last executing test programs: 2.316521513s ago: executing program 2 (id=3158): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000001200)=""/4050, 0xfd2}, {&(0x7f0000000880)=""/267, 0x10b}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f00000010c0)=""/257, 0x101}, {&(0x7f0000000bc0)=""/42, 0x2a}, {&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000e80)=""/232, 0xe8}, {&(0x7f0000000b00)=""/170, 0xaa}], 0xd}, 0xffffffffffffffc3) 2.204076501s ago: executing program 3 (id=3159): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @volatile, @volatile]}}, 0x0, 0x4e}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.980141999s ago: executing program 2 (id=3162): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)="2347344864005eae50ce8249fd083b1513ef3a2bb9758a5b45f2923f39b9d37916bb9179d2f03633601b3a07e6a441159136df5058f1a938ac215de13b910611ca5537ff2f2c377f10dfdbf1c73669cd054848b24abaf62b8501b87cb49ed221c3c038a02534d239178be19f1a276bc97c1254061291b8b394e57466f6c2f5c608feca13ac667684633c0c66a804129c53614fd0a4f562bad9429c37c3953e0d5bee9cc7a0c9c4b2e55ab47f267eebac690d7e5579092dc5afd672483f1f4d884d06f01b499e0771fc7351aff1402e962b", 0xd1}], 0x1, &(0x7f00000007c0)=[{0x38, 0x2b, 0x200, "7744db34afacda565fb9dc9616396ea6145f7122bf7711c7043c93e5ac5d70d52aed7836fe"}], 0x38}, 0x8004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) sendmsg$kcm(r0, &(0x7f00000023c0)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x6, 0x4}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000740)="c6bb4f33af42458ea61fb59c2a9c7329a075a126a4d94460c39f6dd626012426c2c1fbaf80a0baa04210278e5cf7a92cc2b328959d1e3ad7a8c90b0a6cbba9644bb123d837d6569bbc119ffe9df2aa37672690eb049d8a7fd4df3ff28d175503ce1b6ee10295b2885bb04876b5e38d8d809163f1c4a2df", 0x77}], 0x1}, 0x4000001) (fail_nth: 3) 1.888194094s ago: executing program 3 (id=3163): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, @jmp={0x5, 0x0, 0x3, 0x6, 0x9, 0xfffffffffffffff8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x5, 0x35, &(0x7f0000000480)=""/53, 0x0, 0x317d24f1ce1a3008, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xa, 0x4, 0xfffffff4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x4, 0x3, 0xb, 0x5}], 0x10, 0x363}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000003340)={&(0x7f0000000c40)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000000e00)="90", 0x1}], 0x1}, 0x240008c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000440)="a2", 0x1}], 0x1}, 0x20000000) setsockopt$sock_attach_bpf(r2, 0x84, 0x23, &(0x7f0000000000)=r4, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map=r4, 0xffffffffffffffff, 0x2c, 0x201b, r1, @value=r4}, 0x20) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, 0x1}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x45, 0xfffff028}, {0x6}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x823, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x800000000, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x6000000000000000}, 0x50) 1.870628457s ago: executing program 1 (id=3165): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf00}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0x8804) 1.326076208s ago: executing program 0 (id=3166): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.31711768s ago: executing program 2 (id=3167): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0xa}, 0x108c28, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x69f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 1.199977829s ago: executing program 1 (id=3168): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (fail_nth: 5) 1.113864144s ago: executing program 0 (id=3169): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000110000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 798.088517ms ago: executing program 2 (id=3170): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0xf}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180040010000400", 0x33fe0}], 0x1}, 0x0) close(r0) 722.038789ms ago: executing program 1 (id=3171): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x14}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 649.955731ms ago: executing program 0 (id=3172): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) 543.198609ms ago: executing program 0 (id=3173): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x2) recvmsg$kcm(r0, 0x0, 0x10002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r1, r1, 0x2f, 0x1c, 0x4}, 0x20) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4", 0x1}], 0x1}, 0x4000) recvmsg$kcm(r0, &(0x7f0000000940)={&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/129, 0x81}, {0x0}], 0x2, &(0x7f0000000880)=""/152, 0x98}, 0x2) 542.979349ms ago: executing program 1 (id=3174): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x2b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="5650033a0c9be44e18100000", @ANYRES32, @ANYBLOB="00ffffff7f000000000000000000000445"], 0x0}, 0x90) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004d40)={&(0x7f0000000280)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x28}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002a00)="a533ed6a912a4c71e23c5be2819375c9a18a32e975aad5fcee39dbfb04a416690f5961b2e8e81bd5fbe2cb706b7df4b5608cbadffcfb0782e7c6c195ed974173f3be995b9d23ceee66df8a8f76d381cab02b552bb04855d8ac45989418cb155b37d0f8054de9b7ad6eefb3855b49c41a76bd6e2745c705970a0792d33da57b2565b0bebd313c06653feeb3ac10027554da5db1a34f1255e41fa22636249c49266c3344ca3548415d835f0c74bf8fadd1d3393feb1d1a8740b9b20d4b0302a18fbb7e67fb7bf4945a210db986a462d2cd134191db036c336c187421698809e00b7e38a735dec827aff0b204ebb7cb2920bd5a2594fc219b83bc671378dcdf77f50dc34f6511efc9243b2e6417352afc044a8240cb29fc17b8993d35288c088f07bd2275d33c69683f2ef513b87e8a71a5e97052326e5569852d7dcdd4ccb52275662f2376a50586c0d4636520726231d4187ed63ce5000a07dedc5423e22bb2135254964e4bc894c807ff852cd60f8c64432fe06e335fde3b5807f1b7c24f87ed3bc71dbe0cac543eae24759c577be71e8298c95389433e16f32ff9b095ce9c09c580bbe147f54fab061fce811aff87e36d1edf7f688fae7a7c937424dc3312697ec5705e9f37edb575c8f6018b95669e2fb591eeee7efe19ffbfcce267f5b8b9a83a58dfc4eb42c17dd14d20744d7a98129a1fc75dc69c38755f99d1b3428bfe0b7d9e6284bd56c2a4c673d4a7b5190cfbc51441fbf2b522790ee49a483d55c2bf2ceaf5ffbbe125069ce7982fbe625e680f6d1203cf287a346ea13fe2921d72993fe34699bcd21c14e1c05df2415d1a3c1d319da277594e5174aee7303563d70805e868673271ec443abfd6b658f5549d843e0cf820c58202e2fa89d1ed799cbea5e1c8574e35da1d23775d34b604e87af6a619b9132f3b0470b9633399efdbdc1bf367765831a4f67dbf6f8416984d351aac6c2a9dcdfcf09fb3e74c2f5abfb366232c68203d1c6a2f18d06ea14e8826ececb526a4cff7bd079c33a706bbcc4eee73c22af4e33e08b26cdce4dd4a931659dea8f21ad06263a30771bcbe73e7cc5765540f9f241f9882d4596161145f384b69bc7c0cfd1074b11276d64944d48b62c18f35904cd730329588fd1a0b68035108ed613227f99a280670a110c9e0960f444bda2a7e182c395a590a0bb3dbccbed3df67343f8e8328599d3c69366add8b83438d6b9c947db58be3122d39ad5949d112647eeb0b2a7a624bde465fb37613587a75615ff377169a79144392630c10d7501ec0d46257ebf84313562c6b189e6c4b1e3fd4039e6a912cc6646e0759b357d967815f10804ba1a29b3729eaa2cc69f734be65d5fb76cc8af6d9949eee93d4578c465b95235ce7db1ff68e894f43aaf9627ae37e1b33a3f4af8e243d641841fc06680bd76e016301ab81e71013d23a259d41c5d7813225217143a1e105abd6cee4be1aa0b20ca7b18c74ca9224a8aa08f469c272d96ab39d0c3de7738a1c51af0e34a94c97fd14fd7eb5d3b3a35b30cdd9a4f4a5cae7487bbe1ca9dc7bb6d6a2127762f478c50b0d9b950abf596b20589cbef7e355f6fc015256763130f1cd7f35438e15a36150d32167eff8da433ed0ce46a4f1a71212920941a4c8c3e4255c4a9ddb946219557d0b32b52ba2f057710df0dce9431848ea84707068884a3c0fc3778e26774c51c261293c760d421bbe0cd86ea44b402258fa908bc76fe0d86218f94168b8f6ff9d7770755243d05c2ca5c22079b99bb91b9123df097ff65d640c91b5e7efd596d68d9e690158577fb855370c02552d70e81743cf1c2ac03e65c26b3eb67735197151cc03554728d83eee21da85d0cbdd1652dafcf17f105ed1adc4607f7a759e5ba3c7093562fddf7ba4f172b1ff03d9f9dac848ea0c810323e7a9065849d159053932037533e00ae6423796fa774d1f6c6faff5420bc2279d6499ce6b95676dd24a962a0193f181020f821bbf4838ea4dee2cd0f349e3319f03f63f3e19ae83b4a2d3223bd708300086c8b608cebc725f89be0d82ea76cfbfa54d7f60119db58553badb4ef40c8dc97b5f0c0cdc033064ef9bd795bfdf54803cf7e3981ead8b019e5a4402dac85b4ec377edb97e536f14e00ad482631b217bec7a257864b1dfcc72be8ff7a7ec427ba4e194545280025c3bfca6c3b5af31e63ab5488d4ef6d00c1f412e71e893b873232840392c43c0104be56af1e91b7f65854ab6fee1b8a6fc0ce1644c34290ac14c90427cb21d6a4de9c7056d4ea4fae5e4b0c9e0b26304847bc1d85cbc47a7a164ad81888a6ef3cb49db13092009aeefa45dd849071efeace1394219ebb5cb1c06270ca8d649047a10310ab41ee5a09037b8cfb2bc5d356803c1e0734e7ab00a43f79b0a25622941d04baf9df1aeab4377e9bd2fced9ca0ef5937d66ed0ace6b7d9d31d5570d9e07dbc9eb0b40c28bc30d0974af6e2cd652ccde94b2d9fdaf23c6e0e88bab30409542422207e60024a5ec9f0c50d3d4d07a4696367672ba8c2e6cc9636990ac9b643de3261841e3fb05f332070ca1a34264867773b405d16e3dbfa85993cd704eca9daa089e51c1f5d06c6590f82f2ce03881c037aec245482527a6c36f999ad43820ebebe443928e16520278315149f4f7ec53c95dc5cd5d4f1df0b31e0e234b1cc84ade031dfaac690da363f8bda4e044974c305a31f8489d107fe2a815e4345187de2ac12a4a8778e067a6861d74a4a84219676db2fd604481a96aceb6955710314cabedf5529d97b44a4fe4dc7f676273d4c1e37efc95ed7a0ee4347ced4639beead6882815a733054c08c73dc5e0e99e06cb7ffcc2c59a4528c8bce8587ac57f9cd1de950a9db319061e013a2ee4e368657dfa0f1701ab6ea2a7da0c45345939531920ed417a327cec2974064632ef1f18321b24cfad7664003fe40fd10832ff5d0d33935a51aa34a34077415971ec25e1ace366ac0fb9475a1f0f4b9f40c14255429acae3c1349f4c1e2720796747f6afe392d0850d32f8e756cab254a630f492177e0df6b49704667e0115de306b5df7bcc797d56dd0924ddc903c7eb52b29023e1976b15dcee7c67dc361bce14132eb2a5feb340bd30923e359a487c28e704787b511ace345f54b8a1d31bb1ad2d10aa968349cf3024435d2da53cf4ab03e86dde1ed2ceb394a5258ec537b9a27720004c13ef432ae5a12f4df11413ff01ba9bae9649d52fc5314db85191ec07e865f1020584514e0abb5104463636fb52f18026ea8bb5a78952bd276b3d65429edb7b9072bbcadf7d0aec18181a54e0db90b2472ddaf92bb80d8afad11e624d411940fe631437d188b1c2feca882eeb42f47e993e38a52fb5953aaf2e31c1a875878ccb55557122dfd02b5afd4bcdea42a1dc72476cc8a016500f4f76ef5b82ca867461c507b33733f5efa4b7163a9cd1666950d888da5da3622460cbc1db636ec61b1005fbed78574aa36175e35f4012c1dd06ef1794b5dd5825535a3987faee239a44d836efc0136a86999417dd7e31db00dc662e10600a5a82e907f3314e1fd6ee00fda36c9fbb92dfb6dd188cc21059dc22e0bc66c121501981254b5ea810a82166de7c5e2d4a5bde3911a712ef2ca324c0573f6ddc92bfa9aedc3cbc6e289f0fc806a3da8d48779604e63fa0f1214c440e21dd3efb243d875ff46628eec13848b2134a24ad7e3499598058baba371e372a4f1cef6971eaa1e691a8d655719ad41f9aae435c09e012db738177653db7198b9f6cf8a8f1a2777bbf506abfdbc5c39ecf32443ee02a4e403c97727b88ab59ada76a126681780d53ca5e350ceaec349fcba9846ed35553292abfddef88c2efc7be320f277d193d25790c57cebb10fb0a0f3ffac43452c4c078949c97341f9b8b14437050068b4a97f7871e935dad977a49bd0b1984e82386a0e355f3de33b8756c13804b1c136f15c29b2c9fe0d30fdad6217997635f95a3d9916445ac892382819ca0ad71f30da154d354300fc749a81a266f921fefdd5edbc0d7c046967d2e9ad5577f327df66b3c9fd21821318867fd64f814ac438b886418552aa96ce6df0be869e9decbfceafb7c60932028104cbea06afa14c2fef82cd8a43956f1b1beab4055dcaec7077e18e8c41630b9578c475a3c75a3ddca8f96143136508e1cf169b86dfc4c7b252f5eaed4b394c999ccb1df4bab184466c7ebe9397801597562d870c93a040df4815aec684377158e352d2f64ef0798642a6136f69a7097934276c7d0111433924bbfd427671da8815082d78ab445e62001be3213eff9b70e7003141aae8bb958ff487c56b4b9f943be71598bd785cf84e4f921eb4f61cdd9eef27ae746ff88b2ffdd519c526936ddfbb9616cc417f89ca1b93251861b1093afd63a9679fca2d8e5421d0ef79734a76ac1f77503020224c373b961f2720d54792454362974b5d4a0c3c2b075d2cad3b54b5a15a445ad051e920e5b8d4654f8777c1c7cfda9ce71cb24d936dcd856b9c86275cd9e4444cbfdbdb9e9f56274c77969765560b33b2dbee5bf03027e9940203b9e65dc30d5c4a57809691bd1cbe3d8d99148bd95ca3af860c24ebb02d57910112bdcd32a26e97812d251a60a80a11da215c856818f14238acbf6c26044265284baf6c03b6283dee3225fa002674628caa53e0c2c4349fa5fe33f0edc2e56da198782edf3eee273bf266bdf87a9b101f07080f8f0b2e4fdf150f096606cc7e92efd3f1ba9b4592b8479e8c06204b1f23f39c1734f52908428d7c5af33b28aed6cd1542b62202989c89800ed3b4fba037e523281267117f76e905942d581e83a9a9dfba9890a59ae4238185d0ef65d5551fc0787a7535e59e1f64e6b54800d12adebbe9ced772d4d9c0ca98d634585549dc9f5001c4ab0089d9fd21b26faecb4ee518af1b43eb391c74ae9ac7f55784c18a58834a82dc0c011e8ac8943f2089289348b5d8084b257d114fba5bcc494145067088b9a3194f250d6e8825f521ce877ee9b7c245c1eaa37cc0247507d35901ae2b7333b5081d27dc7d5e4699c24080816405650931b35e3996b406851912f4ad2b196fbf8603d601779d2f505eede31556f989154ed4624e7fb612df3bf3ea0ff1e435f4c00090fabd0f678f36544c9b9fe17697f545eb64cb7bf6642229e01878fdfe4bb1f71f61f5ccad67f0e2b6d0a39c840ab56112949efbb10af70eaa581e4fb223bfa370fde8a8183dcf206c6bec01f8033f5178c338c598be83fe34d3465bb3fb65c6f6aaaf430b20ab0575c02dd0702410e23c1ff8254287b640119247b0fa788df876477b0bc77431ac3a62e49dde1ad4c62ce7d75f2ee3c6984bef622252bf25fe73107e1c40c768cf69a1e054cc0662f42bc4adc5b0716db765ecd4f4ea7520b04594ade70d090ad612e70cef8190005f9ebd6d3b7b04d750d9940d3d6108b9b8bf832446e15d161a25b17a5ebbdd570731fb1bd7463961380f409abf117a58878121baa6ba5545633f9a7bf49a5e31ae32b5f5be36dcf2c2fea07c61a5aa379b431f54b93edbd1c3c15946583bec73ece9861fed4649780fe9bedf32a8b25a9477219e04027d8889fd7d49d8ebf7b678eb0f89efc8645df314088220f7210b82def41d2c01c06d5acb4916fc7db593025077b982f806c1e2ea98e93f3782a487cc41b4257d600b60e9f04cdf41a013711bf7cc4bfb2c4a87cbfbda5e12140072e590ce8ca82eb4f17606d831fac494ffbe3da95550981cb2ab08f1e1187706ebce", 0xff8}, {&(0x7f0000003a00)="38d5ae3d25f32e75dd658dcb616b6b57715e9c027e2986017a9c8effe42249e546ac2e36c90e3d7f132a9f5b2195393401d42d7d15a08441cc6708e9b7f8f75c04d364fb04414530ae8eae47126a0eafaaa37b598ab0143b57f91c724462a5e16ad75e95d5dad35b3e57eec671ed72b518c1f049ed61244f3ea5375b2440b76948f687bce2f7d8b0e43d717398ef627fccabf84673a81ff17efeb8aa8fb3e9f9b8ed66f6e7aa70149023e94d73444614482eadb364464367eae8e977b28e356d4aede4b61b6a3d6530746eb5b80740ff020044836f039fe589ca4db6f3b7dcd362526578351d56664a2b2ce9c5bc61", 0xef}, {&(0x7f0000003b00)="8b8aaa6e81b575fc9d9172d8d86206295a430bc64e27e7ea9f4e4ee42e9668c6cd2484a0fff5ea0f11c82e460849714624c9e95588b5e44034d9ef47459ca56baba147472b7d477bfa08fd01ea063a64c95941c26535b33a1f6ed58bede1d125", 0x60}], 0x3, &(0x7f0000000300)}, 0x4010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'batadv0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864160af36504001a0038001d00400000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1a, &(0x7f0000000040), 0x10) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 542.729079ms ago: executing program 3 (id=3175): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair(0x2a, 0x1, 0x40, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 460.548323ms ago: executing program 2 (id=3176): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000100081064e81c4e82df782db4cb904021d000000000000000855a10a00040011000c000a600e41b0000900cf00060411000000160012000a0003200248035c3b61c1d67f6f05007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b1421d1ff35e1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b07000000a6823a45f2", 0xd8}], 0x1}, 0x40040) 346.011302ms ago: executing program 3 (id=3177): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000), 0x8000) (async) sendmsg$kcm(r0, &(0x7f0000000000), 0x8000) 279.470673ms ago: executing program 0 (id=3178): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0xa}, 0x108c28, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x69f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)}, 0x0) 264.584056ms ago: executing program 3 (id=3179): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'vxcan1\x00', @remote}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='N-'], 0x6a) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x100, 0x0, 0x3, 0x80000001, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="8f00000015006b05c84e21000ab16d8b230675f802000000440002005805530461bc24eeb556a705251e6182149a36c23d1b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) 232.267041ms ago: executing program 2 (id=3180): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d099"], 0x10b8}, 0xff00) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)=""/71, 0x47}, {0x0}, {&(0x7f0000000f80)=""/222, 0xde}, {0x0}, {&(0x7f0000000480)=""/260, 0x104}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}], 0x7}, 0x2000) sendmsg$inet(r1, 0x0, 0x24000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {0x0}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/210, 0xd2}], 0x7}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000032c0)=[{0x0}, {&(0x7f00000031c0)="52fd387b2a0749e12a9b5ae369c3344b376762529d40cda8533d6298446080ede45dc24d1aff09edbcfbc56f6a0fa6f9969462a80ded04396f44", 0x3a}], 0x2}, 0x4004000) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) write$cgroup_devices(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x2100, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) 231.165901ms ago: executing program 1 (id=3181): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) 73.707908ms ago: executing program 3 (id=3182): socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2b, 'memory'}, {0x2d, 'cpuacct'}, {0x2d, 'cpuacct'}, {0x2d, 'blkio'}, {0x2b, 'devices'}, {0x2d, 'freezer'}]}, 0x33) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4080) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff24}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x7fffffff}, 0x8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0x3}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8) 72.759318ms ago: executing program 1 (id=3183): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=0xffffffffffffffff, 0x4, 0x2b, 0x0, 0x0, 