last executing test programs: 26.800093126s ago: executing program 2 (id=4696): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000001e50f7a741925400000000000000000000000000000000000000000008e053c77f0239"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xaf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000700070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d8030000000000", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 26.463210125s ago: executing program 2 (id=4701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x40804) recvmsg(r0, 0x0, 0x8122) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000c0000000061147c00000000000400000000"], &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00'}, 0x80, 0x0}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) 26.283725061s ago: executing program 2 (id=4704): r0 = socket$kcm(0x2, 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f0000000040)=r1, 0xffffffffffffffc0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffca7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708000180040010000400", 0x33fe0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x4, [@volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x4}}, @datasec={0xf, 0x9, 0x0, 0xf, 0x1, [{0x4, 0x6, 0x8}, {0x1, 0x8, 0x2}, {0x1, 0xcd5273b, 0x2}, {0x5, 0x8, 0x7fffffff}, {0x2, 0x10001, 0x5}, {0x4, 0x5}, {0x1, 0x8, 0x7}, {0x3, 0x0, 0xf}, {0x5, 0x5, 0x81}], '\a'}, @struct={0x3, 0x3, 0x0, 0x4, 0x1, 0x101, [{0x10, 0x2, 0x12000000}, {0x3, 0x2, 0x3f2}, {0xc, 0x0, 0xff}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000740)=""/163, 0xf8, 0xa3, 0x0, 0x4}, 0x28) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xd8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x4, 0x10}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40007}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}], &(0x7f00000002c0)='syzkaller\x00', 0xfffffff7, 0xb3, &(0x7f0000000300)=""/179, 0x0, 0x2a, '\x00', r7, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xe, 0x6, 0xd61}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000940)=[r9, r10, r11, 0x1, r2, r12], &(0x7f0000000980)=[{0x5, 0x4, 0x7, 0x5}, {0x5, 0x2, 0x6, 0x1}, {0x40000, 0x3, 0x5, 0x8}, {0x0, 0x2, 0x3, 0xb}, {0x5, 0x5, 0x6, 0x3}, {0x0, 0x2, 0x0, 0x5}, {0x1, 0x4, 0xe}], 0x10, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r13) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003b80)={&(0x7f00000005c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}, 0x90) 25.898060302s ago: executing program 2 (id=4710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) gettid() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex, 0xffffffffffffffff, 0x27, 0x10}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, r1, 0x3, 0x15, 0xffffffffffffffff, @void, @value=r1}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xa000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.124611424s ago: executing program 2 (id=4716): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xaf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000003000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 20.246555505s ago: executing program 1 (id=4757): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000f4ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104100000000001d400500feff00004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) socket$kcm(0x11, 0x2, 0x300) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) 20.024269661s ago: executing program 1 (id=4759): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="184783ccc913"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 18.527384525s ago: executing program 3 (id=4762): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x9}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) 18.376728559s ago: executing program 3 (id=4763): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008000200070002000600", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 17.927124812s ago: executing program 0 (id=4764): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000f4ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733f22bf8c4189a9b2b1351c0a4ea63d3371870918db0dad0aa5c36c1173f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) 17.816640585s ago: executing program 3 (id=4765): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f1"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 17.811894945s ago: executing program 1 (id=4766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 17.610602951s ago: executing program 0 (id=4767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x8000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}], {0x95, 0x0, 0x0, 0x8000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 17.454546865s ago: executing program 0 (id=4768): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.271238881s ago: executing program 0 (id=4769): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000a0007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 17.113827685s ago: executing program 0 (id=4770): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="000010000b00"}) r3 = perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x101000, 0x32, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2020000000000015000200000000103d030100000000009500000000000000bc26000001aa0000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x29, 0xa, 0x1, &(0x7f0000000180)) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17.113543795s ago: executing program 1 (id=4771): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000018000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000003000000dd0a00000000000073017a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 17.014654688s ago: executing program 3 (id=4772): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000041296a118", 0x1d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008000200070002000600", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 16.95045228s ago: executing program 1 (id=4773): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="184783ccc913"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 16.773652345s ago: executing program 0 (id=4774): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000003000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 16.685813328s ago: executing program 2 (id=4719): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1}], 0x1}, 0xc0) r3 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xb1b1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="e909000000747a9bab1ccbda126d1d347f32977d0fca647cd8921ba460d8eb0a5612a6ecdb00000000000000", 0x2c}, {0x0}], 0x2, 0x0, 0x0, 0x400c884}, 0x4000000) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) socketpair(0x28, 0x1, 0xfffffffe, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x100, @remote, 0xfffffffc}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x134c58d86b541130) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96636ddc68af2084, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x12a24, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) 16.640294399s ago: executing program 3 (id=4775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000180), 0x619, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000005c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x6, &(0x7f0000000000)=""/6, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 16.340076688s ago: executing program 1 (id=4777): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x2, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x1c1c0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000000014000000000000000000000002000000110c22ffff00000014000000000000000000000002000000008000000000000011000000000000000000000001000000000000000000000011000000000000000200fdff000000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) 16.339509528s ago: executing program 3 (id=4778): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x20, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @map_fd={0x18, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x2, 0x4, 0x6, 0x7, 0xa, 0x20, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x90}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xd0, 0xe, 0x9, 0x9, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0xb2, &(0x7f00000003c0)=""/178, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x7, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x1, 0x1, 0x6, 0xc}], 0x10, 0x1d5a2aa1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xe, &(0x7f00000017c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) recvmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/101, 0x65}], 0x1}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111810000000000851000000200000085000002a000000095000000000000009500a505000000004d6843c42760715099db8e49efd6a61a61fdd67058"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.244988404s ago: executing program 32 (id=4777): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x2, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x1c1c0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000000014000000000000000000000002000000110c22ffff00000014000000000000000000000002000000008000000000000011000000000000000000000001000000000000000000000011000000000000000200fdff000000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) 1.127075957s ago: executing program 33 (id=4719): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1}], 0x1}, 0xc0) r3 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xb1b1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="e909000000747a9bab1ccbda126d1d347f32977d0fca647cd8921ba460d8eb0a5612a6ecdb00000000000000", 0x2c}, {0x0}], 0x2, 0x0, 0x0, 0x400c884}, 0x4000000) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) socketpair(0x28, 0x1, 0xfffffffe, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x100, @remote, 0xfffffffc}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x134c58d86b541130) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96636ddc68af2084, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x12a24, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) 0s ago: executing program 34 (id=4778): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x20, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @map_fd={0x18, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x2, 0x4, 0x6, 0x7, 0xa, 0x20, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x90}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xd0, 0xe, 0x9, 0x9, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0xb2, &(0x7f00000003c0)=""/178, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x7, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x1, 0x1, 0x6, 0xc}], 0x10, 0x1d5a2aa1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xe, &(0x7f00000017c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) recvmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/101, 0x65}], 0x1}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111810000000000851000000200000085000002a000000095000000000000009500a505000000004d6843c42760715099db8e49efd6a61a61fdd67058"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ute Engine, BIOS Google 07/24/2026 [ 480.240914][T11980] Call Trace: [ 480.244246][T11980] [ 480.247217][T11980] dump_stack_lvl+0x18c/0x250 [ 480.251942][T11980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.258145][T11980] ? show_regs_print_info+0x20/0x20 [ 480.263381][T11980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.269598][T11980] should_fail_ex+0x394/0x4c0 [ 480.274337][T11980] should_failslab+0x9/0x20 [ 480.278896][T11980] slab_pre_alloc_hook+0x59/0x300 [ 480.283990][T11980] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 480.289586][T11980] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 480.295172][T11980] __kmem_cache_alloc_node+0x53/0x250 [ 480.300628][T11980] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 480.306314][T11980] __kmalloc+0xa7/0x240 [ 480.310528][T11980] bpf_prog_test_run_skb+0x242/0x18f0 [ 480.315954][T11980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.322149][T11980] ? lockdep_hardirqs_on+0x98/0x150 [ 480.327414][T11980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.333892][T11980] ? cpu_online+0x60/0x60 [ 480.338284][T11980] ? cpu_online+0x60/0x60 [ 480.342676][T11980] bpf_prog_test_run+0x31f/0x390 [ 480.347682][T11980] __sys_bpf+0x49d/0x890 [ 480.351971][T11980] ? bpf_link_show_fdinfo+0x390/0x390 [ 480.357415][T11980] ? __x64_sys_bpf+0x1d/0x90 [ 480.362144][T11980] __x64_sys_bpf+0x7c/0x90 [ 480.366602][T11980] do_syscall_64+0x55/0xb0 [ 480.371060][T11980] ? clear_bhb_loop+0x40/0x90 [ 480.375777][T11980] ? clear_bhb_loop+0x40/0x90 [ 480.380499][T11980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.386450][T11980] RIP: 0033:0x7f28e219e0d9 [ 480.390907][T11980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.410569][T11980] RSP: 002b:00007f28e3058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 480.419034][T11980] RAX: ffffffffffffffda RBX: 00007f28e2426090 RCX: 00007f28e219e0d9 [ 480.427041][T11980] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 480.435134][T11980] RBP: 00007f28e3058090 R08: 0000000000000000 R09: 0000000000000000 [ 480.443160][T11980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.451173][T11980] R13: 00007f28e2426128 R14: 00007f28e2426090 R15: 00007ffd75688a98 [ 480.459222][T11980] [ 482.699256][T12010] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2195'. [ 482.964771][T12017] netlink: 'syz.2.2197': attribute type 17 has an invalid length. [ 483.000303][T12017] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2197'. [ 483.011840][T12017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.214850][T12017] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2197'. [ 483.424232][T12036] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.2205'. [ 483.705124][T12049] FAULT_INJECTION: forcing a failure. [ 483.705124][T12049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.758301][T12049] CPU: 0 PID: 12049 Comm: syz.0.2209 Not tainted syzkaller #0 [ 483.765841][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.775941][T12049] Call Trace: [ 483.779259][T12049] [ 483.782232][T12049] dump_stack_lvl+0x18c/0x250 [ 483.786971][T12049] ? show_regs_print_info+0x20/0x20 [ 483.792229][T12049] ? load_image+0x420/0x420 [ 483.796800][T12049] ? __lock_acquire+0x7d80/0x7d80 [ 483.801892][T12049] ? snprintf+0xe9/0x140 [ 483.806205][T12049] should_fail_ex+0x394/0x4c0 [ 483.810945][T12049] _copy_to_user+0x2f/0xa0 [ 483.815407][T12049] simple_read_from_buffer+0xe7/0x150 [ 483.820834][T12049] proc_fail_nth_read+0x1e8/0x260 [ 483.825929][T12049] ? proc_fault_inject_write+0x360/0x360 [ 483.831631][T12049] ? fsnotify_perm+0x271/0x5e0 [ 483.836463][T12049] ? proc_fault_inject_write+0x360/0x360 [ 483.842151][T12049] vfs_read+0x298/0x990 [ 483.846372][T12049] ? kernel_read+0x1e0/0x1e0 [ 483.851021][T12049] ? __fget_files+0x28/0x460 [ 483.855672][T12049] ? __fget_files+0x3fc/0x460 [ 483.860408][T12049] ? __fdget_pos+0x2a3/0x330 [ 483.865044][T12049] ? ksys_read+0x74/0x260 [ 483.869431][T12049] ksys_read+0x151/0x260 [ 483.873745][T12049] ? vfs_write+0x9a0/0x9a0 [ 483.878253][T12049] ? lockdep_hardirqs_on+0x98/0x150 [ 483.883510][T12049] do_syscall_64+0x55/0xb0 [ 483.887974][T12049] ? clear_bhb_loop+0x40/0x90 [ 483.892698][T12049] ? clear_bhb_loop+0x40/0x90 [ 483.897429][T12049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.903374][T12049] RIP: 0033:0x7fa82ed5e90e [ 483.907833][T12049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.927573][T12049] RSP: 002b:00007fa82fd55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.936049][T12049] RAX: ffffffffffffffda RBX: 00007fa82fd566c0 RCX: 00007fa82ed5e90e [ 483.944065][T12049] RDX: 000000000000000f RSI: 00007fa82fd560a0 RDI: 