 left promiscuous mode [ 1813.199643][T32163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.292242][T32163] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1813.470519][T32174] netlink: 'syz.2.9084': attribute type 2 has an invalid length. [ 1813.520562][T32174] netlink: 'syz.2.9084': attribute type 8 has an invalid length. [ 1813.537661][ T4318] Bluetooth: hci3: command 0x040f tx timeout [ 1813.632518][T32178] netlink: 'syz.1.9085': attribute type 2 has an invalid length. [ 1813.632557][T32178] netlink: 'syz.1.9085': attribute type 1 has an invalid length. [ 1813.668786][T32174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9084'. [ 1814.503230][T32044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1814.539036][T32200] netlink: 'syz.1.9091': attribute type 3 has an invalid length. [ 1814.578204][T32044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1814.608972][T32200] netlink: 'syz.1.9091': attribute type 1 has an invalid length. [ 1814.616852][T32187] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9087'. [ 1814.739397][T32044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1814.787493][T32044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1815.240455][T32044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1815.323071][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1815.369940][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1815.393495][T32044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1815.444359][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1815.466913][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1815.490756][T26082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.497948][T26082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1815.564238][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1815.594540][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1815.611564][T21913] Bluetooth: hci3: command 0x0419 tx timeout [ 1815.622008][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1815.673027][T26082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.680274][T26082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1815.749337][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1815.848561][T32232] validate_nla: 1 callbacks suppressed [ 1815.848584][T32232] netlink: 'syz.1.9097': attribute type 2 has an invalid length. [ 1815.885600][T32232] netlink: 'syz.1.9097': attribute type 8 has an invalid length. [ 1815.907608][T32232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9097'. [ 1816.011933][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1816.041084][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1816.101383][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1816.131411][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1816.210203][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1816.354078][T32044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1816.489170][T32044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1816.562626][T32237] netlink: 'syz.2.9098': attribute type 10 has an invalid length. [ 1816.587345][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1816.603174][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1816.642498][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1816.684710][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1816.720820][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1816.754052][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1817.183201][T32254] netlink: 'syz.0.9103': attribute type 3 has an invalid length. [ 1817.441598][T32254] netlink: 'syz.0.9103': attribute type 1 has an invalid length. [ 1817.633670][ T7743] team0: Port device wlan1 removed [ 1818.210602][ T7743] device hsr_slave_0 left promiscuous mode [ 1818.217792][ T7743] bridge0: port 2(dummy0) entered disabled state [ 1818.241094][ T7743] device bridge_slave_0 left promiscuous mode [ 1818.259479][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.339288][T32270] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9108'. [ 1818.402941][ T7743] device veth1_vlan left promiscuous mode [ 1818.420542][ T7743] device veth0_vlan left promiscuous mode [ 1818.485082][T32268] netlink: 'syz.4.9106': attribute type 2 has an invalid length. [ 1818.588775][T32268] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9106'. [ 1819.413962][ T7743] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1821.304248][ T7743] team0 (unregistering): Port device team_slave_1 removed [ 1821.479804][ T7743] team0 (unregistering): Port device team_slave_0 removed [ 1821.632932][T32302] netlink: 'syz.2.9116': attribute type 3 has an invalid length. [ 1821.645331][ T7743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1821.702297][T32302] netlink: 'syz.2.9116': attribute type 1 has an invalid length. [ 1821.811094][ T7743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1822.040720][ T7743] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1822.809616][T32306] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1823.171748][ T7743] team0 (unregistering): Port device bridge0 removed [ 1823.330697][ T7743] bond0 (unregistering): Released all slaves [ 1823.645305][T32270] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9108'. [ 1824.800894][T32297] netlink: 'syz.4.9115': attribute type 10 has an invalid length. [ 1825.099945][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1825.131074][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1825.142182][T32044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1825.210105][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1825.231865][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1825.284973][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1825.304901][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1825.336058][T32044] device veth0_vlan entered promiscuous mode [ 1825.358961][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1825.372891][T26082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1825.415287][T32317] netlink: 'syz.0.9121': attribute type 2 has an invalid length. [ 1825.439328][T32317] netlink: 'syz.0.9121': attribute type 8 has an invalid length. [ 1825.447348][T32317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9121'. [ 1825.509411][T32044] device veth1_vlan entered promiscuous mode [ 1825.622430][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1825.647102][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1825.710391][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1825.741035][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1825.766533][T32044] device veth0_macvtap entered promiscuous mode [ 1825.791847][T32044] device veth1_macvtap entered promiscuous mode [ 1825.854419][T32044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1825.889068][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1825.900968][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1825.919691][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1825.939313][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1825.985312][T32044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.017340][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1826.031592][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1826.054282][T32044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.076503][T32044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.098782][T32044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.107574][T32044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.211193][T32331] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.9123'. [ 1826.545504][T32334] delete_channel: no stack [ 1826.562254][T32334] delete_channel: no stack [ 1826.740177][T32337] netlink: 'syz.4.9125': attribute type 2 has an invalid length. [ 1826.747999][T32337] netlink: 'syz.4.9125': attribute type 1 has an invalid length. [ 