0x5cb00ffa1c284c9e, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061106e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1f, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8bf}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0xf, 0x7, 0x800}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e92780813abdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}]}, 0x0, 0x2, 0x95, &(0x7f00000003c0)=""/149, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x1, 0x5, 0x9}, 0x31, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x1, 0x3, 0x9, 0xa}, {0x3, 0x4, 0x10, 0x2}, {0x0, 0x3, 0x9, 0xa}, {0x2, 0x5, 0xf, 0xc}], 0x10, 0x42572b3e}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={0x0, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x1c, &(0x7f0000002000)=ANY=[@ANYBLOB="180000000300000000000000f708000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018630000020000000000000005000000180000000b000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000100000e7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000f2c673791c175b3e586da92c4fd02a69235a4673994768240e03131f5a264a83241adb982e13b0599d68012b4e09e982a0f63d9a570b34719f8d7515c37f4428173f8f0cc7cb059a1612615ae58e8591f3e41eed4f34e7be119bc4ea15b7cf853e931cd0995e541d339424fd1f3b"], &(0x7f0000000400)='GPL\x00', 0xd479, 0x83, &(0x7f0000000580)=""/131, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0xc, 0x80000001, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000680)=[0xffffffffffffffff, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x1, 0x4, 0x7, 0x7}, {0x5, 0x2, 0x10, 0x2}, {0x1, 0x1, 0xc, 0x3}, {0x5, 0x4, 0x4, 0x9}, {0x2, 0x1, 0x9, 0x7}, {0x2, 0x5, 0x8, 0xfc045f4747670285}], 0x10, 0x978}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(r8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[@ANYRES16=r9], 0x2f) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b40)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r2, 0x0, '\x00', 0x0, r4, 0x1, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{r6, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x15, 0x21, &(0x7f0000001dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x78d3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x978}, @call={0x85, 0x0, 0x0, 0xa8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0x36, 0x1000, &(0x7f0000000a40)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b00)={0x0, 0xd, 0x100, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001c80)=[r1, r10, r2, r1, r11, 0x1, r12], &(0x7f0000001cc0)=[{0x2, 0x3, 0x4, 0x5}], 0x10, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r13) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r14, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r15, 0x400454cd, 0x339) ioctl$TUNSETPERSIST(r15, 0x400454cb, 0x1) 0s ago: executing program 0 (id=3184): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000300000000dc8b850f238466cc00007a000000adac911b", 0x22}, {&(0x7f0000000080)="53b12d3fa0ba", 0x6}], 0x2}, 0x0) kernel console output (not intermixed with test programs): 8228][T11175] __release_sock+0x1e5/0x460 [ 317.822964][T11175] release_sock+0x5f/0x1c0 [ 317.827448][T11175] sctp_sendmsg+0x1bd7/0x28c0 [ 317.832333][T11175] ? sctp_getsockopt+0xb60/0xb60 [ 317.837413][T11175] ? aa_sk_perm+0x83c/0x970 [ 317.841977][T11175] ? aa_af_perm+0x330/0x330 [ 317.846508][T11175] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 317.852951][T11175] ? sock_rps_record_flow+0x19/0x3f0 [ 317.858263][T11175] ? inet_sendmsg+0x7c/0x2f0 [ 317.862904][T11175] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 317.869265][T11175] ? security_socket_sendmsg+0x80/0xa0 [ 317.875536][T11175] ? inet_send_prepare+0x260/0x260 [ 317.880762][T11175] ____sys_sendmsg+0x5ba/0x960 [ 317.886020][T11175] ? __lock_acquire+0x7d40/0x7d40 [ 317.891262][T11175] ? __asan_memset+0x22/0x40 [ 317.895975][T11175] ? __sys_sendmsg_sock+0x30/0x30 [ 317.901123][T11175] ? __import_iovec+0x5f2/0x850 [ 317.906255][T11175] ? import_iovec+0x73/0xa0 [ 317.910767][T11175] ___sys_sendmsg+0x2a6/0x360 [ 317.915632][T11175] ? get_pid_task+0x20/0x1e0 [ 317.920437][T11175] ? __sys_sendmsg+0x2a0/0x2a0 [ 317.925271][T11175] ? __lock_acquire+0x7d40/0x7d40 [ 317.930491][T11175] __se_sys_sendmsg+0x1c2/0x2b0 [ 317.935348][T11175] ? __x64_sys_sendmsg+0x80/0x80 [ 317.940316][T11175] ? lockdep_hardirqs_on+0x98/0x150 [ 317.945694][T11175] do_syscall_64+0x55/0xa0 [ 317.950154][T11175] ? clear_bhb_loop+0x40/0x90 [ 317.955020][T11175] ? clear_bhb_loop+0x40/0x90 [ 317.959729][T11175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.966258][T11175] RIP: 0033:0x7ff55d79c819 [ 317.971562][T11175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.991563][T11175] RSP: 002b:00007ff55e5f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.000008][T11175] RAX: ffffffffffffffda RBX: 00007ff55da15fa0 RCX: 00007ff55d79c819 [ 318.008010][T11175] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 318.015995][T11175] RBP: 00007ff55e5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 318.024292][T11175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.032500][T11175] R13: 00007ff55da16038 R14: 00007ff55da15fa0 R15: 00007ffdf14b5898 [ 318.040893][T11175] [ 318.249275][T11187] netlink: 'syz.2.1940': attribute type 10 has an invalid length. [ 318.426668][T11187] team0: Device hsr_slave_0 failed to register rx_handler [ 319.292392][T11214] delete_channel: no stack [ 319.695708][T11231] netlink: 'syz.1.1959': attribute type 10 has an invalid length. [ 319.717882][T11231] team0: Device hsr_slave_0 failed to register rx_handler [ 320.223861][T11239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1963'. [ 320.579465][T11249] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1968'. [ 320.623221][T11254] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1968'. [ 320.688951][T11256] netlink: 'syz.3.1969': attribute type 3 has an invalid length. [ 320.703931][T11252] netlink: 'syz.2.1967': attribute type 10 has an invalid length. [ 320.714092][T11256] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1969'. [ 320.734286][T11252] team0: Device hsr_slave_0 failed to register rx_handler [ 320.942861][T11262] netlink: 'syz.1.1971': attribute type 10 has an invalid length. [ 320.955903][T11262] .`: left promiscuous mode [ 320.960872][T11262] bond_slave_0: left promiscuous mode [ 320.967054][T11262] bond_slave_1: left promiscuous mode [ 320.976064][T11262] batadv_slave_0: left promiscuous mode [ 321.017317][T11262] 8021q: adding VLAN 0 to HW filter on device .` [ 321.027809][T11262] team0: Port device .` added [ 321.041872][T11258] netlink: 'syz.0.1970': attribute type 2 has an invalid length. [ 321.049996][T11258] netlink: 'syz.0.1970': attribute type 8 has an invalid length. [ 321.059557][T11258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1970'. [ 321.098365][T11262] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1971'. [ 321.121138][T11262] bridge_slave_1: default FDB implementation only supports local addresses [ 322.160765][T11285] netlink: 'syz.0.1979': attribute type 10 has an invalid length. [ 322.232685][T11285] team0: Device hsr_slave_0 failed to register rx_handler [ 322.645581][T11294] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1983'. [ 322.691939][T11294] netlink: 'syz.1.1983': attribute type 11 has an invalid length. [ 322.727529][T11294] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1983'. [ 322.881178][T11298] netlink: 'syz.2.1985': attribute type 10 has an invalid length. [ 322.889914][T11298] team0: Device hsr_slave_0 failed to register rx_handler [ 324.147600][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 324.215279][T11328] validate_nla: 1 callbacks suppressed [ 324.215296][T11328] netlink: 'syz.3.1995': attribute type 10 has an invalid length. [ 324.248596][T11328] team0: Device hsr_slave_0 failed to register rx_handler [ 324.766329][T11333] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 324.792660][T11333] team0: Device hsr_slave_0 failed to register rx_handler [ 324.948237][T11335] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1999'. [ 324.985193][T11335] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 325.001105][T11335] openvswitch: netlink: Message has 4 unknown bytes. [ 325.014277][T11336] syzkaller0: entered promiscuous mode [ 325.050654][T11336] syzkaller0: entered allmulticast mode [ 325.068551][T11335] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 325.094919][T11336] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1999'. [ 325.191875][T11339] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1999'. [ 325.623884][T11357] netlink: 'syz.0.2006': attribute type 8 has an invalid length. [ 325.655816][T11357] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2006'. [ 326.118995][T11351] syzkaller0: entered promiscuous mode [ 326.137636][T11351] syzkaller0: entered allmulticast mode [ 326.399641][T11362] netlink: 'syz.1.2010': attribute type 10 has an invalid length. [ 326.427783][T11362] team0: Device hsr_slave_0 failed to register rx_handler [ 328.579264][T11368] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.2012'. [ 328.592025][T11371] netlink: 'syz.1.2012': attribute type 10 has an invalid length. [ 328.601124][T11371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2012'. [ 328.940160][T11391] netlink: 'syz.0.2019': attribute type 10 has an invalid length. [ 328.956362][T11391] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2019'. [ 328.970024][T11391] bridge_slave_1: default FDB implementation only supports local addresses [ 329.015952][T11394] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 329.043203][T11394] team0: Device hsr_slave_0 failed to register rx_handler [ 329.278927][T11401] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 329.301337][T11401] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2024'. [ 329.509197][T11404] delete_channel: no stack [ 329.543268][T11404] delete_channel: no stack [ 329.925073][T11413] netlink: 'syz.3.2029': attribute type 9 has an invalid length. [ 329.954898][T11413] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2029'. [ 330.048777][T11417] netlink: 'syz.3.2029': attribute type 9 has an invalid length. [ 330.068686][T11417] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2029'. [ 330.105839][T11424] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2031'. [ 330.898947][T11424] team0: Port device .` removed [ 330.907465][T11424] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.929628][T11424] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.954365][T11424] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 330.966701][T11424] .` (unregistering): Released all slaves [ 330.979055][T11433] netlink: 'syz.2.2034': attribute type 10 has an invalid length. [ 331.017298][T11433] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2034'. [ 331.042345][T11433] bridge_slave_1: default FDB implementation only supports local addresses [ 331.410029][T11447] netlink: 'syz.3.2038': attribute type 10 has an invalid length. [ 331.432085][T11447] team0: Device hsr_slave_0 failed to register rx_handler [ 332.375771][T11462] netlink: 'syz.3.2044': attribute type 3 has an invalid length. [ 332.394346][T11462] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2044'. [ 332.524646][T11462] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2044'. [ 332.599655][T11467] netlink: 'syz.2.2045': attribute type 10 has an invalid length. [ 333.010591][T11470] netlink: 'syz.1.2046': attribute type 8 has an invalid length. [ 333.399856][T11469] syzkaller0: entered promiscuous mode [ 333.413699][T11469] syzkaller0: entered allmulticast mode [ 333.778821][T11479] __nla_validate_parse: 4 callbacks suppressed [ 333.778872][T11479] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2049'. [ 333.798757][T11476] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2048'. [ 337.434698][T11526] netlink: 'syz.2.2066': attribute type 12 has an invalid length. [ 337.443069][T11526] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2066'. [ 337.453662][T11527] netlink: 'syz.2.2066': attribute type 10 has an invalid length. [ 337.462404][T11527] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 337.771143][T11543] netlink: 'syz.3.2071': attribute type 10 has an invalid length. [ 337.780068][T11543] team0: Device hsr_slave_0 failed to register rx_handler [ 338.121716][T11549] netlink: 'syz.0.2074': attribute type 10 has an invalid length. [ 339.517293][T11564] netlink: 'syz.2.2078': attribute type 8 has an invalid length. [ 339.548584][T11564] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2078'. [ 339.801624][T11563] syzkaller0: entered promiscuous mode [ 339.815587][T11563] syzkaller0: entered allmulticast mode [ 339.830113][T11566] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2079'. [ 339.999084][T11572] netlink: 'syz.1.2082': attribute type 10 has an invalid length. [ 341.203057][T11604] netlink: 'syz.3.2092': attribute type 29 has an invalid length. [ 341.733473][T11609] netlink: 'syz.0.2094': attribute type 3 has an invalid length. [ 341.744221][T11609] netlink: 'syz.0.2094': attribute type 6 has an invalid length. [ 341.756023][T11609] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2094'. [ 342.936657][T11591] netlink: 'syz.1.2088': attribute type 10 has an invalid length. [ 342.945395][T11591] team0: Device hsr_slave_0 failed to register rx_handler [ 342.958237][T11604] netlink: 'syz.3.2092': attribute type 29 has an invalid length. [ 342.969634][T11610] netlink: 'syz.0.2094': attribute type 13 has an invalid length. [ 342.991477][T11610] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2094'. [ 343.246806][T11614] pim6reg1: entered promiscuous mode [ 343.256363][T11614] pim6reg1: entered allmulticast mode [ 343.432046][T11626] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2101'. [ 345.585227][T11631] netlink: 'syz.2.2103': attribute type 10 has an invalid length. [ 345.594966][T11631] team0: Device hsr_slave_0 failed to register rx_handler [ 346.530895][T11658] pim6reg1: entered promiscuous mode [ 346.549141][T11658] pim6reg1: entered allmulticast mode [ 346.631385][T11666] netlink: 'syz.0.2114': attribute type 10 has an invalid length. [ 346.671699][T11666] team0: Device hsr_slave_0 failed to register rx_handler [ 347.580393][T11685] Dead loop on virtual device ip6_vti0, fix it urgently! [ 348.836304][T11716] netlink: 'syz.1.2133': attribute type 3 has an invalid length. [ 348.853430][T11724] netlink: 'syz.0.2135': attribute type 46 has an invalid length. [ 348.868745][T11716] netlink: 'syz.1.2133': attribute type 6 has an invalid length. [ 348.876809][T11724] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2135'. [ 348.891233][T11716] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.2133'. [ 348.927747][T11725] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2136'. [ 349.001242][T11716] netlink: 'syz.1.2133': attribute type 13 has an invalid length. [ 349.049981][T11716] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2133'. [ 349.089135][T11728] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2139'. [ 349.620495][T11743] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2143'. [ 349.681070][T11743] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 350.353358][T11755] netlink: 'syz.3.2146': attribute type 10 has an invalid length. [ 354.012423][T11790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2157'. [ 354.449245][T11812] netlink: 'syz.0.2165': attribute type 10 has an invalid length. [ 354.473016][T11812] team0: Device hsr_slave_0 failed to register rx_handler [ 356.616135][T11838] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2175'. [ 356.640614][T11838] : renamed from veth0_to_bond (while UP) [ 357.131608][T11856] netlink: 'syz.3.2181': attribute type 10 has an invalid length. [ 357.223574][T11856] team0: Device hsr_slave_0 failed to register rx_handler [ 357.296933][T11860] netlink: 'syz.2.2183': attribute type 5 has an invalid length. [ 358.099737][T11870] IPv6: …: Disabled Multicast RS [ 359.189192][T11897] netlink: 'syz.3.2195': attribute type 10 has an invalid length. [ 359.222123][T11897] team0: Device hsr_slave_0 failed to register rx_handler [ 359.792907][T11916] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2202'. [ 360.089271][T11918] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2203'. [ 360.170186][ T6016] tipc: Subscription rejected, illegal request [ 360.253555][T11925] netlink: 'syz.1.2206': attribute type 2 has an invalid length. [ 360.267553][T11925] netlink: 'syz.1.2206': attribute type 8 has an invalid length. [ 360.283167][T11925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2206'. [ 360.642764][T11941] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2219'. [ 361.336965][T11959] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2218'. [ 361.608178][T11972] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2224'. [ 361.657706][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 361.825856][T11979] netlink: 'syz.3.2226': attribute type 39 has an invalid length. [ 363.159412][T12018] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2241'. [ 363.187136][T12018] Ù: renamed from bond_slave_1 [ 365.051424][T12075] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2261'. [ 366.963550][T12121] FAULT_INJECTION: forcing a failure. [ 366.963550][T12121] name failslab, interval 1, probability 0, space 0, times 0 [ 366.978290][T12121] CPU: 1 PID: 12121 Comm: syz.1.2278 Not tainted syzkaller #0 [ 366.986142][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 366.996479][T12121] Call Trace: [ 366.999865][T12121] [ 367.002809][T12121] dump_stack_lvl+0x18c/0x250 [ 367.007616][T12121] ? sctp_sendmsg+0x1575/0x28c0 [ 367.012480][T12121] ? ___sys_sendmsg+0x2a6/0x360 [ 367.017786][T12121] ? show_regs_print_info+0x20/0x20 [ 367.023234][T12121] ? load_image+0x420/0x420 [ 367.027853][T12121] should_fail_ex+0x39d/0x4d0 [ 367.032571][T12121] should_failslab+0x9/0x20 [ 367.037292][T12121] slab_pre_alloc_hook+0x59/0x310 [ 367.042448][T12121] ? sctp_add_bind_addr+0x8c/0x360 [ 367.047663][T12121] __kmem_cache_alloc_node+0x53/0x250 [ 367.053087][T12121] ? sctp_add_bind_addr+0x8c/0x360 [ 367.058262][T12121] kmalloc_trace+0x2a/0xe0 [ 367.069990][T12121] sctp_add_bind_addr+0x8c/0x360 [ 367.074959][T12121] sctp_copy_local_addr_list+0x315/0x4f0 [ 367.080600][T12121] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 367.086826][T12121] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 367.093353][T12121] ? sctp_v6_is_any+0x64/0x70 [ 367.098126][T12121] ? sctp_copy_one_addr+0x8c/0x350 [ 367.103427][T12121] sctp_bind_addr_copy+0xb3/0x3c0 [ 367.108582][T12121] sctp_connect_new_asoc+0x2f9/0x6a0 [ 367.114601][T12121] ? __sctp_connect+0xd80/0xd80 [ 367.119473][T12121] ? __local_bh_enable_ip+0x13a/0x1c0 [ 367.125518][T12121] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 367.131183][T12121] ? security_sctp_bind_connect+0x89/0xb0 [ 367.137003][T12121] sctp_sendmsg+0x1575/0x28c0 [ 367.142084][T12121] ? sctp_getsockopt+0xb60/0xb60 [ 367.147140][T12121] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.153397][T12121] ? lockdep_hardirqs_on+0x98/0x150 [ 367.158622][T12121] ? sock_rps_record_flow+0x19/0x3f0 [ 367.163915][T12121] ? inet_sendmsg+0xe9/0x2f0 [ 367.168508][T12121] ? inet_send_prepare+0x260/0x260 [ 367.173640][T12121] ____sys_sendmsg+0x5ba/0x960 [ 367.178505][T12121] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.184941][T12121] ? __asan_memset+0x22/0x40 [ 367.189543][T12121] ? __sys_sendmsg_sock+0x30/0x30 [ 367.194592][T12121] ? __import_iovec+0x5f2/0x850 [ 367.199564][T12121] ? import_iovec+0x73/0xa0 [ 367.204248][T12121] ___sys_sendmsg+0x2a6/0x360 [ 367.209065][T12121] ? __sys_sendmsg+0x2a0/0x2a0 [ 367.213986][T12121] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 367.220348][T12121] __se_sys_sendmsg+0x1c2/0x2b0 [ 367.225300][T12121] ? __x64_sys_sendmsg+0x80/0x80 [ 367.230269][T12121] do_syscall_64+0x55/0xa0 [ 367.234951][T12121] ? clear_bhb_loop+0x40/0x90 [ 367.239741][T12121] ? clear_bhb_loop+0x40/0x90 [ 367.244636][T12121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.250537][T12121] RIP: 0033:0x7ff55d79c819 [ 367.255239][T12121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.275474][T12121] RSP: 002b:00007ff55e5f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.284250][T12121] RAX: ffffffffffffffda RBX: 00007ff55da15fa0 RCX: 00007ff55d79c819 [ 367.292526][T12121] RDX: 0000000004000001 RSI: 00002000000023c0 RDI: 0000000000000003 [ 367.300611][T12121] RBP: 00007ff55e5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 367.308676][T12121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.316746][T12121] R13: 00007ff55da16038 R14: 00007ff55da15fa0 R15: 00007ffdf14b5898 [ 367.324922][T12121] [ 368.540171][T12075] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2261'. [ 368.549625][T12078] netlink: 'syz.0.2261': attribute type 10 has an invalid length. [ 368.561141][T12114] netlink: 'syz.2.2274': attribute type 10 has an invalid length. [ 368.569728][T12114] team0: Device hsr_slave_0 failed to register rx_handler [ 368.598208][T12123] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2279'. [ 368.863619][T12142] netlink: 'syz.1.2284': attribute type 39 has an invalid length. [ 369.930250][ T6015] tipc: Subscription rejected, illegal request [ 370.021172][T12166] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2294'. [ 371.627114][T12213] netlink: 'syz.1.2307': attribute type 29 has an invalid length. [ 371.638742][T12213] netlink: 'syz.1.2307': attribute type 29 has an invalid length. [ 371.648245][T12206] netlink: 'syz.1.2307': attribute type 29 has an invalid length. [ 371.701441][T12216] netlink: 'syz.2.2309': attribute type 10 has an invalid length. [ 371.712725][T12216] team0: Device hsr_slave_0 failed to register rx_handler [ 371.760656][T12217] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 371.777203][T12217] team0: Device hsr_slave_0 failed to register rx_handler [ 372.080185][T12223] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2314'. [ 373.139550][T12248] FAULT_INJECTION: forcing a failure. [ 373.139550][T12248] name failslab, interval 1, probability 0, space 0, times 0 [ 373.156229][T12248] CPU: 0 PID: 12248 Comm: syz.1.2331 Not tainted syzkaller #0 [ 373.164532][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 373.174791][T12248] Call Trace: [ 373.178104][T12248] [ 373.181139][T12248] dump_stack_lvl+0x18c/0x250 [ 373.186049][T12248] ? show_regs_print_info+0x20/0x20 [ 373.191366][T12248] ? load_image+0x420/0x420 [ 373.196096][T12248] ? __might_sleep+0xe0/0xe0 [ 373.200977][T12248] ? __lock_acquire+0x7d40/0x7d40 [ 373.206213][T12248] should_fail_ex+0x39d/0x4d0 [ 373.210931][T12248] should_failslab+0x9/0x20 [ 373.215550][T12248] slab_pre_alloc_hook+0x59/0x310 [ 373.220582][T12248] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.226307][T12248] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.232114][T12248] __kmem_cache_alloc_node+0x53/0x250 [ 373.237660][T12248] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.243877][T12248] __kmalloc+0xa4/0x230 [ 373.248145][T12248] tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.253798][T12248] tomoyo_path_number_perm+0x248/0x620 [ 373.259545][T12248] ? tomoyo_path_number_perm+0x217/0x620 [ 373.265344][T12248] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 373.270916][T12248] ? ksys_write+0x1c4/0x260 [ 373.275450][T12248] ? __fget_files+0x28/0x4b0 [ 373.280131][T12248] ? __fget_files+0x28/0x4b0 [ 373.284731][T12248] security_file_ioctl+0x70/0xa0 [ 373.289803][T12248] __se_sys_ioctl+0x48/0x170 [ 373.294506][T12248] do_syscall_64+0x55/0xa0 [ 373.298948][T12248] ? clear_bhb_loop+0x40/0x90 [ 373.303620][T12248] ? clear_bhb_loop+0x40/0x90 [ 373.308314][T12248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.314321][T12248] RIP: 0033:0x7ff55d79c819 [ 373.318744][T12248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.338892][T12248] RSP: 002b:00007ff55e5f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.347388][T12248] RAX: ffffffffffffffda RBX: 00007ff55da15fa0 RCX: 00007ff55d79c819 [ 373.355381][T12248] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 373.363375][T12248] RBP: 00007ff55e5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 373.371363][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.379432][T12248] R13: 00007ff55da16038 R14: 00007ff55da15fa0 R15: 00007ffdf14b5898 [ 373.387803][T12248] [ 373.396659][T12248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 373.888117][T12265] netlink: 'syz.3.2328': attribute type 10 has an invalid length. [ 373.915611][T12265] team0: Device hsr_slave_0 failed to register rx_handler [ 374.314681][T12274] netlink: 'syz.0.2333': attribute type 21 has an invalid length. [ 375.170139][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.179682][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.211179][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.225125][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.238561][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 375.248925][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.403264][ T6016] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.985178][ T6016] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.095398][ T6016] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.201083][ T6016] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.257679][T12303] chnl_net:caif_netlink_parms(): no params data found [ 376.516530][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.538967][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.563708][T12303] bridge_slave_0: entered allmulticast mode [ 376.582631][T12303] bridge_slave_0: entered promiscuous mode [ 376.629601][T12337] netlink: 'syz.1.2347': attribute type 10 has an invalid length. [ 376.658862][T12337] team0: Device hsr_slave_0 failed to register rx_handler [ 376.876020][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.889018][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.898364][T12303] bridge_slave_1: entered allmulticast mode [ 376.907563][T12303] bridge_slave_1: entered promiscuous mode [ 376.956396][T12303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.002120][T12303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.231644][T12347] netlink: 'syz.0.2349': attribute type 29 has an invalid length. [ 377.261741][T12303] team0: Port device team_slave_0 added [ 377.362777][ T51] Bluetooth: hci0: command tx timeout [ 377.423224][T12347] netlink: 'syz.0.2349': attribute type 29 has an invalid length. [ 377.433446][T12303] team0: Port device team_slave_1 added [ 377.574965][T12303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.583921][T12303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.610771][T12303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.626649][T12359] netlink: 'syz.3.2350': attribute type 10 has an invalid length. [ 377.635831][T12359] team0: Device hsr_slave_0 failed to register rx_handler [ 377.681829][T12303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.689426][T12303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.717946][T12303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.850174][T12303] hsr_slave_0: entered promiscuous mode [ 377.870852][T12303] hsr_slave_1: entered promiscuous mode [ 377.878969][T12303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.886712][T12303] Cannot create hsr debugfs directory [ 378.359000][T12373] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2353'. [ 378.876675][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.883221][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.431102][ T51] Bluetooth: hci0: command tx timeout [ 379.765355][T12405] netlink: 'syz.0.2363': attribute type 10 has an invalid length. [ 379.776255][T12405] team0: Device hsr_slave_0 failed to register rx_handler [ 379.861244][T12303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.883029][T12303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.967150][T12408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2362'. [ 379.983381][T12303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.108952][T12303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.409526][ T6016] hsr_slave_0: left promiscuous mode [ 380.417209][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.427385][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.455751][ T6016] veth1_macvtap: left promiscuous mode [ 380.462266][ T6016] veth0_macvtap: left promiscuous mode [ 380.468327][ T6016] veth1_vlan: left promiscuous mode [ 380.475437][ T6016] veth0_vlan: left promiscuous mode [ 381.328162][T12452] netlink: 'syz.3.2369': attribute type 3 has an invalid length. [ 381.352097][T12452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2369'. [ 381.514326][ T51] Bluetooth: hci0: command tx timeout [ 383.559865][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 383.593239][ T51] Bluetooth: hci0: command tx timeout [ 383.624237][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 384.559874][T12303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.670428][T12303] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.736881][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.744097][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.815336][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.822667][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.984187][T12303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.491564][T12303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.633256][T12303] veth0_vlan: entered promiscuous mode [ 385.667035][T12303] veth1_vlan: entered promiscuous mode [ 385.781519][T12303] veth0_macvtap: entered promiscuous mode [ 385.805261][T12303] veth1_macvtap: entered promiscuous mode [ 385.846585][T12516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2388'. [ 385.866486][T12303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.948337][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0¨«§çŠL‘P [ 385.981323][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.006466][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.035374][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.062943][T12303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.168964][T12303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.207836][T12303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.232528][T12303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.254323][T12303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.025466][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.041858][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.108203][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.131318][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.177666][T12540] netlink: 'syz.3.2386': attribute type 10 has an invalid length. [ 389.185891][T12540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2386'. [ 389.198906][T12540] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 390.062453][ T5770] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.073774][ T5770] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.083819][ T5770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.093134][ T5770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.102535][ T5770] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 390.116580][ T5770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.656526][T12565] netlink: 'syz.3.2395': attribute type 21 has an invalid length. [ 390.776671][T12558] chnl_net:caif_netlink_parms(): no params data found [ 391.423896][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.452926][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.483334][T12558] bridge_slave_0: entered allmulticast mode [ 391.515905][T12558] bridge_slave_0: entered promiscuous mode [ 391.545627][T12576] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 391.586792][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.631279][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.661542][T12558] bridge_slave_1: entered allmulticast mode [ 391.705610][T12558] bridge_slave_1: entered promiscuous mode [ 391.743956][T12576] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 391.777833][T12576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2397'. [ 391.815540][T12576] batadv0: entered promiscuous mode [ 391.847446][T12576] batadv0: entered allmulticast mode [ 391.853421][T12579] delete_channel: no stack [ 391.865830][T12576] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 392.090483][T12558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.133738][T12558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.296022][T12558] team0: Port device team_slave_0 added [ 392.313602][T12585] netlink: 822 bytes leftover after parsing attributes in process `syz.0.2400'. [ 392.325728][T12558] team0: Port device team_slave_1 added [ 392.335544][T12585] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2400'. [ 392.380614][T12558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.387815][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.413820][ T51] Bluetooth: hci4: command tx timeout [ 392.436594][T12558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.455714][T12558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.466242][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.498142][T12558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.274873][T12596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2404'. [ 393.367529][T12558] hsr_slave_0: entered promiscuous mode [ 393.377168][T12558] hsr_slave_1: entered promiscuous mode [ 393.511898][T12605] netlink: 'syz.3.2407': attribute type 29 has an invalid length. [ 393.567465][T12605] netlink: 'syz.3.2407': attribute type 29 has an invalid length. [ 393.757994][T12558] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.918061][T12558] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.948647][T12615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2411'. [ 394.059372][T12558] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.126874][T12558] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.269236][T12558] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 394.279859][T12558] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 394.289454][T12558] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 394.303962][T12558] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 394.389438][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.411548][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.426002][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.433387][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.457133][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.464531][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.471198][ T51] Bluetooth: hci4: command tx timeout [ 394.688651][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.748097][T12558] veth0_vlan: entered promiscuous mode [ 394.760892][T12558] veth1_vlan: entered promiscuous mode [ 394.795948][T12558] veth0_macvtap: entered promiscuous mode [ 394.806346][T12558] veth1_macvtap: entered promiscuous mode [ 