0000000000000008 [ 483.952078][T12049] RBP: 00007fa82fd56090 R08: 0000000000000000 R09: 0000000000000000 [ 483.960094][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.968105][T12049] R13: 00007fa82f026038 R14: 00007fa82f025fa0 R15: 00007fffb20d5858 [ 483.976142][T12049] [ 484.320939][T12074] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.2218'. [ 484.919614][T12097] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2229'. [ 484.968123][T12093] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.2227'. [ 484.984148][T12093] openvswitch: netlink: IP tunnel dst address not specified [ 486.085560][T12142] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2249'. [ 487.262307][T12183] netlink: 'syz.0.2268': attribute type 33 has an invalid length. [ 487.277346][T12183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2268'. [ 487.300240][T12186] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2268'. [ 487.664010][T12200] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2275'. [ 487.680455][T12200] bridge_slave_1: default FDB implementation only supports local addresses [ 488.342945][T12225] netlink: 'syz.3.2286': attribute type 10 has an invalid length. [ 488.360452][T12231] netlink: 'syz.2.2289': attribute type 12 has an invalid length. [ 488.382164][T12231] nla_validate_range_unsigned: 60 callbacks suppressed [ 488.382182][T12231] netlink: 'syz.2.2289': attribute type 11 has an invalid length. [ 488.436230][T12231] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.2289'. [ 488.582764][T12225] bond0: (slave .3ãc¤±): Enslaving as an active interface with an up link [ 490.121312][T12270] netlink: 'syz.0.2304': attribute type 1 has an invalid length. [ 490.148791][T12270] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2304'. [ 490.880789][T12295] netlink: 'syz.3.2316': attribute type 21 has an invalid length. [ 491.585480][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.595003][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.604681][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.614236][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.623113][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 491.631106][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.233643][T12334] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2325'. [ 492.372938][T12316] chnl_net:caif_netlink_parms(): no params data found [ 492.602803][T12341] netlink: 'syz.3.2331': attribute type 10 has an invalid length. [ 492.611732][T12341] syz_tun: entered promiscuous mode [ 492.629698][T12341] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 492.818186][T12316] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.838420][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.865449][T12316] bridge_slave_0: entered allmulticast mode [ 492.889871][T12316] bridge_slave_0: entered promiscuous mode [ 492.916567][T12316] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.927692][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.945113][T12316] bridge_slave_1: entered allmulticast mode [ 492.963216][T12316] bridge_slave_1: entered promiscuous mode [ 492.975583][T12354] netlink: 'syz.0.2334': attribute type 41 has an invalid length. [ 493.025018][T12316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.049577][T12316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.133118][T12316] team0: Port device team_slave_0 added [ 493.153224][T12316] team0: Port device team_slave_1 added [ 493.195020][ T8262] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 493.212841][T12316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.223518][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.275648][T12316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.287897][T12363] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2338'. [ 493.296828][T12316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.304744][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.336362][T12316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.408084][T12316] hsr_slave_0: entered promiscuous mode [ 493.417171][T12316] hsr_slave_1: entered promiscuous mode [ 493.423655][T12316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.436947][T12316] Cannot create hsr debugfs directory [ 493.488320][T12366] netlink: 'syz.1.2339': attribute type 2 has an invalid length. [ 493.499747][T12366] netlink: 'syz.1.2339': attribute type 4 has an invalid length. [ 493.508120][T12366] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2339'. [ 493.745289][ T5785] Bluetooth: hci1: command tx timeout [ 493.782062][T12316] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.868837][T12375] syzkaller0: entered promiscuous mode [ 493.874537][T12375] syzkaller0: entered allmulticast mode [ 493.936083][T12316] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.037210][T12316] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.135571][T12316] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.825285][ T5785] Bluetooth: hci1: command tx timeout [ 497.393400][T12316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 497.442664][T12316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 497.463343][T12316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 497.495591][T12316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 497.679493][T12316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.730459][T12316] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.777247][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.784592][ T8262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.795913][ T8262] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.803173][ T8262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.818645][T12409] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2357'. [ 497.828964][T12409] netlink: 'syz.3.2357': attribute type 2 has an invalid length. [ 497.909546][ T5785] Bluetooth: hci1: command tx timeout [ 497.923687][T12412] bridge_slave_1: left allmulticast mode [ 497.953708][T12412] bridge_slave_1: left promiscuous mode [ 497.960616][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.968786][T12411] FAULT_INJECTION: forcing a failure. [ 497.968786][T12411] name failslab, interval 1, probability 0, space 0, times 0 [ 497.990757][T12412] bridge_slave_0: left promiscuous mode [ 497.998952][T12411] CPU: 1 PID: 12411 Comm: syz.0.2358 Not tainted syzkaller #0 [ 498.006448][T12412] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.013519][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.013540][T12411] Call Trace: [ 498.013560][T12411] [ 498.013576][T12411] dump_stack_lvl+0x18c/0x250 [ 498.013626][T12411] ? show_regs_print_info+0x20/0x20 [ 498.039990][T12411] ? load_image+0x420/0x420 [ 498.044569][T12411] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 498.050648][T12411] ? __asan_memset+0x22/0x40 [ 498.055324][T12411] should_fail_ex+0x394/0x4c0 [ 498.060116][T12411] should_failslab+0x9/0x20 [ 498.064696][T12411] slab_pre_alloc_hook+0x59/0x300 [ 498.069857][T12411] ? __debug_object_init+0xec/0x450 [ 498.075180][T12411] kmem_cache_alloc+0x5a/0x2c0 [ 498.080026][T12411] ? slab_build_skb+0x28/0x3e0 [ 498.084890][T12411] slab_build_skb+0x28/0x3e0 [ 498.089595][T12411] bpf_prog_test_run_skb+0x38f/0x18f0 [ 498.095086][T12411] ? __fget_files+0x28/0x460 [ 498.099764][T12411] ? __fget_files+0x3fc/0x460 [ 498.104606][T12411] ? cpu_online+0x60/0x60 [ 498.109024][T12411] bpf_prog_test_run+0x31f/0x390 [ 498.114061][T12411] __sys_bpf+0x49d/0x890 [ 498.118422][T12411] ? bpf_link_show_fdinfo+0x390/0x390 [ 498.123940][T12411] ? lock_chain_count+0x20/0x20 [ 498.128976][T12411] __x64_sys_bpf+0x7c/0x90 [ 498.133480][T12411] do_syscall_64+0x55/0xb0 [ 498.137995][T12411] ? clear_bhb_loop+0x40/0x90 [ 498.142737][T12411] ? clear_bhb_loop+0x40/0x90 [ 498.147501][T12411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.153483][T12411] RIP: 0033:0x7fa82ed9e0d9 [ 498.157985][T12411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.177674][T12411] RSP: 002b:00007fa82fd56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.186161][T12411] RAX: ffffffffffffffda RBX: 00007fa82f025fa0 RCX: 00007fa82ed9e0d9 [ 498.194192][T12411] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 498.202356][T12411] RBP: 00007fa82fd56090 R08: 0000000000000000 R09: 0000000000000000 [ 498.210397][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.218440][T12411] R13: 00007fa82f026038 R14: 00007fa82f025fa0 R15: 00007fffb20d5858 [ 498.226540][T12411] [ 499.130149][T12316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.226463][T12437] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2366'. [ 499.231826][T12316] veth0_vlan: entered promiscuous mode [ 499.272914][T12316] veth1_vlan: entered promiscuous mode [ 499.331731][T12437] netlink: 'syz.3.2366': attribute type 29 has an invalid length. [ 499.361791][T12437] netlink: 'syz.3.2366': attribute type 29 has an invalid length. [ 499.383661][T12443] netlink: 'syz.3.2366': attribute type 29 has an invalid length. [ 499.399516][T12316] veth0_macvtap: entered promiscuous mode [ 499.467483][T12316] veth1_macvtap: entered promiscuous mode [ 499.474719][T12442] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2368'. [ 499.550826][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.561639][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.573262][T12316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.592326][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.613116][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.629577][T12316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.645106][T12316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.653956][T12316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.675099][T12316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.684014][T12316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.900660][ T8264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.920456][ T8264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.985351][ T5785] Bluetooth: hci1: command tx timeout [ 500.117140][ T8212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.130533][ T8212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.356588][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.365500][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.373559][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 501.385484][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 501.395074][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 501.403401][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.512940][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.522800][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.507692][ T5086] Bluetooth: hci4: command tx timeout [ 503.648796][T12492] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2384'. [ 503.659149][T12492] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.2384'. [ 503.710031][T12474] chnl_net:caif_netlink_parms(): no params data found [ 503.976691][T12474] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.990099][T12474] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.998631][T12474] bridge_slave_0: entered allmulticast mode [ 504.006217][T12474] bridge_slave_0: entered promiscuous mode [ 504.015548][T12474] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.022947][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.031408][T12474] bridge_slave_1: entered allmulticast mode [ 504.049949][T12474] bridge_slave_1: entered promiscuous mode [ 504.093860][T12511] netlink: 'syz.2.2390': attribute type 3 has an invalid length. [ 504.105884][T12511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2390'. [ 504.313991][T12474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.342835][T12474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.422976][T12474] team0: Port device team_slave_0 added [ 504.448332][T12474] team0: Port device team_slave_1 added [ 504.537399][T12474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.544431][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.571546][T12474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.585703][T12474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.592695][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.620043][T12474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.737238][T12474] hsr_slave_0: entered promiscuous mode [ 504.749214][T12474] hsr_slave_1: entered promiscuous mode [ 504.759371][T12474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.772685][T12474] Cannot create hsr debugfs directory [ 505.024168][T12474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.211963][T12474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.417741][T12474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.578445][T12474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.587679][ T5086] Bluetooth: hci4: command tx timeout [ 505.783915][T12474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 505.810843][T12474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 505.824667][T12474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 505.856179][T12474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 506.020300][T12474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.048694][T12474] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.067606][T12578] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.2413'. [ 506.080375][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.087620][ T8248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.140091][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.147654][ T8212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.852623][T12474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.970162][T12474] veth0_vlan: entered promiscuous mode [ 506.996891][T12474] veth1_vlan: entered promiscuous mode [ 507.090381][T12474] veth0_macvtap: entered promiscuous mode [ 507.112096][T12474] veth1_macvtap: entered promiscuous mode [ 507.151077][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.161766][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.180019][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.191198][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.216844][T12474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.241990][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.257284][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.271407][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.284422][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.300717][T12474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.311891][T12609] netlink: 'syz.1.2423': attribute type 39 has an invalid length. [ 507.470142][T12609] hsr_slave_1 (unregistering): left promiscuous mode [ 507.576694][T12474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.586299][T12474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.596511][T12474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.605511][T12474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.666483][ T5086] Bluetooth: hci4: command tx timeout [ 507.997298][ T8212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.028740][ T8212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.034087][T12630] netlink: 'syz.2.2430': attribute type 1 has an invalid length. [ 508.076651][T12630] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.2430'. [ 508.103164][ T8212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.139245][ T8212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.796735][T12649] netlink: 'syz.3.2434': attribute type 1 has an invalid length. [ 508.804588][T12649] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2434'. [ 508.863076][T12651] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2436'. [ 509.746082][ T5086] Bluetooth: hci4: command tx timeout [ 