last executing test programs: 21m50.62302929s ago: executing program 0 (id=7103): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x87, 0x1, 0x0, 0x0, 0x0, 0x0, 0x110, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000540), 0x4}, 0x40, 0x4000000010000, 0x3c8, 0x5, 0x3, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x800) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000200)="32087d1c9cb36139", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0x1e, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}, {&(0x7f0000000180)}], 0x2}, 0x1000000000000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10020) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x20040000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) 21m50.291814488s ago: executing program 0 (id=7105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x7fffffff, 0x42e6, 0x711a, 0x40, r0, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x10, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[r0, r1, r1, r0], &(0x7f0000000ac0)=[{0x2, 0x2, 0x8, 0xf}, {0x3, 0x5, 0x7, 0x5}, {0x0, 0x1, 0x2, 0x3}, {0x0, 0x5, 0xc, 0x3}, {0x5, 0x1, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x5}, {0x4, 0x3, 0x0, 0x5}, {0x5, 0x5, 0x8, 0x4}, {0x1, 0x3, 0x9, 0x9}, {0x4, 0x1, 0x6, 0x4}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x14, 0x1a, &(0x7f0000000280)=@raw=[@exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000380)='GPL\x00', 0xfffffffb, 0x8f, &(0x7f0000000440)=""/143, 0x41100, 0x2, '\x00', 0x0, @lirc_mode2, r3, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x9, 0x6, 0x6}, 0x10, r4, r5, 0x9, &(0x7f0000000c40)=[r0, r1, r1], &(0x7f0000000c80)=[{0x0, 0x5, 0x10, 0x4}, {0x3, 0x1, 0xa, 0x6}, {0x2, 0x3, 0x6, 0xa}, {0x1, 0x4, 0x0, 0x1}, {0x3, 0x4, 0xf, 0x8}, {0x1, 0x4, 0x0, 0xb}, {0x4, 0x3, 0x0, 0x4}, {0x3, 0x1, 0x10, 0x7}, {0x4, 0x2, 0xa, 0xb}], 0x10, 0x5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x110, 0x0, 0x0, 0x2, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x3e, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 21m49.850357619s ago: executing program 0 (id=7115): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="a2e05a0ec7ed6e0880709ffc0b693a96a7ef9a95e657a8db09ee5b08d7a54be8e32738882b849f443806f92f5aaeca9923f4af7671d979ea9983e29f64615c8cc790f45711620b1acdcc9af57efb3ec71d619124b031f9", 0x57}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9fe301001800000000000000440000004400000003000000020000000000000b04000000060000000000000a010000000600000000000008000000000c00000000000011050000000000000003000000000000110200000008000000003000"], &(0x7f0000000340)=""/134, 0x5f, 0x86}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000bd, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x2000000000000045, &(0x7f0000000a40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000e95"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 21m49.416620389s ago: executing program 0 (id=7112): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0xf900, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) 21m49.249961113s ago: executing program 0 (id=7114): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x1c108, 0x3, 0x3, 0x6, 0x7, 0x4, 0x2, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b0000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 21m49.007739629s ago: executing program 0 (id=7119): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e000000ffff0000810000003800000000800000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0300000002000000050000000700000000000000", @ANYRES32=r2, @ANYBLOB="00540be281e78c9ff561"], 0x50) syz_clone(0x100, &(0x7f0000000940)="8f2856bcc696edd0b96721364828e940206350bcb015b285544b366409f0c8da42755373ec04de2a2bf7cfd61c34c1b2e9613c52056cf998c394706ad8dc12e39dc592359c3a8ee8412a61c683db5091af7c7b7617e1a9d42615212a0047440f1bedf6486ba359b6931c76bf8a2e0b29815fb30c44c4997b509659074b933eae1de98bac59a60e9c9edd1a3220ea49c7f95a3fa2eee2e67b218c1d40eebfe363a2be16c7469160bd44849f6f8258", 0xae, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="79789018b1d92f527e9a1ec6dc0028727e3abcbe73cf630a8ae7b340b1aa515402f3fb3e26e094b36c9f114546ed96b8dce18248776a7ca5469aa8fc5f0ef79321834d784638e2aeaeafbe1da56101fb92879ebdaada97608805ff558c5a12997ebbcc424545d1423284d0") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000000400000008"], 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000b00)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x12, &(0x7f0000000400)=""/18, 0x40f00, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x9b, 0x729}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[r3, r4, r6, 0xffffffffffffffff, r1], &(0x7f0000000840)=[{0x3, 0x4}], 0x10, 0x401}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x2, r2}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0xd, 0x0, 0x0, 0x400, 0x7410b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x3}, 0x40, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) r9 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000021c0)={&(0x7f0000000c40)="a33f1cb9d0287bd83559ee324123f69442ede077a0648dcc71afeeba37878608c4d6c7442b99afab3d1063477384bf3d51cfcd97f30504a4cbd15f765a00cde3818948a9f30c88148ab8784465b3f9658b2faca610fd89bb169a416238e7bd65356d1d104ef57e644d1f258e0f122e92f2be43436a30f80fd4e60b5d2b1448263cd224fcf0a65e0c3e7f33e0c7edc936c410710bdc149e4862f7a5bb2ea166e475cda57897edca7451d02dddf8d7b2ac4f5158bddf19369d4ac64da8c38e40a8bb73c14a6f12227833f46bb05b5515850c52a38a7ddf4d75", &(0x7f0000001040)=""/4096, &(0x7f0000002040)="fcdea56b302d70b3541789554325e6e8041cf5124a03c0301ff273ea94fc34a29f887075a419ca87494a971fc2754903de2d7b92210334f2b498192319d295e4e20c5b897f4135e4e82d3bf308b8f0d250f2823c", &(0x7f00000020c0)="04c90229d82f2a2474ac31bc8b8c8b0bc3680e2fb384a027045122e6758586d0d4a03c802acabe8b5349b1416db1f51d7a792e01b0433dc247de5187b8bb955687d72d13fcdd423471132a257a5c00ee44c85998dae661e98627e2a5f79e66423578a03fc250e4021603b631dd790f605bdbd6c6fcdaeb71365ab4d44ae19b4598cd920f569791deb49400d094ac0b6c0c3ab1bc2543d3c8930e4c35ca93ae415a1a5a82297b3917415d75e166a963dd8fdd3b2a9e4e19133756dd803fd8f200152e0910a59b317656e55007b959a0a5ed100d6309ca8577492876102cfc7511e0f3badbf7e9690e549a19ef5c3ada3a8872af0bf7", 0xfffffff9, r4}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000092b21a0f68b7885200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r11, 0x0, 0xa0028000}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x5, 0x0, 0x3, 0x94191, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x7}, 0x9006, 0xa, 0x0, 0x9, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESOCT=r4, @ANYRESDEC=r10, @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 21m33.214689346s ago: executing program 32 (id=7119): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e000000ffff0000810000003800000000800000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0300000002000000050000000700000000000000", @ANYRES32=r2, @ANYBLOB="00540be281e78c9ff561"], 0x50) syz_clone(0x100, &(0x7f0000000940)="8f2856bcc696edd0b96721364828e940206350bcb015b285544b366409f0c8da42755373ec04de2a2bf7cfd61c34c1b2e9613c52056cf998c394706ad8dc12e39dc592359c3a8ee8412a61c683db5091af7c7b7617e1a9d42615212a0047440f1bedf6486ba359b6931c76bf8a2e0b29815fb30c44c4997b509659074b933eae1de98bac59a60e9c9edd1a3220ea49c7f95a3fa2eee2e67b218c1d40eebfe363a2be16c7469160bd44849f6f8258", 0xae, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="79789018b1d92f527e9a1ec6dc0028727e3abcbe73cf630a8ae7b340b1aa515402f3fb3e26e094b36c9f114546ed96b8dce18248776a7ca5469aa8fc5f0ef79321834d784638e2aeaeafbe1da56101fb92879ebdaada97608805ff558c5a12997ebbcc424545d1423284d0") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000000400000008"], 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000b00)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x12, &(0x7f0000000400)=""/18, 0x40f00, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x9b, 0x729}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[r3, r4, r6, 0xffffffffffffffff, r1], &(0x7f0000000840)=[{0x3, 0x4}], 0x10, 0x401}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x2, r2}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0xd, 0x0, 0x0, 0x400, 0x7410b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x3}, 0x40, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) r9 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000021c0)={&(0x7f0000000c40)="a33f1cb9d0287bd83559ee324123f69442ede077a0648dcc71afeeba37878608c4d6c7442b99afab3d1063477384bf3d51cfcd97f30504a4cbd15f765a00cde3818948a9f30c88148ab8784465b3f9658b2faca610fd89bb169a416238e7bd65356d1d104ef57e644d1f258e0f122e92f2be43436a30f80fd4e60b5d2b1448263cd224fcf0a65e0c3e7f33e0c7edc936c410710bdc149e4862f7a5bb2ea166e475cda57897edca7451d02dddf8d7b2ac4f5158bddf19369d4ac64da8c38e40a8bb73c14a6f12227833f46bb05b5515850c52a38a7ddf4d75", &(0x7f0000001040)=""/4096, &(0x7f0000002040)="fcdea56b302d70b3541789554325e6e8041cf5124a03c0301ff273ea94fc34a29f887075a419ca87494a971fc2754903de2d7b92210334f2b498192319d295e4e20c5b897f4135e4e82d3bf308b8f0d250f2823c", &(0x7f00000020c0)="04c90229d82f2a2474ac31bc8b8c8b0bc3680e2fb384a027045122e6758586d0d4a03c802acabe8b5349b1416db1f51d7a792e01b0433dc247de5187b8bb955687d72d13fcdd423471132a257a5c00ee44c85998dae661e98627e2a5f79e66423578a03fc250e4021603b631dd790f605bdbd6c6fcdaeb71365ab4d44ae19b4598cd920f569791deb49400d094ac0b6c0c3ab1bc2543d3c8930e4c35ca93ae415a1a5a82297b3917415d75e166a963dd8fdd3b2a9e4e19133756dd803fd8f200152e0910a59b317656e55007b959a0a5ed100d6309ca8577492876102cfc7511e0f3badbf7e9690e549a19ef5c3ada3a8872af0bf7", 0xfffffff9, r4}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000092b21a0f68b7885200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r11, 0x0, 0xa0028000}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x5, 0x0, 0x3, 0x94191, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x7}, 0x9006, 0xa, 0x0, 0x9, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESOCT=r4, @ANYRESDEC=r10, @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 3.019306889s ago: executing program 2 (id=15286): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x7f, 0x8, 0x9, 0xff, 0x0, 0x1, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000, 0xb}, 0x100100, 0x10a, 0x1aa4, 0x4, 0x5, 0xfffffffb, 0x6, 0x0, 0xfffff002, 0x0, 0x7fffffffffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x201, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x80b1, 0x0, 0x0, 0x0, 0x5, 0xfffefffd, 0x0, 0x0, 0x5ff, 0x0, 0x80}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8918, &(0x7f0000000000)) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000380)=""/206, 0xce}], 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x800}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.012427129s ago: executing program 3 (id=15295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="b7020000000000007b2ac0ff00000000180200000a0000010000000000000000180200000a000001bfa200000000000007020000c0ffffff18140000", @ANYRES32, @ANYBLOB="000000000000000085000000450000009500000000000000171aae7851009609aec3cbf7da13113993b0e1cac99d942d32cf237a39693b60e504bfdc5a93d99548ad0206faea3fedabb24e1f24c6dfac83a9cb9acb22fe4b692d2438f5c8acd9219dbbb0feaf5f8c5605fbf1b3950d8f8351c343940bf9fd9690f46160ad5bbc5a6f318134695374a319149e1b31dc414c542d36e7935a00e8cb56b7ddf28693c0d5065a132055f96b914d9a883cabf3d7e36b6c"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8a321ffb702000008000000b50200000000000085000000cb0000009500000000000000"], 0x0, 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b7030000000a0000850000000c000000b7070000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907009875f37500e486dd6317ce6203c23c00b980000800009ff57b80000000000000000000002d00"], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 1.612253141s ago: executing program 2 (id=15297): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0x37}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1.595489302s ago: executing program 3 (id=15298): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.523987084s ago: executing program 1 (id=15299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="16360000690005"], 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x257e09ac, 0x7fff, 0x7, 0x43000, 0x1, 0x4e8d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x4}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r10, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYRES8=r11, @ANYBLOB="3eca", @ANYRES8=r12], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x15, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000002c0)='syzkaller\x00', 0x723, 0xcd, &(0x7f0000000380)=""/205, 0x40f00, 0x32, '\x00', r3, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xb, 0x3, 0x7}, 0x10, 0xffffffffffffffff, r0, 0xa, &(0x7f00000007c0)=[r4, r6, r7, 0xffffffffffffffff, r8, r9, r13], &(0x7f0000000800)=[{0x3, 0x4, 0x9, 0x1}, {0x4, 0x5, 0xb, 0xb}, {0x0, 0x2, 0xa, 0xc}, {0x0, 0x3, 0x0, 0xa}, {0x4, 0x3, 0x7}, {0x4, 0x5, 0xa, 0x1}, {0x4, 0x5, 0x5, 0x9}, {0x1, 0x4, 0x9, 0x4}, {0x1, 0x5, 0x10, 0xd}, {0x3, 0x2, 0xd, 0x9}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce020000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.516959614s ago: executing program 4 (id=15300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000009000000000000000000f8ff850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.504829035s ago: executing program 3 (id=15301): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x30, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.383966009s ago: executing program 2 (id=15302): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0), 0x4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x18, 0x0, 0xfcd8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x6, 0xe9, 0x10802, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @value=r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.383756049s ago: executing program 4 (id=15303): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a0b0985d44448bff8de5284030ec4a91fc42090225a5ad714ed50828f5cf5976bd303b43bcc111ba5dccad08111d3bccfbd38a967f83c42990cd730b9f4f4963b0969debc754b1b0cb107e579198105442f303cc99271cab32e8b254bb72710ad67fee764c557170b0ea42b211d16c554f17cff520d106ff3f9231f1b096c1764b3d30d1cacf25a44610fb1ab64fccbde36928cc9e8ece7f95da12b3111e569b5d8007d4ed7a238b5ce75de3b4008a4dcb236d227091232c99d5dfd2c87ec8f71f03ca8a87e1a15e18d6d6a9e43f8915", 0xd0}, {&(0x7f00000002c0)="e0268fe8cdb7736f6e6d40cf65fe97d43c49563cfb", 0x15}, {&(0x7f0000000300)="b74972d361d85f17acd6d42ef462c3d2e7ef94e006034557b869dce235424d61273047aa25650ee72258f9c31ab4914df3f77a27b33a6057de4f50e6ca392a647fc58a81fb2aa2849b4ffaa8f56b3438fdffed12fa4725e043506adabce3331d16b2099341c0fc43a296cc571a21ce6fdebb7c5a80259c2a524fea03f75db46fd8fb003430edf723f26c62546176749b4b653cd2938e31e1e2b08a86406dbad80dee48a61b02c1da105be4051d630a58cf", 0xb1}, {&(0x7f00000003c0)="72ed4a7c86631e7c94ffba9f5b19b7dc368fff2ef95d523d5ff1b66e43e04704faf5687c9e948c924922322ccdb4062c28733e45bd0229a1e06777c361066e24", 0x40}, {&(0x7f0000000440)="8a358f32cd6c8c5d439bd624ac7a314df3e8d961b0b1e6f6a13c76eec0d4f64fc549b3cea119bfbf86caf963cf22121d4d33607e56b55dcf94242a685c77059b5b5447cc8c2ef2caecfd74773d1adcf18c6c496795dd500f6f7178b35d6b17397a55232f2b1e22efcf9d4fefbdf02a413a5fb96642b19171ad3863f8d933f2595987e621cce5004a0ea0ca060d57c32e9e50f7fd5b51cc66dc64a75576f161283be0b47d1cb12e247dac69a009ce6719c7616675b3160ee1c577", 0xba}, {&(0x7f0000000640)="57b1a0aca2640c94d02ee261e9675bb28265f01716ad7fc9ae7cb20f5ace8bc1b2b67d767a4fcfc2ed4a34697f154c9c5311c55d9c709a8cd1db5424dc64767c7866a40f108c28cee8f0629279b1d32c0896cd8729c45eb163469f1155b92dbf0afb3922e062fdec0d9944da553d013b8cf7637136dad6fb3bef9f914e49c25aef26dca7d41402dd6e8b34787864b47e30cf1b7b81e42f9a43a16238593e44dd3cb1b12ed5c285629e4f02c7", 0xac}], 0x6}, 0x4000055) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 1.371752069s ago: executing program 3 (id=15304): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x6, &(0x7f0000000740)=r0, 0x4) sendmsg$kcm(r1, &(0x7f00000020c0)={0x0, 0x0, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0035b69fdb90d984"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.33472345s ago: executing program 1 (id=15305): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000010c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f00000011c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x1000}], 0x1, &(0x7f0000001400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x2a, 0x0, 0x8, [0x1, 0x2, 0x9, 0x3, 0x2, 0x2, 0x3]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x2f, 0x3, 0xa, [{@loopback}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010101, 0xffff}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}], 0xc0}, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)=@o_path={&(0x7f0000001500)='./file0\x00', 0x0, 0x2010, r0}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001600)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x1c, 0x0, 0x401, 0x32c3, 0xb4c3, r4, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, @value=r5}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x7, 0x5, 0x10000, 0x10000, 0x9, 0xffffffffffffffff, 0x400, '\x00', r2, r5, 0x1, 0x1, 0x5}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000016c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @exit, @ldst={0x1, 0x2, 0x0, 0x7, 0xa, 0xfffffffffffffffc, 0xffffffffffffffff}], &(0x7f0000001700)='GPL\x00', 0x6, 0x8e, &(0x7f0000001740)=""/142, 0x0, 0x14, '\x00', r2, 0x1b, r5, 0x8, &(0x7f0000001800)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001840)={0x3, 0x4, 0x7, 0x4}, 0x10, r3, 0x0, 0x2, 0x0, &(0x7f0000001880)=[{0x1, 0x1, 0x8, 0x9}, {0x0, 0x5, 0x2, 0x7}], 0x10, 0xb6b}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r7, 0x0, 0xc5, 0x62, &(0x7f0000001a40)="45640bcfde46eed4f0042c1deaa912f2d763ede98e693cb26d7d62dc8ea24727272b13481fc27d9454cb31419c37ebb4289bdf1ef07f918680081b94ebbc9ba1fa9765de390111299adc94e848b8e0844a06988e519104a4059df52a8da7a79873b64063d1ed6ad4ff59f7cec5c517c3cf39ef46c792c75ee1b5d2df154aa466f7518b12e2080adc67d205163096af7e119601b9d24379db5f9b8a0103625aaa6b703b317af397c06831d0068ee3843ad7baa11b9c4168e5773a831d59aa48306edad5b06e", &(0x7f0000001b40)=""/98, 0x3c2a, 0x0, 0x1000, 0xa, &(0x7f0000001bc0)="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", &(0x7f0000002bc0)="5c41dd9247e8589f7810", 0x5, 0x0, 0x6}, 0x50) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000002c80)=0x1) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002cc0)=r3, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003e40)={0x17, 0xb, &(0x7f0000002d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdb0, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000002d80)='GPL\x00', 0x400, 0x1000, &(0x7f0000002dc0)=""/4096, 0x40f00, 0x0, '\x00', r2, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000003dc0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000003e00)={0x1, 0xa, 0x7, 0x3}, 0x10, r3, r7, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r12 = perf_event_open(&(0x7f0000003f40)={0x3, 0x80, 0x3, 0x9, 0x2, 0x7, 0x0, 0x0, 0x2008, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000003f00), 0x5}, 0x40, 0x9, 0x0, 0x6, 0x4, 0x0, 0x8, 0x0, 0xf8c6000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000003fc0)='\x00') r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r2, r10, 0x2, 0x4, 0x1}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004080)={r1}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000040c0), 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004300)={r6, 0xffffffffffffffff}, 0x4) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000043c0)={0x14, 0x3, &(0x7f0000004100)=@raw=[@jmp={0x5, 0x1, 0x1, 0x6, 0xa, 0x800000000000021e, 0xfffffffffffffff0}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], &(0x7f0000004140)='GPL\x00', 0x6, 0xf5, &(0x7f0000004180)=""/245, 0x41100, 