394.823334][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.834620][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.846295][T12558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.860364][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0¨«§çŠL‘P [ 394.872005][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.882261][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.894300][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.904270][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.915044][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.926433][T12558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.938817][T12558] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.948179][T12558] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.957442][T12558] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.966608][T12558] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.035086][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.049784][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.079497][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.087496][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.265196][ T5770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.275660][ T5770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.284311][ T5770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.292849][ T5770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.332258][ T5770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 396.343529][ T5770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.551702][ T5770] Bluetooth: hci4: command tx timeout [ 397.954394][T12652] netlink: 'syz.2.2417': attribute type 3 has an invalid length. [ 397.996454][T12652] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2417'. [ 398.104225][T12657] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 398.131636][T12656] netlink: 'syz.2.2417': attribute type 29 has an invalid length. [ 398.215111][T12658] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2417'. [ 398.471455][ T5770] Bluetooth: hci2: command tx timeout [ 398.542321][T12657] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 398.550919][T12656] netlink: 'syz.2.2417': attribute type 29 has an invalid length. [ 398.651515][ T5770] Bluetooth: hci4: command tx timeout [ 398.866012][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.023526][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.098475][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.120883][T12638] chnl_net:caif_netlink_parms(): no params data found [ 399.206831][T12667] netlink: 'syz.0.2423': attribute type 11 has an invalid length. [ 399.222305][T12667] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2423'. [ 399.254051][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.304338][T12678] lo: entered promiscuous mode [ 399.476649][T12638] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.508942][T12638] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.535545][T12638] bridge_slave_0: entered allmulticast mode [ 399.568625][T12638] bridge_slave_0: entered promiscuous mode [ 399.873786][T12686] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2427'. [ 399.895635][T12638] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.921142][T12638] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.932220][T12638] bridge_slave_1: entered allmulticast mode [ 399.949964][T12638] bridge_slave_1: entered promiscuous mode [ 400.103521][T12638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.141292][T12697] netlink: 'syz.0.2430': attribute type 29 has an invalid length. [ 400.174201][T12638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.214112][T12697] netlink: 'syz.0.2430': attribute type 29 has an invalid length. [ 400.359773][T12638] team0: Port device team_slave_0 added [ 400.405119][T12638] team0: Port device team_slave_1 added [ 400.554020][ T5770] Bluetooth: hci2: command tx timeout [ 400.564906][T12638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.572480][T12638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.600693][T12638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.613661][T12703] bridge_slave_1: left allmulticast mode [ 400.640859][T12703] bridge_slave_1: left promiscuous mode [ 400.667872][T12703] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.716302][T12703] bridge_slave_0: left allmulticast mode [ 400.751258][T12703] bridge_slave_0: left promiscuous mode [ 400.763227][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.081565][T12638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.088954][T12638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.128155][T12638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.190709][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2432'. [ 401.201201][T12709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2433'. [ 401.524137][T12638] hsr_slave_0: entered promiscuous mode [ 401.548302][T12638] hsr_slave_1: entered promiscuous mode [ 401.617815][T12638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.638424][T12638] Cannot create hsr debugfs directory [ 402.553628][T12743] netlink: 'syz.1.2442': attribute type 10 has an invalid length. [ 402.625824][T12743] team0: Device hsr_slave_0 failed to register rx_handler [ 402.633618][ T5770] Bluetooth: hci2: command tx timeout [ 403.466724][T12756] tun0: tun_chr_ioctl cmd 1074025675 [ 403.495203][T12756] tun0: persist enabled [ 403.529630][T12763] tun0: tun_chr_ioctl cmd 1074025675 [ 403.554683][T12763] tun0: persist disabled [ 404.243057][T12638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 404.739624][ T5770] Bluetooth: hci2: command tx timeout [ 404.987334][T12638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 405.034365][T12638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 405.048759][T12638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 405.069530][T12797] netlink: 'syz.2.2453': attribute type 10 has an invalid length. [ 405.130241][T12797] team0: Device hsr_slave_0 failed to register rx_handler [ 405.763434][ T49] vlan0: left allmulticast mode [ 405.768396][ T49] vlan0: left promiscuous mode [ 405.789721][ T49] À: port 1(vlan0) entered disabled state [ 405.830510][ T49] hsr_slave_0: left promiscuous mode [ 405.851587][ T49] batman_adv: batadv0: Interface deactivated: €Â0¨«§çŠL‘P [ 405.859311][ T49] batman_adv: batadv0: Removing interface: €Â0¨«§çŠL‘P [ 405.889948][ T49] veth1_macvtap: left promiscuous mode [ 405.895983][ T49] veth1_vlan: left promiscuous mode [ 405.903199][ T49] veth0_vlan: left promiscuous mode [ 406.664657][ T49] team_slave_1 (unregistering): left promiscuous mode [ 406.674057][ T49] team_slave_1 (unregistering): left allmulticast mode [ 406.684881][ T49] team0 (unregistering): Port device team_slave_1 removed [ 406.729921][ T49] C (unregistering): left promiscuous mode [ 406.735945][ T49] C (unregistering): left allmulticast mode [ 406.745233][ T49] team0 (unregistering): Port device C removed [ 406.889134][ T49] bridge_slave_1 (unregistering): left promiscuous mode [ 406.896507][ T49] bridge_slave_1 (unregistering): left allmulticast mode [ 406.907678][ T49] team0 (unregistering): Port device bridge_slave_1 removed [ 407.259158][T12811] netlink: 'syz.0.2457': attribute type 10 has an invalid length. [ 407.267388][T12811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2457'. [ 407.276960][T12811] ipvlan1: entered promiscuous mode [ 407.285159][T12811] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 407.307894][T12816] netlink: 'syz.2.2459': attribute type 10 has an invalid length. [ 407.324373][T12816] team0: Device hsr_slave_0 failed to register rx_handler [ 407.348833][T12819] netlink: 'syz.1.2460': attribute type 10 has an invalid length. [ 407.398954][T12819] team0: Device hsr_slave_0 failed to register rx_handler [ 407.541821][T12638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.633172][T12638] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.667057][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.674355][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.750472][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.757734][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.952573][T12638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 407.983863][T12638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.116275][T12842] netlink: 'syz.2.2466': attribute type 29 has an invalid length. [ 408.189101][T12842] netlink: 'syz.2.2466': attribute type 29 has an invalid length. [ 408.740616][T12638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.878377][T12638] veth0_vlan: entered promiscuous mode [ 408.904088][T12866] netlink: 'syz.0.2467': attribute type 10 has an invalid length. [ 408.934008][T12866] team0: Device hsr_slave_0 failed to register rx_handler [ 409.031761][T12870] netlink: 'syz.1.2470': attribute type 10 has an invalid length. [ 409.053307][T12870] team0: Device hsr_slave_0 failed to register rx_handler [ 409.099267][T12638] veth1_vlan: entered promiscuous mode [ 409.135583][T12874] netlink: 'syz.2.2471': attribute type 10 has an invalid length. [ 409.156764][T12874] team0: Device hsr_slave_0 failed to register rx_handler [ 409.315580][T12638] veth0_macvtap: entered promiscuous mode [ 409.349538][T12638] veth1_macvtap: entered promiscuous mode [ 409.427434][T12638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.452342][T12638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.479103][T12638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.493489][T12638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.506074][T12638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.563396][T12638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.601732][T12638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.615321][T12638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.633830][T12638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.651556][T12638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.672085][T12638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.709466][T12638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.739367][T12638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.760538][T12638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.770007][T12638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.778947][T12638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.980276][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.027910][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.134961][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.166364][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.372368][T12903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.489008][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.249173][T12923] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.2479'. [ 411.524358][T12926] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2479'. [ 411.623981][T12926] openvswitch: netlink: Key type 29 is not supported [ 412.115009][T12933] netlink: 'syz.3.2480': attribute type 10 has an invalid length. [ 412.274854][T12933] team0: Device hsr_slave_0 failed to register rx_handler [ 412.427599][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.438603][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.447616][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.455925][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.473973][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 412.481695][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.646399][T12933] syz.3.2480 (12933) used greatest stack depth: 18344 bytes left [ 412.695962][T12935] chnl_net:caif_netlink_parms(): no params data found [ 412.939174][T12935] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.966678][T12935] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.987236][T12935] bridge_slave_0: entered allmulticast mode [ 413.000879][T12935] bridge_slave_0: entered promiscuous mode [ 413.101420][T12935] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.112026][T12935] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.128168][T12935] bridge_slave_1: entered allmulticast mode [ 413.138098][T12935] bridge_slave_1: entered promiscuous mode [ 413.146384][T12954] netlink: 'syz.3.2482': attribute type 10 has an invalid length. [ 413.161332][T12954] team0: Device hsr_slave_0 failed to register rx_handler [ 413.234958][T12935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.257877][T12935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.383894][ T6020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.498916][T12935] team0: Port device team_slave_0 added [ 413.554551][ T6020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.592806][T12935] team0: Port device team_slave_1 added [ 413.712282][ T6020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.753300][T12935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.780666][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.839722][T12935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.883835][T12935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.895641][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.958847][T12935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.013084][ T6020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.104704][T12972] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2492'. [ 414.146160][T12935] hsr_slave_0: entered promiscuous mode [ 414.185968][T12935] hsr_slave_1: entered promiscuous mode [ 414.219747][T12935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.250837][T12935] Cannot create hsr debugfs directory [ 414.321142][T12973] netlink: 'syz.1.2490': attribute type 10 has an invalid length. [ 414.340157][T12973] team0: Device hsr_slave_0 failed to register rx_handler [ 414.378545][T12978] netlink: 'syz.2.2500': attribute type 10 has an invalid length. [ 414.554570][ T51] Bluetooth: hci1: command tx timeout [ 414.931630][T12988] netlink: 'syz.2.2496': attribute type 10 has an invalid length. [ 415.589200][T13000] netlink: 'syz.1.2497': attribute type 10 has an invalid length. [ 415.630379][T13000] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 415.660595][T12999] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 415.673767][T12999] dvmrp1: linktype set to 823 [ 415.798770][T12997] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 416.631414][ T51] Bluetooth: hci1: command tx timeout [ 416.675988][T13031] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2503'. [ 416.911710][T12935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.970348][T12935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.998618][T12935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.037722][T13042] netlink: 'syz.1.2505': attribute type 10 has an invalid length. [ 417.056872][T13042] team0: Device hsr_slave_0 failed to register rx_handler [ 417.136083][T12935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.227538][T13049] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2507'. [ 417.259549][T13050] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2507'. [ 417.478540][T12935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.683666][T12935] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.803396][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.810595][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.840391][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.847677][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.866492][T13058] netlink: 'syz.3.2509': attribute type 10 has an invalid length. [ 418.223174][T13068] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2515'. [ 418.607919][ T6020] hsr_slave_0: left promiscuous mode [ 418.619165][ T6020] hsr_slave_1: left promiscuous mode [ 418.656786][ T6020] veth1_macvtap: left promiscuous mode [ 418.667345][ T6020] veth0_macvtap: left promiscuous mode [ 418.675962][ T6020] veth1_vlan: left promiscuous mode [ 418.711160][ T51] Bluetooth: hci1: command tx timeout [ 419.672335][ T6020] team_slave_1 (unregistering): left promiscuous mode [ 419.680721][ T6020] team_slave_1 (unregistering): left allmulticast mode [ 419.699586][ T6020] team0 (unregistering): Port device team_slave_1 removed [ 419.766712][ T6020] C (unregistering): left promiscuous mode [ 419.773940][ T6020] C (unregistering): left allmulticast mode [ 419.782783][ T6020] team0 (unregistering): Port device C removed [ 420.232830][T13078] netlink: 'syz.3.2518': attribute type 10 has an invalid length. [ 420.248018][T13078] team0: Device hsr_slave_0 failed to register rx_handler [ 420.433801][T12935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.555905][T12935] veth0_vlan: entered promiscuous mode [ 420.594881][T12935] veth1_vlan: entered promiscuous mode [ 420.609524][T13085] netlink: 'syz.2.2520': attribute type 10 has an invalid length. [ 420.638615][T13085] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 420.754570][T12935] veth0_macvtap: entered promiscuous mode [ 420.792152][ T51] Bluetooth: hci1: command tx timeout [ 420.797228][T12935] veth1_macvtap: entered promiscuous mode [ 420.872490][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.906656][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.922733][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.937913][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.946036][T13095] netlink: 'syz.3.2524': attribute type 21 has an invalid length. [ 