1828.495070][T32341] netlink: 'syz.1.9126': attribute type 3 has an invalid length. [ 1828.535590][T32341] netlink: 'syz.1.9126': attribute type 1 has an invalid length. [ 1828.548931][T27537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1828.556812][T27537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1828.584582][T32346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1828.594772][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1828.641851][T26062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1828.650683][T26062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1828.659008][T32346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1828.689529][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1828.797607][T32347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1828.916991][T32358] netlink: 'syz.3.9036': attribute type 1 has an invalid length. [ 1828.934880][T32358] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.9036'. [ 1829.127711][T32367] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.9135'. [ 1829.140719][T32346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1829.261237][T32359] netlink: 'syz.4.9133': attribute type 10 has an invalid length. [ 1829.484668][T32372] netlink: 'syz.0.9137': attribute type 3 has an invalid length. [ 1829.504272][T32372] netlink: 'syz.0.9137': attribute type 8 has an invalid length. [ 1829.548929][T32372] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.9137'. [ 1829.885276][T32382] netlink: 'syz.1.9141': attribute type 3 has an invalid length. [ 1829.939524][T32382] netlink: 'syz.1.9141': attribute type 1 has an invalid length. [ 1830.349650][T21913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1830.362021][T21913] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1830.371273][T21913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1830.381231][T21913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1830.389127][T21913] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1830.396467][T21913] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1830.743750][T32401] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.9148'. [ 1830.854340][T32404] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.9146'. [ 1830.974707][T32386] chnl_net:caif_netlink_parms(): no params data found [ 1831.332443][T32386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.378890][T32386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.407765][T32386] device bridge_slave_0 entered promiscuous mode [ 1831.450547][T32386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.469790][T32386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.488589][T32386] device bridge_slave_1 entered promiscuous mode [ 1831.630071][T32422] FAULT_INJECTION: forcing a failure. [ 1831.630071][T32422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1831.722443][T32422] CPU: 1 PID: 32422 Comm: syz.1.9155 Not tainted syzkaller #0 [ 1831.729999][T32422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1831.740128][T32422] Call Trace: [ 1831.743450][T32422] [ 1831.746391][T32422] dump_stack_lvl+0x188/0x24e [ 1831.751106][T32422] ? show_regs_print_info+0x12/0x12 [ 1831.756365][T32422] ? load_image+0x410/0x410 [ 1831.760964][T32422] ? __lock_acquire+0x7c40/0x7c40 [ 1831.766048][T32422] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1831.772268][T32422] should_fail_ex+0x390/0x4c0 [ 1831.777005][T32422] _copy_to_user+0x2c/0x130 [ 1831.781561][T32422] inet_gifconf+0x334/0x500 [ 1831.786242][T32422] ? inet_make_mask+0x70/0x70 [ 1831.790988][T32422] dev_ifconf+0x202/0x300 [ 1831.795382][T32422] ? sock_diag_rcv_msg+0x5e0/0x5e0 [ 1831.800577][T32422] sock_ioctl+0x286/0x700 [ 1831.804964][T32422] ? sock_poll+0x420/0x420 [ 1831.809451][T32422] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1831.814449][T32422] ? security_file_ioctl+0x7c/0xa0 [ 1831.819631][T32422] ? sock_poll+0x420/0x420 [ 1831.824113][T32422] __se_sys_ioctl+0xfa/0x170 [ 1831.828787][T32422] do_syscall_64+0x4c/0xa0 [ 1831.833256][T32422] ? clear_bhb_loop+0x60/0xb0 [ 1831.837974][T32422] ? clear_bhb_loop+0x60/0xb0 [ 1831.842688][T32422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1831.848619][T32422] RIP: 0033:0x7f498c19de99 [ 1831.853151][T32422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.872799][T32422] RSP: 002b:00007f498d0ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1831.881242][T32422] RAX: ffffffffffffffda RBX: 00007f498c425fa0 RCX: 00007f498c19de99 [ 1831.889262][T32422] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000005 [ 1831.897255][T32422] RBP: 00007f498d0ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.905356][T32422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1831.913357][T32422] R13: 00007f498c426038 R14: 00007f498c425fa0 R15: 00007ffdbc681758 [ 1831.921399][T32422] [ 1832.103237][T32433] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.9158'. [ 1832.117949][T32428] validate_nla: 2 callbacks suppressed [ 1832.117972][T32428] netlink: 'syz.4.9151': attribute type 10 has an invalid length. [ 1832.368591][T32386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1832.389268][T32438] netlink: 'syz.3.9161': attribute type 4 has an invalid length. [ 1832.408222][T32440] netlink: 'syz.1.9160': attribute type 15 has an invalid length. [ 1832.428863][T32440] netlink: 'syz.1.9160': attribute type 7 has an invalid length. [ 1832.449634][T32386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1832.489000][ T4318] Bluetooth: hci4: command 0x0409 tx timeout [ 1832.588281][T32386] team0: Port device team_slave_0 added [ 1832.629843][T32386] team0: Port device team_slave_1 added [ 1832.922239][T26082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.016513][T32451] netlink: 'syz.3.9162': attribute type 2 has an invalid length. [ 1833.037658][T32451] netlink: 'syz.3.9162': attribute type 8 has an invalid length. [ 1833.059373][T32386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1833.066413][T32386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1833.166494][T32386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1833.277014][T26082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.327487][T32386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1833.348185][T32386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1833.458871][T32386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1833.797148][T26082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.941102][T26082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.034082][T32386] device hsr_slave_0 entered promiscuous mode [ 1834.063455][T32386] device hsr_slave_1 entered promiscuous mode [ 1834.089698][T32386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1834.118853][T32386] Cannot create hsr debugfs directory [ 1834.370278][T32471] netlink: 'syz.3.9170': attribute type 2 has an invalid length. [ 1834.386687][T32471] netlink: 'syz.3.9170': attribute type 8 has an invalid length. [ 1834.408568][T32471] __nla_validate_parse: 2 callbacks suppressed [ 1834.408591][T32471] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9170'. [ 1834.504484][T26082] device 0 left promiscuous mode [ 1834.570024][ T4318] Bluetooth: hci4: command 0x041b tx timeout [ 1835.153025][T32491] netlink: 'syz.3.9175': attribute type 29 has an invalid length. [ 1835.255453][T32492] netlink: 'syz.1.9174': attribute type 10 has an invalid length. [ 1835.365215][T32496] device lo entered promiscuous mode [ 1836.033672][T32510] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9177'. [ 1836.256380][T32386] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1836.355543][T32386] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1836.383713][T32386] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1836.442167][T32386] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1836.648802][ T4318] Bluetooth: hci4: command 0x040f