0x76, '\x00', r2, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000004280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000042c0)={0x2, 0x6, 0x80000001, 0x2}, 0x10, r3, r11, 0x3, &(0x7f0000004340)=[r13, r14], &(0x7f0000004380)=[{0x4, 0x5, 0xa}, {0x3, 0x5, 0x1, 0x4}, {0x2, 0x1, 0x3, 0x6}], 0x10, 0x9}, 0x94) r16 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000004480)=0xffffffffffffffff, 0x4) r17 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000044c0)={r1}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000004500)={r16, r11, 0x4, r17}, 0x10) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000004580)={0x2, &(0x7f0000004540)=[{0x4, 0x37, 0x10, 0x6}, {0xfff9, 0x3, 0x1, 0x60c}]}) r18 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004800)={&(0x7f0000004700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x7}}, @var={0xe, 0x0, 0x0, 0xe, 0x5, 0x1}, @float={0x5, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x61, 0x30, 0x30, 0x61]}}, &(0x7f0000004780)=""/75, 0x53, 0x4b, 0x1, 0x3, 0x10000, @value=r12}, 0x28) r19 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000045c0)='GPL\x00', 0x0, 0xe4, &(0x7f0000004600)=""/228, 0x40f00, 0x65, '\x00', r2, 0x0, r18, 0x8, &(0x7f0000004840)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000004880)={0x2, 0xf, 0x7fffffff, 0x4dc6}, 0x10, 0x20e7, r15, 0x0, &(0x7f00000048c0)=[r14, r13], 0x0, 0x10, 0x1}, 0x94) r20 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004c40)=@bpf_ext={0x1c, 0xb, &(0x7f0000004a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, [@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @ldst={0x1, 0x1, 0x4, 0x6, 0x5, 0x30, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2705, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000004a80)='GPL\x00', 0x4, 0xc5, &(0x7f0000004ac0)=""/197, 0x41100, 0x20, '\x00', r2, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004bc0)={0x3, 0xc, 0x1, 0xfffffffe}, 0x10, 0x1e65f, r19, 0x4, 0x0, &(0x7f0000004c00)=[{0x3, 0x4, 0x0, 0x9}, {0x4, 0x3, 0x4, 0xc}, {0x2, 0x1, 0x2, 0x3}, {0x2, 0x4, 0x8, 0x3}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004d40)={{r4}, &(0x7f00000049c0), &(0x7f0000004d00)=r20}, 0x20) 1.139936316s ago: executing program 1 (id=15306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="b7020000000000007b2ac0ff00000000180200000a0000010000000000000000180200000a000001bfa200000000000007020000c0ffffff18140000", @ANYRES32, @ANYBLOB="000000000000000085000000450000009500000000000000171aae7851009609aec3cbf7da13113993b0e1cac99d942d32cf237a39693b60e504bfdc5a93d99548ad0206faea3fedabb24e1f24c6dfac83a9cb9acb22fe4b692d2438f5c8acd9219dbbb0feaf5f8c5605fbf1b3950d8f8351c343940bf9fd9690f46160ad5bbc5a6f318134695374a319149e1b31dc414c542d36e7935a00e8cb56b7ddf28693c0d5065a132055f96b914d9a883cabf3d7e36b6c"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8a321ffb702000008000000b50200000000000085000000cb0000009500000000000000"], 0x0, 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b7030000000a0000850000000c000000b7070000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907009875f37500e486dd6317ce6203c23c00b980000800009ff57b80000000000000000000002d00"], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 1.138538036s ago: executing program 4 (id=15307): r0 = socket$kcm(0xa, 0x3, 0x3a) recvmsg$kcm(r0, 0x0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff010}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0xa, 0x3, 0x3a) (async) recvmsg$kcm(r0, 0x0, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) close(r1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff010}]}) (async) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) 1.103006227s ago: executing program 2 (id=15308): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004fdff00035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) 1.074599807s ago: executing program 3 (id=15309): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.00010747s ago: executing program 1 (id=15310): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000210000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) socket$kcm(0xa, 0x2, 0x3a) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 923.902642ms ago: executing program 2 (id=15311): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0x83, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f0000010040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db44b904021d080006", 0x15}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x888a4, 0x0, 0x0, 0x0, 0x6, 0x2f07}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_attach_bpf(r2, 0x1, 0x42, &(0x7f0000000040), 0x3b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44010) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000140)="373e17aefc020107020010010000000a000000", 0x13}], 0x2}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffd7b}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8ab, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00'}, 0x18) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xc, 0x3, 0x3, 0x7, 0x40000, 0x1, 0x42db, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x8, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe22, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x7, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x4d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000900)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x78, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0x2, 0x5, 0xa}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[r12, r13, r3], &(0x7f0000000b40)=[{0x5, 0x2, 0x3, 0x3}, {0x2, 0x1, 0x0, 0xa}, {0x3, 0x2, 0x2, 0x8}, {0x0, 0x1, 0xb}, {0x2, 0x5, 0x5, 0xb}], 0x10, 0xfffff354}, 0x94) 923.779992ms ago: executing program 4 (id=15312): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x14) 909.574683ms ago: executing program 3 (id=15313): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000400000008000000141000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000c00000000000000000000000000000000000000000000000102938496d698e7a49bfd407ea890af35756ec704db8cb9828afb1cf1d761e0091cf2aab9e9e8aa70e0896c50"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000080000000400000009000000080000", @ANYRES32=r0, @ANYBLOB], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, &(0x7f0000000840), 0x0, 0x0, 0x4060, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x682c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_bp={0x0, 0x9}, 0xa02, 0xc8, 0x3, 0x7, 0x4000000000, 0xffffffff, 0x13, 0x0, 0x20, 0x0, 0x80008}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x9, 0x5}, 0x0, 0x100, 0x0, 0x9, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x40482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xc}, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xc0045878, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'bridge_slave_0\x00', @random="0200ac7fac14"}) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = syz_clone(0x20000000, &(0x7f00000005c0), 0x0, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="0eecb347c8f6fb366bf4024144ce221df275723690caaaba4f731470b3f22f3043f605352c94df1ea18f6ed99d95c30e37bde807558854da35c0a00160c6b46c92be77d0753317a60384866d46dbb355a03ef3ed0a2dc963ff752e0afa5b4cc578b20c4d05359e9fa5e5dd77184259ec06e6989fa79248") perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r6, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) 653.37598ms ago: executing program 1 (id=15314): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x180, 0x7fffffff, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9ffd}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffe0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x72a, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x80, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f0000001a40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x8, 0x8, 0x8}, 0x10, 0x293ac, r0, 0x2, &(0x7f0000001ac0)=[r0], &(0x7f0000001b00)=[{0x0, 0x3, 0x1}, {0x2, 0x3, 0xc, 0x8}], 0x10, 0xfff}, 0x94) (async, rerun: 32) r2 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) (async, rerun: 64) r6 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r3], 0xfe33) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000dc8a51b97b8f331f1a8ff38400003356c779f1366500"], 0x18}, 0x41) (rerun: 32) r7 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) (async) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="c109000000000000001d1e020e", 0xd}, {&(0x7f0000000000)="25e85f", 0x3}], 0x2}, 0x20040000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 576.113893ms ago: executing program 4 (id=15315): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="c109000000000012001d1e020e", 0xd}, {&(0x7f0000000000)="25e85f6a69d67cf8f35aadf4a86c6dd61c34", 0x12}], 0x2}, 0x20040000) 491.711416ms ago: executing program 4 (id=15316): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0), 0x4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x18, 0x0, 0xfcd8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x6, 0xe9, 0x10802, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @value=r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r3}, 0x38) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 114.078507ms ago: executing program 1 (id=15317): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x6, &(0x7f0000000740)=r0, 0x4) sendmsg$kcm(r1, &(0x7f00000020c0)={0x0, 0x0, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=15318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="b7020000000000007b2ac0ff00000000180200000a0000010000000000000000180200000a000001bfa200000000000007020000c0ffffff18140000", @ANYRES32, @ANYBLOB="000000000000000085000000450000009500000000000000171aae7851009609aec3cbf7da13113993b0e1cac99d942d32cf237a39693b60e504bfdc5a93d99548ad0206faea3fedabb24e1f24c6dfac83a9cb9acb22fe4b692d2438f5c8acd9219dbbb0feaf5f8c5605fbf1b3950d8f8351c343940bf9fd9690f46160ad5bbc5a6f318134695374a319149e1b31dc414c542d36e7935a00e8cb56b7ddf28693c0d5065a132055f96b914d9a883cabf3d7e36b6c"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8a321ffb702000008000000b50200000000000085000000cb0000009500000000000000"], 0x0, 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b7030000000a0000850000000c000000b7070000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907009875f37500e486dd6317ce6203c23c00b980000800009ff57b80000000000000000000002d00"], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) kernel console output (not intermixed with test programs): 4466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2507.314570][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2507.336542][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2507.361905][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2507.396362][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2507.431841][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2507.518618][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2507.593457][T14466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2507.714091][T14721] netlink: 'syz.4.13987': attribute type 39 has an invalid length. [ 2507.755766][T14466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2507.841973][T14466] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2507.850857][T14466] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2507.871791][T14466] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.068904][T26020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2508.097346][T26020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2508.251138][T21288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2508.270363][T21288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2508.817402][T14738] netlink: 'syz.3.13989': attribute type 10 has an invalid length. [ 2509.160932][T14752] netlink: 201644 bytes leftover after parsing attributes in process `syz.1.13991'. [ 2509.934013][T14771] netlink: 'syz.3.13997': attribute type 39 has an invalid length. [ 2511.909417][T14801] netlink: 'syz.3.14001': attribute type 10 has an invalid length. [ 2511.954435][T14802] netlink: 'syz.4.14002': attribute type 10 has an invalid length. [ 2511.981992][T14802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2512.000379][T14802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2512.168370][T14805] syzkaller0: entered promiscuous mode [ 2512.186334][T14805] syzkaller0: entered allmulticast mode [ 2515.998877][T14831] netlink: 'syz.1.14009': attribute type 39 has an invalid length. [ 2516.015308][T14842] netlink: 'syz.4.14012': attribute type 10 has an invalid length. [ 2517.328057][T14869] netlink: 'syz.4.14021': attribute type 10 has an invalid length. [ 2517.446561][T14871] netlink: 'syz.1.14023': attribute type 39 has an invalid length. [ 2517.774015][T14879] syzkaller0: entered promiscuous mode [ 2517.779579][T14879] syzkaller0: entered allmulticast mode [ 2517.845171][T14879] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14026'. [ 2518.513619][ T4472] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2521.400523][T14904] netlink: 'syz.1.14034': attribute type 10 has an invalid length. [ 2521.408874][T14907] netlink: 'syz.3.14035': attribute type 39 has an invalid length. [ 2521.744557][T14920] IPv6: pim6reg1: Disabled Multicast RS [ 2522.138599][T14932] netlink: 'syz.4.14046': attribute type 39 has an invalid length. [ 2522.519979][T14934] netlink: 'syz.3.14047': attribute type 10 has an invalid length. [ 2522.563261][T14939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14049'. [ 2522.581787][T14939] veth1_macvtap: entered allmulticast mode [ 2523.092893][T14960] netlink: 'syz.3.14058': attribute type 39 has an invalid length. [ 2523.515945][T14963] netlink: 'syz.4.14060': attribute type 10 has an invalid length. [ 2526.083380][T14989] netlink: 'syz.1.14070': attribute type 39 has an invalid length. [ 2526.715874][T15004] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.14077'. [ 2526.730260][T15002] netlink: 'syz.1.14076': attribute type 10 has an invalid length. [ 2527.600584][T15019] netlink: 'syz.3.14083': attribute type 39 has an invalid length. [ 2527.840287][T15032] netlink: 'syz.1.14088': attribute type 39 has an invalid length. [ 2528.302140][T15037] netlink: 'syz.3.14090': attribute type 10 has an invalid length. [ 2528.496996][T15042] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.14092'. [ 2528.637274][T15044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2528.644901][T15044] IPv6: NLM_F_CREATE should be set when creating new route [ 2528.652568][T15044] IPv6: NLM_F_CREATE should be set when creating new route [ 2528.660048][T15044] IPv6: NLM_F_CREATE should be set when creating new route [ 2528.761965][T15055] netlink: 'syz.2.14097': attribute type 39 has an invalid length. [ 2529.379712][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.388712][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.503622][T15069] netlink: 'syz.4.14101': attribute type 10 has an invalid length. [ 2529.695621][T15075] netlink: 'syz.2.14104': attribute type 33 has an invalid length. [ 2529.730536][T15075] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14104'. [ 2529.758551][T15075] `: renamed from ip6tnl0 (while UP) [ 2529.826944][T15075] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 2529.892226][T15076] netlink: 'syz.2.14104': attribute type 33 has an invalid length. [ 2529.923512][T15076] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14104'. [ 2529.960936][T15076] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 2530.388716][T15097] netlink: 'syz.1.14112': attribute type 39 has an invalid length. [ 2530.644112][T15103] netlink: 'syz.2.14115': attribute type 10 has an invalid length. [ 2530.679619][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 2530.702410][T15103] bridge_slave_1: left allmulticast mode [ 2530.708464][T15103] bridge_slave_1: left promiscuous mode [ 2530.716900][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 2531.660974][T15129] sock: sock_set_timeout: `syz.2.14126' (pid 15129) tries to set negative timeout [ 2531.968867][T15137] validate_nla: 4 callbacks suppressed [ 2531.968905][T15137] netlink: 'syz.4.14129': attribute type 10 has an invalid length. [ 2532.274891][T15145] ªªªªªª: renamed from vlan0 (while UP) [ 2532.472842][T15152] netlink: 'syz.1.14137': attribute type 39 has an invalid length. [ 2532.664978][T15156] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14139'. [ 2533.121417][T15165] netlink: 'syz.2.14143': attribute type 10 has an invalid length. [ 2533.499079][T15178] netlink: 'syz.3.14148': attribute type 39 has an invalid length. [ 2534.682960][T15205] netlink: 'syz.4.14159': attribute type 10 has an invalid length. [ 2534.740495][T15205] bond0: (slave dummy0): Releasing backup interface [ 2534.775010][T15205] netlink: 'syz.4.14159': attribute type 10 has an invalid length. [ 2534.790944][T15201] netlink: 'syz.1.14158': attribute type 10 has an invalid length. [ 2534.807546][T15205] netlink: 'syz.4.14159': attribute type 10 has an invalid length. [ 2534.826118][T15205] netlink: 'syz.4.14159': attribute type 10 has an invalid length. [ 2534.849242][T15205] netlink: 'syz.4.14159': attribute type 10 has an invalid length. [ 2535.581398][T15230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14169'. [ 2535.657487][T15230] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.14169'. [ 2537.016478][T15278] validate_nla: 65 callbacks suppressed [ 2537.016496][T15278] netlink: 'syz.1.14187': attribute type 10 has an invalid length. [ 2537.153920][T15281] netlink: 'syz.2.14189': attribute type 39 has an invalid length. [ 2537.888772][T15308] netlink: 'syz.4.14201': attribute type 39 has an invalid length. [ 2538.006863][T15310] netlink: 'syz.1.14202': attribute type 10 has an invalid length. [ 2538.100646][T15313] netlink: 'syz.3.14203': attribute type 5 has an invalid length. [ 2538.671783][T15332] netlink: 'syz.1.14212': attribute type 39 has an invalid length. [ 2538.999596][T15337] netlink: 'syz.3.14214': attribute type 10 has an invalid length. [ 2539.765642][T15362] netlink: 'syz.3.14224': attribute type 39 has an invalid length. [ 2539.782129][T15364] netlink: 'syz.4.14225': attribute type 10 has an invalid length. [ 2540.435010][T15391] FAULT_INJECTION: forcing a failure. [ 2540.435010][T15391] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.470110][T15391] CPU: 1 PID: 15391 Comm: syz.1.14233 Not tainted syzkaller #0 [ 2540.477766][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2540.487886][T15391] Call Trace: [ 2540.491218][T15391] [ 2540.494202][T15391] dump_stack_lvl+0x18c/0x250 [ 2540.498965][T15391] ? show_regs_print_info+0x20/0x20 [ 2540.504238][T15391] ? load_image+0x420/0x420 [ 2540.508821][T15391] ? __might_sleep+0xe0/0xe0 [ 2540.513481][T15391] ? __lock_acquire+0x7d80/0x7d80 [ 2540.518596][T15391] should_fail_ex+0x394/0x4c0 [ 2540.523363][T15391] should_failslab+0x9/0x20 [ 2540.527950][T15391] slab_pre_alloc_hook+0x59/0x300 [ 2540.533044][T15391] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2540.538840][T15391] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2540.544675][T15391] __kmem_cache_alloc_node+0x53/0x250 [ 2540.550138][T15391] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2540.555934][T15391] __kmalloc+0xa7/0x240 [ 2540.560178][T15391] tomoyo_realpath_from_path+0xe6/0x5c0 [ 2540.565818][T15391] ? tomoyo_domain+0xd6/0x120 [ 2540.570576][T15391] tomoyo_path_number_perm+0x248/0x5e0 [ 2540.576114][T15391] ? tomoyo_path_number_perm+0x217/0x5e0 [ 2540.581794][T15391] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2540.587303][T15391] ? ksys_write+0x1d2/0x260 [ 2540.591916][T15391] ? __fget_files+0x28/0x460 [ 2540.596608][T15391] security_file_ioctl+0x70/0xa0 [ 2540.601606][T15391] __se_sys_ioctl+0x48/0x170 [ 2540.606271][T15391] do_syscall_64+0x55/0xb0 [ 2540.610723][T15391] ? clear_bhb_loop+0x40/0x90 [ 