last executing test programs: 19.050035395s ago: executing program 2 (id=8260): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc2, 0x1ff}, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r2, 0x0, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, 0x0, 0x2020) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x7, 0x6, 0x3, 0x3220, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x80000000000000b}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10d, 0x10d, 0xa, [@ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x71, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @enum={0x3, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x2}, {0xc, 0x6e}, {0xd, 0xc42b}, {0x4, 0x1000}, {0xc, 0x9}, {0x10, 0x4}, {0x4, 0x2}]}, @var={0x3, 0x0, 0x0, 0xe, 0x4}, @datasec={0x10, 0x4, 0x0, 0xf, 0x1, [{0x1, 0xb, 0x1}, {0x2, 0x9018, 0x1}, {0x2, 0x1, 0x2}, {0x4, 0x7, 0x9}], 'u'}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x5}]}, @union={0x3, 0x2, 0x0, 0x5, 0x0, 0x5, [{0xf, 0x4, 0x7}, {0x9, 0x0, 0x3}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x6e, 0x0, 0x12}]}, {0x0, [0x10, 0x61, 0x61, 0x2e, 0x0, 0x2e, 0x61, 0x30]}}, &(0x7f00000006c0)=""/119, 0x132, 0x77, 0x0, 0x3, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.628224766s ago: executing program 2 (id=8264): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x32, 0x5}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 17.617885531s ago: executing program 2 (id=8274): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="0218000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x50) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000140)) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x4f, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2663}, 0x8840) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0xf, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r4, 0x9}, 0xffffffffffffffc2) 17.490656675s ago: executing program 2 (id=8275): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x32, 0x5}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 17.172460743s ago: executing program 2 (id=8278): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 16.908485549s ago: executing program 2 (id=8280): perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcde, 0x43a1bd76, 0x7, 0x9, 0x400006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) syz_clone(0x40000000, &(0x7f00000001c0)="b3", 0x1, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)="c57e822308adf19648f0602d067576fc4a264e4a0fd54c16e17a8c687f73e4c51d1b02ffafbb4e19c7fc832f63f49f6bb082f337cbc84df47519fa83f6c8c73077b97b46e1abc4f051c068c4c8542fdeefd02b27093cbfa2a21244a28f7b68de3329664953836d36f4d17b8cf8622c96f36523aa61a21ee94edbfd81ed0a0a4c9d3e3df1e5dae68510e7a356380460540874a201d3b2831c02f191e225be46001eae94af36bec5f4cf2b66b9744ef8b2e0e47dcc2a08e0973c822cb680c10f08") sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 8.057331885s ago: executing program 1 (id=8291): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000580)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNGETVNETLE(r3, 0x8955, &(0x7f0000000040)) openat$cgroup_ro(r2, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 7.207197576s ago: executing program 1 (id=8294): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0000000400000006000000ff000000420000005bf10bd9e544ad955ed63c320f94e1681f6ef6ba6b97b5eaf419395c5ece43dc003175de009b44518dd7cbc71fca8391f83222411b2ccd0e25ea7ce59a10b689efd74eeec67ffc0163444c6650265886dd47aef29fb757d238e17ade2c9946c15c7df00e9997ac35c0c989e96b5ad5e1c0bbb8031fb228ba72f631627f18376a49537a4ef47b3ab79bcda8462803cd062ee16860c423cc4f8e9afa07b0596d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000007b9af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e", 0x35}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="d80000001c0081054e81f782db4402000a0008040e000000040d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1ca", 0xb7}], 0x1, 0x0, 0x0, 0x7400}, 0x24000814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x7, 0x0, &(0x7f0000000180)="00050000000000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x100905, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_type(r6, &(0x7f00000001c0), 0x9) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="00000017929c91fe0aee0fb4003fb731604300000000000000000000000000000000e0d96cb6df92357be3b9573fcf1057dd6b4e3bef0df143377d3995ce21702516a5bf8684c346a0e0b5f7f864159c62ed2fda78611b1324cd97520b503b5ec39769707aacedcd4518b431088583822fa4a3667239613d36d4c4484b446b443dceb5362577fe878ea6353e650f66ee2d319ea7602efa3522ce79a89440fd62b08e94c2f75889ed0841c52e88f55334eb97a2963f20c5b51952b50a0018e0f565c38245a9a9c46f01dfd86a23056e4e1f95d870646e2e1af6b19c28c37a7d43579c50e44582c54fe395690e7971d6cf38e706ae1f23", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3ee901"], 0x9a) 6.858086045s ago: executing program 3 (id=8295): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000c000000000000006a0d000081014a70dc320100abb17891b9f1dc65a95394194327cb675e7173537678c2cf935d8c261905ef9136b6c18481d2d507fa9c96d6e7f72b14503ff57bd1454c"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 6.778924067s ago: executing program 0 (id=8296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 7) 6.150491293s ago: executing program 0 (id=8297): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, &(0x7f00000005c0)="3814d2", &(0x7f00000006c0)=""/122}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='veth0_virt_wifi\t\v'], 0x12) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r6, r4}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x11) 5.958705498s ago: executing program 1 (id=8298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={&(0x7f0000000200)}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000380)='\xb0\xe0p\xfc\xc5\fPd\xe2\xc6n\xe9\v(\xdd\xe1]\x10\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240)}, 0x8102, 0xffffffffffff8001, 0xa482, 0x4d0ed4a19af55422, 0x0, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0xd, 0x12) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe75a, 0x4c61}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 5.711226085s ago: executing program 3 (id=8299): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1824a, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0x3}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0xfffffff5, [{0x4, 0x1}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x30, 0x5f, 0x30, 0x2e]}}, 0x0, 0x46, 0x0, 0x9, 0x6}, 0x28) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x32, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) socket$kcm(0x29, 0xc09ec0ef3dd8a6a3, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.10852255s ago: executing program 0 (id=8300): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x2000007}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10101}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x11009, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000008000000010000008000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r8, @ANYRES16=r6, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff4, &(0x7f00000014c0)=""/4084, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5d}, 0x94) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdef}, 0x94) socket$kcm(0xa, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600030000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, r11}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 2.807777148s ago: executing program 1 (id=8301): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000100), 0x120) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000400)=@isdn={0x22, 0xa5, 0x5, 0x49, 0x7}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)="bd16d9fd9a3d940f1dfbc02314ada190e8bc54c494fd7a706961d4b09802032f886446bc50d2d25ecb9a69fc70344ffe0c5e50c6d02fba6ab20005a54b1c6b006d366f66f6303f446a0d617d0b85", 0x4e}, {&(0x7f0000000500)="9187f97d8a4ee4c44ca7bbc916885019e51c2e0125dfb2b88b9f509d084dd6efbbaeda2fb2a1d36bc33caa6070d72f80fc6e416e392d8c70d7b794b57df786bfc8a86688c242205de0a88b6b3bbe2d09cfb11d2fa6ccf198f55e326a15cef6d562ba24aaabea6b3abcf4021c54739cda236b62214028371596954c78586787b368ec99f53ccd5bfecffb4646e6e33529c2c85db09e4f0d87f86c993ce4d16ccb5767ca340fd5b00c5e15fb40068ef6b33ca0940f58d31c981c3c8e518a4d81108b51d12c3af2975d533863708b603de898f134ab6bba555494e7319636d3072c30dff2caf1753dbd2332e403963c7cc868ba62d0dc", 0xf5}, {&(0x7f0000000640)="f8a08c236790316053400310859a5730ec173a057b074fee2ef756076d56f2131e75e426b5627c8b560f4114e45e8e1468b08b07f81994521daf2488d6d4cdab3aaf496b65978625a45a844bcb34a72f9ae29aa9d881be7966d6965735ab011f27ed9b5d9514", 0x66}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="fe6078", 0x3}, {&(0x7f0000000800)="e0eacec1ea7c8e9d8261dbc69d7cdde07e6a2ffa90d5122e805a7a459ab8caee375b14832b72c670ce2aa3ac217814ae1aa939", 0x33}], 0x6, &(0x7f00000009c0)=[{0x68, 0x0, 0xfffffff0, "6a5a234d6a8e3bd7d972f6561b4ad99b07ed1cd599c9b6d995253a20c572e830774f01605421a61a704dc7e2b6b1e5e62da5862f05fde3b0190413712d47eeda84ff1a6cc7ed71af97dfdab85c5d62f5b74e4b75c8d182"}, {0xe0, 0x113, 0x1ff, "c70962b8b3f18586b328591779f68065126fae6faf5da51ebd1ffbb88182f3ccc60a1e4d9f3dbabd4f5a7d4461b178a2b48bab7858460e2b3e1871e7c372f24abd5106b0aa216f7d1ab67071ce792435b9d2e51025cedc42d5238919f891372291a39d53824e80baeaec35812993266e55fad561ba1b7e1854ef072a628ff681ccbc0f05c5deadb3a90b442a2b1ff405b7d7dd81c623be8bddb8aee7b646da18cef3d3151d3debbd68a096c58f1fd215851e4735bf3dd213837983db0bfc5a2e1fe51e630d0a823c7425407a371fa547"}, {0x70, 