tx timeout [ 1836.749513][T32386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.793405][T32535] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9189'. [ 1837.242507][T32537] validate_nla: 4 callbacks suppressed [ 1837.242552][T32537] netlink: 'syz.1.9188': attribute type 29 has an invalid length. [ 1837.576211][T32535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1837.605110][T32535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1837.626629][T32535] bond0 (unregistering): Released all slaves [ 1837.684999][T32545] device lo entered promiscuous mode [ 1837.709599][T32537] netlink: 'syz.1.9188': attribute type 29 has an invalid length. [ 1837.786470][T32386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1837.884715][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1837.903688][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1838.013752][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1838.053138][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1838.091656][T26062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.098992][T26062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.136182][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1838.169419][T32555] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.9193'. [ 1838.192412][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1838.211675][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1838.239035][T32555] net_ratelimit: 17 callbacks suppressed [ 1838.239054][T32555] netlink: zone id is out of range [ 1838.254188][T16546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.261381][T16546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.320425][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1838.369241][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1838.379130][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1838.454035][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1838.477127][T32555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9193'. [ 1838.499870][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1838.574193][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1838.590462][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1838.639754][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1838.648480][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1838.679170][T32555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9193'. [ 1838.711160][T32559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9193'. [ 1838.728764][ T4318] Bluetooth: hci4: command 0x0419 tx timeout [ 1838.756859][T32560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9193'. [ 1838.995767][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1839.009597][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1839.056705][T32386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1839.077210][T32573] netlink: 'syz.3.9195': attribute type 2 has an invalid length. [ 1839.094264][T32573] netlink: 'syz.3.9195': attribute type 8 has an invalid length. [ 1839.118854][T32573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9195'. [ 1839.560271][T32591] netlink: 'syz.4.9196': attribute type 2 has an invalid length. [ 1839.568097][T32591] netlink: 'syz.4.9196': attribute type 8 has an invalid length. [ 1839.863468][T32591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9196'. [ 1842.649353][T32599] netlink: 'syz.0.9209': attribute type 10 has an invalid length. [ 1842.798823][T32605] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9201'. [ 1842.920936][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1842.938437][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1842.968094][T32386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1843.015757][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1843.047282][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1843.182866][T32386] device veth0_vlan entered promiscuous mode [ 1843.271456][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1843.297680][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1843.489527][T32623] FAULT_INJECTION: forcing a failure. [ 1843.489527][T32623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1843.604940][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1843.621653][T32623] CPU: 1 PID: 32623 Comm: syz.4.9205 Not tainted syzkaller #0 [ 1843.622263][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1843.629195][T32623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1843.629211][T32623] Call Trace: [ 1843.629219][T32623] [ 1843.629229][T32623] dump_stack_lvl+0x188/0x24e [ 1843.629269][T32623] ? show_regs_print_info+0x12/0x12 [ 1843.662787][T32623] ? load_image+0x410/0x410 [ 1843.667351][T32623] ? __lock_acquire+0x7c40/0x7c40 [ 1843.672531][T32623] should_fail_ex+0x390/0x4c0 [ 1843.677281][T32623] _copy_from_user+0x2c/0x170 [ 1843.682016][T32623] __sys_bpf+0x2ea/0x780 [ 1843.686417][T32623] ? bpf_link_show_fdinfo+0x380/0x380 [ 1843.691923][T32623] ? lock_chain_count+0x20/0x20 [ 1843.696814][T32623] __x64_sys_bpf+0x78/0x90 [ 1843.701256][T32623] do_syscall_64+0x4c/0xa0 [ 1843.705709][T32623] ? clear_bhb_loop+0x60/0xb0 [ 1843.710419][T32623] ? clear_bhb_loop+0x60/0xb0 [ 1843.715129][T32623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1843.721057][T32623] RIP: 0033:0x7f2fdcd9de99 [ 1843.725499][T32623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.745155][T32623] RSP: 002b:00007f2fddca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1843.753607][T32623] RAX: ffffffffffffffda RBX: 00007f2fdd025fa0 RCX: 00007f2fdcd9de99 [ 1843.761611][T32623] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 1843.769609][T32623] RBP: 00007f2fddca1090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.777622][T32623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.785623][T32623] R13: 00007f2fdd026038 R14: 00007f2fdd025fa0 R15: 00007ffc984d2d38 [ 1843.793636][T32623] [ 1844.209081][T32626] device wg2 entered promiscuous mode [ 1844.264276][T32386] device veth1_vlan entered promiscuous mode [ 1844.386417][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1844.429138][T27537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1844.987819][T32639] can: request_module (can-proto-0) failed. [ 1845.018057][T32386] device veth0_macvtap entered promiscuous mode [ 1845.032814][T32386] device veth1_macvtap entered promiscuous mode [ 1845.080969][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1845.111161][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1845.137895][T32642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9212'. [ 1846.135216][T26082] bridge0: port 3(dummy0) entered disabled state [ 1846.144204][T26082] device bridge_slave_0 left promiscuous mode [ 1846.151107][T26082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1846.202676][T26082] device veth1_macvtap left promiscuous mode [ 1846.228933][T26082] device veth0_macvtap left promiscuous mode [ 1847.384043][T26082] team0 (unregistering): Port device team_slave_1 removed [ 1847.456822][T26082] team0 (unregistering): Port device team_slave_0 removed [ 1847.919575][T26082] team0 (unregistering): Port device bridge0 removed [ 1848.108410][T32651] netlink: 'syz.0.9214': attribute type 10 has an invalid length. [ 1848.132716][T32665] netlink: 'syz.4.9217': attribute type 10 has an invalid length. [ 