510.100476][T12675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2444'. [ 510.191951][T12675] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.302852][T12680] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 510.331311][T12680] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.2445'. [ 510.467960][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 510.477817][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 510.485967][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 510.498797][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 510.507197][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 510.515736][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 511.514354][T12675] bridge_slave_0 (unregistering): left allmulticast mode [ 511.524371][T12675] bridge_slave_0 (unregistering): left promiscuous mode [ 511.532655][T12675] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.625021][ T5775] bond0: (slave syz_tun): Releasing backup interface [ 511.827863][ T8212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.019905][ T8212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.188488][ T8212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.332791][ T8212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.541218][T12682] chnl_net:caif_netlink_parms(): no params data found [ 512.548698][ T5086] Bluetooth: hci2: command tx timeout [ 512.913366][T12733] netlink: 'syz.0.2458': attribute type 29 has an invalid length. [ 512.998583][T12733] netlink: 'syz.0.2458': attribute type 29 has an invalid length. [ 513.027405][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.034660][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.061923][T12682] bridge_slave_0: entered allmulticast mode [ 513.076666][T12682] bridge_slave_0: entered promiscuous mode [ 513.202044][T12682] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.213210][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.225296][T12682] bridge_slave_1: entered allmulticast mode [ 513.238305][T12682] bridge_slave_1: entered promiscuous mode [ 513.591506][T12682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.618673][T12682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.877226][T12682] team0: Port device team_slave_0 added [ 514.046487][T12682] team0: Port device team_slave_1 added [ 514.250794][T12682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.275199][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.394532][T12682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.556155][T12682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.563194][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.625417][ T5086] Bluetooth: hci2: command tx timeout [ 514.687101][T12682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.136938][T12682] hsr_slave_0: entered promiscuous mode [ 515.175554][T12682] hsr_slave_1: entered promiscuous mode [ 515.215340][T12682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.222974][T12682] Cannot create hsr debugfs directory [ 515.631087][ T8212] bond0: (slave .3ãc¤±): Releasing backup interface [ 515.827944][T12794] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.848509][T12794] bridge0: entered allmulticast mode [ 516.375573][ T8212] hsr_slave_0: left promiscuous mode [ 516.443718][ T8212] hsr_slave_1: left promiscuous mode [ 516.451171][ T8212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.485172][ T8212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.511045][ T8212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.522096][ T8212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.667500][ T8212] veth1_macvtap: left allmulticast mode [ 516.673432][ T8212] veth1_macvtap: left promiscuous mode [ 516.689842][ T8212] veth0_macvtap: left promiscuous mode [ 516.695850][ T8212] veth1_vlan: left allmulticast mode [ 516.701272][ T8212] veth1_vlan: left promiscuous mode [ 516.707313][ T5086] Bluetooth: hci2: command tx timeout [ 517.803282][T12839] netlink: 'syz.1.2482': attribute type 28 has an invalid length. [ 517.833706][T12839] netlink: 'syz.1.2482': attribute type 29 has an invalid length. [ 517.877457][T12839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2482'. [ 518.489652][T12851] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2487'. [ 518.502295][ T8212] team0 (unregistering): Port device macvlan1 removed [ 518.790537][ T5086] Bluetooth: hci2: command tx timeout [ 519.058973][ T8212] team0 (unregistering): Port device team_slave_1 removed [ 519.169491][ T8212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.225503][ T8212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.589841][ T8212] bond0 (unregistering): Released all slaves [ 519.668842][T12846] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2482'. [ 520.089329][T12868] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2493'. [ 520.867229][T12893] netlink: 'syz.0.2502': attribute type 10 has an invalid length. [ 520.994534][T12893] team0: Device wg1 is of different type [ 521.052465][T12682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 521.174591][T12682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 521.198156][T12682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 521.280537][T12682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.830204][T12682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.888891][T12682] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.979944][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.987204][ T8248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.151307][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.158567][ T8248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.061857][T12955] netlink: 'syz.2.2520': attribute type 10 has an invalid length. [ 523.087760][T12955] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2520'. [ 525.196232][ T8248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 525.449794][T12682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.724565][ T8212] hsr_slave_0: left promiscuous mode [ 525.734698][ T8212] hsr_slave_1: left promiscuous mode [ 525.760692][ T8212] bridge_slave_1: left allmulticast mode [ 525.767604][T12968] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2522'. [ 525.785144][ T8212] bridge_slave_1: left promiscuous mode [ 525.792491][T12968] netlink: 'syz.0.2522': attribute type 2 has an invalid length. [ 525.804938][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.848633][ T8212] bridge_slave_0: left allmulticast mode [ 525.854343][ T8212] bridge_slave_0: left promiscuous mode [ 525.884646][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.029983][ T8212] veth1_macvtap: left promiscuous mode [ 526.062842][ T8212] veth0_macvtap: left promiscuous mode [ 526.095770][ T8212] veth1_vlan: left promiscuous mode [ 526.101419][ T8212] veth0_vlan: left promiscuous mode [ 526.161698][T12985] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.2526'. [ 526.579147][ T8212] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 527.260604][ T8212] team0 (unregistering): Port device team_slave_1 removed [ 527.345327][ T8212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.389648][ T8212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.660776][ T8212] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 527.671624][ T8212] bond0 (unregistering): Released all slaves [ 527.885557][T12682] veth0_vlan: entered promiscuous mode [ 527.929098][T12682] veth1_vlan: entered promiscuous mode [ 528.042627][T12682] veth0_macvtap: entered promiscuous mode [ 528.089324][T12682] veth1_macvtap: entered promiscuous mode [ 528.221445][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.233774][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.248806][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.335784][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.432759][T12682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.503409][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.530759][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.548407][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.577610][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.613145][T12682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.668335][T12682] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.722145][T12682] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.742899][T12682] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.766843][T12682] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.988923][T13041] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 529.014681][T13041] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 529.140393][ T8240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.169155][ T8240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.298888][ T8240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.315250][T13048] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 529.334637][ T8240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.215004][T13077] netlink: 'syz.0.2548': attribute type 21 has an invalid length. [ 533.233463][T13077] netlink: 'syz.0.2548': attribute type 4 has an invalid length. [ 533.261266][T13077] netlink: 'syz.0.2548': attribute type 23 has an invalid length. [ 533.274509][T13077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2548'. [ 534.295672][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.305774][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.313799][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.325850][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.337883][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 534.346060][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.448726][ T8240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.578794][ T8240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.700443][ T8240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.886585][ T8240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.958112][T13121] netlink: 'syz.2.2558': attribute type 3 has an invalid length. [ 534.967444][T13121] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2558'. [ 535.201549][T13108] chnl_net:caif_netlink_parms(): no params data found [ 535.282486][T13131] netlink: 'syz.3.2561': attribute type 17 has an invalid length. [ 535.292654][T13131] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 536.385404][ T5785] Bluetooth: hci0: command tx timeout [ 536.510247][T13108] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.559673][T13108] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.595291][T13108] bridge_slave_0: entered allmulticast mode [ 536.602847][T13108] bridge_slave_0: entered promiscuous mode [ 536.710156][T13167] netlink: 'syz.3.2567': attribute type 9 has an invalid length. [ 536.805815][T13167] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2567'. [ 537.788975][T13177] netlink: 'syz.3.2570': attribute type 41 has an invalid length. [ 537.837566][T13108] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.845111][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.852398][T13108] bridge_slave_1: entered allmulticast mode [ 537.890349][T13108] bridge_slave_1: entered promiscuous mode [ 537.912648][T13177] netlink: 'syz.3.2570': attribute type 41 has an invalid length. [ 538.000419][T13108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.127441][T13108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.316913][T13108] team0: Port device team_slave_0 added [ 538.509766][ T5785] Bluetooth: hci0: command tx timeout [ 538.543172][T13108] team0: Port device team_slave_1 added [ 538.850808][T13108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.876132][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.923258][T13108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.986402][T13108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.997414][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.026214][T13108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.148209][T13108] hsr_slave_0: entered promiscuous mode [ 539.155896][T13108] hsr_slave_1: entered promiscuous mode [ 539.478295][T13216] netlink: 'syz.0.2586': attribute type 9 has an invalid length. [ 539.550100][T13216] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2586'. [ 540.545334][ T5785] Bluetooth: hci0: command tx timeout [ 540.843875][T13225] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2582'. [ 540.927709][T13225] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2582'. [ 541.020125][ T8240] hsr_slave_0: left promiscuous mode [ 541.083520][ T8240] veth1_macvtap: left promiscuous mode [ 541.090411][ T8240] veth0_macvtap: left promiscuous mode [ 541.099927][ T8240] veth1_vlan: left promiscuous mode [ 541.114596][ T8240] veth0_vlan: left promiscuous mode [ 541.973350][ T8240] team0 (unregistering): Port device team_slave_1 removed [ 542.037926][ T8240] team0 (unregistering): Port device team_slave_0 removed [ 542.103181][ T8240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.171517][ T8240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.238755][ T8240] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 542.578993][ T8240] bond0 (unregistering): Released all slaves [ 542.625567][ T5785] Bluetooth: hci0: command tx timeout [ 542.840834][T13245] netlink: 'syz.2.2591': attribute type 6 has an invalid length. [ 542.882856][T13245] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2591'. [ 543.457215][T13108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 543.506554][T13108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 543.536821][T13108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 543.557355][T13108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 544.463723][T13108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.040967][T13295] netlink: 'syz.2.2606': attribute type 9 has an invalid length. [ 545.049610][T13295] netlink: 153604 bytes leftover after parsing attributes in process `syz.2.2606'. [ 546.676349][T13108] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.726284][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.733502][ T8212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.808705][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.815921][ T8212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.154409][T13317] netlink: 'syz.2.2611': attribute type 21 has an invalid length. [ 547.169399][T13317] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.179926][T13317] IPv6: Can't replace route, no match found [ 547.443599][T13108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.604298][T13108] veth0_vlan: entered promiscuous mode [ 547.631292][T13108] veth1_vlan: entered promiscuous mode [ 547.741155][T13341] pim6reg1: entered promiscuous mode [ 547.757909][T13341] pim6reg1: entered allmulticast mode [ 547.782377][T13108] veth0_macvtap: entered promiscuous mode [ 547.824403][T13108] veth1_macvtap: entered promiscuous mode [ 547.963202][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.999922][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.021810][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.053843][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.080852][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.105360][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.126836][T13108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.162460][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.188276][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.209570][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.223182][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.233894][T13108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.244964][T13108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.268373][T13108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.303998][T13108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.330230][T13108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.340530][T13108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.349628][T13108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.608686][ T8262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.634906][ T8262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.772890][ T8261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.807510][ T8261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.315059][T13390] syzkaller0: entered promiscuous mode [ 549.325629][T13390] syzkaller0: entered allmulticast mode [ 549.362682][T13400] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2635'. [ 550.938285][T13449] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2653'. [ 552.238279][T13421] netlink: 'syz.0.2642': attribute type 10 has an invalid length. [ 553.652306][T13507] FAULT_INJECTION: forcing a failure. [ 553.652306][T13507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.674704][T13507] CPU: 1 PID: 13507 Comm: syz.2.2673 Not tainted syzkaller #0 [ 553.682247][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.692354][T13507] Call Trace: [ 553.695682][T13507] [ 553.698663][T13507] dump_stack_lvl+0x18c/0x250 [ 553.703388][T13507] ? show_regs_print_info+0x20/0x20 [ 553.708620][T13507] ? load_image+0x420/0x420 [ 553.713186][T13507] ? __might_fault+0xaa/0x120 [ 553.717882][T13507] ? __lock_acquire+0x7d80/0x7d80 [ 553.722917][T13507] should_fail_ex+0x394/0x4c0 [ 553.727631][T13507] _copy_from_user+0x2f/0xe0 [ 553.732280][T13507] __sys_bpf+0x23e/0x890 [ 553.736571][T13507] ? bpf_link_show_fdinfo+0x390/0x390 [ 553.741970][T13507] ? lock_chain_count+0x20/0x20 [ 553.746861][T13507] __x64_sys_bpf+0x7c/0x90 [ 553.751339][T13507] do_syscall_64+0x55/0xb0 [ 553.755801][T13507] ? clear_bhb_loop+0x40/0x90 [ 553.760490][T13507] ? clear_bhb_loop+0x40/0x90 [ 553.765196][T13507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.771113][T13507] RIP: 0033:0x7f3c5859e0d9 [ 553.775566][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.795285][T13507] RSP: 002b:00007f3c59486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.803736][T13507] RAX: ffffffffffffffda RBX: 00007f3c58826090 RCX: 00007f3c5859e0d9 [ 553.811725][T13507] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 553.819706][T13507] RBP: 00007f3c59486090 R08: 0000000000000000 R09: 0000000000000000 [ 553.827686][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.835682][T13507] R13: 00007f3c58826128 R14: 00007f3c58826090 R15: 00007fff22699de8 [ 553.843699][T13507] [ 554.288160][T13519] netlink: 'syz.1.2677': attribute type 10 has an invalid length. [ 554.440566][T13519] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.477326][T13519] bond0: (slave team0): Enslaving as an active interface with an up link [ 554.723953][T13528] netlink: 'syz.0.2681': attribute type 9 has an invalid length. [ 554.750513][T13528] netlink: 153604 bytes leftover after parsing attributes in process `syz.0.2681'. [ 556.191772][T13550] syzkaller0: entered promiscuous mode [ 556.201332][T13550] syzkaller0: entered allmulticast mode [ 556.224509][T13557] sit0: entered allmulticast mode [ 557.187230][ T8244] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 558.663742][T13595] netlink: 'syz.3.2704': attribute type 25 has an invalid length. [ 558.679236][T13595] netlink: 'syz.3.2704': attribute type 3 has an invalid length. [ 560.433969][T13595] netlink: 'syz.3.2704': attribute type 10 has an invalid length. [ 560.442282][T13595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2704'. [ 560.453566][T13595] batman_adv: batadv0: Adding interface: virt_wifi0 [ 560.460284][T13595] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.487436][T13595] batman_adv: batadv0: Interface activated: virt_wifi0 [ 560.509207][T13609] netlink: 'syz.1.2709': attribute type 10 has an invalid length. [ 560.538187][T13609] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.545995][T13609] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.610947][T13609] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.618192][T13609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.625801][T13609] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.633009][T13609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.680810][T13609] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 560.777257][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2712'. [ 562.975723][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.982178][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.379782][T13666] tap0: tun_chr_ioctl cmd 1074025677 [ 564.391680][T13666] tap0: linktype set to 778 [ 566.553255][T13727] delete_channel: no stack [ 567.087278][T13737] FAULT_INJECTION: forcing a failure. [ 567.087278][T13737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.125098][T13737] CPU: 0 PID: 13737 Comm: syz.3.2756 Not tainted syzkaller #0 [ 567.132649][T13737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.142761][T13737] Call Trace: [ 567.146085][T13737] [ 567.149054][T13737] dump_stack_lvl+0x18c/0x250 [ 567.153836][T13737] ? show_regs_print_info+0x20/0x20 [ 567.159106][T13737] ? load_image+0x420/0x420 [ 567.163689][T13737] ? __might_fault+0xaa/0x120 [ 567.168432][T13737] ? __lock_acquire+0x7d80/0x7d80 [ 567.173525][T13737] should_fail_ex+0x394/0x4c0 [ 567.178269][T13737] _copy_from_user+0x2f/0xe0 [ 567.182955][T13737] restore_altstack+0xaf/0x4e0 [ 567.187776][T13737] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 567.193804][T13737] ? __lock_acquire+0x7d80/0x7d80 [ 567.198959][T13737] ? __ia32_sys_sigaltstack+0x2a0/0x2a0 [ 567.204558][T13737] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.210327][T13737] ? lockdep_hardirqs_on+0x98/0x150 [ 567.215591][T13737] __ia32_sys_rt_sigreturn+0x239/0x850 [ 567.221112][T13737] ? x64_setup_rt_frame+0xc30/0xc30 [ 567.226363][T13737] ? arch_do_signal_or_restart+0x4bd/0x7b0 [ 567.232229][T13737] ? get_sigframe_size+0x20/0x20 [ 567.237230][T13737] ? perf_trace_preemptirq_template+0xac/0x330 [ 567.243455][T13737] ? perf_trace_preemptirq_template+0xac/0x330 [ 567.249673][T13737] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 567.255722][T13737] ? lock_chain_count+0x20/0x20 [ 567.260725][T13737] ? lockdep_hardirqs_on+0x98/0x150 [ 567.265988][T13737] do_syscall_64+0x55/0xb0 [ 567.270453][T13737] ? clear_bhb_loop+0x40/0x90 [ 567.275181][T13737] ? clear_bhb_loop+0x40/0x90 [ 567.279933][T13737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.285896][T13737] RIP: 0033:0x7f304f13f459 [ 567.290349][T13737] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 567.310000][T13737] RSP: 002b:00007f304ff91a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 567.318472][T13737] RAX: ffffffffffffffda RBX: 00007f304f425fa0 RCX: 00007f304f13f459 [ 567.326514][T13737] RDX: 00007f304ff91a80 RSI: 00007f304ff91bb0 RDI: 0000000000000011 [ 567.334542][T13737] RBP: 00007f304ff92090 R08: 0000000000000000 R09: 0000000000000000 [ 567.342660][T13737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.350675][T13737] R13: 00007f304f426038 R14: 00007f304f425fa0 R15: 00007ffeaa05d728 [ 567.358723][T13737] [ 568.021340][T13763] netlink: 'syz.2.2764': attribute type 3 has an invalid length. [ 568.033865][T13763] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2764'. [ 569.609067][T13773] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2768'. [ 569.636711][T13774] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2768'. [ 569.654999][T13773] openvswitch: netlink: IP tunnel dst address not specified [ 569.674383][T13774] openvswitch: netlink: IP tunnel dst address not specified [ 570.440309][T13808] FAULT_INJECTION: forcing a failure. [ 570.440309][T13808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.468482][T13808] CPU: 1 PID: 13808 Comm: syz.0.2784 Not tainted syzkaller #0 [ 570.476038][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.486163][T13808] Call Trace: [ 570.489505][T13808] [ 570.492508][T13808] dump_stack_lvl+0x18c/0x250 [ 570.497291][T13808] ? show_regs_print_info+0x20/0x20 [ 570.502582][T13808] ? load_image+0x420/0x420 [ 570.507182][T13808] ? __might_fault+0xaa/0x120 [ 570.511943][T13808] ? __lock_acquire+0x7d80/0x7d80 [ 570.517087][T13808] should_fail_ex+0x394/0x4c0 [ 570.521883][T13808] fpu__restore_sig+0x221/0x1210 [ 570.526979][T13808] ? copy_fpstate_to_sigframe+0xce0/0xce0 [ 570.532812][T13808] ? __lock_acquire+0x7d80/0x7d80 [ 570.537929][T13808] ? __might_fault+0xc6/0x120 [ 570.542666][T13808] ? __might_fault+0xaa/0x120 [ 570.547427][T13808] __ia32_sys_rt_sigreturn+0x6d1/0x850 [ 570.552985][T13808] ? x64_setup_rt_frame+0xc30/0xc30 [ 570.558375][T13808] ? lock_chain_count+0x20/0x20 [ 570.563339][T13808] ? lockdep_hardirqs_on+0x98/0x150 [ 570.568633][T13808] do_syscall_64+0x55/0xb0 [ 570.573135][T13808] ? clear_bhb_loop+0x40/0x90 [ 570.577881][T13808] ? clear_bhb_loop+0x40/0x90 [ 570.578443][T13807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2783'. [ 570.582605][T13808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.582636][T13808] RIP: 0033:0x7f3c9839e0d9 [ 570.582662][T13808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.621667][T13808] RSP: 002b:00007f3c99353028 EFLAGS: 00000246 [ 570.627802][T13808] RAX: 0000000000000000 RBX: 00007f3c98625fa0 RCX: 00007f3c9839e0d9 [ 570.635844][T13808] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 570.643966][T13808] RBP: 00007f3c99353090 R08: 0000000000000000 R09: 0000000000000000 [ 570.652002][T13808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.660039][T13808] R13: 00007f3c98626038 R14: 00007f3c98625fa0 R15: 00007ffc259b8538 [ 570.668142][T13808] [ 573.466606][T13807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2783'. [ 573.475893][T13812] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2783'. [ 573.551948][T13823] syzkaller0: entered promiscuous mode [ 573.581733][T13823] syzkaller0: entered allmulticast mode [ 574.202801][T13847] FAULT_INJECTION: forcing a failure. [ 574.202801][T13847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.236138][T13847] CPU: 1 PID: 13847 Comm: syz.0.2797 Not tainted syzkaller #0 [ 574.243678][T13847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.253807][T13847] Call Trace: [ 574.257112][T13847] [ 574.260089][T13847] dump_stack_lvl+0x18c/0x250 [ 574.264808][T13847] ? show_regs_print_info+0x20/0x20 [ 574.270043][T13847] ? load_image+0x420/0x420 [ 574.274603][T13847] ? __lock_acquire+0x7d80/0x7d80 [ 574.279682][T13847] ? snprintf+0xe9/0x140 [ 574.283976][T13847] should_fail_ex+0x394/0x4c0 [ 574.288689][T13847] _copy_to_user+0x2f/0xa0 [ 574.293137][T13847] simple_read_from_buffer+0xe7/0x150 [ 574.298538][T13847] proc_fail_nth_read+0x1e8/0x260 [ 574.303610][T13847] ? proc_fault_inject_write+0x360/0x360 [ 574.309285][T13847] ? fsnotify_perm+0x271/0x5e0 [ 574.314097][T13847] ? proc_fault_inject_write+0x360/0x360 [ 574.319774][T13847] vfs_read+0x298/0x990 [ 574.323969][T13847] ? kernel_read+0x1e0/0x1e0 [ 574.328593][T13847] ? __fget_files+0x28/0x460 [ 574.333239][T13847] ? __fget_files+0x3fc/0x460 [ 574.337976][T13847] ? __fdget_pos+0x2a3/0x330 [ 574.342632][T13847] ? ksys_read+0x74/0x260 [ 574.347016][T13847] ksys_read+0x151/0x260 [ 574.351301][T13847] ? vfs_write+0x9a0/0x9a0 [ 574.355774][T13847] ? lockdep_hardirqs_on+0x98/0x150 [ 574.361025][T13847] do_syscall_64+0x55/0xb0 [ 574.365472][T13847] ? clear_bhb_loop+0x40/0x90 [ 574.370179][T13847] ? clear_bhb_loop+0x40/0x90 [ 574.374889][T13847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.380815][T13847] RIP: 0033:0x7f3c9835e90e [ 574.385254][T13847] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 574.404927][T13847] RSP: 002b:00007f3c99352fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 574.413376][T13847] RAX: ffffffffffffffda RBX: 00007f3c993536c0 RCX: 00007f3c9835e90e [ 574.421379][T13847] RDX: 000000000000000f RSI: 00007f3c993530a0 RDI: 0000000000000007 [ 574.429372][T13847] RBP: 00007f3c99353090 R08: 0000000000000000 R09: 0000000000000000 [ 574.437379][T13847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.445367][T13847] R13: 00007f3c98626038 R14: 00007f3c98625fa0 R15: 00007ffc259b8538 [ 574.453405][T13847] [ 576.860708][T13857] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2798'. [ 576.894637][T13857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.511384][T13922] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2819'. [ 578.554083][T13922] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2819'. [ 578.595945][T13918] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2819'. [ 578.631073][T13925] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2819'. [ 578.724684][T13918] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2819'. [ 578.775156][T13918] netlink: 'syz.3.2819': attribute type 10 has an invalid length. [ 578.801011][T13918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2819'. [ 578.862206][T13918] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 578.893132][T13918] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.993612][T13918] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 579.617389][ T8212] tipc: Subscription rejected, illegal request [ 580.572877][T13973] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 580.619119][T13973] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 581.067656][T13988] netlink: 'syz.3.2846': attribute type 10 has an invalid length. [ 581.151181][T13988] team0: Port device netdevsim0 added [ 581.157980][T13994] netlink: 'syz.3.2846': attribute type 10 has an invalid length. [ 581.251406][T13994] team0: Port device netdevsim0 removed [ 581.275324][T13994] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 583.140047][T14044] netlink: 'syz.1.2866': attribute type 20 has an invalid length. [ 583.173462][T14044] netlink: 'syz.1.2866': attribute type 21 has an invalid length. [ 583.195344][T14044] netlink: 'syz.1.2866': attribute type 23 has an invalid length. [ 583.203215][T14044] netlink: 'syz.1.2866': attribute type 25 has an invalid length. [ 583.232823][T14044] netlink: 'syz.1.2866': attribute type 27 has an invalid length. [ 583.247137][T14044] netlink: 'syz.1.2866': attribute type 28 has an invalid length. [ 583.258042][T14044] netlink: 'syz.1.2866': attribute type 29 has an invalid length. [ 584.758991][T14073] validate_nla: 1 callbacks suppressed [ 584.759010][T14073] netlink: 'syz.2.2877': attribute type 21 has an invalid length. [ 584.824156][T14072] netlink: 166900 bytes leftover after parsing attributes in process `syz.2.2877'. [ 585.761887][T14099] syzkaller0: entered promiscuous mode [ 585.780280][T14099] syzkaller0: entered allmulticast mode [ 588.641071][T14145] delete_channel: no stack [ 589.186615][ T8240] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 589.388150][T14176] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2914'. [ 590.515789][T14187] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2917'. [ 591.369542][T14222] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2933'. [ 591.523737][T14236] netlink: 'syz.2.2938': attribute type 29 has an invalid length. [ 591.559885][T14236] netlink: 'syz.2.2938': attribute type 29 has an invalid length. [ 591.597073][T14237] netlink: 'syz.2.2938': attribute type 29 has an invalid length. [ 594.851772][T14323] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.2972'. [ 595.060556][T14331] syzkaller0: entered promiscuous mode [ 596.173189][T14349] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2981'. [ 597.468333][T14363] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2985'. [ 597.500087][T14363] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2985'. [ 597.535771][T14363] tipc: Started in network mode [ 597.558774][T14363] tipc: Node identity b, cluster identity 73 [ 597.574948][T14363] tipc: Node number set to 11 [ 599.957404][T14421] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3004'. [ 600.594250][T14440] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3010'. [ 603.359789][T14489] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3029'. [ 606.295712][T14560] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3048'. [ 606.763490][ T8253] hsr_slave_0: left promiscuous mode [ 606.775877][ T8253] hsr_slave_1: left promiscuous mode [ 606.787838][ T8253] bridge_slave_1: left allmulticast mode [ 606.793498][ T8253] bridge_slave_1: left promiscuous mode [ 606.801824][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.839576][ T8253] veth0_macvtap: left promiscuous mode [ 606.846262][ T8253] veth1_vlan: left promiscuous mode [ 606.851665][ T8253] veth0_vlan: left promiscuous mode [ 607.108984][ T8253] team0 (unregistering): Port device geneve1 removed [ 607.135964][ T8253] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 607.583487][ T8253] team0 (unregistering): Port device team_slave_1 removed [ 607.661763][ T8253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.704202][ T8253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.943644][ T8253] bond0 (unregistering): (slave team0): Releasing backup interface [ 607.980676][ T8253] bond0 (unregistering): Released all slaves [ 608.366103][T14587] netlink: 'syz.0.3059': attribute type 10 has an invalid length. [ 608.612276][T14587] team0 (unregistering): Port device team_slave_0 removed [ 608.672287][T14587] team0 (unregistering): Port device team_slave_1 removed [ 608.904530][T14624] netlink: 'syz.0.3065': attribute type 3 has an invalid length. [ 608.912626][T14624] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3065'. [ 610.367421][T14660] netlink: 'syz.2.3080': attribute type 1 has an invalid length. [ 610.402965][T14660] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.3080'. [ 613.102388][T14676] C: renamed from team_slave_0 (while UP) [ 613.110734][T14676] netlink: 'syz.1.3085': attribute type 3 has an invalid length. [ 613.121347][T14676] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3085'. [ 615.196489][T14730] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3102'. [ 615.352708][T14742] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 615.380225][T14742] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3104'. [ 615.444019][T14742] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 616.227361][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 618.180415][T14758] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.3111'. [ 619.010280][T14793] netlink: 'syz.3.3125': attribute type 39 has an invalid length. [ 619.113859][T14793] macvlan0: entered promiscuous mode [ 619.126582][T14793] macvlan0: entered allmulticast mode [ 619.364375][T14802] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3129'. [ 619.476511][T14802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.536166][T14802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.568433][T14802] bond0 (unregistering): Released all slaves [ 623.361889][T14869] tap0: tun_chr_ioctl cmd 2147767517 [ 624.400214][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.406662][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.575920][T14943] sit0: entered allmulticast mode [ 625.611663][T14944] sit0: entered promiscuous mode [ 626.451966][T14979] syzkaller0: entered promiscuous mode [ 626.457825][T14979] syzkaller0: entered allmulticast mode [ 626.469434][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 629.492211][ T5785] Bluetooth: hci2: adv larger than maximum supported [ 629.492268][ T5785] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 629.499341][ T5785] Bluetooth: hci2: Malformed LE Event: 0x0d [ 630.371643][T15061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.223641][T15059] sit0: entered allmulticast mode [ 632.240250][T15060] sit0: entered promiscuous mode [ 632.429694][T15086] netlink: 'syz.3.3250': attribute type 4 has an invalid length. [ 632.444267][T15090] netlink: 'syz.2.3252': attribute type 10 has an invalid length. [ 632.453489][T15086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3250'. [ 632.469448][T15090] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3252'. [ 632.873757][T15098] netlink: 'syz.3.3255': attribute type 39 has an invalid length. [ 635.583817][T15119] sit0: entered allmulticast mode [ 635.600704][T15122] sit0: entered promiscuous mode [ 635.865949][T15133] netlink: 'syz.1.3265': attribute type 21 has an invalid length. [ 635.892689][T15133] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3265'. [ 636.146109][T15138] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 636.154218][T15138] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.3268'. [ 636.669854][T15142] netlink: 'syz.3.3270': attribute type 10 has an invalid length. [ 636.717249][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 636.738153][T15142] veth1_vlan: entered allmulticast mode [ 636.834015][T15142] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 642.232591][T15228] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.3302'. [ 642.586587][T15238] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3307'. [ 643.021932][T15257] syzkaller0: entered promiscuous mode [ 643.045260][T15257] syzkaller0: entered allmulticast mode [ 643.741604][T15285] ip6tnl0: entered allmulticast mode [ 644.211098][T15302] netlink: 'syz.0.3331': attribute type 22 has an invalid length. [ 644.235006][T15302] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.3331'. [ 645.149278][ T5785] Bluetooth: hci1: adv larger than maximum supported [ 647.048781][ T5785] Bluetooth: hci1: adv larger than maximum supported [ 648.917333][T15368] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3356'. [ 649.138079][ T5785] Bluetooth: hci1: adv larger than maximum supported [ 652.136620][T15432] IPv6: NLM_F_CREATE should be specified when creating new route [ 652.152289][T15432] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3379'. [ 654.957867][T15471] netlink: 'syz.1.3392': attribute type 29 has an invalid length. [ 654.968513][T15471] netlink: 'syz.1.3392': attribute type 29 has an invalid length. [ 654.987121][T15471] netlink: 'syz.1.3392': attribute type 29 has an invalid length. [ 655.015769][T15471] netlink: 'syz.1.3392': attribute type 29 has an invalid length. [ 655.036088][T15471] netlink: 'syz.1.3392': attribute type 29 has an invalid length. [ 655.610426][T15499] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3402'. [ 655.633270][T15498] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3402'. [ 656.568697][ T5086] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 657.195001][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 658.006489][T15533] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3416'. [ 658.711393][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 659.369196][T15570] netlink: 'syz.3.3429': attribute type 6 has an invalid length. [ 659.383596][T15570] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3429'. [ 659.834024][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 660.425543][T15608] netlink: 'syz.0.3444': attribute type 3 has an invalid length. [ 660.434398][T15608] netlink: 'syz.0.3444': attribute type 1 has an invalid length. [ 660.444657][T15608] netlink: 5579 bytes leftover after parsing attributes in process `syz.0.3444'. [ 660.520178][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 660.838744][T15621] netlink: 'syz.0.3450': attribute type 7 has an invalid length. [ 660.859787][T15621] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3450'. [ 661.271594][T15640] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3456'. [ 661.304109][T15640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.038708][T14614] tipc: Subscription rejected, illegal request [ 662.390085][T15673] netlink: 'syz.0.3468': attribute type 29 has an invalid length. [ 662.483957][T15673] netlink: 'syz.0.3468': attribute type 29 has an invalid length. [ 662.929582][T15696] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3477'. [ 663.330810][T15695] delete_channel: no stack [ 664.116715][T15742] delete_channel: no stack [ 664.202393][T15749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'. [ 664.504625][T15763] FAULT_INJECTION: forcing a failure. [ 664.504625][T15763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.538590][T15763] CPU: 1 PID: 15763 Comm: syz.1.3504 Not tainted syzkaller #0 [ 664.546129][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.556237][T15763] Call Trace: [ 664.559555][T15763] [ 664.562524][T15763] dump_stack_lvl+0x18c/0x250 [ 664.567245][T15763] ? show_regs_print_info+0x20/0x20 [ 664.572476][T15763] ? load_image+0x420/0x420 [ 664.577039][T15763] ? __might_fault+0xaa/0x120 [ 664.581756][T15763] ? __lock_acquire+0x7d80/0x7d80 [ 664.586832][T15763] should_fail_ex+0x394/0x4c0 [ 664.591563][T15763] _copy_from_iter+0x1cd/0x1290 [ 664.596459][T15763] ? mark_lock+0x94/0x320 [ 664.600835][T15763] ? copyout_mc+0x70/0x70 [ 664.605209][T15763] ? __virt_addr_valid+0x10c/0x380 [ 664.610371][T15763] ? __virt_addr_valid+0x10c/0x380 [ 664.615535][T15763] ? __virt_addr_valid+0x10c/0x380 [ 664.620706][T15763] ? __check_object_size+0x4fc/0xa40 [ 664.626042][T15763] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 664.631814][T15763] ? napi_get_frags+0x20/0x150 [ 664.636617][T15763] ? napi_get_frags+0xbb/0x150 [ 664.641403][T15763] tun_get_user+0xc84/0x3d70 [ 664.646049][T15763] ? rcu_read_unlock+0xa0/0xa0 [ 664.650845][T15763] ? tun_get+0x1c/0x2e0 [ 664.655033][T15763] ? __lock_acquire+0x7d80/0x7d80 [ 664.660083][T15763] ? tun_get+0x1c/0x2e0 [ 664.664276][T15763] tun_chr_write_iter+0x119/0x200 [ 664.669322][T15763] vfs_write+0x474/0x9a0 [ 664.673598][T15763] ? file_end_write+0x250/0x250 [ 664.678476][T15763] ? __fget_files+0x3fc/0x460 [ 664.683195][T15763] ? __fdget_pos+0x1d8/0x330 [ 664.687810][T15763] ? ksys_write+0x74/0x260 [ 664.692252][T15763] ksys_write+0x151/0x260 [ 664.696603][T15763] ? __ia32_sys_read+0x90/0x90 [ 664.701416][T15763] ? lockdep_hardirqs_on+0x98/0x150 [ 664.706677][T15763] do_syscall_64+0x55/0xb0 [ 664.711112][T15763] ? clear_bhb_loop+0x40/0x90 [ 664.715813][T15763] ? clear_bhb_loop+0x40/0x90 [ 664.720512][T15763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.726432][T15763] RIP: 0033:0x7f8fe539e0d9 [ 664.730861][T15763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.750483][T15763] RSP: 002b:00007f8fe61b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.758917][T15763] RAX: ffffffffffffffda RBX: 00007f8fe5626090 RCX: 00007f8fe539e0d9 [ 664.766904][T15763] RDX: 0000000000000280 RSI: 0000200000000000 RDI: 0000000000000003 [ 664.774915][T15763] RBP: 00007f8fe61b8090 R08: 0000000000000000 R09: 0000000000000000 [ 664.782897][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.790883][T15763] R13: 00007f8fe5626128 R14: 00007f8fe5626090 R15: 00007ffe48901b18 [ 664.798878][T15763] [ 664.881383][T15768] netlink: 'syz.0.3505': attribute type 5 has an invalid length. [ 664.898415][T15768] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3505'. [ 666.426790][T15768] netlink: 'syz.0.3505': attribute type 10 has an invalid length. [ 666.690657][T15778] netlink: 'syz.1.3506': attribute type 6 has an invalid length. [ 666.706265][T15778] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3506'. [ 668.402945][T15787] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3510'. [ 668.585567][T15797] FAULT_INJECTION: forcing a failure. [ 668.585567][T15797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.649482][T15797] CPU: 0 PID: 15797 Comm: syz.1.3511 Not tainted syzkaller #0 [ 668.657022][T15797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.667111][T15797] Call Trace: [ 668.670431][T15797] [ 668.673389][T15797] dump_stack_lvl+0x18c/0x250 [ 668.678121][T15797] ? show_regs_print_info+0x20/0x20 [ 668.683378][T15797] ? load_image+0x420/0x420 [ 668.687948][T15797] ? __lock_acquire+0x7d80/0x7d80 [ 668.693021][T15797] ? snprintf+0xe9/0x140 [ 668.697346][T15797] should_fail_ex+0x394/0x4c0 [ 668.702084][T15797] _copy_to_user+0x2f/0xa0 [ 668.706539][T15797] simple_read_from_buffer+0xe7/0x150 [ 668.711951][T15797] proc_fail_nth_read+0x1e8/0x260 [ 668.717024][T15797] ? proc_fault_inject_write+0x360/0x360 [ 668.722712][T15797] ? fsnotify_perm+0x271/0x5e0 [ 668.727523][T15797] ? proc_fault_inject_write+0x360/0x360 [ 668.733233][T15797] vfs_read+0x298/0x990 [ 668.737444][T15797] ? kernel_read+0x1e0/0x1e0 [ 668.742078][T15797] ? __fget_files+0x28/0x460 [ 668.746719][T15797] ? __fget_files+0x3fc/0x460 [ 668.751458][T15797] ? __fdget_pos+0x2a3/0x330 [ 668.756102][T15797] ? ksys_read+0x74/0x260 [ 668.760495][T15797] ksys_read+0x151/0x260 [ 668.764791][T15797] ? vfs_write+0x9a0/0x9a0 [ 668.769251][T15797] ? lockdep_hardirqs_on+0x98/0x150 [ 668.771836][T15799] netlink: 136792 bytes leftover after parsing attributes in process `syz.2.3512'. [ 668.774481][T15797] do_syscall_64+0x55/0xb0 [ 668.774538][T15797] ? clear_bhb_loop+0x40/0x90 [ 668.774564][T15797] ? clear_bhb_loop+0x40/0x90 [ 668.774592][T15797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.774615][T15797] RIP: 0033:0x7f8fe535e90e [ 668.774637][T15797] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 668.827708][T15797] RSP: 002b:00007f8fe61b7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 668.836183][T15797] RAX: ffffffffffffffda RBX: 00007f8fe61b86c0 RCX: 00007f8fe535e90e [ 668.844228][T15797] RDX: 000000000000000f RSI: 00007f8fe61b80a0 RDI: 000000000000000c [ 668.852245][T15797] RBP: 00007f8fe61b8090 R08: 0000000000000000 R09: 0000000000000000 [ 668.860256][T15797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.868269][T15797] R13: 00007f8fe5626128 R14: 00007f8fe5626090 R15: 00007ffe48901b18 [ 668.876290][T15797] [ 669.559471][T15821] netlink: 'syz.1.3528': attribute type 10 has an invalid length. [ 669.641997][T15824] netlink: 'syz.2.3521': attribute type 6 has an invalid length. [ 669.662321][T15821] team0: Port device wlan1 added [ 669.674995][T15824] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3521'. [ 669.701930][T15820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.009306][T15833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3524'. [ 670.713329][T15866] sctp: [Deprecated]: syz.0.3536 (pid 15866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 670.713329][T15866] Use struct sctp_sack_info instead [ 670.889682][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 670.978213][T15873] netlink: 'syz.2.3540': attribute type 39 has an invalid length. [ 671.141960][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3542'. [ 671.616334][T15900] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3548'. [ 671.640989][T15900] netlink: zone id is out of range [ 671.671113][T15900] netlink: zone id is out of range [ 671.676393][T15900] netlink: zone id is out of range [ 671.681631][T15900] netlink: zone id is out of range [ 671.687002][T15900] netlink: zone id is out of range [ 671.699903][T15900] netlink: zone id is out of range [ 671.713141][T15900] netlink: zone id is out of range [ 671.725627][T15900] netlink: zone id is out of range [ 671.730953][T15900] netlink: zone id is out of range [ 671.750717][T15900] netlink: zone id is out of range [ 672.343138][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 674.006318][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 674.752124][ T5785] Bluetooth: hci2: Malformed LE Event: 0x0b [ 675.854460][T15988] netlink: 'syz.3.3582': attribute type 3 has an invalid length. [ 675.866360][T15988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3582'. [ 676.722508][ T5785] Bluetooth: hci2: Malformed LE Event: 0x0b [ 678.459805][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 679.004309][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 681.103864][ T5785] Bluetooth: hci0: Malformed LE Event: 0x0b [ 681.179127][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3600'. [ 681.234569][T16039] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.3602'. [ 681.258509][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3602'. [ 681.444706][T16043] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.3604'. [ 681.483004][T16043] ªªªªª: renamed from virt_wifi0 [ 681.541413][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 681.721188][T16051] netlink: 'syz.1.3607': attribute type 2 has an invalid length. [ 681.743495][T16051] netlink: 'syz.1.3607': attribute type 11 has an invalid length. [ 681.752282][T16051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3607'. [ 682.361476][T16057] netlink: 171052 bytes leftover after parsing attributes in process `syz.0.3608'. [ 682.598331][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3614'. [ 682.732680][T16077] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.3615'. [ 682.755138][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'. [ 683.118643][T16087] netlink: 'syz.0.3617': attribute type 2 has an invalid length. [ 683.126961][T16087] netlink: 'syz.0.3617': attribute type 11 has an invalid length. [ 683.135868][T16087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3617'. [ 684.383273][T16139] netlink: 'syz.3.3635': attribute type 2 has an invalid length. [ 684.402603][T16139] netlink: 'syz.3.3635': attribute type 11 has an invalid length. [ 685.828236][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.839517][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.850392][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 686.016877][T16169] bridge_slave_1: left allmulticast mode [ 686.023273][T16169] bridge_slave_1: left promiscuous mode [ 686.040149][T16169] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.066609][T16169] bridge_slave_0: left allmulticast mode [ 686.072466][T16169] bridge_slave_0: left promiscuous mode [ 686.080635][T16169] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.286058][T16197] __nla_validate_parse: 6 callbacks suppressed [ 687.286099][T16197] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3659'. [ 687.343792][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 687.579897][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 688.008474][T16213] bridge_slave_1: left allmulticast mode [ 688.014412][T16213] bridge_slave_1: left promiscuous mode [ 688.040043][T16213] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.069549][T16213] bridge_slave_0: left allmulticast mode [ 688.091208][T16213] bridge_slave_0: left promiscuous mode [ 688.113569][T16213] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.269118][T16223] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3668'. [ 688.464080][T16213] bond0: (slave bridge0): Releasing backup interface [ 688.672232][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 689.303318][T16245] bridge_slave_1: left allmulticast mode [ 689.310947][T16245] bridge_slave_1: left promiscuous mode [ 689.332689][T16245] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.783982][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 690.542231][T16273] syzkaller0: entered promiscuous mode [ 691.265667][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 692.984706][T16302] netlink: 'syz.0.3697': attribute type 39 has an invalid length. [ 693.406950][T16309] netlink: 'syz.2.3698': attribute type 2 has an invalid length. [ 693.534300][T16309] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3698'. [ 693.632979][T16323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3704'. [ 693.911386][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 694.259148][T16344] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3713'. [ 696.029577][T16348] netlink: 'syz.1.3715': attribute type 2 has an invalid length. [ 696.045576][T16350] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3715'. [ 696.170463][T16354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3716'. [ 696.307146][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 696.602142][T16373] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3724'. [ 697.188036][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 697.322507][T16396] netlink: 'syz.0.3733': attribute type 10 has an invalid length. [ 697.354965][T16396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3733'. [ 697.381810][T16396] batman_adv: batadv0: Adding interface: veth0_vlan [ 697.406848][T16396] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.457007][T16396] batman_adv: batadv0: Interface activated: veth0_vlan [ 697.524690][T16403] netlink: 'syz.3.3737': attribute type 10 has an invalid length. [ 697.536098][T16403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3737'. [ 697.550393][T16403] bond0: entered promiscuous mode [ 697.566134][T16403] bond_slave_0: entered promiscuous mode [ 697.580541][T16403] bond_slave_1: entered promiscuous mode [ 697.593196][T16403] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 697.614002][T16403] bridge0: port 3(bond0) entered blocking state [ 697.627558][T16403] bridge0: port 3(bond0) entered disabled state [ 697.644168][T16403] bond0: entered allmulticast mode [ 697.660787][T16403] bond_slave_0: entered allmulticast mode [ 697.678076][T16403] bond_slave_1: entered allmulticast mode [ 697.684224][T16403] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 697.711162][T16403] bridge0: port 3(bond0) entered blocking state [ 697.717705][T16403] bridge0: port 3(bond0) entered forwarding state [ 697.861331][T16409] netlink: 'syz.2.3740': attribute type 33 has an invalid length. [ 697.871877][T16409] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3740'. [ 698.185977][T16421] netlink: 'syz.3.3745': attribute type 21 has an invalid length. [ 698.214660][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 699.054575][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3750'. [ 699.211423][T16443] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3751'. [ 701.086481][T16430] netlink: 'syz.3.3748': attribute type 2 has an invalid length. [ 701.097854][T16436] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3748'. [ 701.121864][T16455] netlink: 'syz.1.3753': attribute type 21 has an invalid length. [ 701.144934][T16455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3753'. [ 701.154047][T16455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3753'. [ 701.326812][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 701.527746][T16467] netlink: 'syz.1.3759': attribute type 2 has an invalid length. [ 701.540939][T16467] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3759'. [ 701.738584][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3761'. [ 701.866159][T16476] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 702.207654][T16484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3767'. [ 702.299137][T16490] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3770'. [ 702.319865][T16491] netlink: 'syz.0.3770': attribute type 6 has an invalid length. [ 702.361325][T16491] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3770'. [ 704.366003][T16558] netlink: 'syz.3.3800': attribute type 25 has an invalid length. [ 704.376173][T16558] netlink: 'syz.3.3800': attribute type 25 has an invalid length. [ 704.387272][T16557] netlink: 'syz.3.3800': attribute type 25 has an invalid length. [ 704.395578][T16557] netlink: 'syz.3.3800': attribute type 25 has an invalid length. [ 704.429307][T16554] __nla_validate_parse: 2 callbacks suppressed [ 704.429347][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3798'. [ 705.173073][T16583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 705.938429][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3824'. [ 706.668977][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3833'. [ 707.086855][T16657] macsec0: entered allmulticast mode [ 707.092303][T16657] veth1_macvtap: entered allmulticast mode [ 707.668694][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3847'. [ 708.419665][T16705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3857'. [ 708.714654][T16700] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3855'. [ 709.521788][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3869'. [ 711.260523][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3880'. [ 711.607190][T16771] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3883'. [ 712.206737][T16790] netlink: 38831 bytes leftover after parsing attributes in process `syz.0.3889'. [ 713.447811][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 713.861172][T16848] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3908'. [ 714.292816][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 714.575308][T16863] netlink: 'syz.0.3913': attribute type 1 has an invalid length. [ 714.671924][T16863] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3913'. [ 715.620446][T16889] syz.2.3926[16889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 715.620794][T16889] syz.2.3926[16889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 718.074042][T16889] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3926'. [ 718.218531][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 718.750537][T16905] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3934'. [ 719.202783][T16914] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3930'. [ 720.004643][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 720.594375][T16944] netlink: 'syz.2.3948': attribute type 4 has an invalid length. [ 720.774911][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 721.343616][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 721.661055][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 722.034954][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 722.215302][T17001] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3973'. [ 722.247504][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 722.267269][T17001] net_ratelimit: 218 callbacks suppressed [ 722.267288][T17001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.524595][T17008] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3977'. [ 722.934094][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 723.095373][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 723.294039][T17044] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3991'. [ 723.625679][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 724.126757][T17065] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.4000'. [ 724.189705][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 725.700910][T17104] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4013'. [ 725.724150][T17104] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.4013'. [ 726.145946][T17119] netlink: 'syz.3.4019': attribute type 21 has an invalid length. [ 726.153932][T17119] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4019'. [ 727.269729][T17155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4033'. [ 727.279584][T17155] bridge_slave_0: entered allmulticast mode [ 727.401514][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 729.663613][T17173] netlink: 'syz.3.4040': attribute type 28 has an invalid length. [ 729.933948][T17194] netlink: 'syz.0.4050': attribute type 4 has an invalid length. [ 729.946916][T17194] netlink: 'syz.0.4050': attribute type 16 has an invalid length. [ 729.955373][T17194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4050'. [ 730.715343][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4063'. [ 730.920139][T17228] netlink: 'syz.3.4067': attribute type 29 has an invalid length. [ 730.933261][T17228] netlink: 'syz.3.4067': attribute type 29 has an invalid length. [ 730.947458][T17228] netlink: 'syz.3.4067': attribute type 29 has an invalid length. [ 730.957365][T17228] netlink: 'syz.3.4067': attribute type 29 has an invalid length. [ 730.995188][T17228] netlink: 'syz.3.4067': attribute type 29 has an invalid length. [ 732.654601][T17286] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4091'. [ 732.904507][T17297] netlink: 'syz.0.4097': attribute type 10 has an invalid length. [ 732.930458][T17297] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4097'. [ 733.327081][T17311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4101'. [ 733.756803][T17319] netlink: set zone limit has 8 unknown bytes [ 733.907027][T17319] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.4104'. [ 734.419291][T17325] netlink: 'syz.0.4107': attribute type 58 has an invalid length. [ 734.437508][T17325] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4107'. [ 734.706265][T17336] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4110'. [ 734.745058][T17336] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 736.736611][T17385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4127'. [ 739.819904][T17405] netlink: 'syz.3.4136': attribute type 16 has an invalid length. [ 739.833007][T17405] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4136'. [ 740.087908][T17416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4139'. [ 740.973897][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4150'. [ 741.848104][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 742.019060][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4164'. [ 742.692151][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 744.074028][T17482] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4168'. [ 744.444491][T17504] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4183'. [ 744.475965][T17504] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.4183'. [ 745.150545][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 746.025502][T17547] bond0: left allmulticast mode [ 746.030452][T17547] bond_slave_0: left allmulticast mode [ 746.058657][T17547] bond_slave_1: left allmulticast mode [ 746.066650][T17547] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 746.074344][T17547] bridge0: port 3(bond0) entered disabled state [ 746.101498][T17547] bridge_slave_1: left allmulticast mode [ 746.117907][T17547] bridge_slave_1: left promiscuous mode [ 746.126796][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 746.144619][T17547] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.157877][T17547] bridge_slave_0: left allmulticast mode [ 746.163816][T17547] bridge_slave_0: left promiscuous mode [ 746.170201][T17547] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.280584][T17557] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4198'. [ 746.721320][T17566] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4201'. [ 746.750939][T17566] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.4201'. [ 747.275376][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.281906][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.436297][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 748.315416][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 748.437326][T17628] pimreg1: tun_chr_ioctl cmd 2147767517 [ 749.115164][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 749.714115][T17666] IPv6: pim6reg1: Disabled Multicast RS [ 750.266150][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 752.991187][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4251'. [ 753.284325][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 753.767777][T17724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4262'. [ 754.194443][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 754.362238][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4272'. [ 754.725058][T17760] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4278'. [ 754.925492][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 754.974221][T17769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4282'. [ 755.210941][T17771] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 