0x0, 0x400, "eec6ebd474ea33e49955874a2c9c73025d22826d643d5c90aac0e5599127bfae36ab0a349795f4d79f504b9bbfe4bbb00bd660e590d9a51b06d9500c1e31d42ac6b4c0b3514aaf0b32a447b21d3d36a5948c987a164b78ef2465"}, {0x20, 0x10d, 0x6, "4aa64bc51537c32c96ec5cd4"}, {0xa8, 0x111, 0x0, "9b036f90605a01453af7eb0332149fbd88501df53f1477d64ca2d1b91dd78fa23cd9b03abfb786be9b4eac9668246923fd481fb4288c7dcbde50f01acd2f759ab05228a96efd5cfcd637314199776e9b4f62952210bb29cc6c4202d289c6597e069afa29d3f6a49a7c6a26883bf81d27ec37ef64a44dff16fc088053f40896e148170411073e166be48a599b0b8beef298a6069a520321"}, {0x68, 0x10e, 0x4f8, "f58b7c53a2e880d3ebcc4008660317b123772fb99ed7faa2b34176dd0b09eb19620011bc4e03991b851d734de87b4b37a3bced39a70b71a35160b55413c5cdd3aea7730db1cd34e8308914f241de33cab93e3c06"}], 0x2e8}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xc}, 0x4a01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.74024856s ago: executing program 3 (id=8302): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018480000feffffff0000000000000000b5708000ffffffff18260000", @ANYRES32, @ANYBLOB="000008006d000000a56edc1c64158cc4408e706cdbad594894b866ef3b25c55ba3cd9ef6d0622677ba62e4d8fc9433fa7dcdecc1a409e5788545c7e316c5765d1f043fab5efbdd19dcfe3977d1215e43ae2a13acfc6b2b4ff569e3ef84e2a5bd6ce6f9a23a4ae48b696015c2b6e9005d0200000099b5f0"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x8e, &(0x7f0000000380)=""/142, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x91c, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x1, 0xc, 0x7}], 0x10, 0x8}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000002000000000000000000003000000000100000002"], 0x0, 0x66}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000104000000991805166700a6ba63ffd4c20f7e6e2041913031ebf6b28c5f907d22d1fb966970660b0057c8bd1b30272c88e7e401020ece230d9c0f069e672bfd032df7b396d1ec89849ff2f90444d217"], 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000920050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='rm\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) 2.73926001s ago: executing program 0 (id=8303): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0xfd9b}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x13}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x12, &(0x7f0000000100)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0xb, 0x0, 0x7, 0x80, 0xffffffffffffffff}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6d}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x8e, &(0x7f0000000380)=""/142, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x91c, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x1, 0xc, 0x7}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f0000000080020012", 0x2d}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7cebac38416de07d667f18d04f96724338b9b9a21c76a6692a0da94953652ab46d883decaa2a6ecfdcf02c23c635aa261658ddb1257f10986c22e", 0x64}, {0x0}, {0x0}, {&(0x7f0000000340)}, {0x0}], 0x6}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000002000000000000000000003000000000100000002"], 0x0, 0x66}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r2, &(0x7f0000000640)="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", &(0x7f0000000880)=""/225}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) 1.995747229s ago: executing program 1 (id=8304): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1824a, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@enum={0x3}, @struct={0x8, 0x0, 0x0, 0x4, 0x0, 0xfffffff5}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x30, 0x5f, 0x30, 0x2e]}}, 0x0, 0x3a, 0x0, 0x9, 0x6}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x32, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) socket$kcm(0x29, 0xc09ec0ef3dd8a6a3, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.987829979s ago: executing program 3 (id=8305): r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xe, 0x7, 0x1, 0x0, 0x0, 0x6, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4052, 0x7, 0x0, 0x8, 0x870a, 0x2, 0x8, 0x0, 0x77000000}, 0x0, 0x5, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x800}, 0x114905, 0x4, 0x7, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/68, 0x50}], 0x1, &(0x7f0000000780)=""/163, 0x11}, 0x40000022) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0xff, 0x5, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x2, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa500000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'virt_wifi0\x00'}) unlink(&(0x7f0000000180)='./file0\x00') sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 1.911294961s ago: executing program 0 (id=8306): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee080", 0x52}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)='%-5lx \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0xfffffffffffffffc, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1b, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x6, 0xb6d, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x4, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r4, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x9, &(0x7f0000000540)=@raw=[@alu={0x4, 0x1, 0x3, 0x7, 0x7, 0x100, 0xfffffffffffffffc}, @ringbuf_query, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @alu={0x7, 0x1, 0x9, 0x7, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x9, 0x5, 0x6, 0x0, 0xfffffffffffffffc}], &(0x7f0000000840)='GPL\x00', 0x9, 0x4e, &(0x7f0000000880)=""/78, 0x40f00, 0x40, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0x2, 0x40c5, 0x7fff}, 0x10, r6, r0, 0x2, &(0x7f0000000cc0)=[r3, r7, r1, r3, r3, r4, r3], &(0x7f0000000d00)=[{0x4, 0x5, 0xb, 0xa}, {0x4, 0x4, 0x9, 0x1}]}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000022c0)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x20012}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002380)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000023c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x18, 0x1d, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000012c0)=""/4096, 0x41100, 0x24, '\x00', r5, 0x0, r8, 0x8, &(0x7f0000002300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000002340)={0x3, 0xe, 0x7f, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002400)=[r9, r10, r11], 0x0, 0x10, 0x9}, 0x94) r12 = socket$kcm(0xa, 0x5, 0x0) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="140000002d000b35f8ffffffffffffff0fa3096d", 0x14}], 0x1}, 0x854) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r14, &(0x7f0000000140)=ANY=[], 0x32600) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@enum64={0x4, 0x5, 0x0, 0x13, 0x0, 0x1, [{0x80000002, 0x2, 0xf}, {0x10, 0x9, 0x9}, {0xc, 0xaf6b, 0x8}, {0x3, 0x7, 0x80000882}, {0x6, 0x7c3f2b2c, 0xf3c}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f0000002580)=""/9, 0x67, 0x9, 0x1, 0x28f0c5d9}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x40305829, &(0x7f0000000040)) sendmsg$kcm(r12, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'b'}], 0x18}, 0x41) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600007c03600e120800110002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1.799202924s ago: executing program 32 (id=8280): perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcde, 0x43a1bd76, 0x7, 0x9, 0x400006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) syz_clone(0x40000000, &(0x7f00000001c0)="b3", 0x1, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)="c57e822308adf19648f0602d067576fc4a264e4a0fd54c16e17a8c687f73e4c51d1b02ffafbb4e19c7fc832f63f49f6bb082f337cbc84df47519fa83f6c8c73077b97b46e1abc4f051c068c4c8542fdeefd02b27093cbfa2a21244a28f7b68de3329664953836d36f4d17b8cf8622c96f36523aa61a21ee94edbfd81ed0a0a4c9d3e3df1e5dae68510e7a356380460540874a201d3b2831c02f191e225be46001eae94af36bec5f4cf2b66b9744ef8b2e0e47dcc2a08e0973c822cb680c10f08") sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 1.280376767s ago: executing program 3 (id=8308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, &(0x7f00000005c0)="3814d2", &(0x7f00000006c0)=""/122}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='veth0_virt_wifi\t\v'], 0x12) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r6, r4}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x11) 1.229169248s ago: executing program 0 (id=8309): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34, 0x0, 0x0, 0xfffffffd}, 0x28) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000040000000000000000076b50b39e321bfc90f4596097e84afccf473080625cf6c034e00dd42d254d163887e48f3a17ca43e58516198730bcde2019bbbfbdc16f5d2dafb99533d749b4f07a940afbbbbd4d7e43735ef4695de4e5c7a6f5618da67b295a3bc15919044eece998cfd97160b482790ccceec5c3d1c155e13d77fe957f44d74bb3bf6f25f9c03f3a3953e8fd0cdd956118741582bd25bf3f0a6d9cd17657606a8a579deda774daef18e1b69b73ff3fd3fba881bba3da6db1a78bc855012a4ce1f57ed0000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) recvmsg(r4, 0x0, 0x40002182) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="350400004100054cc6a119e30c80a843015a35400c0002000200002037153e370c04018006041a004500ac377653c6de2a7c31f4a918505e7a19ff6dc6a3cb9708b9469405009c8e000000800000516c006c154938456646efee34b951a078932502bdbcf6c6b8d226dc64f5b1a0718d687ed8934d4780bae8ba0a55a6c130214043ff8ad5084a642a4d4aac02e408ff3af4be00"/159, 0x9f}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b", 0x396}], 0x2}, 0x10049014) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8918, 