420.950336][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.981339][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.996831][T12935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.007472][T13096] netlink: 'syz.2.2522': attribute type 10 has an invalid length. [ 421.018190][T13096] team0: Device hsr_slave_0 failed to register rx_handler [ 421.063590][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.091993][T13098] FAULT_INJECTION: forcing a failure. [ 421.091993][T13098] name failslab, interval 1, probability 0, space 0, times 0 [ 421.093369][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.119571][T13098] CPU: 0 PID: 13098 Comm: syz.3.2525 Not tainted syzkaller #0 [ 421.127078][T13098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 421.137151][T13098] Call Trace: [ 421.139374][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.140539][T13098] [ 421.151657][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.153888][T13098] dump_stack_lvl+0x18c/0x250 [ 421.164829][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.169034][T13098] ? show_regs_print_info+0x20/0x20 [ 421.181077][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.184701][T13098] ? load_image+0x420/0x420 [ 421.196360][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.199319][T13098] ? __might_sleep+0xe0/0xe0 [ 421.211275][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.214572][T13098] ? __lock_acquire+0x7d40/0x7d40 [ 421.226796][T12935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.229379][T13098] should_fail_ex+0x39d/0x4d0 [ 421.241488][T13098] should_failslab+0x9/0x20 [ 421.241682][T12935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.246097][T13098] slab_pre_alloc_hook+0x59/0x310 [ 421.259129][T12935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.259879][T13098] ? tomoyo_encode+0x28b/0x540 [ 421.273475][T13098] ? tomoyo_encode+0x28b/0x540 [ 421.278270][T13098] __kmem_cache_alloc_node+0x53/0x250 [ 421.283816][T13098] ? tomoyo_encode+0x28b/0x540 [ 421.288945][T13098] __kmalloc+0xa4/0x230 [ 421.293309][T13098] tomoyo_encode+0x28b/0x540 [ 421.298025][T13098] tomoyo_realpath_from_path+0x592/0x5d0 [ 421.303722][T13098] tomoyo_path_number_perm+0x248/0x620 [ 421.309719][T13098] ? tomoyo_path_number_perm+0x217/0x620 [ 421.315585][T13098] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 421.321098][T13098] ? ksys_write+0x1c4/0x260 [ 421.325689][T13098] ? __fget_files+0x28/0x4b0 [ 421.330388][T13098] ? __fget_files+0x28/0x4b0 [ 421.335697][T13098] security_file_ioctl+0x70/0xa0 [ 421.340853][T13098] __se_sys_ioctl+0x48/0x170 [ 421.346272][T13098] do_syscall_64+0x55/0xa0 [ 421.350806][T13098] ? clear_bhb_loop+0x40/0x90 [ 421.355600][T13098] ? clear_bhb_loop+0x40/0x90 [ 421.360471][T13098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.366540][T13098] RIP: 0033:0x7f14ae39c819 [ 421.371069][T13098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.390717][T13098] RSP: 002b:00007f14af186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.399161][T13098] RAX: ffffffffffffffda RBX: 00007f14ae615fa0 RCX: 00007f14ae39c819 [ 421.407414][T13098] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 421.415647][T13098] RBP: 00007f14af186090 R08: 0000000000000000 R09: 0000000000000000 [ 421.424004][T13098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.431977][T13098] R13: 00007f14ae616038 R14: 00007f14ae615fa0 R15: 00007ffd06bc6ef8 [ 421.440069][T13098] [ 421.443217][T12935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.452989][T13098] ERROR: Out of memory at tomoyo_realpath_from_path. [ 421.461273][T12935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.702050][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.709995][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.883163][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.893022][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.894619][T13114] netlink: 'syz.3.2531': attribute type 10 has an invalid length. [ 421.909865][T13114] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 422.150365][T13122] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 422.185533][T13122] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 422.597961][T13135] netlink: 'syz.2.2538': attribute type 10 has an invalid length. [ 422.619561][T13135] team0: Device hsr_slave_0 failed to register rx_handler [ 422.762515][T13141] netlink: 'syz.0.2540': attribute type 28 has an invalid length. [ 422.811138][T13141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2540'. [ 423.228828][T13153] validate_nla: 1 callbacks suppressed [ 423.228870][T13153] netlink: 'syz.0.2544': attribute type 29 has an invalid length. [ 423.263153][T13153] netlink: 'syz.0.2544': attribute type 29 has an invalid length. [ 423.504336][T13164] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2548'. [ 423.664237][T13171] netlink: 'syz.0.2550': attribute type 9 has an invalid length. [ 423.684036][T13171] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2550'. [ 423.875636][T13184] netlink: 'syz.1.2552': attribute type 29 has an invalid length. [ 423.922663][T13184] netlink: 'syz.1.2552': attribute type 29 has an invalid length. [ 423.955461][T13188] netlink: 'syz.2.2555': attribute type 10 has an invalid length. [ 423.979847][T13188] team0: Device hsr_slave_0 failed to register rx_handler [ 424.075846][T13194] netlink: 'syz.0.2557': attribute type 29 has an invalid length. [ 424.086162][T13194] netlink: 'syz.0.2557': attribute type 29 has an invalid length. [ 424.808080][T13218] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2567'. [ 426.112920][T13215] delete_channel: no stack [ 426.181542][T13238] netlink: 'syz.0.2571': attribute type 29 has an invalid length. [ 426.240735][T13238] netlink: 'syz.0.2571': attribute type 29 has an invalid length. [ 426.304461][T13243] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2572'. [ 426.926017][T13247] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 426.982085][T13247] dvmrp1: linktype set to 823 [ 427.206775][T13247] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 427.567493][T13257] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2577'. [ 427.584532][T13257] openvswitch: netlink: Message has 20476 unknown bytes. [ 427.840518][T13266] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2579'. [ 429.209279][T13279] validate_nla: 2 callbacks suppressed [ 429.209297][T13279] netlink: 'syz.3.2582': attribute type 29 has an invalid length. [ 431.107309][T13279] netlink: 'syz.3.2582': attribute type 29 has an invalid length. [ 431.280799][T13287] lo: entered allmulticast mode [ 431.416051][T13287] lo: entered promiscuous mode [ 431.423084][T13287] lo: left allmulticast mode [ 431.439700][T13287] netlink: 92160 bytes leftover after parsing attributes in process `syz.1.2585'. [ 431.772261][T13298] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 431.794548][T13298] dvmrp1: linktype set to 823 [ 431.836433][T13298] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 433.360557][T13309] netlink: 'syz.1.2593': attribute type 10 has an invalid length. [ 433.380089][T13309] team0: Device hsr_slave_0 failed to register rx_handler [ 433.606146][T13317] netlink: 'syz.1.2595': attribute type 29 has an invalid length. [ 433.622830][T13317] netlink: 'syz.1.2595': attribute type 29 has an invalid length. [ 434.036747][T13338] delete_channel: no stack [ 434.072159][T13339] netlink: 'syz.2.2603': attribute type 10 has an invalid length. [ 434.105956][T13339] team0: Device hsr_slave_0 failed to register rx_handler [ 434.693138][T13354] netlink: 'syz.0.2609': attribute type 29 has an invalid length. [ 434.784942][T13354] netlink: 'syz.0.2609': attribute type 29 has an invalid length. [ 435.035130][T13361] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 435.057271][T13361] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 435.085675][T13366] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 435.102847][T13361] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 435.119359][T13361] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 435.382789][T13376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2617'. [ 435.744441][T13386] netlink: 'syz.1.2619': attribute type 10 has an invalid length. [ 435.758767][T13386] team0: Device hsr_slave_0 failed to register rx_handler [ 437.230126][T13403] netlink: 'syz.0.2624': attribute type 29 has an invalid length. [ 437.277430][T13403] netlink: 'syz.0.2624': attribute type 29 has an invalid length. [ 437.684182][T13406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2625'. [ 437.700628][T13406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2625'. [ 438.050920][T13428] team0: Device hsr_slave_0 failed to register rx_handler [ 439.243927][T13431] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2633'. [ 439.490169][T13449] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2639'. [ 439.606062][T13449] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2639'. [ 440.316153][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.323368][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.794252][T13473] validate_nla: 4 callbacks suppressed [ 440.794270][T13473] netlink: 'syz.3.2645': attribute type 10 has an invalid length. [ 440.831153][T13473] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2645'. [ 444.108402][ T49] tipc: Subscription rejected, illegal request [ 444.130358][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2656'. [ 444.156152][T13495] netlink: 'syz.0.2655': attribute type 21 has an invalid length. [ 444.191132][T13495] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2655'. [ 444.391806][T13507] netlink: 'syz.0.2659': attribute type 29 has an invalid length. [ 445.370095][T13507] netlink: 'syz.0.2659': attribute type 29 has an invalid length. [ 446.195273][T13528] netlink: 'syz.1.2667': attribute type 10 has an invalid length. [ 446.232381][T13528] team0: Device hsr_slave_0 failed to register rx_handler [ 446.550891][T13542] netlink: 'syz.0.2670': attribute type 10 has an invalid length. [ 446.601355][T13542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2670'. [ 446.636309][T13542] bridge0: port 3(ipvlan1) entered blocking state [ 446.660722][T13542] bridge0: port 3(ipvlan1) entered disabled state [ 446.679935][T13542] ipvlan1: entered allmulticast mode [ 446.691433][T13542] veth0_vlan: entered allmulticast mode [ 446.703723][T13542] ipvlan1: left allmulticast mode [ 446.709104][T13542] veth0_vlan: left allmulticast mode [ 446.741576][T13549] netlink: 'syz.1.2673': attribute type 29 has an invalid length. [ 446.762389][T13542] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 446.821874][T13549] netlink: 'syz.1.2673': attribute type 29 has an invalid length. [ 447.101314][T13559] netlink: 'syz.1.2677': attribute type 10 has an invalid length. [ 447.120424][T13559] team0: Device hsr_slave_0 failed to register rx_handler [ 449.961192][T13564] mac80211_hwsim hwsim42 »»»»»»: renamed from wlan0 [ 449.984142][T13563] netlink: 'syz.3.2678': attribute type 10 has an invalid length. [ 450.022747][T13563] team0: Device hsr_slave_0 failed to register rx_handler [ 451.504291][T13592] netlink: 'syz.3.2685': attribute type 29 has an invalid length. [ 451.521453][T13592] netlink: 'syz.3.2685': attribute type 29 has an invalid length. [ 452.288994][T13600] netlink: 'syz.0.2689': attribute type 10 has an invalid length. [ 452.346926][T13600] team0: Device hsr_slave_0 failed to register rx_handler [ 453.517184][T13636] netlink: 'syz.0.2700': attribute type 29 has an invalid length. [ 453.564676][T13636] netlink: 'syz.0.2700': attribute type 29 has an invalid length. [ 453.613846][T13643] netlink: 'syz.3.2698': attribute type 10 has an invalid length. [ 453.641929][T13643] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 454.288229][T13648] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2702'. [ 454.386966][T13650] netlink: 'syz.3.2703': attribute type 10 has an invalid length. [ 454.432428][T13650] team0: Device hsr_slave_0 failed to register rx_handler [ 454.667463][T13665] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2710'. [ 455.029913][T13668] netlink: 'syz.0.2711': attribute type 10 has an invalid length. [ 455.041472][T13668] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2711'. [ 455.062858][T13668] hsr0: entered promiscuous mode [ 455.116093][T13668] bridge0: port 3(hsr0) entered blocking state [ 455.147919][T13668] bridge0: port 3(hsr0) entered disabled state [ 455.177655][T13668] hsr0: entered allmulticast mode [ 455.189717][T13668] hsr_slave_0: entered allmulticast mode [ 455.226520][T13668] hsr_slave_1: entered allmulticast mode [ 455.260448][T13668] bridge0: port 3(hsr0) entered blocking state [ 455.268656][T13668] bridge0: port 3(hsr0) entered forwarding state [ 455.447649][T13686] netlink: 'syz.1.2719': attribute type 10 has an invalid length. [ 455.484346][T13686] team0: Device hsr_slave_0 failed to register rx_handler [ 455.987773][T13710] netlink: 'syz.0.2729': attribute type 29 has an invalid length. [ 456.204836][T13714] team0: Device hsr_slave_0 failed to register rx_handler [ 456.699376][T13735] FAULT_INJECTION: forcing a failure. [ 456.699376][T13735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.719084][T13735] CPU: 1 PID: 13735 Comm: syz.1.2740 Not tainted syzkaller #0 [ 456.726606][T13735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 456.736683][T13735] Call Trace: [ 456.739982][T13735] [ 456.742925][T13735] dump_stack_lvl+0x18c/0x250 [ 456.747636][T13735] ? show_regs_print_info+0x20/0x20 [ 456.752870][T13735] ? load_image+0x420/0x420 [ 456.757501][T13735] ? __might_fault+0xaa/0x120 [ 456.762345][T13735] ? __lock_acquire+0x7d40/0x7d40 [ 456.767393][T13735] ? tomoyo_path_number_perm+0x5b4/0x620 [ 456.773603][T13735] should_fail_ex+0x39d/0x4d0 [ 456.778509][T13735] _copy_from_user+0x2f/0xe0 [ 456.783256][T13735] wext_handle_ioctl+0xc8/0x1d0 [ 456.788330][T13735] ? call_commit_handler+0xf0/0xf0 [ 456.793515][T13735] sock_ioctl+0x15d/0x7e0 [ 456.797964][T13735] ? sock_poll+0x3e0/0x3e0 [ 456.802503][T13735] ? bpf_lsm_file_ioctl+0x9/0x10 [ 456.807639][T13735] ? security_file_ioctl+0x80/0xa0 [ 456.812788][T13735] ? sock_poll+0x3e0/0x3e0 [ 456.817504][T13735] __se_sys_ioctl+0xfd/0x170 [ 456.822423][T13735] do_syscall_64+0x55/0xa0 [ 456.826961][T13735] ? clear_bhb_loop+0x40/0x90 [ 456.831853][T13735] ? clear_bhb_loop+0x40/0x90 [ 456.836661][T13735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.842589][T13735] RIP: 0033:0x7fb9d3f9c819 [ 456.847140][T13735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.867586][T13735] RSP: 002b:00007fb9d4e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.876489][T13735] RAX: ffffffffffffffda RBX: 00007fb9d4215fa0 RCX: 00007fb9d3f9c819 [ 456.884675][T13735] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 456.892870][T13735] RBP: 00007fb9d4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 456.901040][T13735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.909148][T13735] R13: 00007fb9d4216038 R14: 00007fb9d4215fa0 R15: 00007fff00edbd38 [ 456.917352][T13735] [ 457.159613][T13741] validate_nla: 4 callbacks suppressed [ 457.159630][T13741] netlink: 'syz.1.2742': attribute type 10 has an invalid length. [ 457.181287][T13741] team0: Device hsr_slave_0 failed to register rx_handler [ 457.422598][T13751] FAULT_INJECTION: forcing a failure. [ 457.422598][T13751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.449505][T13751] CPU: 0 PID: 13751 Comm: syz.3.2745 Not tainted syzkaller #0 [ 457.457129][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 457.467395][T13751] Call Trace: [ 457.470788][T13751] [ 457.473742][T13751] dump_stack_lvl+0x18c/0x250 [ 457.478523][T13751] ? show_regs_print_info+0x20/0x20 [ 457.483922][T13751] ? load_image+0x420/0x420 [ 457.488689][T13751] ? __might_fault+0xaa/0x120 [ 457.493416][T13751] ? __lock_acquire+0x7d40/0x7d40 [ 457.498487][T13751] should_fail_ex+0x39d/0x4d0 [ 457.503213][T13751] _copy_from_user+0x2f/0xe0 [ 457.507892][T13751] ___sys_sendmsg+0x1c7/0x360 [ 457.512594][T13751] ? get_pid_task+0x20/0x1e0 [ 457.517201][T13751] ? __sys_sendmsg+0x2a0/0x2a0 [ 457.522002][T13751] ? __lock_acquire+0x7d40/0x7d40 [ 457.527073][T13751] __se_sys_sendmsg+0x1c2/0x2b0 [ 457.532048][T13751] ? __x64_sys_sendmsg+0x80/0x80 [ 457.537146][T13751] ? lockdep_hardirqs_on+0x98/0x150 [ 457.542367][T13751] do_syscall_64+0x55/0xa0 [ 457.546918][T13751] ? clear_bhb_loop+0x40/0x90 [ 457.551701][T13751] ? clear_bhb_loop+0x40/0x90 [ 457.556395][T13751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.562403][T13751] RIP: 0033:0x7f14ae39c819 [ 457.566828][T13751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.586635][T13751] RSP: 002b:00007f14af186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.595502][T13751] RAX: ffffffffffffffda RBX: 00007f14ae615fa0 RCX: 00007f14ae39c819 [ 457.603656][T13751] RDX: 0000000004000001 RSI: 00002000000023c0 RDI: 0000000000000003 [ 457.611781][T13751] RBP: 00007f14af186090 R08: 0000000000000000 R09: 0000000000000000 [ 457.619856][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.628228][T13751] R13: 00007f14ae616038 R14: 00007f14ae615fa0 R15: 00007ffd06bc6ef8 [ 457.636483][T13751] [ 457.726558][T13757] C: renamed from team_slave_0 (while UP) [ 457.881222][T13757] netlink: 'syz.0.2748': attribute type 3 has an invalid length. [ 457.889837][T13757] netlink: 'syz.0.2748': attribute type 1 has an invalid length. [ 457.898751][T13757] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2748'. [ 457.908985][T13757] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 458.269323][T13782] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2758'. [ 