2540.615434][T15391] ? clear_bhb_loop+0x40/0x90 [ 2540.620148][T15391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2540.626081][T15391] RIP: 0033:0x7f60ff99e019 [ 2540.630532][T15391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2540.650180][T15391] RSP: 002b:00007f6100925028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2540.658637][T15391] RAX: ffffffffffffffda RBX: 00007f60ffc26090 RCX: 00007f60ff99e019 [ 2540.666646][T15391] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 2540.674653][T15391] RBP: 00007f6100925090 R08: 0000000000000000 R09: 0000000000000000 [ 2540.682692][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2540.690692][T15391] R13: 00007f60ffc26128 R14: 00007f60ffc26090 R15: 00007ffe75d6bfb8 [ 2540.698729][T15391] [ 2540.728926][T15391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2541.016490][T15400] netlink: 'syz.2.14238': attribute type 10 has an invalid length. [ 2541.127658][T15402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14239'. [ 2541.871749][T15423] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14249'. [ 2542.209932][T15435] validate_nla: 5 callbacks suppressed [ 2542.209948][T15435] netlink: 'syz.3.14254': attribute type 39 has an invalid length. [ 2542.247335][T15441] netlink: 'syz.1.14257': attribute type 10 has an invalid length. [ 2542.277287][T15441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14257'. [ 2542.288057][T15441] bridge0: port 2(team0) entered blocking state [ 2542.308922][T15441] bridge0: port 2(team0) entered disabled state [ 2542.327284][T15441] team0: entered allmulticast mode [ 2542.339524][T15441] team_slave_0: entered allmulticast mode [ 2542.361914][T15441] team_slave_1: entered allmulticast mode [ 2542.389029][T15441] team0: entered promiscuous mode [ 2542.404160][T15441] team_slave_0: entered promiscuous mode [ 2542.419247][T15441] team_slave_1: entered promiscuous mode [ 2542.429298][T15441] bridge0: port 2(team0) entered blocking state [ 2542.436357][T15441] bridge0: port 2(team0) entered forwarding state [ 2542.449380][T15444] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.14258'. [ 2543.014776][T15459] netlink: 'syz.2.14265': attribute type 39 has an invalid length. [ 2543.040681][T15457] netlink: 'syz.3.14264': attribute type 10 has an invalid length. [ 2543.939703][T15492] netlink: 'syz.4.14276': attribute type 10 has an invalid length. [ 2543.977075][T15494] netlink: 'syz.1.14277': attribute type 39 has an invalid length. [ 2544.122898][T15499] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.14279'. [ 2544.725152][T15525] netlink: 'syz.1.14288': attribute type 10 has an invalid length. [ 2544.892626][T15528] netlink: 'syz.2.14290': attribute type 39 has an invalid length. [ 2545.643187][T15547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2545.650530][T15547] IPv6: NLM_F_CREATE should be set when creating new route [ 2545.657970][T15547] IPv6: NLM_F_CREATE should be set when creating new route [ 2545.665420][T15547] IPv6: NLM_F_CREATE should be set when creating new route [ 2545.804690][T15550] netlink: 'syz.1.14300': attribute type 10 has an invalid length. [ 2545.847641][T15556] netlink: 'syz.3.14301': attribute type 3 has an invalid length. [ 2545.891841][T15556] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.14301'. [ 2546.549290][T15579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14311'. [ 2546.605836][T15579] netlink: 763 bytes leftover after parsing attributes in process `syz.3.14311'. [ 2546.811924][T13159] Bluetooth: hci3: command 0x0406 tx timeout [ 2547.486180][T15594] validate_nla: 4 callbacks suppressed [ 2547.486200][T15594] netlink: 'syz.3.14317': attribute type 39 has an invalid length. [ 2547.826341][T15605] netlink: 'syz.4.14322': attribute type 10 has an invalid length. [ 2547.920030][T15607] FAULT_INJECTION: forcing a failure. [ 2547.920030][T15607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2547.951720][T15607] CPU: 0 PID: 15607 Comm: syz.1.14323 Not tainted syzkaller #0 [ 2547.959351][T15607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2547.969449][T15607] Call Trace: [ 2547.972769][T15607] [ 2547.975728][T15607] dump_stack_lvl+0x18c/0x250 [ 2547.980446][T15607] ? show_regs_print_info+0x20/0x20 [ 2547.985674][T15607] ? load_image+0x420/0x420 [ 2547.990221][T15607] ? __might_fault+0xaa/0x120 [ 2547.994929][T15607] ? __lock_acquire+0x7d80/0x7d80 [ 2547.999990][T15607] should_fail_ex+0x394/0x4c0 [ 2548.004706][T15607] _copy_from_user+0x2f/0xe0 [ 2548.009327][T15607] ___sys_sendmsg+0x1c7/0x360 [ 2548.014037][T15607] ? __sys_sendmsg+0x2b0/0x2b0 [ 2548.018848][T15607] ? ktime_get+0x7f/0x280 [ 2548.023225][T15607] __se_sys_sendmsg+0x1d0/0x2c0 [ 2548.028108][T15607] ? __x64_sys_sendmsg+0x80/0x80 [ 2548.033089][T15607] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2548.039016][T15607] do_syscall_64+0x55/0xb0 [ 2548.043461][T15607] ? clear_bhb_loop+0x40/0x90 [ 2548.048164][T15607] ? clear_bhb_loop+0x40/0x90 [ 2548.052871][T15607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2548.058815][T15607] RIP: 0033:0x7f60ff99e019 [ 2548.063257][T15607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2548.082894][T15607] RSP: 002b:00007f6100946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2548.091351][T15607] RAX: ffffffffffffffda RBX: 00007f60ffc25fa0 RCX: 00007f60ff99e019 [ 2548.099346][T15607] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2548.107373][T15607] RBP: 00007f6100946090 R08: 0000000000000000 R09: 0000000000000000 [ 2548.115370][T15607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2548.123365][T15607] R13: 00007f60ffc26038 R14: 00007f60ffc25fa0 R15: 00007ffe75d6bfb8 [ 2548.131379][T15607] [ 2549.056967][T15636] netlink: 'syz.2.14334': attribute type 39 has an invalid length. [ 2549.195511][T15638] netlink: 'syz.3.14335': attribute type 10 has an invalid length. [ 2549.222130][T15640] netlink: 'syz.1.14336': attribute type 10 has an invalid length. [ 2549.295202][T15640] team0: Device hsr_slave_0 failed to register rx_handler [ 2550.182259][T15673] netlink: 'syz.2.14347': attribute type 39 has an invalid length. [ 2550.492720][T30709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2550.517743][T15676] netlink: 'syz.1.14348': attribute type 10 has an invalid length. [ 2551.112777][T15702] netlink: 'syz.4.14359': attribute type 39 has an invalid length. [ 2551.356709][T15708] netlink: 'syz.1.14362': attribute type 10 has an invalid length. [ 2551.867549][T15733] netlink: 'syz.3.14374': attribute type 10 has an invalid length. [ 2552.673692][T15758] FAULT_INJECTION: forcing a failure. [ 2552.673692][T15758] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.701266][T15758] CPU: 0 PID: 15758 Comm: syz.4.14385 Not tainted syzkaller #0 [ 2552.708906][T15758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2552.719013][T15758] Call Trace: [ 2552.722328][T15758] [ 2552.725302][T15758] dump_stack_lvl+0x18c/0x250 [ 2552.730036][T15758] ? sctp_sendmsg+0x1519/0x27b0 [ 2552.734938][T15758] ? ___sys_sendmsg+0x2a6/0x360 [ 2552.739845][T15758] ? show_regs_print_info+0x20/0x20 [ 2552.745092][T15758] ? load_image+0x420/0x420 [ 2552.749666][T15758] should_fail_ex+0x394/0x4c0 [ 2552.754403][T15758] should_failslab+0x9/0x20 [ 2552.758956][T15758] slab_pre_alloc_hook+0x59/0x300 [ 2552.764074][T15758] ? sctp_add_bind_addr+0x8c/0x360 [ 2552.769219][T15758] __kmem_cache_alloc_node+0x53/0x250 [ 2552.774644][T15758] ? sctp_add_bind_addr+0x8c/0x360 [ 2552.779784][T15758] kmalloc_trace+0x2a/0xe0 [ 2552.784235][T15758] sctp_add_bind_addr+0x8c/0x360 [ 2552.789204][T15758] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2552.794895][T15758] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2552.800642][T15758] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2552.806748][T15758] ? sctp_v4_is_any+0x35/0x60 [ 2552.811452][T15758] ? sctp_copy_one_addr+0x8c/0x350 [ 2552.816592][T15758] sctp_bind_addr_copy+0xb3/0x3c0 [ 2552.821659][T15758] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2552.828035][T15758] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2552.833386][T15758] ? __sctp_connect+0xd80/0xd80 [ 2552.838297][T15758] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2552.843760][T15758] ? _local_bh_enable+0xa0/0xa0 [ 2552.848644][T15758] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2552.854500][T15758] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2552.860354][T15758] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2552.865952][T15758] ? security_sctp_bind_connect+0x89/0xb0 [ 2552.871752][T15758] sctp_sendmsg+0x1519/0x27b0 [ 2552.876478][T15758] ? sctp_getsockopt+0xb60/0xb60 [ 2552.881449][T15758] ? aa_af_perm+0x330/0x330 [ 2552.885987][T15758] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2552.892442][T15758] ? sock_rps_record_flow+0x19/0x3f0 [ 2552.897760][T15758] ? inet_sendmsg+0x7e/0x2a0 [ 2552.902377][T15758] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2552.907696][T15758] ? inet_send_prepare+0x250/0x250 [ 2552.912866][T15758] ____sys_sendmsg+0x61b/0x980 [ 2552.917665][T15758] ? __asan_memset+0x22/0x40 [ 2552.922283][T15758] ? __sys_sendmsg_sock+0x30/0x30 [ 2552.927335][T15758] ? __import_iovec+0x5f2/0x850 [ 2552.932225][T15758] ? import_iovec+0x73/0xa0 [ 2552.936768][T15758] ___sys_sendmsg+0x2a6/0x360 [ 2552.941471][T15758] ? get_pid_task+0x20/0x1e0 [ 2552.946094][T15758] ? __sys_sendmsg+0x2b0/0x2b0 [ 2552.950903][T15758] ? __lock_acquire+0x7d80/0x7d80 [ 2552.955980][T15758] __se_sys_sendmsg+0x1d0/0x2c0 [ 2552.960863][T15758] ? __x64_sys_sendmsg+0x80/0x80 [ 2552.965852][T15758] ? lockdep_hardirqs_on+0x98/0x150 [ 2552.971094][T15758] do_syscall_64+0x55/0xb0 [ 2552.975571][T15758] ? clear_bhb_loop+0x40/0x90 [ 2552.980282][T15758] ? clear_bhb_loop+0x40/0x90 [ 2552.984990][T15758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2552.990917][T15758] RIP: 0033:0x7fa7cf19e019 [ 2552.995356][T15758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2553.015017][T15758] RSP: 002b:00007fa7d00e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2553.023460][T15758] RAX: ffffffffffffffda RBX: 00007fa7cf425fa0 RCX: 00007fa7cf19e019 [ 2553.031476][T15758] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 2553.039488][T15758] RBP: 00007fa7d00e6090 R08: 0000000000000000 R09: 0000000000000000 [ 2553.047491][T15758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2553.055497][T15758] R13: 00007fa7cf426038 R14: 00007fa7cf425fa0 R15: 00007fffb7e2b588 [ 2553.063511][T15758] [ 2553.114389][T15760] validate_nla: 2 callbacks suppressed [ 2553.114413][T15760] netlink: 'syz.1.14387': attribute type 39 has an invalid length. [ 2553.159914][T15762] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14388'. [ 2553.358001][T15766] netlink: 'syz.4.14389': attribute type 10 has an invalid length. [ 2553.837690][T15787] netlink: 'syz.4.14398': attribute type 10 has an invalid length. [ 2553.854104][T15787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14398'. [ 2553.864249][T15787] bridge0: port 2(ipvlan1) entered blocking state [ 2553.871046][T15787] bridge0: port 2(ipvlan1) entered disabled state [ 2553.881317][T15787] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2554.089551][T15793] netlink: 'syz.3.14401': attribute type 39 has an invalid length. [ 2554.242585][T15797] netlink: 'syz.1.14403': attribute type 10 has an invalid length. [ 2554.778350][T15819] netlink: 'syz.4.14413': attribute type 39 has an invalid length. [ 2554.894701][T15822] netlink: 'syz.1.14414': attribute type 10 has an invalid length. [ 2555.888053][T15847] netlink: 'syz.1.14425': attribute type 39 has an invalid length. [ 2556.028377][T15853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14426'. [ 2556.058229][T15853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14426'. [ 2556.213833][T15854] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14426'. [ 2556.248690][T15854] openvswitch: netlink: Key type 4112 is out of range max 32 [ 2556.838010][T15861] netlink: 'syz.2.14429': attribute type 10 has an invalid length. [ 2556.889450][T15861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2556.913960][T15861] team0: Port device bond0 added [ 2556.974647][T15863] netlink: 'syz.1.14427': attribute type 10 has an invalid length. [ 2558.079761][T15892] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14440'. [ 2558.563135][T15904] validate_nla: 1 callbacks suppressed [ 2558.563152][T15904] netlink: 'syz.1.14441': attribute type 10 has an invalid length. [ 2558.861211][T15909] netlink: 'syz.4.14445': attribute type 2 has an invalid length. [ 2558.896821][T15909] netlink: 'syz.4.14445': attribute type 8 has an invalid length. [ 2558.920777][T15909] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14445'. [ 2559.068834][T15914] netlink: 'syz.1.14446': attribute type 39 has an invalid length. [ 2559.456278][T15918] cgroup: fork rejected by pids controller in /syz4 [ 2560.722463][T16033] netlink: 'syz.2.14454': attribute type 10 has an invalid length. [ 2561.415796][T30709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.555534][T30709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.728257][T30709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.878884][T30709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.212963][T16054] netlink: 'syz.1.14462': attribute type 39 has an invalid length. [ 2562.279530][T13159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2562.290048][T13159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2562.319806][T13159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2562.334204][T13159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2562.343649][T13159] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2562.361474][T13159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2563.205456][T16073] netlink: 'syz.3.14465': attribute type 10 has an invalid length. [ 2564.002932][T16088] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.14468'. [ 2564.048685][T16078] delete_channel: no stack [ 2564.065192][T16088] netlink: 'syz.3.14468': attribute type 2 has an invalid length. [ 2564.413322][ T5298] Bluetooth: hci2: command tx timeout [ 2564.722000][T16101] netlink: 'syz.2.14469': attribute type 10 has an invalid length. [ 2565.117223][T16057] chnl_net:caif_netlink_parms(): no params data found [ 2565.345574][T16115] netlink: 'syz.3.14474': attribute type 39 has an invalid length. [ 2566.297027][T16132] netlink: 'syz.1.14476': attribute type 10 has an invalid length. [ 2566.485333][T16057] bridge0: port 1(bridge_slave_0) entered blocking state [ 2566.494307][ T5298] Bluetooth: hci2: command tx timeout [ 2566.500978][T16057] bridge0: port 1(bridge_slave_0) entered disabled state [ 2566.509282][T16057] bridge_slave_0: entered allmulticast mode [ 2566.517249][T16057] bridge_slave_0: entered promiscuous mode [ 2566.526427][T16057] bridge0: port 2(bridge_slave_1) entered blocking state [ 2566.535968][T16057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2566.543494][T16057] bridge_slave_1: entered allmulticast mode [ 2566.550787][T16057] bridge_slave_1: entered promiscuous mode [ 2566.625509][T16057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2566.650107][T16057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2566.659838][T16147] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 2566.667321][T16147] pim6reg0: persist enabled [ 2566.894298][T16057] team0: Port device team_slave_0 added [ 2566.941698][T16057] team0: Port device team_slave_1 added [ 2567.123098][T16057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2567.130545][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2567.176427][T16057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2567.201430][T16159] netlink: 'syz.1.14481': attribute type 10 has an invalid length. [ 2567.254705][T16057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2567.266519][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2567.309966][T16057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2567.323493][T16155] netlink: 'syz.2.14482': attribute type 10 has an invalid length. [ 2567.620902][T30709] hsr_slave_0: left promiscuous mode [ 2567.646797][T30709] hsr_slave_1: left promiscuous mode [ 2567.675637][T30709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2567.691723][T30709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2567.726989][T30709] bridge_slave_0: left allmulticast mode [ 2567.747678][T30709] bridge_slave_0: left promiscuous mode [ 2567.767705][T30709] bridge0: port 1(bridge_slave_0) entered disabled state [ 2567.827364][T30709] veth0_macvtap: left promiscuous mode [ 2567.833935][T30709] veth1_vlan: left promiscuous mode [ 2567.839488][T30709] veth0_vlan: left promiscuous mode [ 2568.582100][ T5298] Bluetooth: hci2: command tx timeout [ 2568.707726][T30709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2568.757207][T30709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2568.823542][T30709] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2569.116685][T30709] bond0 (unregistering): Released all slaves [ 2569.263381][T16178] netlink: 'syz.3.14484': attribute type 10 has an invalid length. [ 2569.272180][T16179] netlink: 'syz.2.14485': attribute type 10 has an invalid length. [ 2569.954702][T16057] hsr_slave_0: entered promiscuous mode [ 2569.986269][T16057] hsr_slave_1: entered promiscuous mode [ 2570.000755][T16057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2570.019454][T16057] Cannot create hsr debugfs directory [ 2570.040933][T16184] netlink: 'syz.1.14486': attribute type 39 has an invalid length. [ 2570.243889][T16188] netlink: 'syz.2.14488': attribute type 10 has an invalid length. [ 2570.459820][T16196] netlink: 'syz.1.14490': attribute type 9 has an invalid length. [ 2570.470688][T16196] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.14490'. [ 2570.655630][ T5298] Bluetooth: hci2: command tx timeout [ 2571.092540][T16202] netlink: 'syz.1.14491': attribute type 10 has an invalid length. [ 2571.527543][T16220] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14495'. [ 2571.558462][T16221] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 2571.564465][T16221] pim6reg0: persist enabled [ 2575.095693][T16237] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14500'. [ 2575.264788][T16057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2575.288553][T16057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2575.309729][T16057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2575.333201][T16057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2575.557971][T16057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2575.630923][T16057] 8021q: adding VLAN 0 to HW filter on device team0 [ 2575.680372][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 2575.687577][ T9397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2575.722105][T16251] netlink: 'syz.2.14501': attribute type 10 has an invalid length. [ 2575.844357][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 2575.851673][ T9397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2575.860794][T16252] netlink: 'syz.1.14509': attribute type 10 has an invalid length. [ 2576.007928][T16057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2576.166347][T16265] netlink: 'syz.2.14503': attribute type 10 has an invalid length. [ 2576.567334][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2576.626786][T16277] netlink: 'syz.3.14506': attribute type 39 has an invalid length. [ 2577.426964][T16057] veth0_vlan: entered promiscuous mode [ 2577.455961][T16057] veth1_vlan: entered promiscuous mode [ 2577.549410][T16057] veth0_macvtap: entered promiscuous mode [ 2577.588765][T16057] veth1_macvtap: entered promiscuous mode [ 