0x0) sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2d0022020000000040000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x1) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 725.575641ms ago: executing program 1 (id=8310): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc2, 0x1ff}, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r2, 0x0, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, 0x0, 0x2020) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x7, 0x6, 0x3, 0x3220, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x80000000000000b}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10d, 0x10d, 0xa, [@ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x71, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @enum={0x3, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x2}, {0xc, 0x6e}, {0xd, 0xc42b}, {0x4, 0x1000}, {0xc, 0x9}, {0x10, 0x4}, {0x4, 0x2}]}, @var={0x3, 0x0, 0x0, 0xe, 0x4}, @datasec={0x10, 0x4, 0x0, 0xf, 0x1, [{0x1, 0xb, 0x1}, {0x2, 0x9018, 0x1}, {0x2, 0x1, 0x2}, {0x4, 0x7, 0x9}], 'u'}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x5}]}, @union={0x3, 0x2, 0x0, 0x5, 0x0, 0x5, [{0xf, 0x4, 0x7}, {0x9, 0x0, 0x3}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x6e, 0x0, 0x12}]}, {0x0, [0x10, 0x61, 0x61, 0x2e, 0x0, 0x2e, 0x61, 0x30]}}, &(0x7f00000006c0)=""/119, 0x132, 0x77, 0x0, 0x3, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=8311): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1824a, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0x3}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0xfffffff5, [{0x4, 0x1}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x30, 0x5f, 0x30, 0x2e]}}, 0x0, 0x46, 0x0, 0x9, 0x6}, 0x28) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x32, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) socket$kcm(0x29, 0xc09ec0ef3dd8a6a3, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.345731][T28138] RSP: 002b:00007fe0032d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1679.354186][T28138] RAX: ffffffffffffffda RBX: 00007fe002625fa0 RCX: 00007fe00239e0d9 [ 1679.362187][T28138] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001b [ 1679.370203][T28138] RBP: 00007fe0032d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.378203][T28138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1679.386221][T28138] R13: 00007fe002626038 R14: 00007fe002625fa0 R15: 00007ffe180b4708 [ 1679.394245][T28138] [ 1679.547691][T28144] netlink: 'syz.3.7052': attribute type 12 has an invalid length. [ 1679.566319][T28144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7052'. [ 1679.596829][T28145] netlink: 'syz.1.7054': attribute type 10 has an invalid length. [ 1679.610135][T18390] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 1679.629250][T28145] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7054'. [ 1679.665363][T28145] bridge0: port 2(hsr0) entered blocking state [ 1679.676693][T28145] bridge0: port 2(hsr0) entered disabled state [ 1679.689417][T28145] hsr0: entered allmulticast mode [ 1679.695308][T28145] hsr_slave_0: entered allmulticast mode [ 1679.706960][T28145] hsr_slave_1: entered allmulticast mode [ 1679.753937][T28145] bridge0: port 2(hsr0) entered blocking state [ 1679.761370][T28145] bridge0: port 2(hsr0) entered forwarding state [ 1679.934784][T28152] netlink: 'syz.2.7056': attribute type 10 has an invalid length. [ 1679.954511][T28152] hsr0: left allmulticast mode [ 1679.960675][T28152] hsr_slave_0: left allmulticast mode [ 1679.970806][T28152] hsr_slave_1: left allmulticast mode [ 1679.982370][T28152] bridge0: port 4(hsr0) entered disabled state [ 1680.185098][T28152] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1680.220268][T28150] netlink: 'syz.0.7055': attribute type 10 has an invalid length. [ 1680.229652][T28157] netlink: 'syz.3.7057': attribute type 19 has an invalid length. [ 1680.396815][T28160] netlink: 'syz.1.7058': attribute type 10 has an invalid length. [ 1680.898335][T28175] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1680.939192][T28176] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1681.051487][T18390] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 1681.107334][T28180] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1681.121219][T28180] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1681.134831][T28180] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1681.141464][T28180] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1681.157601][T28180] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1681.164229][T28180] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1681.174440][T28180] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1681.181199][T28180] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1681.191584][T28180] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1681.198267][T28180] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1684.235268][T28185] validate_nla: 3 callbacks suppressed [ 1684.235311][T28185] netlink: 'syz.3.7068': attribute type 19 has an invalid length. [ 1684.270857][T28185] __nla_validate_parse: 6 callbacks suppressed [ 1684.270895][T28185] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7068'. [ 1684.340333][T28189] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7070'. [ 1684.488104][T28187] netlink: 'syz.2.7069': attribute type 10 has an invalid length. [ 1684.527459][T28187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7069'. [ 1684.763080][T28199] netlink: 'syz.1.7072': attribute type 10 has an invalid length. [ 1684.781790][T28199] hsr0: left allmulticast mode [ 1684.796545][T28199] hsr_slave_0: left allmulticast mode [ 1684.811791][T28199] hsr_slave_1: left allmulticast mode [ 1684.877099][T28199] bridge0: port 2(hsr0) entered disabled state [ 1685.006267][T28199] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1685.037570][T28198] netlink: 'syz.0.7079': attribute type 10 has an invalid length. [ 1685.067391][T28198] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1685.109785][T28203] netlink: 'syz.3.7071': attribute type 10 has an invalid length. [ 1685.128016][T28203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7071'. [ 1685.463023][T28206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1685.507098][T28206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1685.539981][T28206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1685.606792][T28209] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1685.664850][T28208] netlink: 'syz.0.7084': attribute type 10 has an invalid length. [ 1685.699593][T28208] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1685.820684][T28215] netlink: 'syz.3.7075': attribute type 10 has an invalid length. [ 1685.842410][T28215] hsr0: left allmulticast mode [ 1685.866581][T28215] hsr_slave_0: left allmulticast mode [ 1685.886574][T28215] hsr_slave_1: left allmulticast mode [ 1685.892246][T28215] bridge0: port 3(hsr0) entered disabled state [ 1686.067577][T28215] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1686.164160][T18390] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 1686.177806][T28219] netlink: 'syz.1.7078': attribute type 12 has an invalid length. [ 1686.197374][T28219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1686.240214][T28220] mac80211_hwsim hwsim67 wlan1: entered allmulticast mode [ 1686.311625][T28213] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1686.330530][T28213] syzkaller0: entered promiscuous mode [ 1686.340633][T28213] syzkaller0: entered allmulticast mode [ 1686.600575][T28228] netlink: 'syz.1.7080': attribute type 19 has an invalid length. [ 1686.626924][T28228] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7080'. [ 1686.978844][T28234] netlink: 'syz.0.7083': attribute type 10 has an invalid length. [ 1687.130832][T28241] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1687.183500][T28242] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1687.821884][T28256] net_ratelimit: 22768 callbacks suppressed [ 1687.821921][T28256] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1687.835166][T28256] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1687.870404][T28256] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1687.877512][T28256] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1687.899348][T28256] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1687.906312][T28256] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1687.914500][T28256] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1687.921482][T28256] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1687.930196][T28256] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1687.937208][T28256] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1690.732780][T28258] mac80211_hwsim hwsim63 wlan1: left promiscuous mode [ 1690.788455][T28262] validate_nla: 4 callbacks suppressed [ 1690.788476][T28262] netlink: 'syz.2.7094': attribute type 19 has an invalid length. [ 1690.802963][T28262] __nla_validate_parse: 4 callbacks suppressed [ 1690.802981][T28262] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7094'. [ 1690.829277][T28264] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7095'. [ 1691.128426][T28269] netlink: 'syz.2.7096': attribute type 10 has an invalid length. [ 1691.157826][T28269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7096'. [ 1691.212885][T28272] netlink: 'syz.1.7097': attribute type 10 has an invalid length. [ 1691.241847][T28272] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1691.314520][T28275] netlink: 