458.361676][T13784] netlink: 'syz.1.2756': attribute type 10 has an invalid length. [ 458.370454][T13784] team0: Device hsr_slave_0 failed to register rx_handler [ 458.552801][T13777] netlink: 'syz.3.2757': attribute type 10 has an invalid length. [ 458.561717][T13777] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2757'. [ 458.574041][T13777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.588032][T13777] hsr0: entered promiscuous mode [ 458.610304][T13777] bridge0: port 3(hsr0) entered blocking state [ 458.619118][T13777] bridge0: port 3(hsr0) entered disabled state [ 458.628688][T13777] hsr0: entered allmulticast mode [ 458.637049][T13777] hsr_slave_0: entered allmulticast mode [ 458.671826][T13777] hsr_slave_1: entered allmulticast mode [ 458.715873][T13777] bridge0: port 3(hsr0) entered blocking state [ 458.723177][T13777] bridge0: port 3(hsr0) entered forwarding state [ 459.268564][T13806] netlink: 'syz.2.2768': attribute type 3 has an invalid length. [ 459.281114][T13806] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2768'. [ 461.829852][T13818] hsr0: left allmulticast mode [ 461.835533][T13818] hsr_slave_0: left allmulticast mode [ 461.844211][T13818] hsr_slave_1: left allmulticast mode [ 461.850576][T13818] bridge0: port 3(hsr0) entered disabled state [ 461.867668][T13818] bridge_slave_1: left allmulticast mode [ 461.878509][T13818] bridge_slave_1: left promiscuous mode [ 461.894742][T13818] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.908566][T13821] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2773'. [ 461.920143][T13818] bridge_slave_0: left allmulticast mode [ 461.941343][T13818] bridge_slave_0: left promiscuous mode [ 461.947169][T13818] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.090346][T13817] netlink: 'syz.2.2771': attribute type 10 has an invalid length. [ 462.098607][T13817] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2771'. [ 462.107878][T13817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.118650][T13817] hsr0: entered promiscuous mode [ 462.136867][T13817] bridge0: port 3(hsr0) entered blocking state [ 462.144671][T13817] bridge0: port 3(hsr0) entered disabled state [ 462.152526][T13817] hsr0: entered allmulticast mode [ 462.157636][T13817] hsr_slave_0: entered allmulticast mode [ 462.164078][T13817] hsr_slave_1: entered allmulticast mode [ 462.185138][T13817] bridge0: port 3(hsr0) entered blocking state [ 462.191658][T13817] bridge0: port 3(hsr0) entered forwarding state [ 462.232100][T13821] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2773'. [ 462.270186][T13821] bridge_slave_1: default FDB implementation only supports local addresses [ 462.294093][T13825] netlink: 'syz.1.2774': attribute type 10 has an invalid length. [ 462.322240][T13825] team0: Device hsr_slave_0 failed to register rx_handler [ 462.787294][T13833] netlink: 'syz.3.2778': attribute type 39 has an invalid length. [ 463.297894][T13848] netlink: 'syz.3.2783': attribute type 10 has an invalid length. [ 463.310612][T13848] team0: Device hsr_slave_0 failed to register rx_handler [ 464.837660][T13871] netlink: 'syz.2.2791': attribute type 10 has an invalid length. [ 464.872106][T13871] team0: Device hsr_slave_0 failed to register rx_handler [ 465.787722][T13889] FAULT_INJECTION: forcing a failure. [ 465.787722][T13889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.842588][T13889] CPU: 1 PID: 13889 Comm: syz.1.2805 Not tainted syzkaller #0 [ 465.850374][T13889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.860606][T13889] Call Trace: [ 465.863923][T13889] [ 465.867229][T13889] dump_stack_lvl+0x18c/0x250 [ 465.872035][T13889] ? show_regs_print_info+0x20/0x20 [ 465.877357][T13889] ? load_image+0x420/0x420 [ 465.881897][T13889] ? __might_fault+0xaa/0x120 [ 465.886621][T13889] ? __lock_acquire+0x7d40/0x7d40 [ 465.891801][T13889] should_fail_ex+0x39d/0x4d0 [ 465.896609][T13889] _copy_from_iter+0x1d9/0x12e0 [ 465.901668][T13889] ? __virt_addr_valid+0x18c/0x540 [ 465.906909][T13889] ? __lock_acquire+0x7d40/0x7d40 [ 465.912069][T13889] ? rcu_is_watching+0x15/0xb0 [ 465.916880][T13889] ? copyout_mc+0x70/0x70 [ 465.921248][T13889] ? __virt_addr_valid+0x18c/0x540 [ 465.926661][T13889] ? __virt_addr_valid+0x18c/0x540 [ 465.931798][T13889] ? __virt_addr_valid+0x469/0x540 [ 465.937207][T13889] ? __check_object_size+0x506/0xa20 [ 465.942539][T13889] kcm_sendmsg+0xd95/0x28b0 [ 465.947251][T13889] ? kcm_getsockopt+0x280/0x280 [ 465.952306][T13889] ? aa_sock_msg_perm+0x94/0x150 [ 465.957352][T13889] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 465.962820][T13889] ? security_socket_sendmsg+0x80/0xa0 [ 465.968299][T13889] ? kcm_getsockopt+0x280/0x280 [ 465.973253][T13889] ____sys_sendmsg+0x5ba/0x960 [ 465.978036][T13889] ? __asan_memset+0x22/0x40 [ 465.982804][T13889] ? __sys_sendmsg_sock+0x30/0x30 [ 465.987889][T13889] ? __import_iovec+0x5f2/0x850 [ 465.992921][T13889] ? import_iovec+0x73/0xa0 [ 465.997870][T13889] ___sys_sendmsg+0x2a6/0x360 [ 466.002576][T13889] ? __sys_sendmsg+0x2a0/0x2a0 [ 466.007352][T13889] ? __lock_acquire+0x7d40/0x7d40 [ 466.012483][T13889] __se_sys_sendmsg+0x1c2/0x2b0 [ 466.017357][T13889] ? __x64_sys_sendmsg+0x80/0x80 [ 466.022314][T13889] ? lockdep_hardirqs_on+0x98/0x150 [ 466.027525][T13889] do_syscall_64+0x55/0xa0 [ 466.032028][T13889] ? clear_bhb_loop+0x40/0x90 [ 466.036716][T13889] ? clear_bhb_loop+0x40/0x90 [ 466.041405][T13889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.047385][T13889] RIP: 0033:0x7fb9d3f9c819 [ 466.051976][T13889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.071775][T13889] RSP: 002b:00007fb9d4e77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.080205][T13889] RAX: ffffffffffffffda RBX: 00007fb9d4215fa0 RCX: 00007fb9d3f9c819 [ 466.088266][T13889] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 466.096339][T13889] RBP: 00007fb9d4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 466.104395][T13889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.112370][T13889] R13: 00007fb9d4216038 R14: 00007fb9d4215fa0 R15: 00007fff00edbd38 [ 466.120352][T13889] [ 466.630461][T13906] netlink: 'syz.2.2803': attribute type 10 has an invalid length. [ 466.651827][T13906] team0: Device hsr_slave_0 failed to register rx_handler [ 466.851613][T13911] netlink: 'syz.3.2806': attribute type 10 has an invalid length. [ 466.901702][T13911] team0: Device hsr_slave_0 failed to register rx_handler [ 467.615160][T13920] delete_channel: no stack [ 467.749842][T13927] netlink: 'syz.2.2811': attribute type 10 has an invalid length. [ 467.769298][T13927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2811'. [ 467.784658][T13927] veth0_vlan: entered allmulticast mode [ 467.804586][T13927] bridge0: port 4(veth0_vlan) entered blocking state [ 467.820245][T13927] bridge0: port 4(veth0_vlan) entered disabled state [ 467.852930][T13927] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 468.204641][T13945] netlink: 'syz.0.2817': attribute type 10 has an invalid length. [ 468.243580][T13945] team0: Device hsr_slave_0 failed to register rx_handler [ 468.367188][T13951] netlink: 'syz.3.2821': attribute type 10 has an invalid length. [ 468.402681][T13951] team0: Device hsr_slave_0 failed to register rx_handler [ 469.846512][T13977] netlink: 'syz.0.2832': attribute type 10 has an invalid length. [ 469.878616][T13977] team0: Device hsr_slave_0 failed to register rx_handler [ 470.066522][T13981] netlink: 'syz.3.2833': attribute type 21 has an invalid length. [ 470.122854][T13981] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2833'. [ 470.133267][T13981] netlink: 21096 bytes leftover after parsing attributes in process `syz.3.2833'. [ 470.144073][T13981] tipc: Started in network mode [ 470.158044][T13981] tipc: Node identity 1a, cluster identity 4711 [ 470.167939][T13981] tipc: Node number set to 26 [ 470.230461][T13986] netlink: 'syz.2.2837': attribute type 2 has an invalid length. [ 470.297677][T13989] netlink: 'syz.1.2836': attribute type 10 has an invalid length. [ 470.332133][T13989] team0: Device hsr_slave_0 failed to register rx_handler [ 471.092800][T14004] netlink: 'syz.0.2840': attribute type 10 has an invalid length. [ 471.153796][T14004] team0: Device hsr_slave_0 failed to register rx_handler [ 471.246337][T14008] netlink: 'syz.2.2844': attribute type 10 has an invalid length. [ 471.257358][T14011] netlink: 'syz.3.2843': attribute type 3 has an invalid length. [ 471.266324][T14008] team0: Device hsr_slave_0 failed to register rx_handler [ 471.278374][T14011] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2843'. [ 471.318097][T14013] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2845'. [ 471.644901][T14017] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2847'. [ 471.732830][T14017] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2847'. [ 471.764892][T14017] veth0_macvtap: left promiscuous mode [ 471.996934][T14019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2848'. [ 472.012711][T14023] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2849'. [ 472.253881][T14032] team0: Device hsr_slave_0 failed to register rx_handler [ 472.538783][T14038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2854'. [ 472.731984][T14050] team0: Device hsr_slave_0 failed to register rx_handler [ 472.896962][T14055] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2858'. [ 473.192520][T14066] validate_nla: 7 callbacks suppressed [ 473.192546][T14066] netlink: 'syz.0.2863': attribute type 10 has an invalid length. [ 473.526430][T14070] netlink: 'syz.3.2865': attribute type 10 has an invalid length. [ 473.541485][T14070] team0: Device hsr_slave_0 failed to register rx_handler [ 473.844904][T14080] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2868'. [ 473.951783][T14083] netlink: 'syz.3.2869': attribute type 10 has an invalid length. [ 473.976663][T14083] team0: Device hsr_slave_0 failed to register rx_handler [ 474.275159][T14099] netlink: 'syz.1.2876': attribute type 49 has an invalid length. [ 474.513606][T14104] netlink: 'syz.3.2878': attribute type 10 has an invalid length. [ 474.592673][T14104] team0: Device hsr_slave_0 failed to register rx_handler [ 475.395428][T14119] netlink: 'syz.1.2883': attribute type 10 has an invalid length. [ 475.407647][T14119] team0: Device hsr_slave_0 failed to register rx_handler [ 475.954500][T14140] netlink: 'syz.1.2893': attribute type 10 has an invalid length. [ 476.290157][T14152] netlink: 'syz.0.2897': attribute type 10 has an invalid length. [ 476.331793][T14152] team0: Device hsr_slave_0 failed to register rx_handler [ 477.026902][T14171] netlink: 'syz.0.2906': attribute type 10 has an invalid length. [ 477.095389][T14171] netlink: 'syz.0.2906': attribute type 9 has an invalid length. [ 477.104741][T14171] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2906'. [ 477.159155][T14179] team0: Device hsr_slave_0 failed to register rx_handler [ 477.499066][T14180] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2906'. [ 477.671717][T14188] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2912'. [ 477.681665][T14196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2916'. [ 477.681728][T14196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2916'. [ 477.693242][T14196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2916'. [ 477.706456][T14196] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2916'. [ 477.945062][T14199] FAULT_INJECTION: forcing a failure. [ 477.945062][T14199] name failslab, interval 1, probability 0, space 0, times 0 [ 477.990740][T14199] CPU: 1 PID: 14199 Comm: syz.0.2917 Not tainted syzkaller #0 [ 477.998390][T14199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.008567][T14199] Call Trace: [ 478.011876][T14199] [ 478.015216][T14199] dump_stack_lvl+0x18c/0x250 [ 478.020115][T14199] ? sctp_sendmsg+0x1575/0x28c0 [ 478.025065][T14199] ? ___sys_sendmsg+0x2a6/0x360 [ 478.030043][T14199] ? show_regs_print_info+0x20/0x20 [ 478.035284][T14199] ? load_image+0x420/0x420 [ 478.039849][T14199] should_fail_ex+0x39d/0x4d0 [ 478.044575][T14199] should_failslab+0x9/0x20 [ 478.049107][T14199] slab_pre_alloc_hook+0x59/0x310 [ 478.054166][T14199] ? sctp_add_bind_addr+0x8c/0x360 [ 478.059317][T14199] __kmem_cache_alloc_node+0x53/0x250 [ 478.064737][T14199] ? sctp_add_bind_addr+0x8c/0x360 [ 478.069900][T14199] kmalloc_trace+0x2a/0xe0 [ 478.074442][T14199] sctp_add_bind_addr+0x8c/0x360 [ 478.079415][T14199] sctp_copy_local_addr_list+0x315/0x4f0 [ 478.085166][T14199] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 478.091092][T14199] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 478.097295][T14199] ? sctp_v6_is_any+0x64/0x70 [ 478.102129][T14199] ? sctp_copy_one_addr+0x8c/0x350 [ 478.107436][T14199] sctp_bind_addr_copy+0xb3/0x3c0 [ 478.112642][T14199] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 478.119370][T14199] sctp_connect_new_asoc+0x2f9/0x6a0 [ 478.124898][T14199] ? __sctp_connect+0xd80/0xd80 [ 478.129868][T14199] ? __local_bh_enable_ip+0x13a/0x1c0 [ 478.135721][T14199] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 478.141436][T14199] ? security_sctp_bind_connect+0x89/0xb0 [ 478.147180][T14199] sctp_sendmsg+0x1575/0x28c0 [ 478.151901][T14199] ? sctp_getsockopt+0xb60/0xb60 [ 478.156894][T14199] ? aa_sk_perm+0x83c/0x970 [ 478.161436][T14199] ? aa_af_perm+0x330/0x330 [ 478.166061][T14199] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 478.172638][T14199] ? sock_rps_record_flow+0x19/0x3f0 [ 478.178069][T14199] ? inet_sendmsg+0xe9/0x2f0 [ 478.182752][T14199] ? inet_send_prepare+0x260/0x260 [ 478.187864][T14199] ____sys_sendmsg+0x5ba/0x960 [ 478.193530][T14199] ? __lock_acquire+0x7d40/0x7d40 [ 478.198803][T14199] ? __asan_memset+0x22/0x40 [ 478.203502][T14199] ? __sys_sendmsg_sock+0x30/0x30 [ 478.208552][T14199] ? __import_iovec+0x5f2/0x850 [ 478.213432][T14199] ? import_iovec+0x73/0xa0 [ 478.217953][T14199] ___sys_sendmsg+0x2a6/0x360 [ 478.222724][T14199] ? get_pid_task+0x20/0x1e0 [ 478.227492][T14199] ? __sys_sendmsg+0x2a0/0x2a0 [ 478.232270][T14199] ? __lock_acquire+0x7d40/0x7d40 [ 478.237339][T14199] __se_sys_sendmsg+0x1c2/0x2b0 [ 478.242297][T14199] ? __x64_sys_sendmsg+0x80/0x80 [ 478.247253][T14199] ? lockdep_hardirqs_on+0x98/0x150 [ 478.252460][T14199] do_syscall_64+0x55/0xa0 [ 478.256867][T14199] ? clear_bhb_loop+0x40/0x90 [ 478.261632][T14199] ? clear_bhb_loop+0x40/0x90 [ 478.266315][T14199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.272212][T14199] RIP: 0033:0x7f89f8d9c819 [ 478.276625][T14199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.296334][T14199] RSP: 002b:00007f89f9d1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.304751][T14199] RAX: ffffffffffffffda RBX: 00007f89f9015fa0 RCX: 00007f89f8d9c819 [ 478.312982][T14199] RDX: 0000000004000001 RSI: 00002000000023c0 RDI: 0000000000000003 [ 478.321216][T14199] RBP: 00007f89f9d1a090 R08: 0000000000000000 R09: 0000000000000000 [ 478.329302][T14199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.337281][T14199] R13: 00007f89f9016038 R14: 00007f89f9015fa0 R15: 00007ffc849e9d08 [ 478.345286][T14199] [ 478.516008][T14207] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2920'. [ 478.651528][T14212] validate_nla: 3 callbacks suppressed [ 478.651543][T14212] netlink: 'syz.3.2921': attribute type 10 has an invalid length. [ 478.695905][T14212] team0: Device hsr_slave_0 failed to register rx_handler [ 478.780774][T14216] netlink: 'syz.0.2925': attribute type 21 has an invalid length. [ 478.795897][T14216] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2925'. [ 478.874416][T14216] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2925'. [ 479.088744][T14216] veth0_macvtap: left promiscuous mode [ 479.943419][T14246] netlink: 'syz.3.2934': attribute type 10 has an invalid length. [ 479.965202][T14246] team0: Device hsr_slave_0 failed to register rx_handler [ 480.962378][T14249] netlink: 'syz.0.2935': attribute type 10 has an invalid length. [ 480.970912][T14249] team0: Device hsr_slave_0 failed to register rx_handler [ 481.278192][T14267] netlink: 'syz.1.2942': attribute type 10 has an invalid length. [ 481.295010][T14267] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 481.384128][T14264] syzkaller0: entered promiscuous mode [ 481.401255][T14264] syzkaller0: entered allmulticast mode [ 484.153227][T14275] netlink: 'syz.1.2944': attribute type 21 has an invalid length. [ 484.161737][T14275] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2944'. [ 484.172450][T14280] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2944'. [ 484.184523][T14280] veth0_macvtap: left promiscuous mode [ 484.230430][T14287] netlink: 'syz.2.2949': attribute type 10 has an invalid length. [ 484.239648][T14287] team0: Device hsr_slave_0 failed to register rx_handler [ 484.756076][T14310] netlink: 'syz.2.2959': attribute type 10 has an invalid length. [ 484.785236][T14310] team0: Device hsr_slave_0 failed to register rx_handler [ 484.918191][T14311] netlink: 'syz.0.2958': attribute type 2 has an invalid length. [ 484.951547][T14311] netlink: 'syz.0.2958': attribute type 8 has an invalid length. [ 484.960279][T14311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2958'. [ 485.004215][T14319] netlink: 'syz.0.2958': attribute type 11 has an invalid length. [ 485.067846][T14322] netlink: 'syz.1.2963': attribute type 10 has an invalid length. [ 485.111070][T14320] tap0: tun_chr_ioctl cmd 1074025677 [ 485.116712][T14320] tap0: linktype set to 780 [ 485.131369][T14317] tap0: tun_chr_ioctl cmd 1074025677 [ 485.136962][T14317] tap0: linktype set to 780 [ 