2577.674128][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2577.703249][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.727101][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2577.738146][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.748648][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2577.797286][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.824239][T16057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2577.840329][T16300] netlink: 'syz.1.14517': attribute type 39 has an invalid length. [ 2577.879397][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2577.903174][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.918622][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2577.935111][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.946993][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2577.963297][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.979580][T16057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2577.999148][T16057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2578.019611][T16057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2578.036940][T16057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2578.050658][T16057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.918439][T16336] netlink: 'syz.3.14520': attribute type 39 has an invalid length. [ 2580.984172][T26020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2581.005283][T26020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2581.074832][T26020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2581.097227][T26020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2581.124140][T16342] netlink: 'syz.1.14510': attribute type 10 has an invalid length. [ 2581.276701][T16346] IPv6: pim6reg1: Disabled Multicast RS [ 2581.446827][T16355] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14511'. [ 2582.524048][T16369] netlink: 'syz.4.14512': attribute type 10 has an invalid length. [ 2582.623633][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2582.656766][T16369] bridge_slave_1: left allmulticast mode [ 2582.677826][T16369] bridge_slave_1: left promiscuous mode [ 2582.711326][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2582.900489][T16383] netlink: 'syz.2.14513': attribute type 10 has an invalid length. [ 2583.030841][T16394] netlink: 'syz.1.14527': attribute type 10 has an invalid length. [ 2583.067629][T16390] netlink: 'syz.3.14514': attribute type 10 has an invalid length. [ 2583.231078][T16397] netlink: 'syz.1.14516': attribute type 3 has an invalid length. [ 2583.270371][T16397] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.14516'. [ 2584.073049][T16415] netlink: 'syz.4.14525': attribute type 10 has an invalid length. [ 2584.120029][T16416] netlink: 'syz.3.14526': attribute type 10 has an invalid length. [ 2584.364314][T16421] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14528'. [ 2585.101492][T16429] veth1_to_bond: entered allmulticast mode [ 2585.487231][T16437] netlink: 'syz.4.14531': attribute type 10 has an invalid length. [ 2586.142369][T12415] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2586.153272][T12415] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2586.168603][T12415] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2586.189352][T12415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2586.203820][T12415] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2586.211995][T12415] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2586.279929][T21288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2587.078097][T16463] validate_nla: 2 callbacks suppressed [ 2587.078139][T16463] netlink: 'syz.4.14543': attribute type 1 has an invalid length. [ 2587.099965][T16463] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.14543'. [ 2587.150761][T16466] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.14543'. [ 2587.179555][T21288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2587.351807][T21288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2587.514397][T21288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2587.678422][T16480] netlink: 'syz.2.14547': attribute type 10 has an invalid length. [ 2587.814854][T16475] netlink: 'syz.1.14546': attribute type 39 has an invalid length. [ 2587.942127][T16482] netlink: 'syz.4.14548': attribute type 10 has an invalid length. [ 2588.112191][T16490] veth1_to_bond: entered allmulticast mode [ 2588.159074][T16455] chnl_net:caif_netlink_parms(): no params data found [ 2588.343579][T12415] Bluetooth: hci1: command tx timeout [ 2589.530330][T16514] netlink: 'syz.1.14552': attribute type 10 has an invalid length. [ 2589.561180][T16514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2589.597520][T16514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2589.757181][T16521] netlink: 'syz.2.14553': attribute type 9 has an invalid length. [ 2589.781706][T16521] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.14553'. [ 2589.807025][T16455] bridge0: port 1(bridge_slave_0) entered blocking state [ 2589.834111][T16455] bridge0: port 1(bridge_slave_0) entered disabled state [ 2589.860704][T16455] bridge_slave_0: entered allmulticast mode [ 2589.883641][T16455] bridge_slave_0: entered promiscuous mode [ 2589.976550][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 2590.001915][T16455] bridge0: port 2(bridge_slave_1) entered disabled state [ 2590.015125][T16455] bridge_slave_1: entered allmulticast mode [ 2590.023035][T16455] bridge_slave_1: entered promiscuous mode [ 2590.216460][T16532] netlink: 'syz.1.14557': attribute type 39 has an invalid length. [ 2590.358551][T16455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2590.396675][T16455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2590.428306][T12415] Bluetooth: hci1: command tx timeout [ 2590.478677][T16543] netlink: 'syz.4.14560': attribute type 1 has an invalid length. [ 2590.502980][T16543] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.14560'. [ 2590.644213][T16455] team0: Port device team_slave_0 added [ 2590.671367][T16455] team0: Port device team_slave_1 added [ 2590.829154][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.839717][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.956452][T16455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2590.996739][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2591.097361][T16455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2591.930336][T16455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2591.947170][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2591.975066][T16455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2592.186396][T21288] hsr_slave_0: left promiscuous mode [ 2592.196459][T21288] hsr_slave_1: left promiscuous mode [ 2592.204856][T21288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2592.214564][T21288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2592.223387][T21288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2592.239019][T21288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2592.250718][T21288] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2592.258705][T21288] batman_adv: batadv0: Removing interface: veth0_vlan [ 2592.268977][T21288] batadv0: left allmulticast mode [ 2592.275451][T21288] batadv0: left promiscuous mode [ 2592.280825][T21288] bridge0: port 3(batadv0) entered disabled state [ 2592.291301][T21288] bridge_slave_0: left allmulticast mode [ 2592.305079][T21288] bridge_slave_0: left promiscuous mode [ 2592.311363][T21288] bridge0: port 1(bridge_slave_0) entered disabled state [ 2592.351412][T21288] veth0_macvtap: left promiscuous mode [ 2592.360779][T21288] veth1_vlan: left promiscuous mode [ 2592.370819][T21288] veth0_vlan: left promiscuous mode [ 2592.491756][T12415] Bluetooth: hci1: command tx timeout [ 2593.554765][T21288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2593.614294][T21288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2593.669847][T21288] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2593.949810][T21288] bond0 (unregistering): Released all slaves [ 2594.049816][T16581] netlink: 'syz.4.14568': attribute type 39 has an invalid length. [ 2594.140523][T16584] IPv6: Can't replace route, no match found [ 2594.162803][T16455] hsr_slave_0: entered promiscuous mode [ 2594.190939][T16455] hsr_slave_1: entered promiscuous mode [ 2594.205910][T16455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2594.215040][T16455] Cannot create hsr debugfs directory [ 2594.575641][T12415] Bluetooth: hci1: command tx timeout [ 2595.758399][T16622] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.14578'. [ 2596.240970][T16634] FAULT_INJECTION: forcing a failure. [ 2596.240970][T16634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2596.262088][T16631] netlink: 'syz.2.14580': attribute type 39 has an invalid length. [ 2596.340120][T16634] CPU: 0 PID: 16634 Comm: syz.4.14581 Not tainted syzkaller #0 [ 2596.347777][T16634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2596.358457][T16634] Call Trace: [ 2596.361788][T16634] [ 2596.364771][T16634] dump_stack_lvl+0x18c/0x250 [ 2596.369527][T16634] ? show_regs_print_info+0x20/0x20 [ 2596.374788][T16634] ? load_image+0x420/0x420 [ 2596.379361][T16634] ? __might_fault+0xaa/0x120 [ 2596.384098][T16634] ? __lock_acquire+0x7d80/0x7d80 [ 2596.389202][T16634] should_fail_ex+0x394/0x4c0 [ 2596.393994][T16634] _copy_from_user+0x2f/0xe0 [ 2596.398671][T16634] generic_map_update_batch+0x53e/0x800 [ 2596.404302][T16634] ? rcu_read_unlock+0xa0/0xa0 [ 2596.409140][T16634] ? bpf_map_do_batch+0x3e2/0x600 [ 2596.414250][T16634] ? rcu_read_unlock+0xa0/0xa0 [ 2596.419072][T16634] bpf_map_do_batch+0x3f2/0x600 [ 2596.423972][T16634] ? bpf_lsm_key_alloc+0x10/0x10 [ 2596.429017][T16634] __sys_bpf+0x381/0x890 [ 2596.433323][T16634] ? read_tsc+0x9/0x20 [ 2596.437457][T16634] ? bpf_link_show_fdinfo+0x390/0x390 [ 2596.442931][T16634] ? lock_chain_count+0x20/0x20 [ 2596.447840][T16634] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2596.453891][T16634] __x64_sys_bpf+0x7c/0x90 [ 2596.458379][T16634] do_syscall_64+0x55/0xb0 [ 2596.462849][T16634] ? clear_bhb_loop+0x40/0x90 [ 2596.467583][T16634] ? clear_bhb_loop+0x40/0x90 [ 2596.472320][T16634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2596.478286][T16634] RIP: 0033:0x7f8ab119e019 [ 2596.482754][T16634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2596.502426][T16634] RSP: 002b:00007f8ab2067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2596.510911][T16634] RAX: ffffffffffffffda RBX: 00007f8ab1425fa0 RCX: 00007f8ab119e019 [ 2596.518935][T16634] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 2596.526958][T16634] RBP: 00007f8ab2067090 R08: 0000000000000000 R09: 0000000000000000 [ 2596.534985][T16634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2596.543005][T16634] R13: 00007f8ab1426038 R14: 00007f8ab1425fa0 R15: 00007ffec15be0e8 [ 2596.551058][T16634] [ 2596.868120][T16455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2597.570056][T16627] IPv6: Can't replace route, no match found [ 2597.601887][T16652] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14585'. [ 2597.658547][T16652] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14585'. [ 2597.747072][T16652] bond0: (slave bond_slave_0): Releasing backup interface [ 2597.815636][T16652] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2597.864776][T16455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2597.925527][T16455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2597.970725][T16455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2598.359377][T16660] netlink: 'syz.1.14586': attribute type 1 has an invalid length. [ 2598.446357][T16660] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.14586'. [ 2598.499255][T16668] FAULT_INJECTION: forcing a failure. [ 2598.499255][T16668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2598.575692][T16668] CPU: 0 PID: 16668 Comm: syz.2.14588 Not tainted syzkaller #0 [ 2598.583325][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2598.593409][T16668] Call Trace: [ 2598.596717][T16668] [ 2598.599710][T16668] dump_stack_lvl+0x18c/0x250 [ 2598.604429][T16668] ? show_regs_print_info+0x20/0x20 [ 2598.609653][T16668] ? load_image+0x420/0x420 [ 2598.614193][T16668] ? __might_fault+0xaa/0x120 [ 2598.618894][T16668] ? __lock_acquire+0x7d80/0x7d80 [ 2598.623967][T16668] should_fail_ex+0x394/0x4c0 [ 2598.628679][T16668] _copy_from_user+0x2f/0xe0 [ 2598.633304][T16668] __sys_bpf+0x23e/0x890 [ 2598.637577][T16668] ? bpf_link_show_fdinfo+0x390/0x390 [ 2598.642993][T16668] ? lock_chain_count+0x20/0x20 [ 2598.647905][T16668] __x64_sys_bpf+0x7c/0x90 [ 2598.652351][T16668] do_syscall_64+0x55/0xb0 [ 2598.656793][T16668] ? clear_bhb_loop+0x40/0x90 [ 2598.661503][T16668] ? clear_bhb_loop+0x40/0x90 [ 2598.666215][T16668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2598.672139][T16668] RIP: 0033:0x7fcf9299e019 [ 2598.676584][T16668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2598.696232][T16668] RSP: 002b:00007fcf93957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2598.704678][T16668] RAX: ffffffffffffffda RBX: 00007fcf92c25fa0 RCX: 00007fcf9299e019 [ 2598.712673][T16668] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 2598.720689][T16668] RBP: 00007fcf93957090 R08: 0000000000000000 R09: 0000000000000000 [ 2598.728737][T16668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2598.736755][T16668] R13: 00007fcf92c26038 R14: 00007fcf92c25fa0 R15: 00007ffc7b50e5a8 [ 2598.744774][T16668] [ 2598.797718][T16455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2598.858477][T16455] 8021q: adding VLAN 0 to HW filter on device team0 [ 2598.964821][T21287] bridge0: port 1(bridge_slave_0) entered blocking state [ 2598.972087][T21287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2599.036498][T21287] bridge0: port 2(bridge_slave_1) entered blocking state [ 2599.043890][T21287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2599.177429][T16679] netlink: 'syz.4.14590': attribute type 39 has an invalid length. [ 2600.506347][T16455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2600.649199][T16455] veth0_vlan: entered promiscuous mode [ 2600.686804][T16455] veth1_vlan: entered promiscuous mode [ 2600.715285][T16709] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.14597'. [ 2600.885620][T16455] veth0_macvtap: entered promiscuous mode [ 2600.928116][T16455] veth1_macvtap: entered promiscuous mode [ 2601.070031][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2601.132300][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.163430][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2601.188227][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.200049][T16455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2601.301219][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.338865][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.364823][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.390793][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.403554][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.418104][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.443470][T16455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2601.459523][T16711] IPv6: Can't replace route, no match found [ 2601.510257][T16455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.527700][T16455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.538433][T16455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.552315][T16455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.569823][T16730] netlink: 'syz.2.14600': attribute type 39 has an invalid length. [ 2601.757049][ T9397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2601.802421][ T9397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2601.895223][T26020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2601.914421][T26020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2602.430056][T16759] netlink: 'syz.3.14533': attribute type 10 has an invalid length. [ 2602.470972][T16759] bridge0: port 2(bridge_slave_1) entered disabled state [ 2602.505391][T16759] bridge_slave_1: left allmulticast mode [ 2602.531773][T16759] bridge_slave_1: left promiscuous mode [ 2602.538607][T16759] bridge0: port 2(bridge_slave_1) entered disabled state [ 2603.279081][T16784] netlink: 'syz.3.14608': attribute type 39 has an invalid length. [ 2604.374723][T16809] netlink: 'syz.2.14611': attribute type 39 has an invalid length. [ 2604.894390][T16808] IPv6: Can't replace route, no match found [ 2605.021731][T16823] netlink: 'syz.2.14612': attribute type 10 has an invalid length. [ 2605.061699][T16823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14612'. [ 2605.071219][T16823] team0: entered promiscuous mode [ 2605.131960][T16823] team_slave_0: entered promiscuous mode [ 2605.150900][T16823] team_slave_1: entered promiscuous mode [ 2605.187146][T16823] bond0: entered promiscuous mode [ 2605.197083][T16823] bond_slave_1: entered promiscuous mode [ 2605.227551][T16823] bridge0: port 2(team0) entered blocking state [ 2605.253585][T16823] bridge0: port 2(team0) entered disabled state [ 2605.260908][T16823] team0: entered allmulticast mode [ 2605.308084][T16823] team_slave_0: entered allmulticast mode [ 2605.367553][T16823] team_slave_1: entered allmulticast mode [ 2605.391831][T16823] bond0: entered allmulticast mode [ 2605.417810][T16823] bond_slave_1: entered allmulticast mode [ 2605.480005][T16823] bridge0: port 2(team0) entered blocking state [ 2605.487018][T16823] bridge0: port 2(team0) entered forwarding state [ 2606.277767][T16847] netlink: 'syz.2.14616': attribute type 10 has an invalid length. [ 2606.321078][T16847] bridge_slave_1: entered promiscuous mode [ 2606.327401][T16847] bridge_slave_1: entered allmulticast mode [ 2607.488659][T16861] netlink: 'syz.3.14621': attribute type 39 has an invalid length. [ 2609.633025][T16889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14628'. [ 2609.678381][T16892] netlink: 'syz.3.14627': attribute type 10 has an invalid length. [ 2609.724239][T16892] team0: Device hsr_slave_0 failed to register rx_handler [ 2610.038328][T16899] netlink: 'syz.3.14629': attribute type 10 has an invalid length. [ 2610.511791][T16905] netlink: 'syz.3.14631': attribute type 10 has an invalid length. [ 2610.541898][T16905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14631'. [ 2610.551321][T16905] team0: entered promiscuous mode [ 2610.602721][T16905] team_slave_0: entered promiscuous mode [ 2610.642809][T16905] team_slave_1: entered promiscuous mode [ 2610.673751][T16905] bridge0: port 2(team0) entered blocking state [ 2610.702718][T16905] bridge0: port 2(team0) entered disabled state [ 2610.764376][T16905] team0: entered allmulticast mode [ 2610.797765][T16905] team_slave_0: entered allmulticast mode [ 2610.813058][T16905] team_slave_1: entered allmulticast mode [ 2610.852973][T16905] bridge0: port 2(team0) entered blocking state [ 2610.859964][T16905] bridge0: port 2(team0) entered forwarding state [ 2611.073461][T16914] netlink: 'syz.4.14633': attribute type 10 has an invalid length. [ 2611.116145][T16917] FAULT_INJECTION: forcing a failure. [ 2611.116145][T16917] name failslab, interval 1, probability 0, space 0, times 0 [ 2611.144515][T16917] CPU: 1 PID: 16917 Comm: syz.2.14637 Not tainted syzkaller #0 [ 2611.152148][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2611.162253][T16917] Call Trace: [ 2611.165579][T16917] [ 2611.168560][T16917] dump_stack_lvl+0x18c/0x250 [ 2611.173296][T16917] ? sctp_sendmsg+0x1519/0x27b0 [ 2611.178202][T16917] ? ___sys_sendmsg+0x2a6/0x360 [ 2611.183110][T16917] ? show_regs_print_info+0x20/0x20 [ 2611.188365][T16917] ? load_image+0x420/0x420 [ 2611.192930][T16917] ? mark_lock+0x94/0x320 [ 2611.197323][T16917] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2611.203363][T16917] should_fail_ex+0x394/0x4c0 [ 2611.208109][T16917] should_failslab+0x9/0x20 [ 