'syz.3.7099': attribute type 12 has an invalid length. [ 1691.326617][T28275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7099'. [ 1691.694105][T28284] netlink: 'syz.3.7103': attribute type 10 has an invalid length. [ 1691.723673][T28284] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1691.779387][T28289] netlink: 'syz.2.7102': attribute type 10 has an invalid length. [ 1691.788958][T28289] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1691.898975][T28287] netlink: 'syz.1.7104': attribute type 19 has an invalid length. [ 1691.917095][T28287] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7104'. [ 1692.012945][T28291] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7105'. [ 1692.222147][T28294] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7106'. [ 1692.697736][T28298] mac80211_hwsim hwsim61 wlan1: left promiscuous mode [ 1692.854147][T28304] netlink: 'syz.0.7115': attribute type 10 has an invalid length. [ 1692.954243][T28304] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1693.132418][T28310] netlink: 'syz.3.7111': attribute type 12 has an invalid length. [ 1693.166686][T28310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7111'. [ 1693.439360][T28315] netlink: 'syz.2.7112': attribute type 10 has an invalid length. [ 1693.458867][T28315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7112'. [ 1693.686699][T28319] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7114'. [ 1693.710477][T28319] bridge0: port 2(hsr0) entered blocking state [ 1693.719295][T28319] bridge0: port 2(hsr0) entered disabled state [ 1693.728539][T28319] hsr0: entered allmulticast mode [ 1693.734071][T28319] hsr_slave_0: entered allmulticast mode [ 1693.744280][T28319] hsr_slave_1: entered allmulticast mode [ 1693.790255][T28319] bridge0: port 2(hsr0) entered blocking state [ 1693.797650][T28319] bridge0: port 2(hsr0) entered forwarding state [ 1694.644517][T28348] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1695.525206][T28365] net_ratelimit: 22618 callbacks suppressed [ 1695.525225][T28365] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1695.677774][T28370] delete_channel: no stack [ 1695.942128][T28380] validate_nla: 7 callbacks suppressed [ 1695.942170][T28380] netlink: 'syz.1.7137': attribute type 10 has an invalid length. [ 1695.976626][T28380] __nla_validate_parse: 10 callbacks suppressed [ 1695.976935][T28380] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7137'. [ 1696.081751][T28382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7136'. [ 1696.201524][T28384] netlink: 'syz.1.7138': attribute type 10 has an invalid length. [ 1696.211377][T28384] hsr0: left allmulticast mode [ 1696.217023][T28384] hsr_slave_0: left allmulticast mode [ 1696.223843][T28384] hsr_slave_1: left allmulticast mode [ 1696.231876][T28384] bridge0: port 2(hsr0) entered disabled state [ 1696.253338][T28384] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1696.444131][T28389] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7140'. [ 1696.495430][T28387] netlink: 'syz.3.7139': attribute type 10 has an invalid length. [ 1696.506015][T28387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7139'. [ 1696.624234][T28393] FAULT_INJECTION: forcing a failure. [ 1696.624234][T28393] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.638388][T28393] CPU: 0 PID: 28393 Comm: syz.1.7142 Not tainted syzkaller #0 [ 1696.645914][T28393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1696.655993][T28393] Call Trace: [ 1696.659311][T28393] [ 1696.662265][T28393] dump_stack_lvl+0x18c/0x250 [ 1696.666977][T28393] ? show_regs_print_info+0x20/0x20 [ 1696.672233][T28393] ? load_image+0x420/0x420 [ 1696.676801][T28393] ? __might_sleep+0xe0/0xe0 [ 1696.681435][T28393] ? __lock_acquire+0x7d80/0x7d80 [ 1696.686492][T28393] should_fail_ex+0x394/0x4c0 [ 1696.691241][T28393] should_failslab+0x9/0x20 [ 1696.695802][T28393] slab_pre_alloc_hook+0x59/0x300 [ 1696.700898][T28393] kmem_cache_alloc+0x5a/0x2c0 [ 1696.705683][T28393] ? security_inode_alloc+0x34/0x110 [ 1696.711012][T28393] security_inode_alloc+0x34/0x110 [ 1696.716141][T28393] inode_init_always+0x914/0xc90 [ 1696.721097][T28393] new_inode_pseudo+0x95/0x1d0 [ 1696.725893][T28393] __sock_create+0x12d/0x940 [ 1696.730544][T28393] __smc_create+0x19f/0x260 [ 1696.735102][T28393] __sock_create+0x49e/0x940 [ 1696.739759][T28393] __sys_socket+0xd7/0x1b0 [ 1696.744228][T28393] __x64_sys_socket+0x7a/0x90 [ 1696.749133][T28393] do_syscall_64+0x55/0xb0 [ 1696.753593][T28393] ? clear_bhb_loop+0x40/0x90 [ 1696.758302][T28393] ? clear_bhb_loop+0x40/0x90 [ 1696.763009][T28393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1696.768941][T28393] RIP: 0033:0x7fd69959e0d9 [ 1696.773406][T28393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.793040][T28393] RSP: 002b:00007fd69a3b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1696.801490][T28393] RAX: ffffffffffffffda RBX: 00007fd699825fa0 RCX: 00007fd69959e0d9 [ 1696.809496][T28393] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 1696.817494][T28393] RBP: 00007fd69a3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.825491][T28393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.833490][T28393] R13: 00007fd699826038 R14: 00007fd699825fa0 R15: 00007ffd1a06a188 [ 1696.841511][T28393] [ 1696.882833][T28393] socket: no more sockets [ 1697.025126][T28400] netlink: 'syz.1.7144': attribute type 12 has an invalid length. [ 1697.033424][T28400] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7144'. [ 1697.179170][T28404] netlink: 'syz.3.7146': attribute type 10 has an invalid length. [ 1697.215144][T28404] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7146'. [ 1697.248066][T28404] bridge0: port 3(hsr0) entered blocking state [ 1697.255367][T28404] bridge0: port 3(hsr0) entered disabled state [ 1697.290107][T28404] hsr0: entered allmulticast mode [ 1697.295402][T28404] hsr_slave_0: entered allmulticast mode [ 1697.305419][T28404] hsr_slave_1: entered allmulticast mode [ 1697.383403][T28404] bridge0: port 3(hsr0) entered blocking state [ 1697.391048][T28404] bridge0: port 3(hsr0) entered forwarding state [ 1697.434722][T28407] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7147'. [ 1697.461115][T28415] netlink: 'syz.1.7149': attribute type 19 has an invalid length. [ 1697.470566][T28415] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7149'. [ 1697.585266][T28418] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7150'. [ 1697.693425][T28421] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1697.874679][T28422] netlink: 'syz.3.7151': attribute type 10 has an invalid length. [ 1698.024368][T28429] FAULT_INJECTION: forcing a failure. [ 1698.024368][T28429] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.067586][T28429] CPU: 1 PID: 28429 Comm: syz.1.7154 Not tainted syzkaller #0 [ 1698.075131][T28429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1698.085233][T28429] Call Trace: [ 1698.088553][T28429] [ 1698.091520][T28429] dump_stack_lvl+0x18c/0x250 [ 1698.096252][T28429] ? show_regs_print_info+0x20/0x20 [ 1698.101511][T28429] ? load_image+0x420/0x420 [ 1698.106068][T28429] ? __might_sleep+0xe0/0xe0 [ 1698.110707][T28429] ? __lock_acquire+0x7d80/0x7d80 [ 1698.115777][T28429] should_fail_ex+0x394/0x4c0 [ 1698.120511][T28429] should_failslab+0x9/0x20 [ 1698.125109][T28429] slab_pre_alloc_hook+0x59/0x300 [ 1698.130194][T28429] ? __lock_acquire+0x7d80/0x7d80 [ 1698.135300][T28429] ? security_sk_alloc+0x4b/0x130 [ 1698.140366][T28429] ? security_sk_alloc+0x4b/0x130 [ 1698.145439][T28429] __kmem_cache_alloc_node+0x53/0x250 [ 1698.150882][T28429] ? security_sk_alloc+0x4b/0x130 [ 1698.155946][T28429] __kmalloc+0xa7/0x240 [ 1698.160162][T28429] security_sk_alloc+0x4b/0x130 [ 1698.165145][T28429] sk_prot_alloc+0x101/0x210 [ 1698.169847][T28429] sk_alloc+0x3a/0x350 [ 1698.173978][T28429] inet_create+0x7a9/0xfe0 [ 1698.178451][T28429] ? inet_create+0x9d/0xfe0 [ 1698.183011][T28429] __sock_create+0x49e/0x940 [ 1698.187659][T28429] mptcp_subflow_create_socket+0x10c/0xad0 [ 1698.193518][T28429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1698.199729][T28429] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 1698.205598][T28429] __mptcp_nmpc_sk+0x157/0x720 [ 1698.210419][T28429] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 1698.217254][T28429] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1698.222694][T28429] ? lockdep_hardirqs_on+0x98/0x150 [ 1698.227947][T28429] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1698.233457][T28429] mptcp_sendmsg_fastopen+0x7c/0x4c0 [ 1698.238972][T28429] mptcp_sendmsg+0x144c/0x1670 [ 1698.243796][T28429] ? aa_sk_perm+0x83c/0x970 [ 1698.248352][T28429] ? aa_sk_perm+0x83c/0x970 [ 1698.252911][T28429] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1698.258784][T28429] ? aa_af_perm+0x330/0x330 [ 1698.263344][T28429] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1698.269909][T28429] ? mptcp_shutdown+0x80/0x80 [ 1698.274642][T28429] ? sock_rps_record_flow+0x19/0x3f0 [ 1698.279982][T28429] ? inet_sendmsg+0xce/0x2a0 [ 1698.284623][T28429] ? inet_send_prepare+0x250/0x250 [ 1698.289791][T28429] ____sys_sendmsg+0x61b/0x980 [ 1698.294605][T28429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1698.300902][T28429] ? __asan_memset+0x22/0x40 [ 1698.305546][T28429] ? __sys_sendmsg_sock+0x30/0x30 [ 1698.310622][T28429] ? __import_iovec+0x3fa/0x850 [ 1698.315537][T28429] ? import_iovec+0x73/0xa0 [ 1698.320224][T28429] ___sys_sendmsg+0x2a6/0x360 [ 1698.325056][T28429] ? __sys_sendmsg+0x2b0/0x2b0 [ 1698.329928][T28429] __se_sys_sendmsg+0x1d0/0x2c0 [ 1698.334850][T28429] ? __x64_sys_sendmsg+0x80/0x80 [ 1698.339877][T28429] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1698.345860][T28429] do_syscall_64+0x55/0xb0 [ 1698.350389][T28429] ? clear_bhb_loop+0x40/0x90 [ 1698.355135][T28429] ? clear_bhb_loop+0x40/0x90 [ 1698.359871][T28429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1698.365832][T28429] RIP: 0033:0x7fd69959e0d9 [ 1698.370299][T28429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.389965][T28429] RSP: 002b:00007fd69a3b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1698.398441][T28429] RAX: ffffffffffffffda RBX: 00007fd699825fa0 RCX: 00007fd69959e0d9 [ 1698.406483][T28429] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000003 [ 1698.414512][T28429] RBP: 00007fd69a3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.422533][T28429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.430558][T28429] R13: 00007fd699826038 R14: 00007fd699825fa0 R15: 00007ffd1a06a188 [ 1698.438598][T28429] [ 1698.645989][T28432] netlink: 'syz.0.7156': attribute type 25 has an invalid length. [ 1698.656075][T28432] netlink: 'syz.0.7156': attribute type 3 has an invalid length. [ 1698.684691][T28432] netlink: 'syz.0.7156': attribute type 10 has an invalid length. [ 1698.710690][T28441] FAULT_INJECTION: forcing a failure. [ 1698.710690][T28441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1698.724489][T28432] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1698.732294][T28432] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.763321][T28441] CPU: 1 PID: 28441 Comm: syz.2.7160 Not tainted syzkaller #0 [ 1698.770859][T28441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1698.780959][T28441] Call Trace: [ 1698.784332][T28441] [ 1698.787305][T28441] dump_stack_lvl+0x18c/0x250 [ 1698.792026][T28441] ? show_regs_print_info+0x20/0x20 [ 1698.797260][T28441] ? load_image+0x420/0x420 [ 1698.801808][T28441] ? __might_fault+0xaa/0x120 [ 1698.806555][T28441] should_fail_ex+0x394/0x4c0 [ 1698.811286][T28441] copyin+0x1a/0x90 [ 1698.815129][T28441] _copy_from_iter+0x3ec/0x1290 [ 1698.820023][T28441] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1698.825440][T28441] ? copyout_mc+0x70/0x70 [ 1698.829809][T28441] ? __virt_addr_valid+0x10c/0x380 [ 1698.834964][T28441] ? __virt_addr_valid+0x10c/0x380 [ 1698.840123][T28441] ? __virt_addr_valid+0x10c/0x380 [ 1698.845270][T28441] ? __check_object_size+0x4fc/0xa40 [ 1698.850592][T28441] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 1698.856352][T28441] ? dev_get_by_index+0x22/0x2d0 [ 1698.861328][T28441] ? skb_put+0x112/0x210 [ 1698.865608][T28441] packet_sendmsg+0x345e/0x4c70 [ 1698.870540][T28441] ? set_user_nice+0x620/0xb20 [ 1698.875345][T28441] ? perf_trace_lock_acquire+0x105/0x400 [ 1698.881012][T28441] ? aa_sk_perm+0x83c/0x970 [ 1698.885553][T28441] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1698.892182][T28441] ? packet_getsockopt+0xad0/0xad0 [ 1698.897326][T28441] ? tomoyo_write_file+0x1d0/0xc50 [ 1698.902477][T28441] ? aa_sock_msg_perm+0x94/0x150 [ 1698.907449][T28441] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1698.913030][T28441] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1698.918353][T28441] ? security_socket_sendmsg+0x80/0xa0 [ 1698.923841][T28441] ? packet_getsockopt+0xad0/0xad0 [ 1698.928986][T28441] ____sys_sendmsg+0x61b/0x980 [ 1698.933783][T28441] ? __asan_memset+0x22/0x40 [ 1698.938408][T28441] ? __sys_sendmsg_sock+0x30/0x30 [ 1698.943460][T28441] ? __import_iovec+0x3fa/0x850 [ 1698.948354][T28441] ? import_iovec+0x73/0xa0 [ 1698.952893][T28441] ___sys_sendmsg+0x2a6/0x360 [ 1698.957600][T28441] ? get_pid_task+0x20/0x1e0 [ 1698.962234][T28441] ? __sys_sendmsg+0x2b0/0x2b0 [ 1698.967049][T28441] ? __lock_acquire+0x7d80/0x7d80 [ 1698.972125][T28441] __se_sys_sendmsg+0x1d0/0x2c0 [ 1698.977010][T28441] ? __x64_sys_sendmsg+0x80/0x80 [ 1698.982001][T28441] ? lockdep_hardirqs_on+0x98/0x150 [ 1698.987238][T28441] do_syscall_64+0x55/0xb0 [ 1698.991684][T28441] ? clear_bhb_loop+0x40/0x90 [ 1698.996395][T28441] ? clear_bhb_loop+0x40/0x90 [ 1699.001109][T28441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1699.007037][T28441] RIP: 0033:0x7fe00239e0d9 [ 1699.011482][T28441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.031171][T28441] RSP: 002b:00007fe0032d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1699.039616][T28441] RAX: ffffffffffffffda RBX: 00007fe002625fa0 RCX: 00007fe00239e0d9 [ 1699.047614][T28441] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1699.055614][T28441] RBP: 00007fe0032d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.063614][T28441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.071618][T28441] R13: 00007fe002626038 R14: 00007fe002625fa0 R15: 00007ffe180b4708 [ 1699.079638][T28441] [ 1699.084213][T28432] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1699.427480][T28440] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1700.144027][T28464] FAULT_INJECTION: forcing a failure. [ 1700.144027][T28464] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.163564][T28464] CPU: 1 PID: 28464 Comm: syz.2.7168 Not tainted syzkaller #0 [ 1700.171097][T28464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1700.181215][T28464] Call Trace: [ 1700.184529][T28464] [ 1700.187530][T28464] dump_stack_lvl+0x18c/0x250 [ 1700.192250][T28464] ? show_regs_print_info+0x20/0x20 [ 1700.197482][T28464] ? load_image+0x420/0x420 [ 1700.202055][T28464] ? __might_sleep+0xe0/0xe0 [ 1700.206680][T28464] ? __lock_acquire+0x7d80/0x7d80 [ 1700.211743][T28464] should_fail_ex+0x394/0x4c0 [ 1700.216465][T28464] should_failslab+0x9/0x20 [ 1700.221017][T28464] slab_pre_alloc_hook+0x59/0x300 [ 1700.226110][T28464] ? kvmalloc_node+0x70/0x180 [ 1700.230821][T28464] ? kvmalloc_node+0x70/0x180 [ 1700.235543][T28464] __kmem_cache_alloc_node+0x53/0x250 [ 1700.240955][T28464] ? kvmalloc_node+0x70/0x180 [ 1700.245666][T28464] __kmalloc_node+0xa6/0x240 [ 1700.250299][T28464] kvmalloc_node+0x70/0x180 [ 1700.254862][T28464] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 1700.260283][T28464] ? 0xffffffffa0004740 [ 1700.264472][T28464] ? 0xffffffffa0004740 [ 1700.268657][T28464] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1700.274597][T28464] ? xdp_convert_md_to_buff+0x330/0x330 [ 1700.280214][T28464] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1700.286508][T28464] ? _copy_from_user+0xa5/0xe0 [ 1700.291330][T28464] ? bpf_test_init+0x119/0x140 [ 1700.296131][T28464] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1700.301631][T28464] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1700.307038][T28464] ? __lock_acquire+0x7d80/0x7d80 [ 1700.312106][T28464] ? dev_put+0x80/0x80 [ 1700.316220][T28464] ? dev_put+0x80/0x80 [ 1700.320336][T28464] bpf_prog_test_run+0x31f/0x390 [ 1700.325325][T28464] __sys_bpf+0x49d/0x890 [ 1700.329622][T28464] ? bpf_link_show_fdinfo+0x390/0x390 [ 1700.335035][T28464] ? lock_chain_count+0x20/0x20 [ 1700.339923][T28464] __x64_sys_bpf+0x7c/0x90 [ 1700.344369][T28464] do_syscall_64+0x55/0xb0 [ 1700.348842][T28464] ? clear_bhb_loop+0x40/0x90 [ 1700.353558][T28464] ? clear_bhb_loop+0x40/0x90 [ 1700.358283][T28464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1700.364219][T28464] RIP: 0033:0x7fe00239e0d9 [ 1700.368676][T28464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1700.388324][T28464] RSP: 002b:00007fe0032d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1700.396780][T28464] RAX: ffffffffffffffda RBX: 00007fe002625fa0 RCX: 00007fe00239e0d9 [ 1700.404791][T28464] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1700.412801][T28464] RBP: 00007fe0032d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1700.420806][T28464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1700.428808][T28464] R13: 00007fe002626038 R14: 00007fe002625fa0 R15: 00007ffe180b4708 [ 1700.436830][T28464] [ 1700.951163][T28476] validate_nla: 3 callbacks suppressed [ 1700.951226][T28476] netlink: 'syz.3.7172': attribute type 25 has an invalid length. [ 1700.976676][T28476] netlink: 'syz.3.7172': attribute type 3 has an invalid length. [ 1701.002635][T28476] netlink: 'syz.3.7172': attribute type 10 has an invalid length. [ 1701.026706][T28476] __nla_validate_parse: 7 callbacks suppressed [ 1701.026745][T28476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7172'. [ 1701.127210][T28476] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1701.165461][T28476] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1701.214684][T28476] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1701.357727][T28485] mac80211_hwsim hwsim69 wlan1: entered allmulticast mode [ 1701.426212][T28481] netlink: 'syz.2.7174': attribute type 10 has an invalid length. [ 1701.434528][T28481] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1701.655539][T28492] netlink: 'syz.3.7176': attribute type 19 has an invalid length. [ 1701.677693][T28492] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7176'. [ 1701.705976][T28490] netlink: 'syz.0.7186': attribute type 10 has an invalid length. [ 1701.726935][T28490] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1701.897864][T28496] netlink: 'syz.1.7178': attribute type 10 has an invalid length. [ 1701.920354][T28496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7178'. [ 1702.121373][T28505] netlink: 'syz.0.7182': attribute type 10 has an invalid length. [ 