485.780405][T14342] FAULT_INJECTION: forcing a failure. [ 485.780405][T14342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.811137][T14342] CPU: 1 PID: 14342 Comm: syz.0.2977 Not tainted syzkaller #0 [ 485.818737][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 485.830496][T14342] Call Trace: [ 485.833789][T14342] [ 485.836866][T14342] dump_stack_lvl+0x18c/0x250 [ 485.841862][T14342] ? show_regs_print_info+0x20/0x20 [ 485.847419][T14342] ? load_image+0x420/0x420 [ 485.852467][T14342] ? __lock_acquire+0x7d40/0x7d40 [ 485.857599][T14342] should_fail_ex+0x39d/0x4d0 [ 485.862286][T14342] _copy_from_user+0x2f/0xe0 [ 485.867069][T14342] __copy_msghdr+0x3bb/0x580 [ 485.871879][T14342] ___sys_sendmsg+0x214/0x360 [ 485.876758][T14342] ? get_pid_task+0x20/0x1e0 [ 485.881761][T14342] ? __sys_sendmsg+0x2a0/0x2a0 [ 485.886649][T14342] ? __lock_acquire+0x7d40/0x7d40 [ 485.891956][T14342] __se_sys_sendmsg+0x1c2/0x2b0 [ 485.897288][T14342] ? __x64_sys_sendmsg+0x80/0x80 [ 485.902530][T14342] ? lockdep_hardirqs_on+0x98/0x150 [ 485.907831][T14342] do_syscall_64+0x55/0xa0 [ 485.912333][T14342] ? clear_bhb_loop+0x40/0x90 [ 485.917013][T14342] ? clear_bhb_loop+0x40/0x90 [ 485.921958][T14342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.927882][T14342] RIP: 0033:0x7f89f8d9c819 [ 485.932527][T14342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.952509][T14342] RSP: 002b:00007f89f9d1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.960957][T14342] RAX: ffffffffffffffda RBX: 00007f89f9015fa0 RCX: 00007f89f8d9c819 [ 485.968971][T14342] RDX: 0000000004000001 RSI: 00002000000023c0 RDI: 0000000000000003 [ 485.977042][T14342] RBP: 00007f89f9d1a090 R08: 0000000000000000 R09: 0000000000000000 [ 485.985197][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.993166][T14342] R13: 00007f89f9016038 R14: 00007f89f9015fa0 R15: 00007ffc849e9d08 [ 486.001255][T14342] [ 486.346428][T14358] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2974'. [ 487.065766][T14379] netlink: 'syz.3.2982': attribute type 10 has an invalid length. [ 487.088584][T14379] team0: Device hsr_slave_0 failed to register rx_handler [ 487.131100][T14380] netlink: 'syz.2.2981': attribute type 22 has an invalid length. [ 487.180477][T14380] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2981'. [ 487.225163][T14380] netlink: 'syz.2.2981': attribute type 29 has an invalid length. [ 487.384105][T14389] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2985'. [ 487.975767][T14412] team0: Device hsr_slave_0 failed to register rx_handler [ 488.707294][T14431] FAULT_INJECTION: forcing a failure. [ 488.707294][T14431] name failslab, interval 1, probability 0, space 0, times 0 [ 488.727201][T14431] CPU: 0 PID: 14431 Comm: syz.1.2999 Not tainted syzkaller #0 [ 488.734823][T14431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 488.745095][T14431] Call Trace: [ 488.748650][T14431] [ 488.751624][T14431] dump_stack_lvl+0x18c/0x250 [ 488.756977][T14431] ? show_regs_print_info+0x20/0x20 [ 488.763114][T14431] ? load_image+0x420/0x420 [ 488.768117][T14431] ? __might_sleep+0xe0/0xe0 [ 488.773366][T14431] ? __lock_acquire+0x7d40/0x7d40 [ 488.778505][T14431] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 488.784702][T14431] should_fail_ex+0x39d/0x4d0 [ 488.789430][T14431] should_failslab+0x9/0x20 [ 488.794064][T14431] slab_pre_alloc_hook+0x59/0x310 [ 488.799232][T14431] ? lockdep_hardirqs_on+0x98/0x150 [ 488.804656][T14431] ? ethnl_default_notify+0x1b2/0x790 [ 488.810162][T14431] ? ethnl_default_notify+0x1b2/0x790 [ 488.815591][T14431] __kmem_cache_alloc_node+0x53/0x250 [ 488.821302][T14431] ? ethnl_default_notify+0x1b2/0x790 [ 488.827270][T14431] __kmalloc+0xa4/0x230 [ 488.831568][T14431] ethnl_default_notify+0x1b2/0x790 [ 488.837259][T14431] ? ethtool_notify+0x1b0/0x1b0 [ 488.842203][T14431] ? mutex_is_locked+0x12/0x40 [ 488.847218][T14431] ? rtnl_is_locked+0x15/0x20 [ 488.852042][T14431] ethnl_netdev_event+0x58/0x70 [ 488.857038][T14431] notifier_call_chain+0x197/0x380 [ 488.862375][T14431] netdev_features_change+0x8e/0xd0 [ 488.867699][T14431] ? dev_get_alias+0x250/0x250 [ 488.872517][T14431] dev_ethtool+0x153e/0x18d0 [ 488.877315][T14431] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 488.884467][T14431] ? __lock_acquire+0x7d40/0x7d40 [ 488.889857][T14431] ? __might_fault+0xaa/0x120 [ 488.894540][T14431] ? full_name_hash+0x92/0xe0 [ 488.899317][T14431] ? dev_load+0x21/0x1f0 [ 488.903561][T14431] dev_ioctl+0x392/0x1140 [ 488.907898][T14431] sock_do_ioctl+0x239/0x310 [ 488.912764][T14431] ? sock_show_fdinfo+0xb0/0xb0 [ 488.918076][T14431] sock_ioctl+0x5ba/0x7e0 [ 488.922490][T14431] ? sock_poll+0x3e0/0x3e0 [ 488.927898][T14431] ? bpf_lsm_file_ioctl+0x9/0x10 [ 488.932849][T14431] ? security_file_ioctl+0x80/0xa0 [ 488.937966][T14431] ? sock_poll+0x3e0/0x3e0 [ 488.942654][T14431] __se_sys_ioctl+0xfd/0x170 [ 488.947349][T14431] do_syscall_64+0x55/0xa0 [ 488.951784][T14431] ? clear_bhb_loop+0x40/0x90 [ 488.956549][T14431] ? clear_bhb_loop+0x40/0x90 [ 488.961237][T14431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.967250][T14431] RIP: 0033:0x7fb9d3f9c819 [ 488.971699][T14431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.991396][T14431] RSP: 002b:00007fb9d4e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.999915][T14431] RAX: ffffffffffffffda RBX: 00007fb9d4215fa0 RCX: 00007fb9d3f9c819 [ 489.008061][T14431] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000e [ 489.016203][T14431] RBP: 00007fb9d4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 489.024283][T14431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.032346][T14431] R13: 00007fb9d4216038 R14: 00007fb9d4215fa0 R15: 00007fff00edbd38 [ 489.040853][T14431] [ 489.224111][T14446] validate_nla: 7 callbacks suppressed [ 489.224127][T14446] netlink: 'syz.1.3005': attribute type 10 has an invalid length. [ 489.250362][T14446] team0: Device hsr_slave_0 failed to register rx_handler [ 492.291617][T14464] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3011'. [ 492.300908][T14464] bridge_slave_1: default FDB implementation only supports local addresses [ 492.310069][T14479] netlink: 'syz.2.3015': attribute type 10 has an invalid length. [ 492.334816][T14479] team0: Device hsr_slave_0 failed to register rx_handler [ 492.860602][T14498] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3023'. [ 492.897227][T14500] netlink: 'syz.2.3024': attribute type 39 has an invalid length. [ 493.950667][T14530] delete_channel: no stack [ 493.964947][T14528] netlink: 'syz.1.3036': attribute type 10 has an invalid length. [ 493.992600][T14528] team0: Device hsr_slave_0 failed to register rx_handler [ 494.094579][T14532] netlink: 'syz.3.3037': attribute type 10 has an invalid length. [ 494.114731][T14532] team0: Device hsr_slave_0 failed to register rx_handler [ 494.252888][T14539] netlink: 'syz.1.3040': attribute type 1 has an invalid length. [ 494.659743][T14553] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 494.683658][T14553] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3045'. [ 497.804738][T14566] netlink: 'syz.3.3049': attribute type 10 has an invalid length. [ 497.816674][T14566] team0: Device hsr_slave_0 failed to register rx_handler [ 497.956454][T14568] FAULT_INJECTION: forcing a failure. [ 497.956454][T14568] name failslab, interval 1, probability 0, space 0, times 0 [ 497.972464][T14568] CPU: 1 PID: 14568 Comm: syz.2.3053 Not tainted syzkaller #0 [ 497.980067][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 497.990324][T14568] Call Trace: [ 497.993714][T14568] [ 497.996922][T14568] dump_stack_lvl+0x18c/0x250 [ 498.001992][T14568] ? show_regs_print_info+0x20/0x20 [ 498.007496][T14568] ? load_image+0x420/0x420 [ 498.012124][T14568] ? mark_lock+0x94/0x320 [ 498.016488][T14568] should_fail_ex+0x39d/0x4d0 [ 498.021302][T14568] should_failslab+0x9/0x20 [ 498.026000][T14568] slab_pre_alloc_hook+0x59/0x310 [ 498.031156][T14568] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 498.037185][T14568] kmem_cache_alloc_node+0x60/0x320 [ 498.042425][T14568] ? __alloc_skb+0x103/0x2c0 [ 498.047405][T14568] __alloc_skb+0x103/0x2c0 [ 498.051860][T14568] _sctp_make_chunk+0x5e/0x420 [ 498.056999][T14568] sctp_make_cookie_echo+0x80/0x330 [ 498.062519][T14568] sctp_do_sm+0x5d3/0x5a60 [ 498.067071][T14568] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 498.073135][T14568] ? read_tsc+0x9/0x20 [ 498.077318][T14568] sctp_assoc_bh_rcv+0x3f2/0x630 [ 498.082359][T14568] sctp_backlog_rcv+0x163/0x370 [ 498.087220][T14568] __release_sock+0x1e5/0x460 [ 498.091926][T14568] release_sock+0x5f/0x1c0 [ 498.096357][T14568] sctp_sendmsg+0x1bd7/0x28c0 [ 498.101242][T14568] ? sctp_getsockopt+0xb60/0xb60 [ 498.106203][T14568] ? aa_sk_perm+0x83c/0x970 [ 498.111165][T14568] ? aa_af_perm+0x330/0x330 [ 498.115851][T14568] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 498.122385][T14568] ? sock_rps_record_flow+0x19/0x3f0 [ 498.127677][T14568] ? inet_sendmsg+0x7c/0x2f0 [ 498.132364][T14568] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 498.137824][T14568] ? security_socket_sendmsg+0x80/0xa0 [ 498.143549][T14568] ? inet_send_prepare+0x260/0x260 [ 498.149376][T14568] ____sys_sendmsg+0x5ba/0x960 [ 498.154673][T14568] ? __lock_acquire+0x7d40/0x7d40 [ 498.159785][T14568] ? __asan_memset+0x22/0x40 [ 498.164496][T14568] ? __sys_sendmsg_sock+0x30/0x30 [ 498.169720][T14568] ? __import_iovec+0x5f2/0x850 [ 498.174661][T14568] ? import_iovec+0x73/0xa0 [ 498.179375][T14568] ___sys_sendmsg+0x2a6/0x360 [ 498.184532][T14568] ? get_pid_task+0x20/0x1e0 [ 498.189408][T14568] ? __sys_sendmsg+0x2a0/0x2a0 [ 498.194278][T14568] ? __lock_acquire+0x7d40/0x7d40 [ 498.199352][T14568] __se_sys_sendmsg+0x1c2/0x2b0 [ 498.204221][T14568] ? __x64_sys_sendmsg+0x80/0x80 [ 498.209461][T14568] ? lockdep_hardirqs_on+0x98/0x150 [ 498.214683][T14568] do_syscall_64+0x55/0xa0 [ 498.219199][T14568] ? clear_bhb_loop+0x40/0x90 [ 498.224008][T14568] ? clear_bhb_loop+0x40/0x90 [ 498.228693][T14568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.234598][T14568] RIP: 0033:0x7feef099c819 [ 498.239021][T14568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.258732][T14568] RSP: 002b:00007feef18a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.267238][T14568] RAX: ffffffffffffffda RBX: 00007feef0c15fa0 RCX: 00007feef099c819 [ 498.275303][T14568] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 498.283540][T14568] RBP: 00007feef18a1090 R08: 0000000000000000 R09: 0000000000000000 [ 498.291514][T14568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.299573][T14568] R13: 00007feef0c16038 R14: 00007feef0c15fa0 R15: 00007fff79684b18 [ 498.307651][T14568] [ 498.502284][T14580] netlink: 'syz.3.3054': attribute type 10 has an invalid length. [ 498.522003][T14580] team0: Device hsr_slave_0 failed to register rx_handler [ 498.571901][T14581] netlink: 'syz.2.3055': attribute type 10 has an invalid length. [ 498.594843][T14581] team0: Device hsr_slave_0 failed to register rx_handler [ 498.712622][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 499.143724][T14587] netlink: 'syz.1.3056': attribute type 29 has an invalid length. [ 499.176145][T14587] netlink: 'syz.1.3056': attribute type 29 has an invalid length. [ 499.494301][T14599] lo: entered promiscuous mode [ 499.833745][ T5831] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 500.322451][T14609] netlink: 'syz.0.3063': attribute type 10 has an invalid length. [ 500.333400][T14609] team0: Device hsr_slave_0 failed to register rx_handler [ 500.632353][T14630] netlink: 'syz.0.3067': attribute type 10 has an invalid length. [ 500.726269][T14630] team0: Device hsr_slave_0 failed to register rx_handler [ 500.973695][T14631] netlink: 'syz.3.3069': attribute type 29 has an invalid length. [ 501.059178][T14631] netlink: 'syz.3.3069': attribute type 29 has an invalid length. [ 501.571148][T14648] netlink: 'syz.3.3076': attribute type 10 has an invalid length. [ 501.592851][T14648] team0: Device hsr_slave_0 failed to register rx_handler [ 502.043554][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.050079][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.092312][T14661] netlink: 'syz.0.3080': attribute type 29 has an invalid length. [ 502.140536][T14661] netlink: 'syz.0.3080': attribute type 29 has an invalid length. [ 502.472976][T14672] netlink: 'syz.2.3082': attribute type 29 has an invalid length. [ 502.504561][T14672] netlink: 'syz.2.3082': attribute type 29 has an invalid length. [ 502.652414][T14679] netlink: 'syz.1.3090': attribute type 10 has an invalid length. [ 502.669051][T14679] team0: Device hsr_slave_0 failed to register rx_handler [ 503.095708][T14689] team0: Device hsr_slave_0 failed to register rx_handler [ 504.367822][T14726] team0: Device hsr_slave_0 failed to register rx_handler [ 505.415938][T14725] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 505.429912][T14737] validate_nla: 2 callbacks suppressed [ 505.429927][T14737] netlink: 'syz.1.3104': attribute type 10 has an invalid length. [ 505.450246][T14737] team0: Device hsr_slave_0 failed to register rx_handler [ 505.559448][T14740] FAULT_INJECTION: forcing a failure. [ 505.559448][T14740] name failslab, interval 1, probability 0, space 0, times 0 [ 505.576390][T14740] CPU: 1 PID: 14740 Comm: syz.0.3105 Not tainted syzkaller #0 [ 505.584168][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 505.594459][T14740] Call Trace: [ 505.597874][T14740] [ 505.601029][T14740] dump_stack_lvl+0x18c/0x250 [ 505.605768][T14740] ? sctp_sendmsg+0x1575/0x28c0 [ 505.610753][T14740] ? ___sys_sendmsg+0x2a6/0x360 [ 505.615736][T14740] ? show_regs_print_info+0x20/0x20 [ 505.621023][T14740] ? load_image+0x420/0x420 [ 505.625626][T14740] should_fail_ex+0x39d/0x4d0 [ 505.630350][T14740] should_failslab+0x9/0x20 [ 505.634870][T14740] slab_pre_alloc_hook+0x59/0x310 [ 505.639935][T14740] ? sctp_add_bind_addr+0x8c/0x360 [ 505.645068][T14740] __kmem_cache_alloc_node+0x53/0x250 [ 505.650561][T14740] ? sctp_add_bind_addr+0x8c/0x360 [ 505.655782][T14740] kmalloc_trace+0x2a/0xe0 [ 505.660451][T14740] sctp_add_bind_addr+0x8c/0x360 [ 505.665800][T14740] sctp_copy_local_addr_list+0x315/0x4f0 [ 505.671521][T14740] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 505.677281][T14740] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 505.683494][T14740] ? sctp_v6_is_any+0x64/0x70 [ 505.688306][T14740] ? sctp_copy_one_addr+0x8c/0x350 [ 505.693648][T14740] sctp_bind_addr_copy+0xb3/0x3c0 [ 505.698832][T14740] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 505.705202][T14740] sctp_connect_new_asoc+0x2f9/0x6a0 [ 505.710520][T14740] ? __sctp_connect+0xd80/0xd80 [ 505.715415][T14740] ? __local_bh_enable_ip+0x13a/0x1c0 [ 505.720832][T14740] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 505.726509][T14740] ? security_sctp_bind_connect+0x89/0xb0 [ 505.732461][T14740] sctp_sendmsg+0x1575/0x28c0 [ 505.737197][T14740] ? sctp_getsockopt+0xb60/0xb60 [ 505.742189][T14740] ? aa_sk_perm+0x83c/0x970 [ 505.746737][T14740] ? aa_af_perm+0x330/0x330 [ 505.751255][T14740] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 505.757705][T14740] ? sock_rps_record_flow+0x19/0x3f0 [ 505.763021][T14740] ? inet_sendmsg+0xe9/0x2f0 [ 505.767633][T14740] ? inet_send_prepare+0x260/0x260 [ 505.772856][T14740] ____sys_sendmsg+0x5ba/0x960 [ 505.778165][T14740] ? __lock_acquire+0x7d40/0x7d40 [ 505.783236][T14740] ? __asan_memset+0x22/0x40 [ 505.787862][T14740] ? __sys_sendmsg_sock+0x30/0x30 [ 505.793086][T14740] ? __import_iovec+0x5f2/0x850 [ 505.797986][T14740] ? import_iovec+0x73/0xa0 [ 505.802514][T14740] ___sys_sendmsg+0x2a6/0x360 [ 505.807317][T14740] ? __sys_sendmsg+0x2a0/0x2a0 [ 505.812154][T14740] ? __lock_acquire+0x7d40/0x7d40 [ 505.817255][T14740] __se_sys_sendmsg+0x1c2/0x2b0 [ 505.822339][T14740] ? __x64_sys_sendmsg+0x80/0x80 [ 505.827435][T14740] ? lockdep_hardirqs_on+0x98/0x150 [ 505.832663][T14740] do_syscall_64+0x55/0xa0 [ 505.837301][T14740] ? clear_bhb_loop+0x40/0x90 [ 505.842188][T14740] ? clear_bhb_loop+0x40/0x90 [ 505.847100][T14740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.853115][T14740] RIP: 0033:0x7f89f8d9c819 [ 505.857738][T14740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.878767][T14740] RSP: 002b:00007f89f9d1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.887582][T14740] RAX: ffffffffffffffda RBX: 00007f89f9015fa0 RCX: 00007f89f8d9c819 [ 505.895953][T14740] RDX: 0000000004000001 RSI: 00002000000023c0 RDI: 0000000000000003 [ 505.904483][T14740] RBP: 00007f89f9d1a090 R08: 0000000000000000 R09: 0000000000000000 [ 505.912588][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.921819][T14740] R13: 00007f89f9016038 R14: 00007f89f9015fa0 R15: 00007ffc849e9d08 [ 505.930440][T14740] [ 506.272702][T14748] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3109'. [ 506.477643][T14754] netlink: 'syz.3.3110': attribute type 58 has an invalid length. [ 506.499143][T14754] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3110'. [ 506.555615][T14761] hsr0: left allmulticast mode [ 506.578775][T14761] hsr_slave_0: left allmulticast mode [ 506.586042][T14761] hsr_slave_1: left allmulticast mode [ 506.594365][T14761] bridge0: port 3(hsr0) entered disabled state [ 506.638510][T14761] bridge_slave_1: left allmulticast mode [ 506.646217][T14761] bridge_slave_1: left promiscuous mode [ 506.654935][T14761] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.703238][T14761] bridge_slave_0: left allmulticast mode [ 506.714374][T14761] bridge_slave_0: left promiscuous mode [ 506.723152][T14761] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.205392][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3112'. [ 