2611.212698][T16917] slab_pre_alloc_hook+0x59/0x300 [ 2611.217804][T16917] ? sctp_add_bind_addr+0x8c/0x360 [ 2611.222980][T16917] __kmem_cache_alloc_node+0x53/0x250 [ 2611.228426][T16917] ? sctp_add_bind_addr+0x8c/0x360 [ 2611.233594][T16917] kmalloc_trace+0x2a/0xe0 [ 2611.238074][T16917] sctp_add_bind_addr+0x8c/0x360 [ 2611.243083][T16917] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2611.248784][T16917] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2611.254579][T16917] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2611.260711][T16917] ? sctp_v4_is_any+0x35/0x60 [ 2611.265447][T16917] ? sctp_copy_one_addr+0x8c/0x350 [ 2611.270618][T16917] sctp_bind_addr_copy+0xb3/0x3c0 [ 2611.275699][T16917] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2611.282087][T16917] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2611.287438][T16917] ? __sctp_connect+0xd80/0xd80 [ 2611.292343][T16917] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2611.297768][T16917] ? _local_bh_enable+0xa0/0xa0 [ 2611.302671][T16917] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2611.308563][T16917] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2611.314441][T16917] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2611.320053][T16917] ? security_sctp_bind_connect+0x89/0xb0 [ 2611.325835][T16917] sctp_sendmsg+0x1519/0x27b0 [ 2611.330587][T16917] ? sctp_getsockopt+0xb60/0xb60 [ 2611.335591][T16917] ? aa_af_perm+0x330/0x330 [ 2611.340158][T16917] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2611.346679][T16917] ? sock_rps_record_flow+0x19/0x3f0 [ 2611.352066][T16917] ? inet_sendmsg+0x7e/0x2a0 [ 2611.356721][T16917] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2611.362073][T16917] ? inet_send_prepare+0x250/0x250 [ 2611.367244][T16917] ____sys_sendmsg+0x61b/0x980 [ 2611.372073][T16917] ? __asan_memset+0x22/0x40 [ 2611.376731][T16917] ? __sys_sendmsg_sock+0x30/0x30 [ 2611.381813][T16917] ? __import_iovec+0x5f2/0x850 [ 2611.386739][T16917] ? import_iovec+0x73/0xa0 [ 2611.391316][T16917] ___sys_sendmsg+0x2a6/0x360 [ 2611.396050][T16917] ? get_pid_task+0x20/0x1e0 [ 2611.400706][T16917] ? __sys_sendmsg+0x2b0/0x2b0 [ 2611.405587][T16917] __se_sys_sendmsg+0x1d0/0x2c0 [ 2611.410496][T16917] ? __x64_sys_sendmsg+0x80/0x80 [ 2611.415513][T16917] ? lockdep_hardirqs_on+0x98/0x150 [ 2611.420784][T16917] do_syscall_64+0x55/0xb0 [ 2611.425252][T16917] ? clear_bhb_loop+0x40/0x90 [ 2611.429991][T16917] ? clear_bhb_loop+0x40/0x90 [ 2611.434737][T16917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2611.440689][T16917] RIP: 0033:0x7fcf9299e019 [ 2611.445156][T16917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2611.464827][T16917] RSP: 002b:00007fcf93957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2611.473312][T16917] RAX: ffffffffffffffda RBX: 00007fcf92c25fa0 RCX: 00007fcf9299e019 [ 2611.481341][T16917] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 2611.489367][T16917] RBP: 00007fcf93957090 R08: 0000000000000000 R09: 0000000000000000 [ 2611.497386][T16917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2611.505404][T16917] R13: 00007fcf92c26038 R14: 00007fcf92c25fa0 R15: 00007ffc7b50e5a8 [ 2611.513469][T16917] [ 2611.667229][T16914] team0: Port device geneve1 added [ 2612.888361][T16954] netlink: 'syz.3.14647': attribute type 10 has an invalid length. [ 2612.896551][T16954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14647'. [ 2612.911952][T16954] ipvlan1: entered promiscuous mode [ 2612.917243][T16954] ipvlan1: entered allmulticast mode [ 2612.942376][T16954] veth0_vlan: entered allmulticast mode [ 2612.954914][T16954] bridge0: port 3(ipvlan1) entered blocking state [ 2612.983033][T16954] bridge0: port 3(ipvlan1) entered disabled state [ 2612.992690][T16954] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2613.543890][T12415] Bluetooth: hci0: command 0x0406 tx timeout [ 2614.735375][T16969] netlink: 'syz.1.14651': attribute type 10 has an invalid length. [ 2614.912042][T16969] geneve1: entered promiscuous mode [ 2614.964121][T16969] geneve1: entered allmulticast mode [ 2615.002794][T16969] team0: Port device geneve1 added [ 2615.808323][T16976] netlink: 'syz.1.14653': attribute type 10 has an invalid length. [ 2615.995478][T16976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2616.023533][T16976] bond0: entered promiscuous mode [ 2616.031473][T16976] bond_slave_0: entered promiscuous mode [ 2616.039009][T16976] bond_slave_1: entered promiscuous mode [ 2616.051067][T16976] bridge_slave_1: entered promiscuous mode [ 2616.058810][T16976] bond0: entered allmulticast mode [ 2616.069106][T16976] bond_slave_0: entered allmulticast mode [ 2616.078559][T16976] bond_slave_1: entered allmulticast mode [ 2616.088487][T16976] bridge_slave_1: entered allmulticast mode [ 2616.101153][T16976] team0: Port device bond0 added [ 2616.343572][T16987] netlink: 'syz.3.14657': attribute type 10 has an invalid length. [ 2616.363577][T16987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14657'. [ 2616.840178][T17001] netlink: 'syz.1.14664': attribute type 10 has an invalid length. [ 2617.421181][T17012] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14667'. [ 2618.260021][T17023] netlink: 'syz.2.14673': attribute type 10 has an invalid length. [ 2618.287976][T17023] team0: Device wlan1 is up. Set it down before adding it as a team port [ 2618.699234][T17032] netlink: 'syz.3.14675': attribute type 10 has an invalid length. [ 2618.911011][T17039] netlink: 188 bytes leftover after parsing attributes in process `syz.4.14678'. [ 2619.703420][T17063] netlink: 'syz.2.14689': attribute type 10 has an invalid length. [ 2619.789610][T17066] netlink: 'syz.4.14691': attribute type 10 has an invalid length. [ 2619.814008][T17066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14691'. [ 2619.829473][T17066] team0: entered promiscuous mode [ 2619.837799][T17066] team_slave_0: entered promiscuous mode [ 2619.844818][T17066] team_slave_1: entered promiscuous mode [ 2619.852056][T17066] geneve1: entered promiscuous mode [ 2619.861474][T17066] bridge0: port 2(team0) entered blocking state [ 2619.869475][T17066] bridge0: port 2(team0) entered disabled state [ 2619.878352][T17066] team0: entered allmulticast mode [ 2619.886289][T17066] team_slave_0: entered allmulticast mode [ 2619.900095][T17066] team_slave_1: entered allmulticast mode [ 2619.909009][T17066] geneve1: entered allmulticast mode [ 2619.935304][T17066] bridge0: port 2(team0) entered blocking state [ 2619.942339][T17066] bridge0: port 2(team0) entered forwarding state [ 2620.675002][T17097] netlink: 'syz.1.14704': attribute type 10 has an invalid length. [ 2620.683241][T17097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14704'. [ 2621.070029][T17109] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14708'. [ 2621.279326][T17114] IPv6: pim6reg1: Disabled Multicast RS [ 2621.378564][T17116] syzkaller0: entered promiscuous mode [ 2621.384195][T17116] syzkaller0: entered allmulticast mode [ 2623.687426][T17123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14714'. [ 2623.699606][T17127] netlink: 'syz.2.14715': attribute type 10 has an invalid length. [ 2623.709531][T17127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14715'. [ 2624.744505][T17140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2624.751837][T17140] IPv6: NLM_F_CREATE should be set when creating new route [ 2624.759129][T17140] IPv6: NLM_F_CREATE should be set when creating new route [ 2624.766451][T17140] IPv6: NLM_F_CREATE should be set when creating new route [ 2625.059665][T17158] netlink: 'syz.1.14724': attribute type 5 has an invalid length. [ 2625.394438][T17162] netlink: 'syz.2.14725': attribute type 21 has an invalid length. [ 2627.938379][T17169] netlink: 'syz.4.14726': attribute type 10 has an invalid length. [ 2627.955920][T17169] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14726'. [ 2628.295368][T17179] netlink: 209828 bytes leftover after parsing attributes in process `syz.2.14730'. [ 2628.747590][T17187] netlink: 'syz.1.14735': attribute type 10 has an invalid length. [ 2628.813466][T17191] netlink: 'syz.4.14736': attribute type 10 has an invalid length. [ 2628.920369][T17193] netlink: 'syz.2.14737': attribute type 10 has an invalid length. [ 2628.945007][T17193] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14737'. [ 2630.247209][T17225] netlink: 'syz.4.14747': attribute type 10 has an invalid length. [ 2630.256936][T17225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14747'. [ 2630.606184][T17229] netlink: 'syz.1.14749': attribute type 10 has an invalid length. [ 2630.687685][T17232] netlink: 'syz.4.14748': attribute type 10 has an invalid length. [ 2631.283260][T17244] netlink: 'syz.2.14754': attribute type 5 has an invalid length. [ 2631.322445][T17246] netlink: 'syz.4.14756': attribute type 10 has an invalid length. [ 2631.346445][T17246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14756'. [ 2631.482365][T17250] aaaaaaaaaaaaaaa: entered promiscuous mode [ 2632.075764][T17266] netlink: 'syz.4.14768': attribute type 10 has an invalid length. [ 2632.097891][T17266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14768'. [ 2632.216949][T17268] netlink: 'syz.2.14760': attribute type 10 has an invalid length. [ 2632.666615][T17278] netlink: 'syz.4.14762': attribute type 10 has an invalid length. [ 2632.676835][T17278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14762'. [ 2632.752668][T17284] FAULT_INJECTION: forcing a failure. [ 2632.752668][T17284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2632.795082][T17284] CPU: 1 PID: 17284 Comm: syz.2.14764 Not tainted syzkaller #0 [ 2632.802736][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2632.812870][T17284] Call Trace: [ 2632.816260][T17284] [ 2632.819242][T17284] dump_stack_lvl+0x18c/0x250 [ 2632.824053][T17284] ? show_regs_print_info+0x20/0x20 [ 2632.829308][T17284] ? load_image+0x420/0x420 [ 2632.833877][T17284] ? __might_fault+0xaa/0x120 [ 2632.838613][T17284] ? __lock_acquire+0x7d80/0x7d80 [ 2632.843700][T17284] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 2632.849402][T17284] should_fail_ex+0x394/0x4c0 [ 2632.854123][T17284] _copy_from_user+0x2f/0xe0 [ 2632.858743][T17284] wext_handle_ioctl+0xc8/0x1e0 [ 2632.863623][T17284] ? call_commit_handler+0xf0/0xf0 [ 2632.868779][T17284] sock_ioctl+0x15d/0x7e0 [ 2632.873155][T17284] ? sock_poll+0x3e0/0x3e0 [ 2632.877669][T17284] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2632.882662][T17284] ? security_file_ioctl+0x80/0xa0 [ 2632.887824][T17284] ? sock_poll+0x3e0/0x3e0 [ 2632.892294][T17284] __se_sys_ioctl+0xfd/0x170 [ 2632.896947][T17284] do_syscall_64+0x55/0xb0 [ 2632.901410][T17284] ? clear_bhb_loop+0x40/0x90 [ 2632.906183][T17284] ? clear_bhb_loop+0x40/0x90 [ 2632.910919][T17284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2632.916855][T17284] RIP: 0033:0x7fcf9299e019 [ 2632.921310][T17284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2632.940960][T17284] RSP: 002b:00007fcf93936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2632.949419][T17284] RAX: ffffffffffffffda RBX: 00007fcf92c26090 RCX: 00007fcf9299e019 [ 2632.957424][T17284] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 2632.965426][T17284] RBP: 00007fcf93936090 R08: 0000000000000000 R09: 0000000000000000 [ 2632.973448][T17284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2632.981451][T17284] R13: 00007fcf92c26128 R14: 00007fcf92c26090 R15: 00007ffc7b50e5a8 [ 2632.989490][T17284] [ 2633.116364][T17288] netlink: 'syz.3.14767': attribute type 10 has an invalid length. [ 2633.335207][T17292] netlink: 'syz.1.14769': attribute type 10 has an invalid length. [ 2633.465975][T17298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14772'. [ 2634.611042][T17332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14786'. [ 2634.695411][T17328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14785'. [ 2635.205309][T17346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14790'. [ 2635.253805][T17343] validate_nla: 7 callbacks suppressed [ 2635.253825][T17343] netlink: 'syz.2.14789': attribute type 153 has an invalid length. [ 2635.359421][T17343] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.14789'. [ 2635.883876][T17358] netlink: 'syz.3.14792': attribute type 10 has an invalid length. [ 2636.119424][T17367] netlink: 'syz.3.14796': attribute type 10 has an invalid length. [ 2636.136497][T17367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14796'. [ 2636.247690][T17369] netlink: 'syz.2.14797': attribute type 10 has an invalid length. [ 2636.963471][T17391] netlink: 'syz.1.14800': attribute type 2 has an invalid length. [ 2637.012027][T17391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14800'. [ 2637.284868][T17396] netlink: 'syz.4.14804': attribute type 10 has an invalid length. [ 2637.515798][T17402] netlink: 'syz.3.14807': attribute type 10 has an invalid length. [ 2637.542133][T17402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14807'. [ 2638.224322][T17413] netlink: 'syz.4.14811': attribute type 10 has an invalid length. [ 2638.569321][T17430] netlink: 'syz.3.14818': attribute type 10 has an invalid length. [ 2638.592855][T17430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14818'. [ 2639.211569][ T5298] Bluetooth: hci3: ISO packet for unknown connection handle 20 [ 2642.021172][T17452] netlink: 'syz.4.14833': attribute type 10 has an invalid length. [ 2642.038683][T17452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14833'. [ 2642.048722][T17452] ipvlan1: entered promiscuous mode [ 2642.054428][T17452] ipvlan1: entered allmulticast mode [ 2642.059818][T17452] veth0_vlan: entered allmulticast mode [ 2642.070852][T17452] bridge0: port 3(ipvlan1) entered blocking state [ 2642.077734][T17452] bridge0: port 3(ipvlan1) entered disabled state [ 2642.088935][T17452] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2642.121860][T17454] netlink: 'syz.3.14825': attribute type 10 has an invalid length. [ 2642.663583][T17468] netlink: 'syz.4.14831': attribute type 10 has an invalid length. [ 2642.725792][T17474] netlink: 'syz.1.14835': attribute type 10 has an invalid length. [ 2642.775586][T17476] netlink: 'syz.3.14836': attribute type 10 has an invalid length. [ 2642.783827][T17476] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.14836'. [ 2642.964414][T17480] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2643.019098][T17478] delete_channel: no stack [ 2643.082988][T17483] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14839'. [ 2643.113616][T17483] bridge_slave_1: default FDB implementation only supports local addresses [ 2643.324121][T17496] netlink: 'syz.1.14844': attribute type 41 has an invalid length. [ 2643.625138][T17503] netlink: 'syz.3.14846': attribute type 10 has an invalid length. [ 2643.858596][T17511] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.14850'. [ 2644.363287][T17525] netlink: 'syz.1.14857': attribute type 10 has an invalid length. [ 2644.508248][T17530] netlink: 'syz.2.14859': attribute type 10 has an invalid length. [ 2645.083570][T17547] FAULT_INJECTION: forcing a failure. [ 2645.083570][T17547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2645.103369][T17547] CPU: 1 PID: 17547 Comm: syz.1.14867 Not tainted syzkaller #0 [ 2645.110995][T17547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2645.121107][T17547] Call Trace: [ 2645.124482][T17547] [ 2645.127459][T17547] dump_stack_lvl+0x18c/0x250 [ 2645.132221][T17547] ? show_regs_print_info+0x20/0x20 [ 2645.137479][T17547] ? load_image+0x420/0x420 [ 2645.142053][T17547] ? __might_fault+0xaa/0x120 [ 2645.146789][T17547] ? __lock_acquire+0x7d80/0x7d80 [ 2645.151883][T17547] should_fail_ex+0x394/0x4c0 [ 2645.156646][T17547] _copy_from_user+0x2f/0xe0 [ 2645.161320][T17547] ___sys_sendmsg+0x1c7/0x360 [ 2645.166054][T17547] ? get_pid_task+0x20/0x1e0 [ 2645.170725][T17547] ? __sys_sendmsg+0x2b0/0x2b0 [ 2645.175593][T17547] ? __lock_acquire+0x7d80/0x7d80 [ 2645.180744][T17547] __se_sys_sendmsg+0x1d0/0x2c0 [ 2645.185664][T17547] ? perf_trace_preemptirq_template+0x269/0x330 [ 2645.191989][T17547] ? __x64_sys_sendmsg+0x80/0x80 [ 2645.197021][T17547] ? lockdep_hardirqs_on+0x98/0x150 [ 2645.202290][T17547] do_syscall_64+0x55/0xb0 [ 2645.206787][T17547] ? clear_bhb_loop+0x40/0x90 [ 2645.211533][T17547] ? clear_bhb_loop+0x40/0x90 [ 2645.216275][T17547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2645.222231][T17547] RIP: 0033:0x7f60ff99e019 [ 2645.226705][T17547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2645.246385][T17547] RSP: 002b:00007f6100946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2645.254892][T17547] RAX: ffffffffffffffda RBX: 00007f60ffc25fa0 RCX: 00007f60ff99e019 [ 2645.262931][T17547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2645.270966][T17547] RBP: 00007f6100946090 R08: 0000000000000000 R09: 0000000000000000 [ 2645.279018][T17547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2645.287057][T17547] R13: 00007f60ffc26038 R14: 00007f60ffc25fa0 R15: 00007ffe75d6bfb8 [ 2645.295128][T17547] [ 2645.656259][T17557] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.14871'. [ 2645.928950][T17572] netlink: 'syz.2.14877': attribute type 21 has an invalid length. [ 2645.980955][T17570] bridge0: port 2(team0) entered disabled state [ 2645.993832][T17570] bridge0: port 1(bridge_slave_0) entered disabled state [ 2646.353350][T17583] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14880'. [ 2646.542081][T17570] team0: Device bridge0 is already an upper device of the team interface [ 2647.258035][T17601] syzkaller0: entered promiscuous mode [ 2647.275740][T17601] syzkaller0: entered allmulticast mode [ 2650.117551][T17617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2650.134346][T17622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14895'. [ 2650.148264][T17622] veth1_macvtap: entered allmulticast mode [ 2650.350807][T17624] syzkaller0: entered promiscuous mode [ 2650.368438][T17624] syzkaller0: entered allmulticast mode [ 2652.283585][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.290081][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2655.027147][T17647] validate_nla: 3 callbacks suppressed [ 2655.027166][T17647] netlink: 'syz.3.14904': attribute type 10 has an invalid length. [ 2655.064891][T17651] netlink: 'syz.2.14905': attribute type 10 has an invalid length. [ 2655.294035][T17658] netlink: 'syz.2.14909': attribute type 10 has an invalid length. [ 2655.313513][T17658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14909'. [ 2655.330300][T17653] netlink: 'syz.1.14906': attribute type 10 has an invalid length. [ 2655.458926][T17666] FAULT_INJECTION: forcing a failure. [ 2655.458926][T17666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2655.495099][T17666] CPU: 1 PID: 17666 Comm: syz.3.14911 Not tainted syzkaller #0 [ 2655.502751][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2655.512859][T17666] Call Trace: [ 2655.516183][T17666] [ 2655.519154][T17666] dump_stack_lvl+0x18c/0x250 [ 2655.523887][T17666] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2655.530096][T17666] ? show_regs_print_info+0x20/0x20 [ 2655.535347][T17666] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2655.541589][T17666] should_fail_ex+0x394/0x4c0 [ 2655.546335][T17666] _copy_from_user+0x2f/0xe0 [ 2655.550983][T17666] __sys_bpf+0x23e/0x890 [ 2655.555279][T17666] ? bpf_link_show_fdinfo+0x390/0x390 [ 2655.560724][T17666] ? lock_chain_count+0x20/0x20 [ 2655.565628][T17666] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2655.571682][T17666] __x64_sys_bpf+0x7c/0x90 [ 2655.576152][T17666] do_syscall_64+0x55/0xb0 [ 2655.580613][T17666] ? clear_bhb_loop+0x40/0x90 [ 2655.585339][T17666] ? clear_bhb_loop+0x40/0x90 [ 2655.590071][T17666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2655.596012][T17666] RIP: 