1702.151374][T28505] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7182'. [ 1702.164825][T28505] bridge0: port 3(hsr0) entered blocking state [ 1702.174858][T28505] bridge0: port 3(hsr0) entered disabled state [ 1702.187717][T28505] hsr0: entered allmulticast mode [ 1702.193016][T28505] hsr_slave_0: entered allmulticast mode [ 1702.208985][T28505] hsr_slave_1: entered allmulticast mode [ 1702.285258][T28505] bridge0: port 3(hsr0) entered blocking state [ 1702.293262][T28505] bridge0: port 3(hsr0) entered forwarding state [ 1702.309658][T28506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1702.340429][T28510] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7183'. [ 1702.528319][T18390] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1702.637645][T28517] netlink: 'syz.1.7188': attribute type 25 has an invalid length. [ 1702.646347][T28517] netlink: 'syz.1.7188': attribute type 3 has an invalid length. [ 1702.670545][T28517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7188'. [ 1702.705285][T28517] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1702.715818][T28517] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.743040][T28517] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1703.207542][T28528] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1703.247004][T28531] netlink: 205740 bytes leftover after parsing attributes in process `syz.2.7193'. [ 1703.266739][T28531] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1703.283815][T28531] openvswitch: netlink: Duplicate key (type 0). [ 1703.575525][T28538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7195'. [ 1703.598185][T28535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7194'. [ 1704.320679][T28555] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1705.258005][T28565] hsr0: left allmulticast mode [ 1705.298421][T28565] hsr_slave_0: left allmulticast mode [ 1705.316500][T28565] hsr_slave_1: left allmulticast mode [ 1705.327894][T28565] bridge0: port 3(hsr0) entered disabled state [ 1705.357997][T28565] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1705.399574][T28564] hsr0: left allmulticast mode [ 1705.416783][T28564] hsr_slave_0: left allmulticast mode [ 1705.427245][T28564] hsr_slave_1: left allmulticast mode [ 1705.435742][T28564] bridge0: port 3(hsr0) entered disabled state [ 1705.505893][T28564] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1705.592988][T28568] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1705.631858][T28568] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.677034][T28568] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1706.140811][T28579] validate_nla: 11 callbacks suppressed [ 1706.140856][T28579] netlink: 'syz.1.7209': attribute type 10 has an invalid length. [ 1706.231285][T28579] __nla_validate_parse: 6 callbacks suppressed [ 1706.231349][T28579] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7209'. [ 1706.338200][T28579] bridge0: port 2(hsr0) entered blocking state [ 1706.383785][T28579] bridge0: port 2(hsr0) entered disabled state [ 1706.417536][T28579] hsr0: entered allmulticast mode [ 1706.423298][T28579] hsr_slave_0: entered allmulticast mode [ 1706.465413][T18390] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1706.505108][T28579] hsr_slave_1: entered allmulticast mode [ 1706.642291][T28579] bridge0: port 2(hsr0) entered blocking state [ 1706.649801][T28579] bridge0: port 2(hsr0) entered forwarding state [ 1706.693489][T28588] netlink: 'syz.3.7212': attribute type 19 has an invalid length. [ 1706.716743][T28588] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7212'. [ 1706.865171][T28593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7215'. [ 1706.906797][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1706.916310][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1706.929379][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1706.939000][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1706.951900][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1706.959583][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1707.175757][T28599] netlink: 'syz.3.7217': attribute type 10 has an invalid length. [ 1707.191996][T28599] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1707.392691][T14285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.545389][T14285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.726161][T14285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.835162][T28605] FAULT_INJECTION: forcing a failure. [ 1707.835162][T28605] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.848970][T28605] CPU: 0 PID: 28605 Comm: syz.0.7218 Not tainted syzkaller #0 [ 1707.856529][T28605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1707.863276][T28592] chnl_net:caif_netlink_parms(): no params data found [ 1707.866608][T28605] Call Trace: [ 1707.876788][T28605] [ 1707.879762][T28605] dump_stack_lvl+0x18c/0x250 [ 1707.884491][T28605] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1707.890707][T28605] ? show_regs_print_info+0x20/0x20 [ 1707.895967][T28605] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1707.902197][T28605] should_fail_ex+0x394/0x4c0 [ 1707.906944][T28605] should_failslab+0x9/0x20 [ 1707.911505][T28605] slab_pre_alloc_hook+0x59/0x300 [ 1707.916590][T28605] kmem_cache_alloc+0x5a/0x2c0 [ 1707.921408][T28605] ? __inet_hash_connect+0x808/0x1870 [ 1707.926856][T28605] __inet_hash_connect+0x808/0x1870 [ 1707.932098][T28605] ? inet_hash_connect+0x130/0x130 [ 1707.937270][T28605] ? inet_bhash2_reset_saddr+0x80/0x80 [ 1707.942772][T28605] tcp_v4_connect+0xc55/0x18a0 [ 1707.947596][T28605] ? tcp_twsk_unique+0x970/0x970 [ 1707.952574][T28605] ? mptcp_token_new_connect+0x4b9/0x620 [ 1707.958253][T28605] mptcp_connect+0x403/0x5e0 [ 1707.962898][T28605] __inet_stream_connect+0x254/0xdf0 [ 1707.968242][T28605] ? inet_dgram_connect+0x340/0x340 [ 1707.973491][T28605] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1707.978736][T28605] mptcp_sendmsg_fastopen+0x121/0x4c0 [ 1707.984148][T28605] mptcp_sendmsg+0x144c/0x1670 [ 1707.988959][T28605] ? aa_sk_perm+0x83c/0x970 [ 1707.993508][T28605] ? aa_sk_perm+0x83c/0x970 [ 1707.998054][T28605] ? aa_af_perm+0x330/0x330 [ 1708.002615][T28605] ? aa_sk_perm+0x10/0x970 [ 1708.007062][T28605] ? mptcp_shutdown+0x80/0x80 [ 1708.011770][T28605] ? sock_rps_record_flow+0x19/0x3f0 [ 1708.017089][T28605] ? inet_sendmsg+0xce/0x2a0 [ 1708.021713][T28605] ? inet_send_prepare+0x250/0x250 [ 1708.027471][T28605] ____sys_sendmsg+0x61b/0x980 [ 1708.032259][T28605] ? iovec_from_user+0x5c/0x240 [ 1708.037150][T28605] ? __asan_memset+0x22/0x40 [ 1708.042042][T28605] ? __sys_sendmsg_sock+0x30/0x30 [ 1708.047098][T28605] ? __import_iovec+0x3fa/0x850 [ 1708.052073][T28605] ? import_iovec+0x73/0xa0 [ 1708.056649][T28605] ___sys_sendmsg+0x2a6/0x360 [ 1708.061374][T28605] ? __sys_sendmsg+0x2b0/0x2b0 [ 1708.066209][T28605] __se_sys_sendmsg+0x1d0/0x2c0 [ 1708.071094][T28605] ? __x64_sys_sendmsg+0x80/0x80 [ 1708.076074][T28605] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1708.082007][T28605] do_syscall_64+0x55/0xb0 [ 1708.086459][T28605] ? clear_bhb_loop+0x40/0x90 [ 1708.091167][T28605] ? clear_bhb_loop+0x40/0x90 [ 1708.095874][T28605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1708.101815][T28605] RIP: 0033:0x7f267779e0d9 [ 1708.106260][T28605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.126002][T28605] RSP: 002b:00007f267862e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1708.134562][T28605] RAX: ffffffffffffffda RBX: 00007f2677a25fa0 RCX: 00007f267779e0d9 [ 1708.142568][T28605] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000003 [ 1708.150571][T28605] RBP: 00007f267862e090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.158566][T28605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.166570][T28605] R13: 00007f2677a26038 R14: 00007f2677a25fa0 R15: 00007ffebd727d18 [ 1708.174578][T28605] [ 1708.301652][T14285] bond0: (slave netdevsim0): Releasing backup interface [ 1708.310986][T14285] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1708.320077][T14285] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1708.331923][T14285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.525604][T28592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.577867][T28592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.585179][T28592] bridge_slave_0: entered allmulticast mode [ 1708.616946][T28592] bridge_slave_0: entered promiscuous mode [ 1708.641739][T28592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.655836][T28592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.678009][T28592] bridge_slave_1: entered allmulticast mode [ 1708.690511][T28592] bridge_slave_1: entered promiscuous mode [ 1708.701926][T28614] netlink: 'syz.3.7227': attribute type 10 has an invalid length. [ 1708.715303][T28614] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7227'. [ 1708.730237][T28614] bridge0: port 3(hsr0) entered blocking state [ 1708.744743][T28614] bridge0: port 3(hsr0) entered disabled state [ 1708.755529][T28614] hsr0: entered allmulticast mode [ 1708.764321][T28614] hsr_slave_0: entered allmulticast mode [ 1708.775659][T28614] hsr_slave_1: entered allmulticast mode [ 1708.917921][T28614] bridge0: port 3(hsr0) entered blocking state [ 1708.925405][T28614] bridge0: port 3(hsr0) entered forwarding state [ 1708.942937][T28609] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7219'. [ 1708.997099][T28618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7220'. [ 