1848.163238][T32386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1848.189538][T32386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1848.223185][T32386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1848.261252][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1848.300236][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1848.322378][T32386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1848.344396][T32386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1848.370623][T32386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1848.406775][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1848.417570][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1848.435524][T32386] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.445431][T32386] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.459263][T32386] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.468082][T32386] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.754069][T26088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.776493][T26088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.797614][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1848.866849][T26062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.879837][T26062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.887489][T26088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1849.105476][T32682] netlink: 'syz.0.9223': attribute type 2 has an invalid length. [ 1849.174897][T32682] netlink: 'syz.0.9223': attribute type 1 has an invalid length. [ 1849.233341][T32679] device wg2 entered promiscuous mode [ 1849.382505][T32690] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9139'. [ 1849.472757][T32690] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1849.961804][T32703] netlink: 'syz.3.9227': attribute type 10 has an invalid length. [ 1849.979366][T32703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9227'. [ 1850.020070][T32703] device dummy0 entered promiscuous mode [ 1850.079840][T32703] bridge0: port 3(dummy0) entered blocking state [ 1850.119606][T32703] bridge0: port 3(dummy0) entered disabled state [ 1850.138026][T32709] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.9228'. [ 1850.195988][T32703] bridge0: port 3(dummy0) entered blocking state [ 1850.203101][T32703] bridge0: port 3(dummy0) entered forwarding state [ 1850.256682][T32704] netlink: 'syz.1.9225': attribute type 21 has an invalid length. [ 1850.275858][T32704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9225'. [ 1850.286070][T32704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9225'. [ 1850.520309][T32715] netlink: 'syz.2.9230': attribute type 10 has an invalid length. [ 1850.622636][T32715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.654791][T32715] device bridge_slave_1 left promiscuous mode [ 1850.674946][T32715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.722404][T32715] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1850.847575][T32718] netlink: 'syz.3.9231': attribute type 10 has an invalid length. [ 1850.897567][T32718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.940703][T32718] device bridge_slave_1 left promiscuous mode [ 1850.975596][T32718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.823674][T32745] device wg2 entered promiscuous mode [ 1851.872624][T32750] netlink: 'syz.3.9239': attribute type 10 has an invalid length. [ 1851.908985][T32750] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1852.068186][T32760] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.9241'. [ 1852.592149][ T305] netlink: 'syz.0.9248': attribute type 10 has an invalid length. [ 1852.728606][ T311] FAULT_INJECTION: forcing a failure. [ 1852.728606][ T311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.767594][ T311] CPU: 1 PID: 311 Comm: syz.4.9250 Not tainted syzkaller #0 [ 1852.774974][ T311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1852.785086][ T311] Call Trace: [ 1852.788412][ T311] [ 1852.791386][ T311] dump_stack_lvl+0x188/0x24e [ 1852.796142][ T311] ? show_regs_print_info+0x12/0x12 [ 1852.801400][ T311] ? load_image+0x410/0x410 [ 1852.805962][ T311] ? __lock_acquire+0x7c40/0x7c40 [ 1852.811054][ T311] should_fail_ex+0x390/0x4c0 [ 1852.815793][ T311] _copy_to_user+0x2c/0x130 [ 1852.820360][ T311] inet_gifconf+0x334/0x500 [ 1852.824922][ T311] ? inet_make_mask+0x70/0x70 [ 1852.829658][ T311] ? __might_fault+0xa6/0x120 [ 1852.834379][ T311] ? __might_fault+0xc2/0x120 [ 1852.839103][ T311] ? __might_fault+0xa6/0x120 [ 1852.843859][ T311] dev_ifconf+0x202/0x300 [ 1852.848315][ T311] ? sock_diag_rcv_msg+0x5e0/0x5e0 [ 1852.853503][ T311] ? sock_ioctl+0x161/0x700 [ 1852.858069][ T311] sock_ioctl+0x286/0x700 [ 1852.862464][ T311] ? sock_poll+0x420/0x420 [ 1852.866954][ T311] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1852.871943][ T311] ? security_file_ioctl+0x7c/0xa0 [ 1852.877105][ T311] ? sock_poll+0x420/0x420 [ 1852.881585][ T311] __se_sys_ioctl+0xfa/0x170 [ 1852.886233][ T311] do_syscall_64+0x4c/0xa0 [ 1852.890720][ T311] ? clear_bhb_loop+0x60/0xb0 [ 1852.895464][ T311] ? clear_bhb_loop+0x60/0xb0 [ 1852.900200][ T311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1852.906150][ T311] RIP: 0033:0x7f2fdcd9de99 [ 1852.910617][ T311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.930286][ T311] RSP: 002b:00007f2fddca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1852.938761][ T311] RAX: ffffffffffffffda RBX: 00007f2fdd025fa0 RCX: 00007f2fdcd9de99 [ 1852.946791][ T311] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000005 [ 1852.954823][ T311] RBP: 00007f2fddca1090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.962873][ T311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.970894][ T311] R13: 00007f2fdd026038 R14: 00007f2fdd025fa0 R15: 00007ffc984d2d38 [ 1852.978928][ T311] [ 1853.212233][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.218768][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.079890][ T327] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.9256'. [ 1854.167007][ T325] netlink: 'syz.4.9255': attribute type 4 has an invalid length. [ 1854.756374][ T329] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9258'. [ 1856.455019][ T350] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.9263'. [ 1856.875718][ T363] netlink: 'syz.0.9268': attribute type 29 has an invalid length. [ 1856.895350][ T363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9268'. [ 1856.944736][ T363] netlink: 'syz.0.9268': attribute type 29 has an invalid length. [ 1856.965876][ T363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9268'. [ 1857.052247][ T370] netlink: 'syz.4.9269': attribute type 10 has an invalid length. [ 1857.231953][ T373] netlink: 'syz.0.9272': attribute type 10 has an invalid length. [ 1857.294052][ T373] bridge0: port 2(netdevsim0) entered blocking state [ 1857.327595][ T373] bridge0: port 2(netdevsim0) entered disabled state [ 1857.343511][ T373] device netdevsim0 entered promiscuous mode [ 1857.353479][ T377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1857.376691][ T377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1857.393418][ T377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1857.401389][ T377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1858.103172][ T391] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.9278'. [ 1858.520042][ T397] netlink: 'syz.4.9280': attribute type 4 has an invalid length. [ 1859.049545][ T415] netlink: 'syz.2.9285': attribute type 2 has an invalid length. [ 1859.060722][ T415] netlink: 'syz.2.9285': attribute type 8 has an invalid length. [ 1859.070341][ T415] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1859.102102][ T421] netlink: 'syz.3.9289': attribute type 4 has an invalid length. [ 1859.263580][ T426] netlink: 'syz.3.9291': attribute type 10 has an invalid length. [ 1859.277691][ T426] team0: Device wlan1 is up. Set it down before adding it as a team port [ 1859.316801][ T427] netlink: 'syz.0.9290': attribute type 10 has an invalid length. [ 1859.325317][ T431] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9293'. [ 1859.375049][ T430] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.9292'. [ 1859.925623][ T431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1860.074104][ T451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9299'. [ 1860.182982][ T431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1860.230553][ T431] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1860.243739][ T431] bond0 (unregistering): Released all slaves [ 1860.295442][ T451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9299'. [ 1860.409030][T21913] Bluetooth: hci5: command 0x0406 tx timeout [ 1860.613979][ T454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9299'. [ 1860.686535][ T461] netlink: 'syz.0.9310': attribute type 10 has an invalid length. [ 1860.982385][ T470] netlink: 'syz.2.9304': attribute type 2 has an invalid length. [ 1861.009933][ T470] netlink: 'syz.2.9304': attribute type 8 has an invalid length. [ 1861.162979][ T475] netlink: 'syz.1.9306': attribute type 3 has an invalid length. [ 1861.514302][ T481] __nla_validate_parse: 4 callbacks suppressed [ 1861.514324][ T481] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.9320'. [ 1861.897361][ T485] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.9312'. [ 1862.980453][ T511] netlink: 'syz.2.9318': attribute type 2 has an invalid length. [ 1862.991046][ T511] netlink: 'syz.2.9318': attribute type 8 has an invalid length. [ 1862.999565][ T511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9318'. [ 1863.233450][ T522] netlink: 'syz.0.9322': attribute type 10 has an invalid length. [ 1863.303492][ T526] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.9325'. [ 1863.587614][ T538] device syzkaller0 entered promiscuous mode [ 1864.242941][ T549] netlink: 'syz.0.9334': attribute type 2 has an invalid length. [ 1864.259678][ T549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9334'. [ 1865.145798][ T571] validate_nla: 1 callbacks suppressed [ 1865.145817][ T571] netlink: 'syz.2.9342': attribute type 4 has an invalid length. [ 1865.349004][ T574] netlink: 'syz.4.9344': attribute type 10 has an invalid length. [ 1865.701941][ T588] netlink: 'syz.1.9350': attribute type 2 has an invalid length. [ 1865.722617][ T588] netlink: 'syz.1.9350': attribute type 8 has an invalid length. [ 1865.735296][ T588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9350'. [ 1865.998652][ T599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1866.046998][ T599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1866.142390][ T599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1866.160101][ T599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1866.176642][ T608] netlink: 'syz.1.9354': attribute type 2 has an invalid length. [ 1866.307998][ T608] netlink: 'syz.1.9354': attribute type 1 has an invalid length. [ 1866.955709][ T614] can: request_module (can-proto-0) failed. [ 1867.019989][ T617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9357'. [ 1867.414732][ T627] netlink: 'syz.2.9362': attribute type 21 has an invalid length. [ 1867.448772][ T627] netlink: 'syz.2.9362': attribute type 22 has an invalid length. [ 1867.469122][ T627] netlink: 'syz.2.9362': attribute type 13 has an invalid length. [ 1867.489687][ T627] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.9362'. [ 1867.525418][ T631] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9362'. [ 1867.572408][ T633] netlink: 'syz.4.9364': attribute type 2 has an invalid length. [ 1867.584697][ T633] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9364'. [ 1868.003923][ T4318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1868.013448][ T4318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1868.021959][T30823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1868.049038][T30823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1868.058037][T30823] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1868.065648][T30823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1870.233351][ T639] team0: Device wg1 is of different type [ 1870.328858][T30823] Bluetooth: hci2: command 0x0409 tx timeout [ 1870.344350][ T650] validate_nla: 2 callbacks suppressed [ 1870.344372][ T650] netlink: 'syz.4.9368': attribute type 10 has an invalid length. [ 1870.632379][ T664] netlink: 'syz.0.9372': attribute type 10 has an invalid length. [ 1870.647544][ T664] device hsr0 entered promiscuous mode [ 1870.677425][ T664] netlink: 'syz.0.9372': attribute type 10 has an invalid length. [ 1870.767019][ T664] team0: Device wg1 is of different type [ 1871.051099][ T674] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9375'. [ 1871.264712][ T636] chnl_net:caif_netlink_parms(): no params data found [ 1871.498854][ T683] netlink: 'syz.0.9379': attribute type 4 has an invalid length. [ 1871.506929][ T683] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9379'. [ 1871.754846][ T681] netlink: 'syz.3.9378': attribute type 2 has an invalid length. [ 1871.780167][ T681] netlink: 'syz.3.9378': attribute type 8 has an invalid length. [ 1871.790836][ T681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9378'. [ 1871.835204][ T636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.870259][ T636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.911418][ T636] device bridge_slave_0 entered promiscuous mode [ 1871.950912][ T636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.959553][ T636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.988924][ T636] device bridge_slave_1 entered promiscuous mode [ 1872.064215][ T636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1872.096742][ T636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1872.129716][ T699] netlink: 'syz.3.9384': attribute type 4 has an invalid length. [ 1872.137554][ T699] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9384'. [ 1872.194959][ T702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1872.235799][T27535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.282383][ T702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1872.298539][ T636] team0: Port device team_slave_0 added [ 1872.342104][ T702] netlink: 'syz.4.9387': attribute type 7 has an invalid length. [ 1872.360328][ T702] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1872.379592][T27535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.397668][ T706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1872.409688][T30823] Bluetooth: hci2: command 0x041b tx timeout [ 1872.411810][ T636] team0: Port device team_slave_1 added [ 1872.426288][ T702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1872.490227][T27535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.537017][ T636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1872.588788][ T636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.735605][ T636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1872.768359][ T636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1872.783342][ T636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.829818][ T636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1872.856380][T27535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.354730][ T726] netlink: 'syz.4.9392': attribute type 2 has an invalid length. [ 1873.451901][ T636] device hsr_slave_0 entered promiscuous mode [ 1873.469952][ T636] device hsr_slave_1 entered promiscuous mode [ 1873.477007][ T636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1873.486503][ T636] Cannot create hsr debugfs directory [ 1873.508815][ T726] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9392'. [ 1873.524503][ T728] netlink: 'syz.3.9393': attribute type 10 has an invalid length. [ 1873.552240][ T728] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9393'. [ 1873.963220][ T735] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9395'. [ 1874.058088][ T739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9397'. [ 1874.498148][T21913] Bluetooth: hci2: command 0x040f tx timeout [ 1875.121558][ T778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.164106][ T778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1875.171601][ T778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1875.233793][ T778] team0: Port device bridge0 added [ 1875.453336][ T636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1875.539660][ T636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1875.568239][ T789] validate_nla: 8 callbacks suppressed [ 1875.568260][ T789] netlink: 'syz.2.9410': attribute type 4 has an invalid length. [ 1875.596504][ T636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1875.683943][ T636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1875.729295][ T795] netlink: 'syz.3.9411': attribute type 2 has an invalid length. [ 1875.769676][ T795] netlink: 'syz.3.9411': attribute type 8 has an invalid length. [ 1876.015057][ T636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1876.087521][ T636] 8021q: adding VLAN 0 to HW filter on device team0 [ 1876.112084][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1876.129920][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1876.170996][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1876.209782][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1876.243981][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.251221][ T7743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1876.271694][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1876.289647][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1876.337917][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.345165][ T7743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1876.379153][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1876.406127][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1876.425673][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1876.509752][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1876.546347][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1876.570131][T30823] Bluetooth: hci2: command 0x0419 tx timeout [ 1876.790731][ T830] netlink: 'syz.0.9424': attribute type 4 has an invalid length. [ 1876.864312][ T826] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1876.870159][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1876.900249][ T826] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1876.911669][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1876.928828][ T826] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1876.947338][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1876.997812][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1877.043647][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1877.094658][ T636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1877.121693][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1877.191916][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1877.249662][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1877.353587][ T839] netlink: 'syz.4.9428': attribute type 10 has an invalid length. [ 1877.374053][ T839] team0: Device wlan1 is up. Set it down before adding it as a team port [ 1877.420187][ T840] netlink: 'syz.0.9427': attribute type 2 has an invalid length. [ 1877.474607][ T840] netlink: 'syz.0.9427': attribute type 8 has an invalid length. [ 1877.518858][ T840] __nla_validate_parse: 6 callbacks suppressed [ 1877.518879][ T840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9427'. [ 1879.108777][T26088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1879.116715][T26088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1879.318509][ T636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1879.507444][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1879.518338][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1879.599585][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1879.617810][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1879.633940][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1879.678904][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1879.716743][ T636] device veth0_vlan entered promiscuous mode [ 1879.765337][ T636] device veth1_vlan entered promiscuous mode [ 1879.887214][ T882] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9438'. [ 1880.008230][ T636] device veth0_macvtap entered promiscuous mode [ 1880.041416][T26088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1880.071506][T26088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1880.091771][T26088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1880.136116][T26088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1880.166182][T26088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1880.190774][ T636] device veth1_macvtap entered promiscuous mode [ 1880.251009][ T893] netlink: 'syz.2.9440': attribute type 2 has an invalid length. [ 1880.290740][ T893] netlink: 'syz.2.9440': attribute type 8 has an invalid length. [ 1880.321284][ T893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9440'. [ 1880.388129][ T636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1880.420612][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1880.450658][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1880.544440][ T636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1880.572391][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1880.582882][T26062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1880.721844][T27535] team0: Port device wlan1 removed [ 1880.750419][ T636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.760148][ T636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.769667][ T636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.778639][ T636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.801077][ T915] netlink: 'syz.2.9445': attribute type 5 has an invalid length. [ 1881.037729][T27535] bridge0: port 3(dummy0) entered disabled state [ 1881.051107][T27535] device bridge_slave_0 left promiscuous mode [ 1881.057545][T27535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.571598][T27535] team0 (unregistering): Port device team_slave_1 removed [ 1881.671169][T27535] team0 (unregistering): Port device team_slave_0 removed [ 1882.053713][T27535] team0 (unregistering): Port device bridge0 removed [ 1882.186038][ T946] netlink: 'syz.0.9454': attribute type 2 has an invalid length. [ 1882.209184][ T946] netlink: 'syz.0.9454': attribute type 8 has an invalid length. [ 1882.226979][ T946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9454'. [ 1882.331901][T16546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1882.349823][T16546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1882.412268][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1882.503404][T16546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1882.521718][T16546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1882.572718][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1883.388515][ T963] netlink: 'syz.1.9361': attribute type 10 has an invalid length. [ 1883.426884][ T963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9361'. [ 1883.450841][ T963] device dummy0 entered promiscuous mode [ 1883.472589][ T963] bridge0: port 3(dummy0) entered blocking state [ 1883.480543][ T963] bridge0: port 3(dummy0) entered disabled state [ 1883.546721][ T963] bridge0: port 3(dummy0) entered blocking state [ 1883.553765][ T963] bridge0: port 3(dummy0) entered forwarding state [ 1883.582333][ T968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1883.882114][ T980] netlink: 'syz.1.9466': attribute type 2 has an invalid length. [ 1883.909826][ T980] netlink: 'syz.1.9466': attribute type 8 has an invalid length. [ 1883.954399][ T980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9466'. [ 1884.265020][ T989] netlink: 'syz.0.9469': attribute type 3 has an invalid length. [ 1884.281873][ T997] netlink: 'syz.2.9471': attribute type 4 has an invalid length. [ 1884.290147][ T989] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9469'. [ 1884.547040][ T988] netlink: 'syz.0.9469': attribute type 3 has an invalid length. [ 1884.578541][ T988] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9469'. [ 