0033:0x7f3079d9e019 [ 2655.600499][T17666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2655.620155][T17666] RSP: 002b:00007f307ad0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2655.628603][T17666] RAX: ffffffffffffffda RBX: 00007f307a025fa0 RCX: 00007f3079d9e019 [ 2655.636600][T17666] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2655.644599][T17666] RBP: 00007f307ad0c090 R08: 0000000000000000 R09: 0000000000000000 [ 2655.652619][T17666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2655.660616][T17666] R13: 00007f307a026038 R14: 00007f307a025fa0 R15: 00007fff9e6bf708 [ 2655.668646][T17666] [ 2655.711909][T17672] FAULT_INJECTION: forcing a failure. [ 2655.711909][T17672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2655.736836][T17672] CPU: 0 PID: 17672 Comm: syz.1.14912 Not tainted syzkaller #0 [ 2655.744476][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2655.754584][T17672] Call Trace: [ 2655.757904][T17672] [ 2655.760880][T17672] dump_stack_lvl+0x18c/0x250 [ 2655.765631][T17672] ? show_regs_print_info+0x20/0x20 [ 2655.770884][T17672] ? load_image+0x420/0x420 [ 2655.775451][T17672] ? __might_fault+0xaa/0x120 [ 2655.780177][T17672] ? __lock_acquire+0x7d80/0x7d80 [ 2655.785252][T17672] ? __virt_addr_valid+0x10c/0x380 [ 2655.790420][T17672] should_fail_ex+0x394/0x4c0 [ 2655.795150][T17672] _copy_from_user+0x2f/0xe0 [ 2655.799793][T17672] btf_new_fd+0x366/0x9e0 [ 2655.804163][T17672] ? bpf_btf_show_fdinfo+0x80/0x80 [ 2655.809307][T17672] ? capable+0x88/0xe0 [ 2655.813413][T17672] __sys_bpf+0x670/0x890 [ 2655.817687][T17672] ? bpf_link_show_fdinfo+0x390/0x390 [ 2655.823101][T17672] ? lock_chain_count+0x20/0x20 [ 2655.827988][T17672] __x64_sys_bpf+0x7c/0x90 [ 2655.832433][T17672] do_syscall_64+0x55/0xb0 [ 2655.836876][T17672] ? clear_bhb_loop+0x40/0x90 [ 2655.841587][T17672] ? clear_bhb_loop+0x40/0x90 [ 2655.846299][T17672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2655.852222][T17672] RIP: 0033:0x7f60ff99e019 [ 2655.856668][T17672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2655.876305][T17672] RSP: 002b:00007f6100946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2655.884758][T17672] RAX: ffffffffffffffda RBX: 00007f60ffc25fa0 RCX: 00007f60ff99e019 [ 2655.892759][T17672] RDX: 0000000000000028 RSI: 0000200000000580 RDI: 0000000000000012 [ 2655.900764][T17672] RBP: 00007f6100946090 R08: 0000000000000000 R09: 0000000000000000 [ 2655.908763][T17672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2655.916759][T17672] R13: 00007f60ffc26038 R14: 00007f60ffc25fa0 R15: 00007ffe75d6bfb8 [ 2655.924774][T17672] [ 2656.511126][T17687] netlink: 'syz.3.14917': attribute type 10 has an invalid length. [ 2656.578888][T17689] netlink: 'syz.1.14919': attribute type 10 has an invalid length. [ 2656.591706][T17689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14919'. [ 2657.027083][T17707] FAULT_INJECTION: forcing a failure. [ 2657.027083][T17707] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.074000][T17707] CPU: 0 PID: 17707 Comm: syz.2.14924 Not tainted syzkaller #0 [ 2657.081662][T17707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2657.091796][T17707] Call Trace: [ 2657.095134][T17707] [ 2657.098122][T17707] dump_stack_lvl+0x18c/0x250 [ 2657.102882][T17707] ? show_regs_print_info+0x20/0x20 [ 2657.108147][T17707] ? load_image+0x420/0x420 [ 2657.112743][T17707] ? __might_sleep+0xe0/0xe0 [ 2657.117430][T17707] ? __lock_acquire+0x7d80/0x7d80 [ 2657.122554][T17707] should_fail_ex+0x394/0x4c0 [ 2657.127325][T17707] should_failslab+0x9/0x20 [ 2657.131904][T17707] slab_pre_alloc_hook+0x59/0x300 [ 2657.137017][T17707] ? ioctl_standard_iw_point+0x52d/0xd50 [ 2657.142740][T17707] ? ioctl_standard_iw_point+0x52d/0xd50 [ 2657.148450][T17707] __kmem_cache_alloc_node+0x53/0x250 [ 2657.153916][T17707] ? ioctl_standard_iw_point+0x52d/0xd50 [ 2657.159614][T17707] __kmalloc+0xa7/0x240 [ 2657.163896][T17707] ioctl_standard_iw_point+0x52d/0xd50 [ 2657.169467][T17707] ? cfg80211_wext_giwauth+0x10/0x10 [ 2657.174821][T17707] ? iw_handler_get_iwstats+0x110/0x110 [ 2657.180428][T17707] ? wext_ioctl_dispatch+0x106/0x650 [ 2657.185782][T17707] ? mutex_lock_nested+0x20/0x20 [ 2657.190793][T17707] ? apparmor_capable+0x137/0x1a0 [ 2657.195898][T17707] ioctl_standard_call+0xae/0x250 [ 2657.201005][T17707] ? cfg80211_wext_giwauth+0x10/0x10 [ 2657.206346][T17707] ? cfg80211_wext_giwauth+0x10/0x10 [ 2657.211687][T17707] wext_ioctl_dispatch+0x51a/0x650 [ 2657.216883][T17707] ? __lock_acquire+0x7d80/0x7d80 [ 2657.221985][T17707] ? wext_ioctl_dispatch+0x650/0x650 [ 2657.227337][T17707] ? iw_handler_get_private+0x1f0/0x1f0 [ 2657.233010][T17707] ? wext_handle_ioctl+0x1e0/0x1e0 [ 2657.238177][T17707] ? __might_fault+0xaa/0x120 [ 2657.242960][T17707] ? __might_fault+0xc6/0x120 [ 2657.247703][T17707] ? __might_fault+0xaa/0x120 [ 2657.252459][T17707] wext_handle_ioctl+0x118/0x1e0 [ 2657.257467][T17707] ? call_commit_handler+0xf0/0xf0 [ 2657.262678][T17707] sock_ioctl+0x15d/0x7e0 [ 2657.267083][T17707] ? sock_poll+0x3e0/0x3e0 [ 2657.271589][T17707] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2657.276594][T17707] ? security_file_ioctl+0x80/0xa0 [ 2657.281926][T17707] ? sock_poll+0x3e0/0x3e0 [ 2657.286413][T17707] __se_sys_ioctl+0xfd/0x170 [ 2657.291080][T17707] do_syscall_64+0x55/0xb0 [ 2657.295564][T17707] ? clear_bhb_loop+0x40/0x90 [ 2657.300305][T17707] ? clear_bhb_loop+0x40/0x90 [ 2657.305063][T17707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2657.311027][T17707] RIP: 0033:0x7fcf9299e019 [ 2657.315501][T17707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2657.335170][T17707] RSP: 002b:00007fcf93936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2657.343668][T17707] RAX: ffffffffffffffda RBX: 00007fcf92c26090 RCX: 00007fcf9299e019 [ 2657.351707][T17707] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 2657.359740][T17707] RBP: 00007fcf93936090 R08: 0000000000000000 R09: 0000000000000000 [ 2657.367770][T17707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2657.375803][T17707] R13: 00007fcf92c26128 R14: 00007fcf92c26090 R15: 00007ffc7b50e5a8 [ 2657.383891][T17707] [ 2657.611661][T17712] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.14927'. [ 2658.322357][T17737] netlink: 'syz.1.14937': attribute type 21 has an invalid length. [ 2658.340846][T17737] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14937'. [ 2658.596791][T17743] netlink: 'syz.1.14939': attribute type 2 has an invalid length. [ 2658.608304][T17743] netlink: 'syz.1.14939': attribute type 8 has an invalid length. [ 2658.620438][T17743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14939'. [ 2658.661506][T17746] netlink: 763 bytes leftover after parsing attributes in process `syz.1.14939'. [ 2658.687022][T17745] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.14940'. [ 2658.851458][T17748] netlink: 'syz.2.14941': attribute type 10 has an invalid length. [ 2660.864748][T17802] validate_nla: 2 callbacks suppressed [ 2660.864767][T17802] netlink: 'syz.2.14964': attribute type 10 has an invalid length. [ 2660.955612][T17802] wg1: entered promiscuous mode [ 2660.975233][T17802] wg1: entered allmulticast mode [ 2660.992294][T17802] team0: Device wg1 is of different type [ 2661.068184][T17804] netlink: 'syz.4.14965': attribute type 10 has an invalid length. [ 2661.082233][T17804] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14965'. [ 2661.305362][T17812] netlink: 'syz.3.14966': attribute type 10 has an invalid length. [ 2661.605257][T17829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14974'. [ 2661.633027][T17829] netlink: 'syz.1.14974': attribute type 2 has an invalid length. [ 2661.640930][T17829] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14974'. [ 2662.272626][T17854] netlink: 'syz.1.14985': attribute type 10 has an invalid length. [ 2662.411858][T17857] netlink: 'syz.2.14986': attribute type 10 has an invalid length. [ 2662.506551][T17860] netlink: 'syz.4.14987': attribute type 10 has an invalid length. [ 2663.227525][T17882] netlink: 'syz.1.14995': attribute type 9 has an invalid length. [ 2663.240505][T17884] netlink: 'syz.3.14996': attribute type 10 has an invalid length. [ 2663.249245][T17884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14996'. [ 2663.259411][T17882] netlink: 399 bytes leftover after parsing attributes in process `syz.1.14995'. [ 2663.680623][T17899] netlink: 'syz.4.14999': attribute type 10 has an invalid length. [ 2664.012154][T17915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15007'. [ 2664.542787][T17932] FAULT_INJECTION: forcing a failure. [ 2664.542787][T17932] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.567902][T17932] CPU: 1 PID: 17932 Comm: syz.2.15013 Not tainted syzkaller #0 [ 2664.575600][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2664.585734][T17932] Call Trace: [ 2664.589073][T17932] [ 2664.592067][T17932] dump_stack_lvl+0x18c/0x250 [ 2664.596832][T17932] ? show_regs_print_info+0x20/0x20 [ 2664.602112][T17932] ? load_image+0x420/0x420 [ 2664.606709][T17932] ? __might_sleep+0xe0/0xe0 [ 2664.611364][T17932] ? __lock_acquire+0x7d80/0x7d80 [ 2664.616432][T17932] should_fail_ex+0x394/0x4c0 [ 2664.621214][T17932] should_failslab+0x9/0x20 [ 2664.625785][T17932] slab_pre_alloc_hook+0x59/0x300 [ 2664.630890][T17932] ? __lock_acquire+0x7d80/0x7d80 [ 2664.635998][T17932] kmem_cache_alloc_node+0x5e/0x310 [ 2664.641261][T17932] ? __alloc_skb+0x103/0x2c0 [ 2664.645909][T17932] __alloc_skb+0x103/0x2c0 [ 2664.650377][T17932] netlink_sendmsg+0x66a/0xbf0 [ 2664.655202][T17932] ? netlink_getsockopt+0x590/0x590 [ 2664.660457][T17932] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2664.666052][T17932] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2664.671379][T17932] ? security_socket_sendmsg+0x80/0xa0 [ 2664.676878][T17932] ? netlink_getsockopt+0x590/0x590 [ 2664.682117][T17932] ____sys_sendmsg+0x61b/0x980 [ 2664.686933][T17932] ? __asan_memset+0x22/0x40 [ 2664.691574][T17932] ? __sys_sendmsg_sock+0x30/0x30 [ 2664.696654][T17932] ? __import_iovec+0x5f2/0x850 [ 2664.701603][T17932] ? import_iovec+0x73/0xa0 [ 2664.706164][T17932] ___sys_sendmsg+0x2a6/0x360 [ 2664.710881][T17932] ? get_pid_task+0x20/0x1e0 [ 2664.715546][T17932] ? __sys_sendmsg+0x2b0/0x2b0 [ 2664.720406][T17932] ? __lock_acquire+0x7d80/0x7d80 [ 2664.725520][T17932] __se_sys_sendmsg+0x1d0/0x2c0 [ 2664.730408][T17932] ? perf_trace_preemptirq_template+0x269/0x330 [ 2664.736707][T17932] ? __x64_sys_sendmsg+0x80/0x80 [ 2664.741714][T17932] ? lockdep_hardirqs_on+0x98/0x150 [ 2664.746984][T17932] do_syscall_64+0x55/0xb0 [ 2664.751439][T17932] ? clear_bhb_loop+0x40/0x90 [ 2664.756170][T17932] ? clear_bhb_loop+0x40/0x90 [ 2664.760888][T17932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2664.766823][T17932] RIP: 0033:0x7fcf9299e019 [ 2664.771281][T17932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2664.790930][T17932] RSP: 002b:00007fcf93957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2664.799387][T17932] RAX: ffffffffffffffda RBX: 00007fcf92c25fa0 RCX: 00007fcf9299e019 [ 2664.807405][T17932] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2664.815410][T17932] RBP: 00007fcf93957090 R08: 0000000000000000 R09: 0000000000000000 [ 2664.823442][T17932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2664.831448][T17932] R13: 00007fcf92c26038 R14: 00007fcf92c25fa0 R15: 00007ffc7b50e5a8 [ 2664.839482][T17932] [ 2664.969354][T17937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15017'. [ 2664.996777][T17937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2665.004167][T17937] IPv6: NLM_F_CREATE should be set when creating new route [ 2665.011499][T17937] IPv6: NLM_F_CREATE should be set when creating new route [ 2665.018838][T17937] IPv6: NLM_F_CREATE should be set when creating new route [ 2665.120366][T17942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15018'. [ 2665.535494][T17957] FAULT_INJECTION: forcing a failure. [ 2665.535494][T17957] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.548266][T17957] CPU: 0 PID: 17957 Comm: syz.1.15023 Not tainted syzkaller #0 [ 2665.555880][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2665.565989][T17957] Call Trace: [ 2665.569311][T17957] [ 2665.572305][T17957] dump_stack_lvl+0x18c/0x250 [ 2665.577050][T17957] ? show_regs_print_info+0x20/0x20 [ 2665.582351][T17957] ? load_image+0x420/0x420 [ 2665.586933][T17957] ? netdev_core_pick_tx+0x370/0x370 [ 2665.592294][T17957] should_fail_ex+0x394/0x4c0 [ 2665.597048][T17957] should_failslab+0x9/0x20 [ 2665.601622][T17957] slab_pre_alloc_hook+0x59/0x300 [ 2665.606740][T17957] kmem_cache_alloc+0x5a/0x2c0 [ 2665.611574][T17957] ? skb_clone+0x1eb/0x370 [ 2665.616060][T17957] skb_clone+0x1eb/0x370 [ 2665.620364][T17957] bpf_clone_redirect+0x16d/0x4a0 [ 2665.625466][T17957] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 2665.631034][T17957] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2665.637081][T17957] ? preempt_schedule+0xc0/0xd0 [ 2665.641993][T17957] ? bpf_test_run+0x174/0x870 [ 2665.646737][T17957] ? preempt_schedule_common+0x82/0xc0 [ 2665.652269][T17957] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2665.658311][T17957] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 2665.663666][T17957] ? lock_chain_count+0x20/0x20 [ 2665.668638][T17957] ? __local_bh_disable_ip+0x108/0x1a0 [ 2665.674157][T17957] ? __cant_sleep+0x220/0x220 [ 2665.678937][T17957] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2665.684371][T17957] ? _local_bh_enable+0xa0/0xa0 [ 2665.689285][T17957] ? bpf_test_timer_continue+0x135/0x380 [ 2665.694981][T17957] ? bpf_test_run+0x174/0x870 [ 2665.699727][T17957] bpf_test_run+0x2df/0x870 [ 2665.704300][T17957] ? bpf_test_run+0x174/0x870 [ 2665.709044][T17957] ? dst_hold+0x70/0x70 [ 2665.713258][T17957] ? eth_get_headlen+0x210/0x210 [ 2665.718264][T17957] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 2665.723715][T17957] ? cpu_online+0x60/0x60 [ 2665.728106][T17957] bpf_prog_test_run+0x31f/0x390 [ 2665.733107][T17957] __sys_bpf+0x49d/0x890 [ 2665.737405][T17957] ? bpf_link_show_fdinfo+0x390/0x390 [ 2665.742848][T17957] ? lock_chain_count+0x20/0x20 [ 2665.747772][T17957] __x64_sys_bpf+0x7c/0x90 [ 2665.752242][T17957] do_syscall_64+0x55/0xb0 [ 2665.756712][T17957] ? clear_bhb_loop+0x40/0x90 [ 2665.761437][T17957] ? clear_bhb_loop+0x40/0x90 [ 2665.766214][T17957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2665.772161][T17957] RIP: 0033:0x7f60ff99e019 [ 2665.776624][T17957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2665.796291][T17957] RSP: 002b:00007f6100946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2665.804768][T17957] RAX: ffffffffffffffda RBX: 00007f60ffc25fa0 RCX: 00007f60ff99e019 [ 2665.812792][T17957] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2665.820824][T17957] RBP: 00007f6100946090 R08: 0000000000000000 R09: 0000000000000000 [ 2665.828860][T17957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2665.836901][T17957] R13: 00007f60ffc26038 R14: 00007f60ffc25fa0 R15: 00007ffe75d6bfb8 [ 2665.844949][T17957] [ 2666.153662][T17966] validate_nla: 7 callbacks suppressed [ 2666.153681][T17966] netlink: 'syz.2.15029': attribute type 21 has an invalid length. [ 2666.182034][T17966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15029'. [ 2666.215739][T17966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2666.328780][T17973] netlink: 'syz.3.15032': attribute type 10 has an invalid length. [ 2666.365375][T17973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15032'. [ 2667.143207][T17998] netlink: 168 bytes leftover after parsing attributes in process `syz.3.15042'. [ 2667.398979][T18005] netlink: 'syz.4.15044': attribute type 21 has an invalid length. [ 2667.411845][T18005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15044'. [ 2667.427604][T18004] netlink: 'syz.1.15045': attribute type 10 has an invalid length. [ 2667.444147][T18005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2667.555544][T18009] syzkaller0: entered promiscuous mode [ 2667.561140][T18009] syzkaller0: entered allmulticast mode [ 2667.741504][T18014] netlink: 'syz.3.15048': attribute type 10 has an invalid length. [ 2667.777407][T18014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15048'. [ 2670.663812][T18039] netlink: 'syz.4.15057': attribute type 10 has an invalid length. [ 2670.811784][T18042] netlink: 'syz.1.15059': attribute type 10 has an invalid length. [ 2670.819919][T18042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15059'. [ 2670.912440][T18054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15062'. [ 2671.263102][T18061] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15064'. [ 2671.280964][T18061] openvswitch: netlink: Flow key attribute not present in set flow. [ 2671.566276][T18067] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.15065'. [ 2671.597000][T18067] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.15065'. [ 2671.630942][T18058] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.15065'. [ 2671.654871][T18069] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.15065'. [ 2671.857301][T18070] tap0: tun_chr_ioctl cmd 1074820166 [ 2672.278123][T18086] netlink: 'syz.4.15073': attribute type 10 has an invalid length. [ 2672.295066][T18086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15073'. [ 2672.576905][T18091] netlink: 'syz.3.15072': attribute type 10 has an invalid length. [ 2672.773438][T18099] netlink: 830 bytes leftover after parsing attributes in process `syz.1.15075'. [ 2673.199608][T18109] syzkaller0: entered promiscuous mode [ 2673.235605][T18109] syzkaller0: entered allmulticast mode [ 2673.369251][T18106] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.15078'. [ 2673.399937][T18106] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.15078'. [ 2675.606709][T18119] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.15078'. [ 2675.617432][T18121] netlink: 'syz.2.15082': attribute type 10 has an invalid length. [ 2675.648847][T18123] netlink: 'syz.1.15083': attribute type 21 has an invalid length. [ 2675.661864][T18123] IPv6: NLM_F_CREATE should be specified when creating new route [ 2675.679335][T18123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2675.686693][T18123] IPv6: NLM_F_CREATE should be set when creating new route [ 2675.694066][T18123] IPv6: NLM_F_CREATE should be set when creating new route [ 2675.701322][T18123] IPv6: NLM_F_CREATE should be set when creating new route [ 2675.727671][T18125] netlink: 'syz.1.15083': attribute type 21 has an invalid length. [ 2675.758012][T18125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2675.831050][T18134] FAULT_INJECTION: forcing a failure. [ 2675.831050][T18134] name failslab, interval 1, probability 0, space 0, times 0 [ 2675.844749][T18134] CPU: 1 PID: 18134 Comm: syz.4.15084 Not tainted syzkaller #0 [ 2675.852368][T18134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2675.862481][T18134] Call Trace: [ 2675.865804][T18134] [ 2675.868780][T18134] dump_stack_lvl+0x18c/0x250 [ 2675.873520][T18134] ? show_regs_print_info+0x20/0x20 [ 2675.878765][T18134] ? load_image+0x420/0x420 [ 2675.883313][T18134] ? __lock_acquire+0x7d80/0x7d80 [ 2675.888379][T18134] should_fail_ex+0x394/0x4c0 [ 2675.893104][T18134] should_failslab+0x9/0x20 [ 2675.897658][T18134] slab_pre_alloc_hook+0x59/0x300 [ 2675.902746][T18134] ? bpf_test_init+0x9f/0x140 [ 2675.907484][T18134] ? bpf_test_init+0x9f/0x140 [ 2675.912199][T18134] __kmem_cache_alloc_node+0x53/0x250 [ 2675.917620][T18134] ? bpf_test_init+0x9f/0x140 [ 2675.922345][T18134] __kmalloc+0xa7/0x240 [ 2675.926558][T18134] bpf_test_init+0x9f/0x140 [ 2675.931095][T18134] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 2675.936498][T18134] ? __lock_acquire+0x7d80/0x7d80 [ 2675.941581][T18134] ? dev_put+0x80/0x80 [ 2675.945700][T18134] ? dev_put+0x80/0x80 [ 