1709.066694][T18390] Bluetooth: hci0: command tx timeout [ 1709.154020][T28592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.185503][T28592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.366165][T28592] team0: Port device team_slave_0 added [ 1709.399593][T18390] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 1709.420056][T28592] team0: Port device team_slave_1 added [ 1709.467409][T28626] netlink: 'syz.1.7221': attribute type 10 has an invalid length. [ 1709.475351][T28626] hsr0: left allmulticast mode [ 1709.527516][T28626] hsr_slave_0: left allmulticast mode [ 1709.556479][T28626] hsr_slave_1: left allmulticast mode [ 1709.572305][T28626] bridge0: port 2(hsr0) entered disabled state [ 1709.601792][T28626] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1709.883938][T28592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.893089][T28592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.926591][T28592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.942674][T28633] netlink: 'syz.3.7224': attribute type 10 has an invalid length. [ 1709.953507][T28633] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7224'. [ 1709.980624][T28592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1709.989369][T28592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1710.016954][T28592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.232535][T28642] netlink: 'syz.1.7225': attribute type 10 has an invalid length. [ 1710.256897][T28642] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1710.620967][T28592] hsr_slave_0: entered promiscuous mode [ 1710.653407][T28592] hsr_slave_1: entered promiscuous mode [ 1710.668103][T28592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1710.675803][T28592] Cannot create hsr debugfs directory [ 1710.795865][T28652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7226'. [ 1711.146907][T18390] Bluetooth: hci0: command tx timeout [ 1711.552089][T18390] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 1711.687323][T28669] netlink: 'syz.1.7230': attribute type 19 has an invalid length. [ 1711.713821][T28669] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7230'. [ 1712.174347][T28683] netlink: 'syz.3.7234': attribute type 10 has an invalid length. [ 1712.220925][T28683] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7234'. [ 1712.292242][T28690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7233'. [ 1712.323870][T14285] hsr_slave_0: left promiscuous mode [ 1712.331641][T14285] hsr_slave_1: left promiscuous mode [ 1712.392789][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1712.405075][T14285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1712.425221][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1712.443197][T14285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1712.464688][T14285] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1712.481320][T14285] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1712.508583][T14285] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1712.543138][T14285] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1712.579487][T14285] batman_adv: batadv0: Interface deactivated: vlan1 [ 1712.612735][T14285] batman_adv: batadv0: Removing interface: vlan1 [ 1712.641681][T14285] batadv0: left allmulticast mode [ 1712.666660][T14285] batadv0: left promiscuous mode [ 1712.672205][T14285] bridge0: port 3(batadv0) entered disabled state [ 1712.684928][T14285] bond0: left allmulticast mode [ 1712.690113][T14285] bond_slave_0: left allmulticast mode [ 1712.695742][T14285] bond_slave_1: left allmulticast mode [ 1712.702036][T14285] bridge_slave_1: left allmulticast mode [ 1712.708585][T14285] bridge0: port 2(bond0) entered disabled state [ 1712.725190][T14285] bridge_slave_0: left allmulticast mode [ 1712.731259][T14285] bridge_slave_0: left promiscuous mode [ 1712.737324][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.777477][T14285] veth1_macvtap: left promiscuous mode [ 1712.783307][T14285] veth0_macvtap: left promiscuous mode [ 1712.789471][T14285] veth1_vlan: left promiscuous mode [ 1712.795183][T14285] veth0_vlan: left promiscuous mode [ 1713.236709][T18390] Bluetooth: hci0: command tx timeout [ 1713.647193][T14285] team0 (unregistering): Port device team_slave_1 removed [ 1713.703597][T14285] team0 (unregistering): Port device team_slave_0 removed [ 1713.759017][T14285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.768590][T14285] bond_slave_1 (unregistering): left promiscuous mode [ 1713.824308][T14285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1713.834421][T14285] bond_slave_0 (unregistering): left promiscuous mode [ 1713.885280][T14285] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1713.896663][T14285] bridge_slave_1 (unregistering): left promiscuous mode [ 1714.242950][T14285] bond0 (unregistering): Released all slaves [ 1714.349418][T28698] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1714.785093][T28592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1714.821599][T28592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1714.861777][T28713] netlink: 'syz.3.7238': attribute type 25 has an invalid length. [ 1714.899277][T28713] netlink: 'syz.3.7238': attribute type 3 has an invalid length. [ 1714.922976][T28592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1714.989682][T28713] netlink: 'syz.3.7238': attribute type 10 has an invalid length. [ 1715.012799][T28713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7238'. [ 1715.107985][T28592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1715.162398][T28720] netlink: 'syz.0.7240': attribute type 19 has an invalid length. [ 1715.177518][T28720] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7240'. [ 1715.191720][T28723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1715.306656][T18390] Bluetooth: hci0: command tx timeout [ 1715.468754][T28727] netlink: 'syz.3.7241': attribute type 10 has an invalid length. [ 1715.507469][T28727] hsr0: left allmulticast mode [ 1715.512756][T28727] hsr_slave_0: left allmulticast mode [ 1715.567046][T28727] hsr_slave_1: left allmulticast mode [ 1715.580050][T28727] bridge0: port 3(hsr0) entered disabled state [ 1715.643300][T28727] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1715.668671][T28729] netlink: 'syz.0.7242': attribute type 10 has an invalid length. [ 1715.779616][T28592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.834441][T28592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.873167][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.880418][ T9885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1715.916303][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.923556][ T9885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1715.956202][T28738] netlink: 'syz.1.7243': attribute type 10 has an invalid length. [ 1715.983688][T28738] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7243'. [ 1715.994870][T28738] bridge0: port 2(hsr0) entered blocking state [ 1716.004264][T28738] bridge0: port 2(hsr0) entered disabled state [ 1716.016193][T28738] hsr0: entered allmulticast mode [ 1716.027116][T28738] hsr_slave_0: entered allmulticast mode [ 1716.033390][T28738] hsr_slave_1: entered allmulticast mode [ 1716.065978][T28738] bridge0: port 2(hsr0) entered blocking state [ 1716.073466][T28738] bridge0: port 2(hsr0) entered forwarding state [ 1716.544972][T28755] netlink: 'syz.3.7246': attribute type 12 has an invalid length. [ 1716.606840][T28755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7246'. [ 1717.355299][T28763] netlink: 'syz.0.7248': attribute type 25 has an invalid length. [ 1717.399736][T28763] netlink: 'syz.0.7248': attribute type 3 has an invalid length. [ 1717.449710][T28763] netlink: 'syz.0.7248': attribute type 10 has an invalid length. [ 1717.505596][T28763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7248'. [ 1717.813003][T28592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.065810][T28777] netlink: 'syz.1.7249': attribute type 19 has an invalid length. [ 1718.096615][T28777] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7249'. [ 1718.131924][T28592] veth0_vlan: entered promiscuous mode [ 1718.214114][T28592] veth1_vlan: entered promiscuous mode [ 1718.290566][T28782] netlink: 'syz.3.7251': attribute type 10 has an invalid length. [ 1718.344293][T28779] netlink: 'syz.0.7250': attribute type 25 has an invalid length. [ 1718.353789][T28779] netlink: 'syz.0.7250': attribute type 3 has an invalid length. [ 1718.362508][T28785] netlink: 'syz.1.7252': attribute type 10 has an invalid length. [ 1718.371811][T28785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7252'. [ 1718.389672][T28786] netlink: 'syz.0.7250': attribute type 10 has an invalid length. [ 1718.412807][T28786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7250'. [ 1718.465914][T28592] veth0_macvtap: entered promiscuous mode [ 1718.546095][T28592] veth1_macvtap: entered promiscuous mode [ 1718.672014][T28592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.708768][T28592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.762808][T28592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.819209][T28592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.925588][T28592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.946523][T28592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.973630][T28592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.986329][T28793] netlink: 