507.271564][T14768] netlink: 'syz.3.3115': attribute type 10 has an invalid length. [ 507.298212][T14768] hsr0: left promiscuous mode [ 507.319934][T14773] netlink: 'syz.1.3117': attribute type 10 has an invalid length. [ 507.332523][T14773] team0: Device hsr_slave_0 failed to register rx_handler [ 507.513884][T14776] FAULT_INJECTION: forcing a failure. [ 507.513884][T14776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.563016][T14776] CPU: 0 PID: 14776 Comm: syz.0.3118 Not tainted syzkaller #0 [ 507.570566][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 507.580735][T14776] Call Trace: [ 507.584226][T14776] [ 507.587322][T14776] dump_stack_lvl+0x18c/0x250 [ 507.592271][T14776] ? show_regs_print_info+0x20/0x20 [ 507.597659][T14776] ? load_image+0x420/0x420 [ 507.602258][T14776] ? __might_fault+0xaa/0x120 [ 507.607010][T14776] ? __lock_acquire+0x7d40/0x7d40 [ 507.612636][T14776] should_fail_ex+0x39d/0x4d0 [ 507.617435][T14776] _copy_from_user+0x2f/0xe0 [ 507.622360][T14776] ___sys_sendmsg+0x1c7/0x360 [ 507.627124][T14776] ? __sys_sendmsg+0x2a0/0x2a0 [ 507.632091][T14776] ? __lock_acquire+0x7d40/0x7d40 [ 507.637630][T14776] __se_sys_sendmsg+0x1c2/0x2b0 [ 507.642652][T14776] ? __x64_sys_sendmsg+0x80/0x80 [ 507.647699][T14776] ? lockdep_hardirqs_on+0x98/0x150 [ 507.652950][T14776] do_syscall_64+0x55/0xa0 [ 507.657402][T14776] ? clear_bhb_loop+0x40/0x90 [ 507.662194][T14776] ? clear_bhb_loop+0x40/0x90 [ 507.666893][T14776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.672811][T14776] RIP: 0033:0x7f89f8d9c819 [ 507.677240][T14776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.696864][T14776] RSP: 002b:00007f89f9d1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.705293][T14776] RAX: ffffffffffffffda RBX: 00007f89f9015fa0 RCX: 00007f89f8d9c819 [ 507.713633][T14776] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 507.721617][T14776] RBP: 00007f89f9d1a090 R08: 0000000000000000 R09: 0000000000000000 [ 507.729601][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.737588][T14776] R13: 00007f89f9016038 R14: 00007f89f9015fa0 R15: 00007ffc849e9d08 [ 507.745606][T14776] [ 507.868798][T14778] netlink: 'syz.3.3119': attribute type 10 has an invalid length. [ 508.157581][ T6016] wlan1: Trigger new scan to find an IBSS to join [ 508.320625][T14790] syzkaller0: entered promiscuous mode [ 508.355660][T14790] syzkaller0: entered allmulticast mode [ 508.572485][T14807] netlink: 'syz.3.3126': attribute type 29 has an invalid length. [ 508.603487][T14807] netlink: 'syz.3.3126': attribute type 29 has an invalid length. [ 508.797733][T14810] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 511.110536][T14818] netlink: 'syz.3.3132': attribute type 10 has an invalid length. [ 511.120249][T14818] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 511.381355][T14837] netlink: 'syz.1.3136': attribute type 29 has an invalid length. [ 511.446303][T14837] netlink: 'syz.1.3136': attribute type 29 has an invalid length. [ 511.458277][T14841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3137'. [ 511.468487][T14841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3137'. [ 511.701322][T14852] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3140'. [ 511.865031][T14856] netlink: 'syz.2.3143': attribute type 8 has an invalid length. [ 511.882473][T14856] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3143'. [ 512.017776][T14862] netlink: 'syz.3.3145': attribute type 10 has an invalid length. [ 512.059100][T14862] team0: Device hsr_slave_0 failed to register rx_handler [ 512.162066][ T1121] wlan1: Trigger new scan to find an IBSS to join [ 513.192560][T14880] netlink: 'syz.0.3149': attribute type 29 has an invalid length. [ 513.233743][T14880] netlink: 'syz.0.3149': attribute type 29 has an invalid length. [ 513.665525][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3157'. [ 513.805894][T14900] netlink: 'syz.2.3158': attribute type 29 has an invalid length. [ 513.853126][T14900] netlink: 'syz.2.3158': attribute type 29 has an invalid length. [ 513.883796][T14897] netlink: 'syz.2.3158': attribute type 29 has an invalid length. [ 514.071126][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 514.148778][T14908] FAULT_INJECTION: forcing a failure. [ 514.148778][T14908] name failslab, interval 1, probability 0, space 0, times 0 [ 514.164788][T14908] CPU: 1 PID: 14908 Comm: syz.2.3162 Not tainted syzkaller #0 [ 514.171689][ T59] wlan1: Creating new IBSS network, BSSID be:3a:e1:f5:07:f2 [ 514.172712][T14908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 514.190091][T14908] Call Trace: [ 514.193415][T14908] [ 514.196465][T14908] dump_stack_lvl+0x18c/0x250 [ 514.201277][T14908] ? show_regs_print_info+0x20/0x20 [ 514.206513][T14908] ? load_image+0x420/0x420 [ 514.211047][T14908] ? __might_sleep+0xe0/0xe0 [ 514.215759][T14908] ? __lock_acquire+0x7d40/0x7d40 [ 514.220816][T14908] should_fail_ex+0x39d/0x4d0 [ 514.225616][T14908] should_failslab+0x9/0x20 [ 514.230130][T14908] slab_pre_alloc_hook+0x59/0x310 [ 514.235168][T14908] ? sctp_association_new+0x89/0x25c0 [ 514.240630][T14908] __kmem_cache_alloc_node+0x53/0x250 [ 514.246015][T14908] ? sctp_association_new+0x89/0x25c0 [ 514.251473][T14908] kmalloc_trace+0x2a/0xe0 [ 514.255887][T14908] sctp_association_new+0x89/0x25c0 [ 514.261086][T14908] ? sctp_has_association+0x1cd/0x1e0 [ 514.266459][T14908] ? sctp_has_association+0x2f/0x1e0 [ 514.271831][T14908] ? __ipv6_addr_type+0x242/0x2f0 [ 514.276864][T14908] sctp_connect_new_asoc+0x2de/0x6a0 [ 514.282159][T14908] ? __sctp_connect+0xd80/0xd80 [ 514.287092][T14908] ? __local_bh_enable_ip+0x13a/0x1c0 [ 514.292471][T14908] ? _local_bh_enable+0xa0/0xa0 [ 514.297411][T14908] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 514.303301][T14908] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 514.309106][T14908] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 514.314744][T14908] ? security_sctp_bind_connect+0x89/0xb0 [ 514.320556][T14908] sctp_sendmsg+0x1575/0x28c0 [ 514.325353][T14908] ? sctp_getsockopt+0xb60/0xb60 [ 514.330465][T14908] ? aa_sk_perm+0x83c/0x970 [ 514.335076][T14908] ? aa_af_perm+0x330/0x330 [ 514.339754][T14908] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 514.346276][T14908] ? sock_rps_record_flow+0x19/0x3f0 [ 514.351658][T14908] ? inet_sendmsg+0x7c/0x2f0 [ 514.356250][T14908] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 514.361563][T14908] ? security_socket_sendmsg+0x80/0xa0 [ 514.367024][T14908] ? inet_send_prepare+0x260/0x260 [ 514.372227][T14908] ____sys_sendmsg+0x5ba/0x960 [ 514.376988][T14908] ? __lock_acquire+0x7d40/0x7d40 [ 514.382037][T14908] ? __asan_memset+0x22/0x40 [ 514.386646][T14908] ? __sys_sendmsg_sock+0x30/0x30 [ 514.391666][T14908] ? __import_iovec+0x5f2/0x850 [ 514.396522][T14908] ? import_iovec+0x73/0xa0 [ 514.401199][T14908] ___sys_sendmsg+0x2a6/0x360 [ 514.405872][T14908] ? get_pid_task+0x20/0x1e0 [ 514.410463][T14908] ? __sys_sendmsg+0x2a0/0x2a0 [ 514.415239][T14908] ? __lock_acquire+0x7d40/0x7d40 [ 514.420344][T14908] __se_sys_sendmsg+0x1c2/0x2b0 [ 514.425285][T14908] ? __x64_sys_sendmsg+0x80/0x80 [ 514.430230][T14908] ? lockdep_hardirqs_on+0x98/0x150 [ 514.435433][T14908] do_syscall_64+0x55/0xa0 [ 514.439852][T14908] ? clear_bhb_loop+0x40/0x90 [ 514.444533][T14908] ? clear_bhb_loop+0x40/0x90 [ 514.449219][T14908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.455196][T14908] RIP: 0033:0x7feef099c819 [ 514.459608][T14908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.479224][T14908] RSP: 002b:00007feef18a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.487636][T14908] RAX: ffffffffffffffda RBX: 00007feef0c15fa0 RCX: 00007feef099c819 [ 514.495637][T14908] RDX: 0000000004000001 RSI: 00002000000023c0 RDI: 0000000000000003 [ 514.503607][T14908] RBP: 00007feef18a1090 R08: 0000000000000000 R09: 0000000000000000 [ 514.511659][T14908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.519800][T14908] R13: 00007feef0c16038 R14: 00007feef0c15fa0 R15: 00007fff79684b18 [ 514.527787][T14908] [ 514.793993][T14926] FAULT_INJECTION: forcing a failure. [ 514.793993][T14926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.809429][T14926] CPU: 0 PID: 14926 Comm: syz.1.3168 Not tainted syzkaller #0 [ 514.817026][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 514.827103][T14926] Call Trace: [ 514.830570][T14926] [ 514.833602][T14926] dump_stack_lvl+0x18c/0x250 [ 514.838404][T14926] ? show_regs_print_info+0x20/0x20 [ 514.843648][T14926] ? load_image+0x420/0x420 [ 514.848188][T14926] ? __might_fault+0xaa/0x120 [ 514.852898][T14926] ? __lock_acquire+0x7d40/0x7d40 [ 514.858007][T14926] should_fail_ex+0x39d/0x4d0 [ 514.862730][T14926] _copy_from_user+0x2f/0xe0 [ 514.867372][T14926] ioctl_standard_iw_point+0x5d3/0xcf0 [ 514.872976][T14926] ? cfg80211_wext_giwauth+0x10/0x10 [ 514.878491][T14926] ? iw_handler_get_iwstats+0x110/0x110 [ 514.884171][T14926] ? wext_ioctl_dispatch+0x115/0x600 [ 514.889578][T14926] ? dev_load+0x21/0x1f0 [ 514.893857][T14926] ? mutex_lock_nested+0x20/0x20 [ 514.898828][T14926] ? apparmor_capable+0x137/0x1a0 [ 514.903979][T14926] ? cfg80211_wext_giwauth+0x10/0x10 [ 514.909485][T14926] ioctl_standard_call+0xb7/0x2b0 [ 514.914667][T14926] ? cfg80211_wext_giwauth+0x10/0x10 [ 514.920172][T14926] wext_ioctl_dispatch+0x1cb/0x600 [ 514.925458][T14926] ? wext_ioctl_dispatch+0x600/0x600 [ 514.930870][T14926] ? iw_handler_get_private+0x1f0/0x1f0 [ 514.936458][T14926] ? wext_handle_ioctl+0x1d0/0x1d0 [ 514.941720][T14926] ? __might_fault+0xaa/0x120 [ 514.946517][T14926] ? __might_fault+0xc6/0x120 [ 514.951224][T14926] ? __might_fault+0xaa/0x120 [ 514.955938][T14926] wext_handle_ioctl+0x117/0x1d0 [ 514.960923][T14926] ? call_commit_handler+0xf0/0xf0 [ 514.966202][T14926] sock_ioctl+0x15d/0x7e0 [ 514.970599][T14926] ? sock_poll+0x3e0/0x3e0 [ 514.975199][T14926] ? bpf_lsm_file_ioctl+0x9/0x10 [ 514.980264][T14926] ? security_file_ioctl+0x80/0xa0 [ 514.985509][T14926] ? sock_poll+0x3e0/0x3e0 [ 514.990048][T14926] __se_sys_ioctl+0xfd/0x170 [ 514.994702][T14926] do_syscall_64+0x55/0xa0 [ 514.999434][T14926] ? clear_bhb_loop+0x40/0x90 [ 515.004502][T14926] ? clear_bhb_loop+0x40/0x90 [ 515.009232][T14926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.015169][T14926] RIP: 0033:0x7fb9d3f9c819 [ 515.019704][T14926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.039758][T14926] RSP: 002b:00007fb9d4e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.048299][T14926] RAX: ffffffffffffffda RBX: 00007fb9d4215fa0 RCX: 00007fb9d3f9c819 [ 515.056483][T14926] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 515.064834][T14926] RBP: 00007fb9d4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 515.072936][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.081125][T14926] R13: 00007fb9d4216038 R14: 00007fb9d4215fa0 R15: 00007fff00edbd38 [ 515.089238][T14926] [ 515.275766][T14940] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3170'. [ 515.307192][T14940] openvswitch: netlink: Duplicate key (type 0). [ 515.570871][T14953] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3176'. [ 515.773249][T14964] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3179'. [ 515.899188][ C0] [ 515.899199][ C0] ================================ [ 515.899204][ C0] WARNING: inconsistent lock state [ 515.899213][ C0] syzkaller #0 Not tainted [ 515.899222][ C0] -------------------------------- [ 515.899227][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 515.899234][ C0] syz.1.3183/14969 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 515.899261][ C0] ffff88802ee750a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 515.899312][ C0] {INITIAL USE} state was registered at: [ 515.899322][ C0] lock_acquire+0x19e/0x420 [ 515.899340][ C0] _raw_spin_lock+0x2e/0x40 [ 515.899358][ C0] htab_lock_bucket+0x17d/0x300 [ 515.899373][ C0] htab_lru_map_update_elem+0x2c6/0x990 [ 515.899388][ C0] bpf_map_update_value+0x660/0x720 [ 515.899402][ C0] map_update_elem+0x57b/0x700 [ 515.899416][ C0] __sys_bpf+0x6b5/0x890 [ 515.899430][ C0] __x64_sys_bpf+0x7c/0x90 [ 515.899444][ C0] do_syscall_64+0x55/0xa0 [ 515.899456][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.899474][ C0] irq event stamp: 1462 [ 515.899479][ C0] hardirqs last enabled at (1461): [] pcpu_memcg_post_alloc_hook+0x282/0x3f0 [ 515.899505][ C0] hardirqs last disabled at (1462): [] exc_debug+0x73/0x140 [ 515.899523][ C0] softirqs last enabled at (1172): [] bpf_prog_load+0x1266/0x1670 [ 515.899542][ C0] softirqs last disabled at (1170): [] bpf_ksym_add+0x2d/0x340 [ 515.899563][ C0] [ 515.899563][ C0] other info that might help us debug this: [ 515.899567][ C0] Possible unsafe locking scenario: [ 515.899567][ C0] [ 515.899571][ C0] CPU0 [ 515.899574][ C0] ---- [ 515.899576][ C0] lock(&htab->lockdep_key); [ 515.899585][ C0] [ 515.899587][ C0] lock(&htab->lockdep_key); [ 515.899596][ C0] [ 515.899596][ C0] *** DEADLOCK *** [ 515.899596][ C0] [ 515.899599][ C0] no locks held by syz.1.3183/14969. [ 515.899605][ C0] [ 515.899605][ C0] stack backtrace: [ 515.899610][ C0] CPU: 0 PID: 14969 Comm: syz.1.3183 Not tainted syzkaller #0 [ 515.899625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.899635][ C0] Call Trace: [ 515.899642][ C0] <#DB> [ 515.899648][ C0] dump_stack_lvl+0x18c/0x250 [ 515.899675][ C0] ? show_regs_print_info+0x20/0x20 [ 515.899703][ C0] ? print_usage_bug+0x475/0x690 [ 515.899722][ C0] ? verify_lock_unused+0x18/0x140 [ 515.899742][ C0] lock_acquire+0x2c2/0x420 [ 515.899759][ C0] ? perf_output_begin_forward+0xb8/0xa40 [ 515.899778][ C0] ? htab_lock_bucket+0x17d/0x300 [ 515.899795][ C0] ? read_lock_is_recursive+0x20/0x20 [ 515.899821][ C0] _raw_spin_lock+0x2e/0x40 [ 515.899839][ C0] ? htab_lock_bucket+0x17d/0x300 [ 515.899856][ C0] htab_lock_bucket+0x17d/0x300 [ 515.899876][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 515.899896][ C0] ? verify_lock_unused+0x18/0x140 [ 515.899915][ C0] ? jhash+0x34e/0x740 [ 515.899933][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 515.899954][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 515.899992][ C0] ? perf_callchain+0x220/0x220 [ 515.900014][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 515.900033][ C0] bpf_overflow_handler+0x1fc/0x510 [ 515.900058][ C0] ? bpf_overflow_handler+0xde/0x510 [ 515.900079][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 515.900105][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 515.900125][ C0] __perf_event_overflow+0x447/0x630 [ 515.900148][ C0] perf_swevent_event+0x319/0x570 [ 515.900168][ C0] ? perf_tp_event+0x1520/0x1520 [ 515.900185][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 515.900211][ C0] perf_bp_event+0x319/0x430 [ 515.900233][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 515.900276][ C0] ? lock_acquire+0x2c2/0x420 [ 515.900298][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 515.900322][ C0] notifier_call_chain+0x197/0x380 [ 515.900344][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 515.900365][ C0] atomic_notifier_call_chain+0xda/0x180 [ 515.900387][ C0] notify_die+0x145/0x1a0 [ 515.900408][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 515.900432][ C0] ? rcu_is_watching+0x15/0xb0 [ 515.900455][ C0] notify_debug+0x2e/0x50 [ 515.900470][ C0] exc_debug+0xde/0x140 [ 515.900488][ C0] asm_exc_debug+0x1e/0x40 [ 515.900505][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 515.900521][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 515.900535][ C0] RSP: 0018:ffffc900048ffb48 EFLAGS: 00050202 [ 515.900549][ C0] RAX: ffffffff842a2101 RBX: 00000000000000e8 RCX: 0000000000000018 [ 515.900561][ C0] RDX: 0000000000000001 RSI: 0000200000000310 RDI: ffffc90004929118 [ 515.900570][ C0] RBP: 0000000000000000 R08: ffffc9000492912f R09: 1ffff92000925225 [ 515.900582][ C0] R10: dffffc0000000000 R11: fffff52000925226 R12: 0000200000000328 [ 515.900595][ C0] R13: 0000000000000000 R14: ffffc90004929048 R15: 0000200000000240 [ 515.900612][ C0] ? _copy_from_user+0x31/0xe0 [ 515.900636][ C0] [ 515.900640][ C0] [ 515.900645][ C0] _copy_from_user+0x8b/0xe0 [ 515.900666][ C0] copy_from_bpfptr+0x67/0x80 [ 515.900684][ C0] bpf_prog_load+0xa80/0x1670 [ 515.900708][ C0] ? map_freeze+0x420/0x420 [ 515.900735][ C0] ? __might_fault+0xaa/0x120 [ 515.900752][ C0] ? __might_fault+0xc6/0x120 [ 515.900766][ C0] ? __might_fault+0xaa/0x120 [ 515.900782][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 515.900803][ C0] ? security_bpf+0x7e/0xa0 [ 515.900825][ C0] __sys_bpf+0x5ba/0x890 [ 515.900843][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 515.900867][ C0] ? lock_chain_count+0x20/0x20 [ 515.900890][ C0] __x64_sys_bpf+0x7c/0x90 [ 515.900907][ C0] do_syscall_64+0x55/0xa0 [ 515.900920][ C0] ? clear_bhb_loop+0x40/0x90 [ 515.900936][ C0] ? clear_bhb_loop+0x40/0x90 [ 515.900953][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.900969][ C0] RIP: 0033:0x7fb9d3f9c819 [ 515.900980][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.900992][ C0] RSP: 002b:00007fb9d4e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.901007][ C0] RAX: ffffffffffffffda RBX: 00007fb9d4215fa0 RCX: 00007fb9d3f9c819 [ 515.901018][ C0] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 515.901029][ C0] RBP: 00007fb9d4032c91 R08: 0000000000000000 R09: 0000000000000000 [ 515.901039][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.901048][ C0] R13: 00007fb9d4216038 R14: 00007fb9d4215fa0 R15: 00007fff00edbd38 [ 515.901064][ C0] [ 515.999817][T14966] base_sock_release(ffff88805c285400) sk=ffff8880572bd000 [ 519.191255][ T51] Bluetooth: hci2: command 0x0406 tx timeout