755.221196][T17771] syzkaller1: linktype set to 769 [ 755.293763][T17771] netlink: 'syz.2.4283': attribute type 3 has an invalid length. [ 755.322841][T17771] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.4283'. [ 755.542650][T17779] netlink: 'syz.1.4286': attribute type 2 has an invalid length. [ 755.552581][T17779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4286'. [ 755.837945][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4293'. [ 755.922140][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 756.207297][T17806] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4297'. [ 756.217111][T17806] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4297'. [ 756.913406][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 757.236864][T17849] netlink: 'syz.2.4313': attribute type 4 has an invalid length. [ 757.640597][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 758.233558][T17876] __nla_validate_parse: 2 callbacks suppressed [ 758.233625][T17876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4323'. [ 758.269562][T17876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4323'. [ 758.394201][T17884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4326'. [ 758.775504][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 759.036190][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4337'. [ 760.114155][T17933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4347'. [ 760.139329][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 761.379024][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4357'. [ 761.860708][T17982] sctp: [Deprecated]: syz.1.4366 (pid 17982) Use of int in max_burst socket option deprecated. [ 761.860708][T17982] Use struct sctp_assoc_value instead [ 762.207441][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4371'. [ 765.652675][T18010] netlink: 'syz.0.4379': attribute type 27 has an invalid length. [ 765.669472][T18010] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4379'. [ 765.719672][T18010] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 765.910902][T18021] netlink: 'syz.3.4383': attribute type 10 has an invalid length. [ 766.000399][T18021] team0: Device wg1 is of different type [ 766.068798][T18026] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 766.254250][T18035] syzkaller0: entered promiscuous mode [ 766.662360][T18051] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4391'. [ 766.989689][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 768.502267][T18051] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.4391'. [ 768.618425][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4397'. [ 768.789987][T18069] netlink: 'syz.1.4400': attribute type 10 has an invalid length. [ 768.931057][T18069] team0: Device wg1 is of different type [ 769.052319][T18075] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 769.506673][T18093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4410'. [ 770.208582][T18125] netlink: zone id is out of range [ 770.213854][T18125] netlink: set zone limit has 8 unknown bytes [ 770.251036][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4422'. [ 770.706964][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 772.638678][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4436'. [ 772.651664][T18160] netlink: 'syz.2.4437': attribute type 10 has an invalid length. [ 772.672738][T18160] hsr0: entered promiscuous mode [ 772.712446][T18160] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 772.754792][T18160] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 772.777330][T18160] bond0: (slave hsr0): Error -95 calling set_mac_address [ 772.917692][T18165] netlink: 'syz.1.4439': attribute type 39 has an invalid length. [ 773.150481][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 774.566118][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 774.786327][T18205] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4455'. [ 774.847320][T18209] netlink: 'syz.2.4456': attribute type 21 has an invalid length. [ 774.860251][T18205] netlink: 'syz.3.4455': attribute type 10 has an invalid length. [ 774.868955][T18205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4455'. [ 774.879942][T18205] dummy0: entered promiscuous mode [ 774.886175][T18205] dummy0: entered allmulticast mode [ 774.897824][T18205] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 774.920181][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4457'. [ 775.147708][T18219] netlink: 'syz.1.4459': attribute type 10 has an invalid length. [ 775.158582][T18219] hsr0: entered promiscuous mode [ 775.205228][T18219] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 775.266032][T18219] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 775.277716][T18219] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 775.291527][T18219] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 775.616951][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 776.033723][T18243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4470'. [ 776.097965][T18247] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4472'. [ 776.179465][T18245] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4471'. [ 776.241703][T18245] netlink: 'syz.2.4471': attribute type 10 has an invalid length. [ 776.264997][T18245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4471'. [ 776.284656][T18245] dummy0: entered promiscuous mode [ 776.292645][T18245] dummy0: entered allmulticast mode [ 776.308276][T18245] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 776.476897][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 777.102501][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4484'. [ 777.213720][T18277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4486'. [ 777.356858][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 777.756347][T18290] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4493'. [ 778.036703][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4497'. [ 778.059019][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 779.436539][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 779.511522][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4510'. [ 780.390594][ T5785] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 780.543983][T18370] netlink: 'syz.1.4526': attribute type 10 has an invalid length. [ 780.580524][T18370] macvlan1: entered allmulticast mode [ 780.598342][T18370] veth1_vlan: entered allmulticast mode [ 780.643522][T18370] team0: Port device macvlan1 added [ 781.719861][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 782.756085][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 783.237048][T18444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 783.244637][T18444] IPv6: NLM_F_CREATE should be set when creating new route [ 783.252728][T18444] IPv6: NLM_F_CREATE should be set when creating new route [ 783.260622][T18444] IPv6: NLM_F_CREATE should be set when creating new route [ 783.313912][T18445] netlink: 'syz.1.4558': attribute type 9 has an invalid length. [ 783.349049][T18445] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4558'. [ 783.536108][T18444] netlink: 'syz.1.4558': attribute type 9 has an invalid length. [ 783.545314][T18444] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4558'. [ 783.747260][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 784.756599][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 786.816230][ T5785] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 787.052570][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 787.908308][T18547] netlink: 'syz.3.4599': attribute type 21 has an invalid length. [ 787.927109][T18547] netlink: 'syz.3.4599': attribute type 7 has an invalid length. [ 787.928667][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 788.920312][T18579] netlink: 'syz.1.4613': attribute type 19 has an invalid length. [ 788.952610][T18579] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4613'. [ 788.963868][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 789.312996][T18578] netlink: 'syz.0.4620': attribute type 10 has an invalid length. [ 789.375880][T18585] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4620'. [ 790.347578][T18607] bridge_slave_0: entered promiscuous mode [ 790.359663][T18607] bridge_slave_0: entered allmulticast mode [ 791.256000][T18624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4632'. [ 791.292752][T18624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4632'. [ 791.380081][T18624] netlink: 'syz.1.4632': attribute type 19 has an invalid length. [ 791.405305][T18624] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4632'. [ 792.242270][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 792.439860][T18655] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 792.868603][T18669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4653'. [ 793.010644][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 793.112863][T18682] netlink: 'syz.2.4657': attribute type 10 has an invalid length. [ 793.131661][T18682] geneve0: entered promiscuous mode [ 793.190056][T18682] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 793.254285][T18682] netlink: 161116 bytes leftover after parsing attributes in process `syz.2.4657'. [ 793.712489][T18704] netlink: 'syz.1.4665': attribute type 3 has an invalid length. [ 793.724241][T18704] netlink: 'syz.1.4665': attribute type 16 has an invalid length. [ 793.740502][T18704] netlink: 'syz.1.4665': attribute type 18 has an invalid length. [ 793.750789][T18704] netlink: 'syz.1.4665': attribute type 20 has an invalid length. [ 793.768553][T18704] netlink: 'syz.1.4665': attribute type 25 has an invalid length. [ 793.798483][T18705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4666'. [ 793.936837][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 794.222940][T18718] aaaaaaaaaaaaaaa: entered promiscuous mode [ 794.973391][T18732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4675'. [ 795.044178][T18736] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4678'. [ 795.693448][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 796.217518][T18755] netlink: 'syz.2.4686': attribute type 6 has an invalid length. [ 796.225771][T18755] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4686'. [ 796.419287][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 796.570526][T18772] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4691'. [ 796.826865][T18780] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.4694'. [ 796.923731][T18780] netlink: 'syz.0.4694': attribute type 4 has an invalid length. [ 797.216006][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 797.291263][T18800] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.4704'. [ 797.598315][T18809] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4707'. [ 798.450559][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 798.760321][T18838] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4718'. [ 799.401089][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 799.410651][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 799.423670][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 799.434027][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 799.441966][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 799.450781][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 799.722795][ T5785] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 799.834072][T18848] chnl_net:caif_netlink_parms(): no params data found [ 799.948555][T18848] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.955949][T18848] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.963198][T18848] bridge_slave_0: entered allmulticast mode [ 799.971518][T18848] bridge_slave_0: entered promiscuous mode [ 799.982043][T18848] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.991439][T18848] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.999548][T18848] bridge_slave_1: entered allmulticast mode [ 800.007688][T18848] bridge_slave_1: entered promiscuous mode [ 800.048408][T18848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.060940][T18848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.103831][T18848] team0: Port device team_slave_0 added [ 800.113908][T18848] team0: Port device team_slave_1 added [ 800.186892][T18848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.200792][T18848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.255060][T18848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.268546][T18848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.277051][T18848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.304287][T18848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.367159][T18848] hsr_slave_0: entered promiscuous mode [ 800.374445][T18848] hsr_slave_1: entered promiscuous mode [ 800.405107][T18848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.412890][T18848] Cannot create hsr debugfs directory [ 800.867360][T18848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.944220][T18891] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4736'. [ 801.055598][T18848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.189604][T18894] netlink: 'syz.0.4737': attribute type 2 has an invalid length. [ 801.201240][T18848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.214168][T18894] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4737'. [ 801.397175][T18848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.507716][ T5785] Bluetooth: hci1: command tx timeout [ 801.635855][T18848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 801.653672][T18848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 801.679782][T18848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 801.703225][T18848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 801.784225][T18910] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4742'. [ 801.858030][T18912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4743'. [ 801.961497][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 802.375147][T18848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.501327][ T5785] Bluetooth: hci0: Malformed LE Event: 0x0b [ 802.578958][T18848] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.600191][T14613] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.607365][T14613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.658496][T14613] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.665752][T14613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.816623][T18932] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4753'. [ 803.044307][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 803.510956][T14614] hsr_slave_0: left promiscuous mode [ 803.535400][T14614] hsr_slave_1: left promiscuous mode [ 803.545108][T14614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.552925][T14614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.569241][T14614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.589153][T14614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.603740][ T5785] Bluetooth: hci1: command tx timeout [ 803.665697][T14614] veth1_macvtap: left promiscuous mode [ 803.675252][T14614] veth0_macvtap: left promiscuous mode [ 803.684585][T14614] veth1_vlan: left promiscuous mode [ 803.694188][T14614] veth0_vlan: left promiscuous mode [ 803.706822][ T5785] Bluetooth: hci0: Malformed LE Event: 0x0b [ 803.923120][T14614] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 804.529763][T14614] team0 (unregistering): Port device team_slave_1 removed [ 804.613473][T14614] team0 (unregistering): Port device team_slave_0 removed [ 804.701366][T14614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.792582][T14614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.208810][T18958] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4763'. [ 805.397408][T14614] bond0 (unregistering): Released all slaves [ 805.510699][T18848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.628883][T18848] veth0_vlan: entered promiscuous mode [ 805.679421][T18848] veth1_vlan: entered promiscuous mode [ 805.687369][ T5785] Bluetooth: hci1: command tx timeout [ 805.739927][T18848] veth0_macvtap: entered promiscuous mode [ 805.762049][T18848] veth1_macvtap: entered promiscuous mode [ 805.926433][T18848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.973054][T18848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.009033][T18848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.029629][T18848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.035314][ T5785] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 806.046809][T18848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.046866][T18848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.069163][T18848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.121785][T18848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.162866][T18848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.177947][T18848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.190284][T18848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.204425][T18848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.220759][T18848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.242952][T18848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.283150][T18848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.306087][T18848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.324932][T18848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.343967][T18848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.587241][T14607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.614300][T18977] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4772'. [ 806.623041][T14607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.676166][T14615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.684163][T14615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.803618][ T5785] Bluetooth: hci0: Malformed LE Event: 0x0b [ 807.739118][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 807.750095][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 807.758710][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 807.767286][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 807.776167][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 807.786047][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 808.144511][T18993] chnl_net:caif_netlink_parms(): no params data found [ 808.333671][T18993] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.343442][T18993] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.351616][T18993] bridge_slave_0: entered allmulticast mode [ 808.359956][T18993] bridge_slave_0: entered promiscuous mode [ 808.370140][T18993] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.377997][T18993] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.385819][T18993] bridge_slave_1: entered allmulticast mode [ 808.393677][T18993] bridge_slave_1: entered promiscuous mode [ 808.435506][T18993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.448772][T18993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.495296][T18993] team0: Port device team_slave_0 added [ 808.507290][T18993] team0: Port device team_slave_1 added [ 808.546546][T18993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.553848][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.582996][T18993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.597046][T18993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.604800][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.631080][ T5785] Bluetooth: hci1: command tx timeout [ 808.637206][T18993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.721865][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.729715][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.825754][ T5785] Bluetooth: hci3: command tx timeout [ 811.905293][ T5785] Bluetooth: hci3: command tx timeout [ 813.985032][ T5785] Bluetooth: hci3: command tx timeout [ 816.065049][ T5785] Bluetooth: hci3: command tx timeout [ 823.282781][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 823.292847][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 823.307399][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 823.320195][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 823.329391][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 823.342782][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 824.061124][ T5785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 824.095196][ T5785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 824.104539][ T5785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 824.113339][ T5785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 824.123539][ T5785] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 824.131068][ T5785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 825.012320][ T5086] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 825.022973][ T5086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 825.031407][ T5086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 825.040251][ T5086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 825.048184][ T5086] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 825.056052][ T5086] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 825.425182][ T5086] Bluetooth: hci5: command tx timeout [ 826.224922][ T5086] Bluetooth: hci6: command tx timeout [ 827.104917][ T5086] Bluetooth: hci7: command tx timeout [ 827.505139][ T5086] Bluetooth: hci5: command tx timeout [ 828.305135][ T5086] Bluetooth: hci6: command tx timeout [ 829.185470][ T5086] Bluetooth: hci7: command tx timeout [ 829.584909][ T5086] Bluetooth: hci5: command tx timeout [ 830.385489][ T5086] Bluetooth: hci6: command tx timeout [ 831.264829][ T5086] Bluetooth: hci7: command tx timeout [ 831.668411][ T5086] Bluetooth: hci5: command tx timeout [ 832.464929][ T5086] Bluetooth: hci6: command tx timeout [ 833.345194][ T5086] Bluetooth: hci7: command tx timeout [ 869.024337][T19027] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 869.034553][T19027] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 869.043067][T19027] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 869.051645][T19027] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 869.059773][T19027] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 869.068443][T19027] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 870.149431][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.164823][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.104884][T19027] Bluetooth: hci8: command tx timeout [ 873.184840][T19027] Bluetooth: hci8: command tx timeout [ 875.265916][ T5086] Bluetooth: hci8: command tx timeout [ 877.344906][T19027] Bluetooth: hci8: command tx timeout [ 883.766358][ T5086] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 883.781533][ T5086] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 883.789811][ T5086] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 883.798069][ T5086] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 883.806041][ T5086] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 883.813459][ T5086] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 884.435764][T19027] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 884.446136][T19027] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 884.455232][T19027] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 884.465276][T19027] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 884.473748][T19027] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 884.481776][T19027] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 885.205696][ T5086] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 885.221019][ T5086] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 885.229345][ T5086] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 885.239701][ T5086] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 885.248476][ T5086] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 885.256140][ T5086] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 885.904918][ T5086] Bluetooth: hci9: command tx timeout [ 886.544983][ T5086] Bluetooth: hci10: command tx timeout [ 887.347823][ T5086] Bluetooth: hci11: command tx timeout [ 887.984933][ T5086] Bluetooth: hci9: command tx timeout [ 888.624893][ T5086] Bluetooth: hci10: command tx timeout [ 889.429883][ T5086] Bluetooth: hci11: command tx timeout [ 890.064966][ T5086] Bluetooth: hci9: command tx timeout [ 890.704960][ T5086] Bluetooth: hci10: command tx timeout [ 891.506102][ T5086] Bluetooth: hci11: command tx timeout [ 892.144917][ T5086] Bluetooth: hci9: command tx timeout [ 892.784915][ T5086] Bluetooth: hci10: command tx timeout [ 893.586022][ T5086] Bluetooth: hci11: command tx timeout [ 912.024709][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 912.031488][ C0] rcu: 0-....: (1 GPs behind) idle=0ae4/1/0x4000000000000000 softirq=72646/72647 fqs=5245 [ 912.042489][ C0] rcu: hardirqs softirqs csw/system [ 912.048911][ C0] rcu: number: 1327655 0 0 [ 912.055335][ C0] rcu: cputime: 16875 35614 66 ==> 52500(ms) [ 912.063159][ C0] rcu: (t=10502 jiffies g=106161 q=2180 ncpus=2) [ 912.069612][ C0] CPU: 0 PID: 18983 Comm: syz.2.4719 Not tainted syzkaller #0 [ 912.077129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 912.087205][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 912.093310][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 4c 07 05 0d 48 89 de 5b e9 73 b2 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 10 46 7c 7e 65 8b 15 11 46 7c 7e 81 e2 00 01 ff 00 74 [ 912.112932][ C0] RSP: 0018:ffffc90000007440 EFLAGS: 00000246 [ 912.119016][ C0] RAX: ffffffff813bd989 RBX: ffffc90000007c98 RCX: ffff888064f25a00 [ 912.127001][ C0] RDX: 0000000000000100 RSI: 0000000000000002 RDI: ffffc90000007c98 [ 912.135011][ C0] RBP: ffffc90000007578 R08: ffff888064f25a00 R09: 0000000000000003 [ 912.143001][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000007ba0 [ 912.150989][ C0] R13: ffffc90000007528 R14: ffffc90000007538 R15: dffffc0000000000 [ 912.158997][ C0] FS: 00007f29e23f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 912.167940][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 912.174542][ C0] CR2: 0000000100000000 CR3: 00000000246e7000 CR4: 00000000003506f0 [ 912.182533][ C0] DR0: 0000000000000000 DR1: 0000000000000b6e DR2: 0000000000000000 [ 912.190513][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 912.198521][ C0] Call Trace: [ 912.201831][ C0] [ 912.204693][ C0] __read_once_word_nocheck+0x9/0x10 [ 912.209996][ C0] unwind_next_frame+0x15d9/0x2990 [ 912.215162][ C0] ? call_timer_fn+0x189/0x540 [ 912.219942][ C0] ? call_timer_fn+0x189/0x540 [ 912.224731][ C0] ? stack_trace_save+0x100/0x100 [ 912.229797][ C0] arch_stack_walk+0x144/0x190 [ 912.234617][ C0] ? call_timer_fn+0x189/0x540 [ 912.239405][ C0] stack_trace_save+0xaa/0x100 [ 912.244189][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 912.249329][ C0] ? stack_trace_save+0xaa/0x100 [ 912.254284][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 912.259420][ C0] kasan_set_track+0x4e/0x70 [ 912.264026][ C0] ? kasan_set_track+0x4e/0x70 [ 912.268814][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 912.273851][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 912.279160][ C0] ? kmem_cache_alloc_node+0x1af/0x310 [ 912.284643][ C0] ? kmalloc_reserve+0x95/0x240 [ 912.289510][ C0] ? __alloc_skb+0x138/0x2c0 [ 912.294111][ C0] ? ndisc_alloc_skb+0xa6/0x450 [ 912.298979][ C0] ? ndisc_send_rs+0x27d/0x690 [ 912.303756][ C0] ? addrconf_rs_timer+0x36b/0x640 [ 912.308887][ C0] ? call_timer_fn+0x189/0x540 [ 912.313704][ C0] __kasan_slab_alloc+0x6c/0x80 [ 912.318584][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 912.323727][ C0] kmem_cache_alloc_node+0x1af/0x310 [ 912.329130][ C0] ? kmalloc_reserve+0x95/0x240 [ 912.334022][ C0] kmalloc_reserve+0x95/0x240 [ 912.338726][ C0] __alloc_skb+0x138/0x2c0 [ 912.343256][ C0] ndisc_alloc_skb+0xa6/0x450 [ 912.347959][ C0] ndisc_send_rs+0x27d/0x690 [ 912.352574][ C0] ? ipv6_get_lladdr+0x2b/0x3e0 [ 912.357452][ C0] addrconf_rs_timer+0x36b/0x640 [ 912.362524][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 912.368613][ C0] ? call_timer_fn+0x8f/0x540 [ 912.373333][ C0] call_timer_fn+0x189/0x540 [ 912.377951][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 912.384042][ C0] ? call_timer_fn+0xd2/0x540 [ 912.388765][ C0] ? __run_timers+0x810/0x810 [ 912.393470][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 912.399569][ C0] __run_timers+0x570/0x810 [ 912.404101][ C0] ? detach_timer+0x2b0/0x2b0 [ 912.408805][ C0] ? lock_chain_count+0x20/0x20 [ 912.413677][ C0] run_timer_softirq+0x67/0xf0 [ 912.418457][ C0] handle_softirqs+0x27d/0x820 [ 912.423245][ C0] ? read_tsc+0x9/0x20 [ 912.427331][ C0] ? ktime_get+0x24b/0x280 [ 912.431788][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 912.436579][ C0] ? do_softirq+0x1a0/0x1a0 [ 912.441108][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 912.446345][ C0] __irq_exit_rcu+0xd3/0x190 [ 912.451034][ C0] ? irq_exit_rcu+0x20/0x20 [ 912.455567][ C0] irq_exit_rcu+0x9/0x20 [ 912.459826][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 912.465482][ C0] [ 912.468430][ C0] [ 912.471388][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 912.477392][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 912.483223][ C0] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 23 f7 3a 09 e8 be 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 912.502854][ C0] RSP: 0018:ffffc9000432f880 EFLAGS: 00000282 [ 912.508942][ C0] RAX: 136de10b7128eb00 RBX: 0000000000000000 RCX: 136de10b7128eb00 [ 912.516930][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 912.524928][ C0] RBP: ffffc9000432f8d0 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 912.532913][ C0] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff888064f25a00 [ 912.540912][ C0] R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48 [ 912.548920][ C0] __schedule+0x15b6/0x4660 [ 912.553470][ C0] ? asan.module_dtor+0x20/0x20 [ 912.558358][ C0] ? futex_wait_queue+0x9d/0x1b0 [ 912.563318][ C0] ? plist_add+0x3db/0x490 [ 912.567768][ C0] schedule+0xbd/0x170 [ 912.571875][ C0] ? futex_wait_queue+0x27/0x1b0 [ 912.576827][ C0] futex_wait_queue+0x138/0x1b0 [ 912.581702][ C0] futex_wait+0x1e9/0x5c0 [ 912.586061][ C0] ? futex_wait_setup+0x270/0x270 [ 912.591115][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 912.596852][ C0] do_futex+0x2ff/0x3e0 [ 912.601052][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 912.606963][ C0] ? lock_chain_count+0x20/0x20 [ 912.611875][ C0] __se_sys_futex+0x3a9/0x440 [ 912.616567][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 912.622752][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 912.627542][ C0] ? __x64_sys_futex+0x21/0xf0 [ 912.632345][ C0] do_syscall_64+0x55/0xb0 [ 912.636783][ C0] ? clear_bhb_loop+0x40/0x90 [ 912.641490][ C0] ? clear_bhb_loop+0x40/0x90 [ 912.646190][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.652103][ C0] RIP: 0033:0x7f29e159e0d9 [ 912.656535][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.676158][ C0] RSP: 002b:00007f29e23f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 912.684596][ C0] RAX: ffffffffffffffda RBX: 00007f29e1825fa8 RCX: 00007f29e159e0d9 [ 912.692588][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f29e1825fa8 [ 912.700609][ C0] RBP: 00007f29e1825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 912.708589][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.716573][ C0] R13: 00007f29e1826038 R14: 00007fff7eacb240 R15: 00007fff7eacb328 [ 912.724572][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)