2675.949813][T18134] bpf_prog_test_run+0x31f/0x390 [ 2675.954790][T18134] __sys_bpf+0x49d/0x890 [ 2675.959071][T18134] ? bpf_link_show_fdinfo+0x390/0x390 [ 2675.964506][T18134] ? lock_chain_count+0x20/0x20 [ 2675.969399][T18134] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2675.975414][T18134] __x64_sys_bpf+0x7c/0x90 [ 2675.979858][T18134] do_syscall_64+0x55/0xb0 [ 2675.984309][T18134] ? clear_bhb_loop+0x40/0x90 [ 2675.989013][T18134] ? clear_bhb_loop+0x40/0x90 [ 2675.993721][T18134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2675.999647][T18134] RIP: 0033:0x7f8ab119e019 [ 2676.004108][T18134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2676.023743][T18134] RSP: 002b:00007f8ab2067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2676.032184][T18134] RAX: ffffffffffffffda RBX: 00007f8ab1425fa0 RCX: 00007f8ab119e019 [ 2676.040183][T18134] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2676.048183][T18134] RBP: 00007f8ab2067090 R08: 0000000000000000 R09: 0000000000000000 [ 2676.056174][T18134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2676.064175][T18134] R13: 00007f8ab1426038 R14: 00007f8ab1425fa0 R15: 00007ffec15be0e8 [ 2676.072209][T18134] [ 2676.718606][T18142] netlink: 'syz.3.15086': attribute type 10 has an invalid length. [ 2676.901747][T18151] __nla_validate_parse: 1 callbacks suppressed [ 2676.901767][T18151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15089'. [ 2677.250019][T18159] netlink: 'syz.2.15093': attribute type 10 has an invalid length. [ 2677.258482][T18159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15093'. [ 2678.100602][T18178] netlink: 'syz.3.15101': attribute type 10 has an invalid length. [ 2678.176924][T18178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15101'. [ 2678.406834][T18182] netlink: 'syz.4.15099': attribute type 10 has an invalid length. [ 2678.836143][T18190] netlink: 'syz.2.15102': attribute type 2 has an invalid length. [ 2678.854958][T18190] netlink: 'syz.2.15102': attribute type 8 has an invalid length. [ 2678.879048][T18190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15102'. [ 2678.903229][T18190] netlink: 763 bytes leftover after parsing attributes in process `syz.2.15102'. [ 2679.261858][T18204] netlink: 'syz.2.15108': attribute type 2 has an invalid length. [ 2679.339083][T18204] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15108'. [ 2679.474715][T18212] netlink: 'syz.4.15112': attribute type 21 has an invalid length. [ 2679.488945][T18212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15112'. [ 2679.506791][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15112'. [ 2679.698440][T18214] netlink: 'syz.1.15113': attribute type 10 has an invalid length. [ 2679.904375][T18224] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15117'. [ 2680.166635][T18226] netlink: 'syz.4.15118': attribute type 3 has an invalid length. [ 2680.195945][T18226] netlink: 'syz.4.15118': attribute type 5 has an invalid length. [ 2680.438892][T18235] û: renamed from bond_slave_0 (while UP) [ 2681.896444][T18251] netlink: 188 bytes leftover after parsing attributes in process `syz.1.15126'. [ 2682.969856][T18253] netlink: 'syz.1.15127': attribute type 21 has an invalid length. [ 2683.018428][T18253] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15127'. [ 2683.040037][T18253] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15127'. [ 2683.191728][T18264] validate_nla: 2 callbacks suppressed [ 2683.191749][T18264] netlink: 'syz.1.15130': attribute type 10 has an invalid length. [ 2683.211837][T18264] team0: Device wg1 is up. Set it down before adding it as a team port [ 2683.448548][T18268] FAULT_INJECTION: forcing a failure. [ 2683.448548][T18268] name failslab, interval 1, probability 0, space 0, times 0 [ 2683.463962][T18268] CPU: 1 PID: 18268 Comm: syz.4.15131 Not tainted syzkaller #0 [ 2683.471599][T18268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2683.481702][T18268] Call Trace: [ 2683.485050][T18268] [ 2683.488025][T18268] dump_stack_lvl+0x18c/0x250 [ 2683.492752][T18268] ? sctp_sendmsg+0x1519/0x27b0 [ 2683.497655][T18268] ? ___sys_sendmsg+0x2a6/0x360 [ 2683.502556][T18268] ? show_regs_print_info+0x20/0x20 [ 2683.507824][T18268] ? load_image+0x420/0x420 [ 2683.512400][T18268] should_fail_ex+0x394/0x4c0 [ 2683.517134][T18268] should_failslab+0x9/0x20 [ 2683.521694][T18268] slab_pre_alloc_hook+0x59/0x300 [ 2683.526781][T18268] ? sctp_add_bind_addr+0x8c/0x360 [ 2683.531946][T18268] __kmem_cache_alloc_node+0x53/0x250 [ 2683.537382][T18268] ? sctp_add_bind_addr+0x8c/0x360 [ 2683.542550][T18268] kmalloc_trace+0x2a/0xe0 [ 2683.547033][T18268] sctp_add_bind_addr+0x8c/0x360 [ 2683.552035][T18268] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2683.557721][T18268] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2683.563497][T18268] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2683.569627][T18268] ? sctp_v4_is_any+0x35/0x60 [ 2683.574351][T18268] ? sctp_copy_one_addr+0x8c/0x350 [ 2683.579510][T18268] sctp_bind_addr_copy+0xb3/0x3c0 [ 2683.584566][T18268] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2683.590931][T18268] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2683.596251][T18268] ? __sctp_connect+0xd80/0xd80 [ 2683.601133][T18268] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2683.606990][T18268] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2683.612577][T18268] ? security_sctp_bind_connect+0x89/0xb0 [ 2683.618327][T18268] sctp_sendmsg+0x1519/0x27b0 [ 2683.623051][T18268] ? sctp_getsockopt+0xb60/0xb60 [ 2683.628049][T18268] ? aa_af_perm+0x330/0x330 [ 2683.632600][T18268] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2683.639061][T18268] ? sock_rps_record_flow+0x19/0x3f0 [ 2683.644397][T18268] ? inet_sendmsg+0x7e/0x2a0 [ 2683.649024][T18268] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2683.654341][T18268] ? inet_send_prepare+0x250/0x250 [ 2683.659486][T18268] ____sys_sendmsg+0x61b/0x980 [ 2683.664283][T18268] ? __asan_memset+0x22/0x40 [ 2683.668909][T18268] ? __sys_sendmsg_sock+0x30/0x30 [ 2683.673954][T18268] ? __import_iovec+0x5f2/0x850 [ 2683.678852][T18268] ? import_iovec+0x73/0xa0 [ 2683.683408][T18268] ___sys_sendmsg+0x2a6/0x360 [ 2683.688121][T18268] ? __sys_sendmsg+0x2b0/0x2b0 [ 2683.692928][T18268] ? ktime_get+0x7f/0x280 [ 2683.697315][T18268] __se_sys_sendmsg+0x1d0/0x2c0 [ 2683.702203][T18268] ? __x64_sys_sendmsg+0x80/0x80 [ 2683.707187][T18268] ? lockdep_hardirqs_on+0x98/0x150 [ 2683.712421][T18268] do_syscall_64+0x55/0xb0 [ 2683.716876][T18268] ? clear_bhb_loop+0x40/0x90 [ 2683.721589][T18268] ? clear_bhb_loop+0x40/0x90 [ 2683.726306][T18268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2683.732235][T18268] RIP: 0033:0x7f8ab119e019 [ 2683.736675][T18268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2683.756326][T18268] RSP: 002b:00007f8ab2067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2683.764770][T18268] RAX: ffffffffffffffda RBX: 00007f8ab1425fa0 RCX: 00007f8ab119e019 [ 2683.772779][T18268] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 2683.780781][T18268] RBP: 00007f8ab2067090 R08: 0000000000000000 R09: 0000000000000000 [ 2683.788786][T18268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2683.796802][T18268] R13: 00007f8ab1426038 R14: 00007f8ab1425fa0 R15: 00007ffec15be0e8 [ 2683.804858][T18268] [ 2685.060174][T12415] Bluetooth: hci2: command 0x0406 tx timeout [ 2685.659342][T18300] netlink: 'syz.1.15139': attribute type 10 has an invalid length. [ 2685.677709][T18300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15139'. [ 2685.820561][T18312] -1: renamed from syzkaller0 [ 2685.923838][T18322] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15145'. [ 2685.983930][T18319] netlink: 'syz.2.15143': attribute type 10 has an invalid length. [ 2687.189546][T18347] netlink: 'syz.3.15153': attribute type 10 has an invalid length. [ 2687.202600][T18347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15153'. [ 2687.399696][T18357] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15156'. [ 2687.514931][T18355] netlink: 'syz.3.15157': attribute type 39 has an invalid length. [ 2687.692882][T18360] netlink: 'syz.4.15158': attribute type 10 has an invalid length. [ 2687.926863][T18367] netlink: 'syz.1.15160': attribute type 10 has an invalid length. [ 2687.987234][T18370] -1: renamed from syzkaller0 [ 2688.062489][T18379] netlink: 'syz.2.15164': attribute type 10 has an invalid length. [ 2688.081661][T18379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15164'. [ 2689.978310][T18391] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.15166'. [ 2689.990220][T18395] netlink: 'syz.2.15167': attribute type 10 has an invalid length. [ 2690.023950][T18394] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15168'. [ 2690.637538][T18410] FAULT_INJECTION: forcing a failure. [ 2690.637538][T18410] name failslab, interval 1, probability 0, space 0, times 0 [ 2690.650294][T18410] CPU: 0 PID: 18410 Comm: syz.4.15174 Not tainted syzkaller #0 [ 2690.657890][T18410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2690.668057][T18410] Call Trace: [ 2690.671383][T18410] [ 2690.674351][T18410] dump_stack_lvl+0x18c/0x250 [ 2690.679087][T18410] ? show_regs_print_info+0x20/0x20 [ 2690.684339][T18410] ? load_image+0x420/0x420 [ 2690.688898][T18410] ? ip_tunnel_xmit+0x1d18/0x25b0 [ 2690.694081][T18410] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2690.700117][T18410] should_fail_ex+0x394/0x4c0 [ 2690.704852][T18410] should_failslab+0x9/0x20 [ 2690.709415][T18410] slab_pre_alloc_hook+0x59/0x300 [ 2690.714497][T18410] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2690.719936][T18410] kmem_cache_alloc+0x5a/0x2c0 [ 2690.724766][T18410] ? dst_alloc+0x105/0x170 [ 2690.729235][T18410] dst_alloc+0x105/0x170 [ 2690.733536][T18410] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 2690.739675][T18410] ? ip_route_output_key_hash+0x13d/0x330 [ 2690.745454][T18410] ip_route_output_key_hash+0x1f3/0x330 [ 2690.751067][T18410] ? ip_route_input_rcu+0x3120/0x3120 [ 2690.756517][T18410] ? __asan_memset+0x22/0x40 [ 2690.761185][T18410] ip_route_output_flow+0x2a/0x150 [ 2690.766361][T18410] ip_tunnel_xmit+0x9c2/0x25b0 [ 2690.771219][T18410] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 2690.776294][T18410] ? validate_xmit_xfrm+0xbb/0x1340 [ 2690.781554][T18410] ? skb_push+0x8e/0xe0 [ 2690.785767][T18410] ipgre_xmit+0x7eb/0xb70 [ 2690.790159][T18410] dev_hard_start_xmit+0x269/0x790 [ 2690.795342][T18410] ? __dev_queue_xmit+0x275/0x3630 [ 2690.800516][T18410] __dev_queue_xmit+0x198c/0x3630 [ 2690.805595][T18410] ? __dev_queue_xmit+0x275/0x3630 [ 2690.810781][T18410] ? netdev_core_pick_tx+0x370/0x370 [ 2690.816119][T18410] ? pskb_expand_head+0x17a/0x1150 [ 2690.821277][T18410] ? pskb_expand_head+0x17a/0x1150 [ 2690.826434][T18410] ? skb_release_data+0x1de/0x7f0 [ 2690.831533][T18410] ? __bpf_redirect+0x4d1/0xdf0 [ 2690.836470][T18410] __bpf_tx_skb+0x181/0x260 [ 2690.841049][T18410] bpf_clone_redirect+0x315/0x4a0 [ 2690.846139][T18410] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 2690.851649][T18410] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2690.857676][T18410] ? __lock_acquire+0x7d80/0x7d80 [ 2690.862754][T18410] ? lock_chain_count+0x20/0x20 [ 2690.867657][T18410] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2690.873685][T18410] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 2690.879017][T18410] ? lock_chain_count+0x20/0x20 [ 2690.883911][T18410] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2690.890207][T18410] ? __local_bh_disable_ip+0x108/0x1a0 [ 2690.895712][T18410] ? __cant_sleep+0x220/0x220 [ 2690.900436][T18410] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2690.905857][T18410] ? _local_bh_enable+0xa0/0xa0 [ 2690.910762][T18410] ? bpf_test_timer_continue+0x135/0x380 [ 2690.916452][T18410] ? bpf_test_run+0x174/0x870 [ 2690.921175][T18410] bpf_test_run+0x2df/0x870 [ 2690.925743][T18410] ? bpf_test_run+0x174/0x870 [ 2690.930510][T18410] ? dst_hold+0x70/0x70 [ 2690.934802][T18410] ? eth_get_headlen+0x210/0x210 [ 2690.939792][T18410] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 2690.945242][T18410] ? cpu_online+0x60/0x60 [ 2690.949624][T18410] bpf_prog_test_run+0x31f/0x390 [ 2690.954612][T18410] __sys_bpf+0x49d/0x890 [ 2690.958899][T18410] ? bpf_link_show_fdinfo+0x390/0x390 [ 2690.964334][T18410] ? lock_chain_count+0x20/0x20 [ 2690.969249][T18410] __x64_sys_bpf+0x7c/0x90 [ 2690.973733][T18410] do_syscall_64+0x55/0xb0 [ 2690.978197][T18410] ? clear_bhb_loop+0x40/0x90 [ 2690.982922][T18410] ? clear_bhb_loop+0x40/0x90 [ 2690.987648][T18410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2690.993595][T18410] RIP: 0033:0x7f8ab119e019 [ 2690.998064][T18410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2691.017722][T18410] RSP: 002b:00007f8ab2067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2691.026188][T18410] RAX: ffffffffffffffda RBX: 00007f8ab1425fa0 RCX: 00007f8ab119e019 [ 2691.034191][T18410] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2691.042190][T18410] RBP: 00007f8ab2067090 R08: 0000000000000000 R09: 0000000000000000 [ 2691.050199][T18410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2691.058221][T18410] R13: 00007f8ab1426038 R14: 00007f8ab1425fa0 R15: 00007ffec15be0e8 [ 2691.066256][T18410] [ 2691.098608][T18413] netlink: 'syz.3.15175': attribute type 10 has an invalid length. [ 2691.141683][T18413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15175'. [ 2691.359623][T18414] netlink: 'syz.1.15173': attribute type 10 has an invalid length. [ 2691.863499][T18428] netlink: 'syz.1.15180': attribute type 10 has an invalid length. [ 2692.052204][T18441] -1: renamed from syzkaller0 [ 2692.478430][T18450] netlink: 'syz.3.15187': attribute type 10 has an invalid length. [ 2692.488531][T18450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15187'. [ 2692.584866][T18452] netlink: 'syz.4.15189': attribute type 10 has an invalid length. [ 2692.812814][T18455] FAULT_INJECTION: forcing a failure. [ 2692.812814][T18455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2692.827210][T18455] CPU: 0 PID: 18455 Comm: syz.2.15190 Not tainted syzkaller #0 [ 2692.834826][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2692.844950][T18455] Call Trace: [ 2692.848257][T18455] [ 2692.851224][T18455] dump_stack_lvl+0x18c/0x250 [ 2692.855941][T18455] ? show_regs_print_info+0x20/0x20 [ 2692.861168][T18455] ? load_image+0x420/0x420 [ 2692.865727][T18455] ? __lock_acquire+0x7d80/0x7d80 [ 2692.870776][T18455] ? snprintf+0xe9/0x140 [ 2692.875053][T18455] should_fail_ex+0x394/0x4c0 [ 2692.879763][T18455] _copy_to_user+0x2f/0xa0 [ 2692.884211][T18455] simple_read_from_buffer+0xe7/0x150 [ 2692.889643][T18455] proc_fail_nth_read+0x1e8/0x260 [ 2692.894710][T18455] ? proc_fault_inject_write+0x360/0x360 [ 2692.900383][T18455] ? fsnotify_perm+0x271/0x5e0 [ 2692.905210][T18455] ? proc_fault_inject_write+0x360/0x360 [ 2692.910879][T18455] vfs_read+0x298/0x990 [ 2692.915076][T18455] ? kernel_read+0x1e0/0x1e0 [ 2692.919725][T18455] ? __fget_files+0x28/0x460 [ 2692.924380][T18455] ? __fget_files+0x3fc/0x460 [ 2692.929124][T18455] ? __fdget_pos+0x2a3/0x330 [ 2692.933766][T18455] ? ksys_read+0x74/0x260 [ 2692.938146][T18455] ksys_read+0x151/0x260 [ 2692.942444][T18455] ? vfs_write+0x9a0/0x9a0 [ 2692.946907][T18455] ? lockdep_hardirqs_on+0x98/0x150 [ 2692.952231][T18455] do_syscall_64+0x55/0xb0 [ 2692.956680][T18455] ? clear_bhb_loop+0x40/0x90 [ 2692.961392][T18455] ? clear_bhb_loop+0x40/0x90 [ 2692.966112][T18455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2692.972047][T18455] RIP: 0033:0x7fcf9295e84e [ 2692.976496][T18455] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2692.996154][T18455] RSP: 002b:00007fcf93956fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2693.004622][T18455] RAX: ffffffffffffffda RBX: 00007fcf939576c0 RCX: 00007fcf9295e84e [ 2693.012625][T18455] RDX: 000000000000000f RSI: 00007fcf939570a0 RDI: 0000000000000008 [ 2693.020639][T18455] RBP: 00007fcf93957090 R08: 0000000000000000 R09: 0000000000000000 [ 2693.028649][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2693.036647][T18455] R13: 00007fcf92c26038 R14: 00007fcf92c25fa0 R15: 00007ffc7b50e5a8 [ 2693.044676][T18455] [ 2693.077233][T18457] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15191'. [ 2694.116630][T18466] netlink: 'syz.4.15196': attribute type 21 has an invalid length. [ 2694.128660][T18466] netlink: 168 bytes leftover after parsing attributes in process `syz.4.15196'. [ 2694.176188][T18470] netlink: 'syz.2.15195': attribute type 10 has an invalid length. [ 2694.510983][T18480] netlink: 'syz.2.15201': attribute type 10 has an invalid length. [ 2694.623588][T18478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15198'. [ 2694.776574][T18488] -1: renamed from syzkaller0 [ 2694.872092][T18490] netlink: 'syz.1.15203': attribute type 1 has an invalid length. [ 2694.887862][T18490] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.15203'. [ 2694.901437][T18490] netlink: 9 bytes leftover after parsing attributes in process `syz.1.15203'. [ 2695.010164][T18497] netlink: 'syz.4.15205': attribute type 2 has an invalid length. [ 2695.018261][T18497] netlink: 'syz.4.15205': attribute type 1 has an invalid length. [ 2695.028359][T18497] netlink: 9 bytes leftover after parsing attributes in process `syz.4.15205'. [ 2698.585741][T18561] FAULT_INJECTION: forcing a failure. [ 2698.585741][T18561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2698.625323][T18561] CPU: 1 PID: 18561 Comm: syz.1.15224 Not tainted syzkaller #0 [ 2698.632984][T18561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2698.643106][T18561] Call Trace: [ 2698.646431][T18561] [ 2698.649405][T18561] dump_stack_lvl+0x18c/0x250 [ 2698.654155][T18561] ? show_regs_print_info+0x20/0x20 [ 2698.659405][T18561] ? load_image+0x420/0x420 [ 2698.663984][T18561] ? __lock_acquire+0x7d80/0x7d80 [ 2698.669064][T18561] ? perf_trace_lock+0xfc/0x3b0 [ 2698.673979][T18561] should_fail_ex+0x394/0x4c0 [ 2698.678719][T18561] prepare_alloc_pages+0x1e1/0x5b0 [ 2698.683891][T18561] __alloc_pages+0x134/0x460 [ 2698.688563][T18561] ? zone_statistics+0x170/0x170 [ 2698.693558][T18561] ? alloc_pages+0x4e1/0x740 [ 2698.698198][T18561] ? do_raw_spin_unlock+0x121/0x230 [ 2698.703453][T18561] __get_free_pages+0xc/0x30 [ 2698.708076][T18561] kasan_populate_vmalloc_pte+0x35/0x100 [ 2698.713754][T18561] __apply_to_page_range+0x860/0xdd0 [ 2698.719076][T18561] ? kasan_populate_vmalloc+0x70/0x70 [ 2698.724491][T18561] ? apply_to_page_range+0x50/0x50 [ 2698.729632][T18561] ? do_raw_spin_unlock+0x121/0x230 [ 2698.734870][T18561] alloc_vmap_area+0x1d26/0x1e50 [ 2698.739897][T18561] ? vm_map_ram+0xcf0/0xcf0 [ 2698.744449][T18561] ? rcu_is_watching+0x15/0xb0 [ 2698.749254][T18561] __get_vm_area_node+0x162/0x370 [ 2698.754324][T18561] __vmalloc_node_range+0x36f/0x1320 [ 2698.759655][T18561] ? reuseport_array_alloc+0x98/0x120 [ 2698.765080][T18561] ? aa_get_newest_label+0xfd/0x5c0 [ 2698.770309][T18561] ? end_current_label_crit_section+0x170/0x170 [ 2698.776585][T18561] ? free_vm_area+0x50/0x50 [ 2698.781124][T18561] ? apparmor_capable+0x137/0x1a0 [ 2698.786176][T18561] bpf_map_area_alloc+0xf1/0x110 [ 2698.791149][T18561] ? reuseport_array_alloc+0x98/0x120 [ 2698.796559][T18561] reuseport_array_alloc+0x98/0x120 [ 2698.801793][T18561] map_create+0x877/0x12f0 [ 2698.806265][T18561] __sys_bpf+0x651/0x890 [ 2698.810547][T18561] ? read_tsc+0x9/0x20 [ 2698.814652][T18561] ? bpf_link_show_fdinfo+0x390/0x390 [ 2698.820067][T18561] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2698.826262][T18561] __x64_sys_bpf+0x7c/0x90 [ 2698.830712][T18561] do_syscall_64+0x55/0xb0 [ 2698.835179][T18561] ? clear_bhb_loop+0x40/0x90 [ 2698.839904][T18561] ? clear_bhb_loop+0x40/0x90 [ 2698.844615][T18561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2698.850541][T18561] RIP: 