1885.735630][ T1027] device syzkaller0 entered promiscuous mode [ 1891.129080][T21913] Bluetooth: hci1: command 0x0406 tx timeout [ 1893.224896][ T1044] netlink: 'syz.0.9482': attribute type 2 has an invalid length. [ 1893.232823][ T1044] netlink: 'syz.0.9482': attribute type 8 has an invalid length. [ 1893.241649][ T1044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9482'. [ 1893.251827][ T1058] netlink: 'syz.3.9486': attribute type 10 has an invalid length. [ 1893.268771][ T1058] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9486'. [ 1897.031064][ T1096] netlink: 'syz.4.9499': attribute type 10 has an invalid length. [ 1897.224830][ T1097] netlink: 'syz.0.9501': attribute type 2 has an invalid length. [ 1897.439639][ T1097] netlink: 'syz.0.9501': attribute type 8 has an invalid length. [ 1897.614633][ T1097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9501'. [ 1898.990861][ T1142] netlink: 'syz.3.9515': attribute type 2 has an invalid length. [ 1899.021021][ T1142] netlink: 'syz.3.9515': attribute type 8 has an invalid length. [ 1899.040472][ T1142] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9515'. [ 1899.445687][ T1163] netlink: 'syz.0.9519': attribute type 10 has an invalid length. [ 1899.538590][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1899.550759][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1899.574716][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1899.589553][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1900.581727][ T1185] netlink: 'syz.0.9530': attribute type 10 has an invalid length. [ 1900.794602][ T1190] netlink: 'syz.1.9532': attribute type 10 has an invalid length. [ 1900.803839][ T1190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9532'. [ 1901.803542][ T1203] netlink: 'syz.2.9533': attribute type 2 has an invalid length. [ 1901.824851][ T1203] netlink: 'syz.2.9533': attribute type 8 has an invalid length. [ 1901.881662][ T1203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9533'. [ 1902.693927][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.773245][ T1229] device bridge_slave_0 left promiscuous mode [ 1902.781195][ T1229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.895420][ T1229] team0: Port device bridge0 removed [ 1902.973767][ T1232] netlink: 'syz.1.9542': attribute type 10 has an invalid length. [ 1903.019211][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.046889][ T1232] device bridge_slave_1 left promiscuous mode [ 1903.068974][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.116861][ T1232] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1903.445408][ T1253] netlink: 'syz.1.9553': attribute type 10 has an invalid length. [ 1903.522789][ T1253] team0: Port device wlan1 added [ 1903.548527][ T1258] netlink: 'syz.4.9554': attribute type 2 has an invalid length. [ 1903.565193][ T1258] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9554'. [ 1904.378062][ T1291] validate_nla: 1 callbacks suppressed [ 1904.378085][ T1291] netlink: 'syz.4.9559': attribute type 29 has an invalid length. [ 1904.464191][ T1291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9559'. [ 1904.502661][ T1291] netlink: 'syz.4.9559': attribute type 29 has an invalid length. [ 1904.549623][ T1291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9559'. [ 1905.037334][ T1304] can: request_module (can-proto-0) failed. [ 1905.107862][ T1311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9566'. [ 1905.178373][ T1316] netlink: 'syz.3.9569': attribute type 2 has an invalid length. [ 1905.191530][ T1316] netlink: 'syz.3.9569': attribute type 8 has an invalid length. [ 1905.200128][ T1316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9569'. [ 1907.431667][ T1346] netlink: 'syz.4.9579': attribute type 10 has an invalid length. [ 1907.458920][ T1346] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9579'. [ 1908.360086][ T1373] netlink: 'syz.1.9586': attribute type 2 has an invalid length. [ 1908.397368][ T1373] netlink: 'syz.1.9586': attribute type 8 has an invalid length. [ 1908.431455][ T1373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9586'. [ 1908.790684][ T1380] netlink: 190760 bytes leftover after parsing attributes in process `syz.0.9587'. [ 1909.071638][ T1380] device syzkaller0 entered promiscuous mode [ 1909.327686][ T1392] netlink: 'syz.4.9590': attribute type 21 has an invalid length. [ 1909.353932][ T1392] netlink: 'syz.4.9590': attribute type 11 has an invalid length. [ 1914.653408][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.659842][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.642719][T21913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1921.652061][T21913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1921.660583][T21913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1921.670648][T21913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1921.678547][T21913] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1921.686418][T21913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1923.723649][T21913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1923.733514][T21913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1923.742974][T21913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1923.751547][T21913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1923.760965][T21913] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1923.768617][T21913] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1923.778043][T21913] Bluetooth: hci0: command 0x0409 tx timeout [ 1925.296506][ T4318] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1925.306644][ T4318] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1925.315425][ T4318] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1925.324725][ T4318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1925.333766][ T4318] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1925.341848][ T4318] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1925.667002][T30823] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1925.676661][T30823] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1925.686269][T30823] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1925.701946][T30823] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1925.710858][T30823] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1925.718380][T30823] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1925.759929][ T4318] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1925.771386][ T4318] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1925.780452][ T4318] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1925.789269][ T4318] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1925.798266][ T4318] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1925.814386][ T4318] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1925.848881][ T1412] Bluetooth: hci6: command 0x0409 tx timeout [ 1925.855449][ T1412] Bluetooth: hci0: command 0x041b tx timeout [ 1927.368888][ T1412] Bluetooth: hci7: command 0x0409 tx timeout [ 1927.768863][ T1412] Bluetooth: hci9: command 0x0409 tx timeout [ 1927.848868][ T1412] Bluetooth: hci8: command 0x0409 tx timeout [ 1927.928852][ T1412] Bluetooth: hci0: command 0x040f tx timeout [ 1927.934949][ T1412] Bluetooth: hci6: command 0x041b tx timeout [ 1929.448896][ T1412] Bluetooth: hci7: command 0x041b tx timeout [ 1929.848809][ T1412] Bluetooth: hci9: command 0x041b tx timeout [ 1929.928832][ T1412] Bluetooth: hci8: command 0x041b tx timeout [ 1930.009185][ T1412] Bluetooth: hci6: command 0x040f tx timeout [ 1930.015301][ T1412] Bluetooth: hci0: command 0x0419 tx timeout [ 1931.528894][ T1412] Bluetooth: hci7: command 0x040f tx timeout [ 1931.928866][ T1412] Bluetooth: hci9: command 0x040f tx timeout [ 1932.008808][ T1412] Bluetooth: hci8: command 0x040f tx timeout [ 1932.088865][ T1412] Bluetooth: hci6: command 0x0419 tx timeout [ 1932.094970][ T1412] Bluetooth: hci3: command 0x0406 tx timeout [ 1933.608865][ T1412] Bluetooth: hci7: command 0x0419 tx timeout [ 1934.008788][ T1412] Bluetooth: hci9: command 0x0419 tx timeout [ 1934.088821][ T1412] Bluetooth: hci8: command 0x0419 tx timeout [ 1934.488853][T31084] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2661 jiffies s: 141281 root: 0x1/. [ 1934.506542][T31084] rcu: blocking rcu_node structures (internal RCU debug): [ 1934.516727][T31084] Sending NMI from CPU 1 to CPUs 0: [ 1934.522116][ C0] NMI backtrace for cpu 0 [ 1934.522127][ C0] CPU: 0 PID: 1331 Comm: syz.3.9576 Not tainted syzkaller #0 [ 1934.522144][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1934.522155][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x13/0x80 [ 1934.522184][ C0] Code: 11 08 03 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 48 8b 04 24 65 48 8b 15 34 4a 80 7e 65 8b 0d 35 4a 80 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 [ 1934.522198][ C0] RSP: 0018:ffffc900000075d8 EFLAGS: 00000046 [ 1934.522214][ C0] RAX: ffffffff8139eef9 RBX: 00000000b8e3bbf0 RCX: 0000000000000104 [ 1934.522227][ C0] RDX: ffff8880607b8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1934.522238][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff2162048 [ 1934.522250][ C0] R10: dffffc0000000000 R11: fffffbfff2162049 R12: dffffc0000000000 [ 1934.522263][ C0] R13: dffffc0000000001 R14: ffffffff8139eec8 R15: ffff88813fff92e0 [ 1934.522276][ C0] FS: 00007f6743a296c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1934.522292][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1934.522304][ C0] CR2: 00007f199e9afff8 CR3: 00000000762a7000 CR4: 00000000003506f0 [ 1934.522316][ C0] Call Trace: [ 1934.522323][ C0] [ 1934.522328][ C0] __virt_addr_valid+0x1b9/0x540 [ 1934.522357][ C0] kasan_addr_to_slab+0x9/0xc0 [ 1934.522381][ C0] __kasan_record_aux_stack+0xf/0xc0 [ 1934.522397][ C0] irq_work_queue_on+0x10f/0x260 [ 1934.522425][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 1934.522448][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1934.522466][ C0] ? __cant_sleep+0x220/0x220 [ 1934.522487][ C0] __rcu_read_unlock+0x78/0xd0 [ 1934.522502][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1934.522527][ C0] trace_call_bpf+0x5bb/0x6b0 [ 1934.522550][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1934.522577][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1934.522604][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1934.522619][ C0] ? sched_clock_cpu+0x6e/0x260 [ 1934.522708][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1934.522738][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 1934.522764][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1934.522788][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1934.522814][ C0] ? __irq_exit_rcu+0x147/0x230 [ 1934.522830][ C0] ? irq_exit_rcu+0x20/0x20 [ 1934.522848][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1934.522870][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 1934.522895][ C0] trace_hardirqs_on+0x24/0x40 [ 1934.522916][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1934.522939][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1934.522957][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 52 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1934.522971][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 1934.522984][ C0] RAX: 4794a082e79f6f00 RBX: 1ffff92000000f64 RCX: 4794a082e79f6f00 [ 1934.522997][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1934.523011][ C0] RBP: ffffc90000007bd0 R08: ffffffff90b10257 R09: 1ffffffff216204a [ 1934.523024][ C0] R10: dffffc0000000000 R11: fffffbfff216204b R12: 0000000000000246 [ 1934.523036][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 1934.523059][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1934.523090][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1934.523114][ C0] __rcu_read_unlock+0x78/0xd0 [ 1934.523129][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1934.523205][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1934.523233][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 1934.523260][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1934.523287][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1934.523311][ C0] ? hw_scan_work+0xf00/0xf00 [ 1934.523339][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1934.523363][ C0] hrtimer_run_softirq+0x173/0x290 [ 1934.523385][ C0] handle_softirqs+0x291/0x910 [ 1934.523404][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1934.523422][ C0] ? do_softirq+0x210/0x210 [ 1934.523437][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1934.523458][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1934.523476][ C0] __irq_exit_rcu+0x13b/0x230 [ 1934.523493][ C0] ? irq_exit_rcu+0x20/0x20 [ 1934.523514][ C0] irq_exit_rcu+0x5/0x20 [ 1934.523529][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1934.523548][ C0] [ 1934.523553][ C0] [ 1934.523559][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1934.523581][ C0] RIP: 0010:strlen+0x2a/0x60 [ 1934.523608][ C0] Code: 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 <84> c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 75 de eb 19 89 [ 1934.523622][ C0] RSP: 0018:ffffc90003857958 EFLAGS: 00000a07 [ 1934.523636][ C0] RAX: 0000000000000000 RBX: ffffffff8a8d2f24 RCX: dffffc0000000000 [ 1934.523648][ C0] RDX: ffffffff81d9a4a4 RSI: ffffffff8cb2db60 RDI: ffffffff8a8d2f20 [ 1934.523661][ C0] RBP: ffffc90003857a70 R08: ffffffff8e2121af R09: 1ffffffff1c42435 [ 1934.523684][ C0] R10: dffffc0000000000 R11: fffffbfff1c42436 R12: 1ffff9200070af5c [ 1934.523697][ C0] R13: 1ffff9200070af38 R14: dffffc0000000000 R15: 0000000000000003 [ 1934.523714][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 1934.523739][ C0] perf_trace_lock+0xd1/0x390 [ 1934.523762][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 1934.523781][ C0] ? mark_lock+0x94/0x320 [ 1934.523811][ C0] lock_release+0x8ad/0x920 [ 1934.523836][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 1934.523857][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1934.523881][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1934.523904][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 1934.523925][ C0] ? percpu_ref_tryget+0x15/0x180 [ 1934.523976][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 1934.523996][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 1934.524017][ C0] get_mem_cgroup_from_mm+0x1ae/0x290 [ 1934.524039][ C0] lru_gen_add_mm+0x1e/0x440 [ 1934.524085][ C0] ? pid_vnr+0x113/0x1d0 [ 1934.524109][ C0] kernel_clone+0x4b4/0x900 [ 1934.524130][ C0] ? create_io_thread+0x170/0x170 [ 1934.524153][ C0] ? do_futex+0x2e2/0x320 [ 1934.524172][ C0] __x64_sys_clone+0x1a7/0x220 [ 1934.524192][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 1934.524217][ C0] ? lock_chain_count+0x20/0x20 [ 1934.524243][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1934.524261][ C0] do_syscall_64+0x4c/0xa0 [ 1934.524283][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1934.524305][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1934.524328][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1934.524350][ C0] RIP: 0033:0x7f6742b9de99 [ 1934.524364][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1934.524378][ C0] RSP: 002b:00007f6743a28fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1934.524394][ C0] RAX: ffffffffffffffda RBX: 00007f6742e25fa0 RCX: 00007f6742b9de99 [ 1934.524406][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000005000000 [ 1934.524416][ C0] RBP: 00007f6742c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1934.524427][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1934.524437][ C0] R13: 00007f6742e26038 R14: 00007f6742e25fa0 R15: 00007ffc6500b338 [ 1934.524457][ C0]