0033:0x7f60ff99e019 [ 2698.854988][T18561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2698.874635][T18561] RSP: 002b:00007f6100946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2698.883081][T18561] RAX: ffffffffffffffda RBX: 00007f60ffc25fa0 RCX: 00007f60ff99e019 [ 2698.891080][T18561] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 2698.899075][T18561] RBP: 00007f6100946090 R08: 0000000000000000 R09: 0000000000000000 [ 2698.907078][T18561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2698.915073][T18561] R13: 00007f60ffc26038 R14: 00007f60ffc25fa0 R15: 00007ffe75d6bfb8 [ 2698.923093][T18561] [ 2699.125540][T18572] netlink: 'syz.2.15228': attribute type 5 has an invalid length. [ 2699.417245][T18587] FAULT_INJECTION: forcing a failure. [ 2699.417245][T18587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2699.446205][T18587] CPU: 0 PID: 18587 Comm: syz.3.15236 Not tainted syzkaller #0 [ 2699.453837][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2699.463937][T18587] Call Trace: [ 2699.467263][T18587] [ 2699.470228][T18587] dump_stack_lvl+0x18c/0x250 [ 2699.474955][T18587] ? show_regs_print_info+0x20/0x20 [ 2699.480206][T18587] ? load_image+0x420/0x420 [ 2699.484777][T18587] ? __lock_acquire+0x7d80/0x7d80 [ 2699.489852][T18587] ? snprintf+0xe9/0x140 [ 2699.494151][T18587] should_fail_ex+0x394/0x4c0 [ 2699.498879][T18587] _copy_to_user+0x2f/0xa0 [ 2699.503347][T18587] simple_read_from_buffer+0xe7/0x150 [ 2699.508770][T18587] proc_fail_nth_read+0x1e8/0x260 [ 2699.513844][T18587] ? proc_fault_inject_write+0x360/0x360 [ 2699.519542][T18587] ? fsnotify_perm+0x271/0x5e0 [ 2699.524358][T18587] ? proc_fault_inject_write+0x360/0x360 [ 2699.530044][T18587] vfs_read+0x298/0x990 [ 2699.534295][T18587] ? kernel_read+0x1e0/0x1e0 [ 2699.538942][T18587] ? __fget_files+0x28/0x460 [ 2699.543616][T18587] ? __fget_files+0x3fc/0x460 [ 2699.548354][T18587] ? __fdget_pos+0x2a3/0x330 [ 2699.552991][T18587] ? ksys_read+0x74/0x260 [ 2699.557381][T18587] ksys_read+0x151/0x260 [ 2699.561681][T18587] ? vfs_write+0x9a0/0x9a0 [ 2699.566159][T18587] ? lockdep_hardirqs_on+0x98/0x150 [ 2699.571457][T18587] do_syscall_64+0x55/0xb0 [ 2699.575914][T18587] ? clear_bhb_loop+0x40/0x90 [ 2699.580633][T18587] ? clear_bhb_loop+0x40/0x90 [ 2699.585372][T18587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2699.591308][T18587] RIP: 0033:0x7f3079d5e84e [ 2699.595769][T18587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2699.615422][T18587] RSP: 002b:00007f307ad0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2699.623893][T18587] RAX: ffffffffffffffda RBX: 00007f307ad0c6c0 RCX: 00007f3079d5e84e [ 2699.631907][T18587] RDX: 000000000000000f RSI: 00007f307ad0c0a0 RDI: 0000000000000003 [ 2699.639940][T18587] RBP: 00007f307ad0c090 R08: 0000000000000000 R09: 0000000000000000 [ 2699.647966][T18587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2699.656007][T18587] R13: 00007f307a026038 R14: 00007f307a025fa0 R15: 00007fff9e6bf708 [ 2699.664090][T18587] [ 2699.815285][T18593] netlink: 'syz.1.15237': attribute type 2 has an invalid length. [ 2699.825294][T18593] netlink: 'syz.1.15237': attribute type 1 has an invalid length. [ 2699.840976][T18593] netlink: 9 bytes leftover after parsing attributes in process `syz.1.15237'. [ 2701.260425][T18605] netlink: 'syz.2.15239': attribute type 2 has an invalid length. [ 2701.282916][T18605] netlink: 'syz.2.15239': attribute type 1 has an invalid length. [ 2701.317290][T18604] netlink: 'syz.4.15240': attribute type 10 has an invalid length. [ 2701.330580][T18605] netlink: 9 bytes leftover after parsing attributes in process `syz.2.15239'. [ 2701.342089][T18604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15240'. [ 2701.367880][T18611] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15242'. [ 2701.862097][T18626] netlink: 'syz.3.15247': attribute type 1 has an invalid length. [ 2701.886719][T18626] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.15247'. [ 2701.898522][T18626] netlink: 9 bytes leftover after parsing attributes in process `syz.3.15247'. [ 2702.271367][T18632] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15248'. [ 2702.299237][T18632] netlink: 'syz.2.15248': attribute type 10 has an invalid length. [ 2702.366983][T18632] dummy0: entered promiscuous mode [ 2702.382097][T18632] dummy0: entered allmulticast mode [ 2702.398860][T18632] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2702.602654][T18640] netlink: 'syz.4.15252': attribute type 10 has an invalid length. [ 2703.221857][T18660] netlink: 'syz.4.15259': attribute type 1 has an invalid length. [ 2703.230495][T18660] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.15259'. [ 2703.243262][T18660] netlink: 9 bytes leftover after parsing attributes in process `syz.4.15259'. [ 2703.810834][T18671] FAULT_INJECTION: forcing a failure. [ 2703.810834][T18671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2703.837653][T18671] CPU: 0 PID: 18671 Comm: syz.2.15261 Not tainted syzkaller #0 [ 2703.845309][T18671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2703.855443][T18671] Call Trace: [ 2703.858778][T18671] [ 2703.861768][T18671] dump_stack_lvl+0x18c/0x250 [ 2703.866578][T18671] ? show_regs_print_info+0x20/0x20 [ 2703.871852][T18671] ? load_image+0x420/0x420 [ 2703.876447][T18671] ? __lock_acquire+0x7d80/0x7d80 [ 2703.881556][T18671] ? snprintf+0xe9/0x140 [ 2703.885890][T18671] should_fail_ex+0x394/0x4c0 [ 2703.890647][T18671] _copy_to_user+0x2f/0xa0 [ 2703.895134][T18671] simple_read_from_buffer+0xe7/0x150 [ 2703.900585][T18671] proc_fail_nth_read+0x1e8/0x260 [ 2703.905694][T18671] ? proc_fault_inject_write+0x360/0x360 [ 2703.911407][T18671] ? fsnotify_perm+0x271/0x5e0 [ 2703.916250][T18671] ? proc_fault_inject_write+0x360/0x360 [ 2703.921974][T18671] vfs_read+0x298/0x990 [ 2703.926212][T18671] ? kernel_read+0x1e0/0x1e0 [ 2703.930883][T18671] ? __fget_files+0x28/0x460 [ 2703.935562][T18671] ? __fget_files+0x3fc/0x460 [ 2703.940349][T18671] ? __fdget_pos+0x2a3/0x330 [ 2703.945005][T18671] ? ksys_read+0x74/0x260 [ 2703.949415][T18671] ksys_read+0x151/0x260 [ 2703.953730][T18671] ? vfs_write+0x9a0/0x9a0 [ 2703.958206][T18671] ? lockdep_hardirqs_on+0x98/0x150 [ 2703.963457][T18671] do_syscall_64+0x55/0xb0 [ 2703.967915][T18671] ? clear_bhb_loop+0x40/0x90 [ 2703.972630][T18671] ? clear_bhb_loop+0x40/0x90 [ 2703.977358][T18671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2703.983295][T18671] RIP: 0033:0x7fcf9295e84e [ 2703.987757][T18671] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2704.007433][T18671] RSP: 002b:00007fcf93935fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2704.015899][T18671] RAX: ffffffffffffffda RBX: 00007fcf939366c0 RCX: 00007fcf9295e84e [ 2704.023948][T18671] RDX: 000000000000000f RSI: 00007fcf939360a0 RDI: 0000000000000008 [ 2704.031956][T18671] RBP: 00007fcf93936090 R08: 0000000000000000 R09: 0000000000000000 [ 2704.039961][T18671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2704.047971][T18671] R13: 00007fcf92c26128 R14: 00007fcf92c26090 R15: 00007ffc7b50e5a8 [ 2704.056010][T18671] [ 2704.328249][T18682] netlink: 'syz.2.15267': attribute type 10 has an invalid length. [ 2704.388032][T18682] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2704.783748][T18695] netlink: 'syz.2.15271': attribute type 1 has an invalid length. [ 2704.807727][T18695] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.15271'. [ 2705.197752][T18714] __nla_validate_parse: 1 callbacks suppressed [ 2705.197772][T18714] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.15277'. [ 2705.253559][T18718] netlink: 'syz.1.15277': attribute type 10 has an invalid length. [ 2705.269945][T18718] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2705.307844][T18718] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 2705.325525][T18718] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 2705.357639][T18708] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.15277'. [ 2705.659920][T18724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15283'. [ 2705.703995][T18722] netlink: set zone limit has 8 unknown bytes [ 2706.250731][T18738] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.15285'. [ 2706.338444][T18742] delete_channel: no stack [ 2706.364414][T18742] delete_channel: no stack [ 2706.594934][T18750] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15290'. [ 2706.614890][T18750] validate_nla: 3 callbacks suppressed [ 2706.614908][T18750] netlink: 'syz.3.15290': attribute type 10 has an invalid length. [ 2706.664994][T18750] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2706.829643][T18752] netlink: 'syz.1.15291': attribute type 10 has an invalid length. [ 2706.976263][T18756] netlink: 'syz.3.15293': attribute type 2 has an invalid length. [ 2706.999625][T18756] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.15293'. [ 2707.727495][T18771] netlink: 13822 bytes leftover after parsing attributes in process `syz.1.15299'. [ 2707.910404][T18777] netlink: 'syz.2.15302': attribute type 10 has an invalid length. [ 2708.154881][T18793] netlink: 188 bytes leftover after parsing attributes in process `syz.2.15308'. [ 2708.270739][T18797] netlink: 'syz.1.15310': attribute type 10 has an invalid length. [ 2708.284508][T18797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15310'. [ 2708.361100][T18799] sock: sock_set_timeout: `syz.2.15311' (pid 18799) tries to set negative timeout [ 2710.811846][T12415] Bluetooth: hci1: command 0x0406 tx timeout [ 2713.713446][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.719824][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.139075][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.145587][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2813.511561][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2813.518306][ C1] rcu: 1-....: (1 GPs behind) idle=da24/1/0x4000000000000000 softirq=215301/215302 fqs=4290 [ 2813.529681][ C1] rcu: hardirqs softirqs csw/system [ 2813.536109][ C1] rcu: number: 1349715 0 0 [ 2813.542526][ C1] rcu: cputime: 16242 36236 67 ==> 52480(ms) [ 2813.550356][ C1] rcu: (t=10500 jiffies g=309001 q=2133 ncpus=2) [ 2813.556781][ C1] CPU: 1 PID: 18804 Comm: syz.3.15313 Not tainted syzkaller #0 [ 2813.564357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2813.574448][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 2813.579767][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 2813.599431][ C1] RSP: 0018:ffffc900001effe0 EFLAGS: 00000206 [ 2813.605507][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: b508962aa9d0d400 [ 2813.613484][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0660 [ 2813.621463][ C1] RBP: ffffc900001f00f0 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 2813.629442][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff9200003e008 [ 2813.637509][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 2813.645491][ C1] FS: 00007f307ad0c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2813.654426][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2813.661017][ C1] CR2: 000000110c2acf97 CR3: 00000000446a8000 CR4: 00000000003506e0 [ 2813.669003][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 2813.676980][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2813.684958][ C1] Call Trace: [ 2813.688246][ C1] [ 2813.691104][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2813.697281][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2813.703455][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2813.708864][ C1] ? unwind_next_frame+0x892/0x2990 [ 2813.714070][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2813.720144][ C1] is_bpf_text_address+0x47/0x2a0 [ 2813.725182][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 2813.730387][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 2813.735592][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2813.741666][ C1] kernel_text_address+0xa0/0xd0 [ 2813.746624][ C1] __kernel_text_address+0xd/0x30 [ 2813.751662][ C1] unwind_get_return_address+0x5d/0xc0 [ 2813.757130][ C1] ? stack_trace_save+0x100/0x100 [ 2813.762164][ C1] arch_stack_walk+0x11d/0x190 [ 2813.766945][ C1] stack_trace_save+0xaa/0x100 [ 2813.771723][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 2813.776852][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2813.782586][ C1] kasan_set_track+0x4e/0x70 [ 2813.787207][ C1] ? kasan_set_track+0x4e/0x70 [ 2813.791979][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 2813.796751][ C1] ? ref_tracker_alloc+0x163/0x4b0 [ 2813.801878][ C1] ? ___neigh_create+0xca4/0x23d0 [ 2813.806911][ C1] ? ip6_finish_output2+0x156d/0x1620 [ 2813.812305][ C1] ? ndisc_send_skb+0xbb9/0x1480 [ 2813.817262][ C1] ? addrconf_rs_timer+0x36b/0x640 [ 2813.822385][ C1] ? call_timer_fn+0x189/0x540 [ 2813.827156][ C1] ? __run_timers+0x570/0x810 [ 2813.831859][ C1] ? run_timer_softirq+0x67/0xf0 [ 2813.836801][ C1] ? handle_softirqs+0x27d/0x820 [ 2813.841780][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 2813.846553][ C1] ? irq_exit_rcu+0x9/0x20 [ 2813.850973][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2813.856790][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2813.862959][ C1] ? generic_exec_single+0x477/0x4e0 [ 2813.868250][ C1] ? smp_call_function_single+0x36d/0x5a0 [ 2813.873990][ C1] ? perf_install_in_context+0x5bb/0x920 [ 2813.879641][ C1] ? __se_sys_perf_event_open+0x1841/0x1c60 [ 2813.885542][ C1] ? do_syscall_64+0x55/0xb0 [ 2813.890157][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2813.896261][ C1] ? rcu_is_watching+0x15/0xb0 [ 2813.901043][ C1] __kasan_kmalloc+0x8f/0xa0 [ 2813.905651][ C1] ref_tracker_alloc+0x163/0x4b0 [ 2813.910600][ C1] ? ref_tracker_dir_exit+0x510/0x510 [ 2813.915978][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2813.922138][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2813.927349][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2813.933517][ C1] ? ___neigh_create+0xc03/0x23d0 [ 2813.938560][ C1] ___neigh_create+0xca4/0x23d0 [ 2813.943425][ C1] ? __ipv6_neigh_lookup_noref+0x5a2/0x7d0 [ 2813.949248][ C1] ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0 [ 2813.955094][ C1] ip6_finish_output2+0x156d/0x1620 [ 2813.960311][ C1] ? ip6_finish_output2+0x642/0x1620 [ 2813.965616][ C1] ? nf_hook+0x390/0x390 [ 2813.969872][ C1] ? ip6_mtu+0x321/0x3f0 [ 2813.974124][ C1] ? ip6_finish_output+0x567/0x7f0 [ 2813.979250][ C1] ndisc_send_skb+0xbb9/0x1480 [ 2813.984021][ C1] ? ndisc_send_skb+0x201/0x1480 [ 2813.988999][ C1] ? ndisc_mc_map+0x680/0x680 [ 2813.993682][ C1] ? skb_dst+0xd0/0xd0 [ 2813.997791][ C1] ? ipv6_get_lladdr+0x378/0x3e0 [ 2814.002758][ C1] ? ipv6_get_lladdr+0x2b/0x3e0 [ 2814.007623][ C1] addrconf_rs_timer+0x36b/0x640 [ 2814.012581][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 2814.018658][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2814.024668][ C1] call_timer_fn+0x189/0x540 [ 2814.029282][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 2814.035367][ C1] ? call_timer_fn+0xd2/0x540 [ 2814.040075][ C1] ? __run_timers+0x810/0x810 [ 2814.044772][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 2814.050855][ C1] __run_timers+0x570/0x810 [ 2814.055384][ C1] ? detach_timer+0x2b0/0x2b0 [ 2814.060084][ C1] run_timer_softirq+0x67/0xf0 [ 2814.064877][ C1] handle_softirqs+0x27d/0x820 [ 2814.069661][ C1] ? read_tsc+0x9/0x20 [ 2814.073745][ C1] ? ktime_get+0x24b/0x280 [ 2814.078208][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 2814.082991][ C1] ? do_softirq+0x1a0/0x1a0 [ 2814.087535][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2814.092756][ C1] __irq_exit_rcu+0xd3/0x190 [ 2814.097372][ C1] ? irq_exit_rcu+0x20/0x20 [ 2814.101904][ C1] irq_exit_rcu+0x9/0x20 [ 2814.106175][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2814.111832][ C1] [ 2814.114776][ C1] [ 2814.117715][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2814.123713][ C1] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 2814.129620][ C1] Code: 75 11 e8 0c 0d 0b 00 48 85 db 75 16 e8 02 0d 0b 00 eb 15 e8 fb 0c 0b 00 e8 56 63 10 09 48 85 db 74 ea e8 ec 0c 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 2814.149235][ C1] RSP: 0018:ffffc9000d5afa00 EFLAGS: 00000246 [ 2814.155347][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 2814.163338][ C1] RDX: ffffc9000d144000 RSI: 00000000000056f6 RDI: 00000000000056f7 [ 2814.171339][ C1] RBP: ffffc9000d5afad0 R08: ffffffff911eb5ff R09: 1ffffffff223d6bf [ 2814.179312][ C1] R10: dffffc0000000000 R11: fffffbfff223d6c0 R12: 1ffff92001ab5f44 [ 2814.187289][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001ab5f65 [ 2814.195281][ C1] ? event_function+0x300/0x300 [ 2814.200149][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 2814.205879][ C1] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 2814.211607][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2814.216815][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 2814.222452][ C1] smp_call_function_single+0x36d/0x5a0 [ 2814.228006][ C1] ? event_function+0x300/0x300 [ 2814.232869][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 2814.239044][ C1] ? event_function+0x300/0x300 [ 2814.243908][ C1] perf_install_in_context+0x5bb/0x920 [ 2814.249385][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 2814.255376][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 2814.260594][ C1] ? anon_inode_getfile+0x15b/0x1a0 [ 2814.265806][ C1] ? perf_event__header_size+0x165/0x220 [ 2814.271451][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 2814.277192][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2814.282880][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2814.288782][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 2814.294422][ C1] do_syscall_64+0x55/0xb0 [ 2814.298870][ C1] ? clear_bhb_loop+0x40/0x90 [ 2814.303557][ C1] ? clear_bhb_loop+0x40/0x90 [ 2814.308240][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2814.314137][ C1] RIP: 0033:0x7f3079d9e019 [ 2814.318585][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2814.338195][ C1] RSP: 002b:00007f307ad0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2814.346636][ C1] RAX: ffffffffffffffda RBX: 00007f307a025fa0 RCX: 00007f3079d9e019 [ 2814.354615][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 2814.362614][ C1] RBP: 00007f3079e3500c R08: 0000000000000002 R09: 0000000000000000 [ 2814.370594][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 2814.378569][ C1] R13: 00007f307a026038 R14: 00007f307a025fa0 R15: 00007fff9e6bf708 [ 2814.386574][ C1] [ 2815.727493][T18848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2815.737561][T18848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2815.746356][T18848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2815.754724][T18848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2815.762581][T18848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2815.769974][T18848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2816.887275][T18850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2816.898371][T18850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2816.912852][T18850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2816.923303][T18850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2816.935552][T18850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2816.944344][T18850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2817.293919][T13159] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2817.304276][T13159] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2817.312984][T13159] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2817.321230][T13159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2817.329680][T13159] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2817.337561][T13159] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2