'syz.3.7253': attribute type 12 has an invalid length. [ 1719.036644][T28793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7253'. [ 1719.090964][T28799] hsr0: left allmulticast mode [ 1719.108869][T28799] hsr_slave_0: left allmulticast mode [ 1719.115935][T28799] hsr_slave_1: left allmulticast mode [ 1719.133799][T28799] bridge0: port 2(hsr0) entered disabled state [ 1719.163728][T28799] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1719.191864][T28592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.234968][T28592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.255857][T28592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.276504][T28592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.304148][T28592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.318347][T28592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.339912][T28592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1719.572189][T28592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.593793][T28592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.604858][T28592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.613915][T28592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.913827][T14285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.931290][T14285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.989292][T28818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7256'. [ 1720.023363][T28816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1720.053285][T24829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.066779][T24829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.263039][T28822] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7259'. [ 1720.352292][T28824] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7210'. [ 1720.429909][T28829] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7210'. [ 1720.830728][T28837] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1721.216549][T18390] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 1721.217869][T28858] bridge0: port 3(hsr0) entered blocking state [ 1721.239782][T28858] bridge0: port 3(hsr0) entered disabled state [ 1721.249410][T28858] hsr0: entered allmulticast mode [ 1721.259679][T28858] hsr_slave_0: entered allmulticast mode [ 1721.265514][T28858] hsr_slave_1: entered allmulticast mode [ 1721.294718][T28858] bridge0: port 3(hsr0) entered blocking state [ 1721.302162][T28858] bridge0: port 3(hsr0) entered forwarding state [ 1721.591948][T28868] batman_adv: batadv0: Adding interface: vlan1 [ 1721.607316][T28868] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1721.660253][T28868] batman_adv: batadv0: Interface activated: vlan1 [ 1722.137753][T28877] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1722.144922][T28877] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.183939][T28877] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1722.424192][T18390] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1722.461417][T28886] validate_nla: 21 callbacks suppressed [ 1722.461524][T28886] netlink: 'syz.2.7280': attribute type 19 has an invalid length. [ 1722.494383][T28882] netlink: 'syz.0.7277': attribute type 10 has an invalid length. [ 1722.510358][T28882] hsr0: left allmulticast mode [ 1722.515411][T28882] hsr_slave_0: left allmulticast mode [ 1722.521663][T28882] hsr_slave_1: left allmulticast mode [ 1722.528651][T28882] bridge0: port 3(hsr0) entered disabled state [ 1722.590294][T28882] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1722.661763][T28889] netlink: 'syz.3.7281': attribute type 10 has an invalid length. [ 1722.686690][T28889] __nla_validate_parse: 10 callbacks suppressed [ 1722.686737][T28889] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7281'. [ 1722.775124][T28889] bridge0: port 3(hsr0) entered blocking state [ 1722.804556][T28889] bridge0: port 3(hsr0) entered disabled state [ 1722.834134][T28889] hsr0: entered allmulticast mode [ 1722.866707][T28889] hsr_slave_0: entered allmulticast mode [ 1722.906945][T28889] hsr_slave_1: entered allmulticast mode [ 1722.938346][T28889] bridge0: port 3(hsr0) entered blocking state [ 1722.946458][T28889] bridge0: port 3(hsr0) entered forwarding state [ 1722.965792][T28895] netlink: 'syz.2.7282': attribute type 10 has an invalid length. [ 1722.974429][T28895] hsr0: entered promiscuous mode [ 1722.980665][T28895] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1723.108904][T28901] netlink: 'syz.0.7284': attribute type 10 has an invalid length. [ 1723.126797][T28901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7284'. [ 1723.154942][T28904] netlink: 'syz.1.7285': attribute type 10 has an invalid length. [ 1723.295361][T28906] netlink: 'syz.3.7286': attribute type 25 has an invalid length. [ 1723.316647][T28906] netlink: 'syz.3.7286': attribute type 3 has an invalid length. [ 1723.357956][T28906] netlink: 'syz.3.7286': attribute type 10 has an invalid length. [ 1723.370654][T28906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1723.458495][T28908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7287'. [ 1723.595886][T28911] netlink: 'syz.1.7288': attribute type 10 has an invalid length. [ 1723.626944][T28911] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1723.725602][T28918] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7290'. [ 1723.802302][T28916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7289'. [ 1723.836485][T28919] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1724.445386][T28933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.479982][T28933] bridge_slave_1: left allmulticast mode [ 1724.501160][T28933] bridge_slave_1: left promiscuous mode [ 1724.536813][T28933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.651733][T28933] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1724.667505][T28940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7298'. [ 1724.682595][T28942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7300'. [ 1724.740797][T28938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7299'. [ 1724.943004][T28947] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7302'. [ 1725.001249][T28945] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1725.131066][T28952] bridge0: port 2(hsr0) entered blocking state [ 1725.140162][T28952] bridge0: port 2(hsr0) entered disabled state [ 1725.184165][T28952] hsr0: entered allmulticast mode [ 1725.190257][T28952] hsr_slave_0: entered allmulticast mode [ 1725.201334][T28952] hsr_slave_1: entered allmulticast mode [ 1725.271678][T28952] bridge0: port 2(hsr0) entered blocking state [ 1725.279297][T28952] bridge0: port 2(hsr0) entered forwarding state [ 1725.927542][T28975] FAULT_INJECTION: forcing a failure. [ 1725.927542][T28975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.946155][T28975] CPU: 0 PID: 28975 Comm: syz.0.7313 Not tainted syzkaller #0 [ 1725.953702][T28975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1725.963819][T28975] Call Trace: [ 1725.967152][T28975] [ 1725.970142][T28975] dump_stack_lvl+0x18c/0x250 [ 1725.974892][T28975] ? show_regs_print_info+0x20/0x20 [ 1725.980182][T28975] ? load_image+0x420/0x420 [ 1725.984794][T28975] ? __might_fault+0xaa/0x120 [ 1725.989551][T28975] should_fail_ex+0x394/0x4c0 [ 1725.994317][T28975] copyin+0x1a/0x90 [ 1725.998195][T28975] _copy_from_iter+0x3ec/0x1290 [ 1726.003139][T28975] ? copyout_mc+0x70/0x70 [ 1726.007542][T28975] ? __virt_addr_valid+0x10c/0x380 [ 1726.012761][T28975] ? __virt_addr_valid+0x10c/0x380 [ 1726.017944][T28975] ? __virt_addr_valid+0x10c/0x380 [ 1726.023128][T28975] ? __check_object_size+0x4fc/0xa40 [ 1726.028476][T28975] netlink_sendmsg+0x76b/0xbf0 [ 1726.033320][T28975] ? netlink_getsockopt+0x590/0x590 [ 1726.038592][T28975] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1726.044205][T28975] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1726.049557][T28975] ? security_socket_sendmsg+0x80/0xa0 [ 1726.055074][T28975] ? netlink_getsockopt+0x590/0x590 [ 1726.060355][T28975] ____sys_sendmsg+0x61b/0x980 [ 1726.065181][T28975] ? __asan_memset+0x22/0x40 [ 1726.069844][T28975] ? __sys_sendmsg_sock+0x30/0x30 [ 1726.074928][T28975] ? __import_iovec+0x3fa/0x850 [ 1726.079860][T28975] ? import_iovec+0x73/0xa0 [ 1726.084429][T28975] ___sys_sendmsg+0x2a6/0x360 [ 1726.089158][T28975] ? get_pid_task+0x20/0x1e0 [ 1726.093823][T28975] ? __sys_sendmsg+0x2b0/0x2b0 [ 1726.098698][T28975] ? __lock_acquire+0x7d80/0x7d80 [ 1726.103837][T28975] __se_sys_sendmsg+0x1d0/0x2c0 [ 1726.108757][T28975] ? __x64_sys_sendmsg+0x80/0x80 [ 1726.113792][T28975] ? lockdep_hardirqs_on+0x98/0x150 [ 1726.119069][T28975] do_syscall_64+0x55/0xb0 [ 1726.123544][T28975] ? clear_bhb_loop+0x40/0x90 [ 1726.128287][T28975] ? clear_bhb_loop+0x40/0x90 [ 1726.133026][T28975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1726.138973][T28975] RIP: 0033:0x7f267779e0d9 [ 1726.143625][T28975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.163294][T28975] RSP: 002b:00007f267862e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1726.171774][T28975] RAX: ffffffffffffffda RBX: 00007f2677a25fa0 RCX: 00007f267779e0d9 [ 1726.179798][T28975] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 1726.187816][T28975] RBP: 00007f267862e090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.195834][T28975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.203854][T28975] R13: 00007f2677a26038 R14: 00007f2677a25fa0 R15: 00007ffebd727d18 [ 1726.211914][T28975] [ 1726.865240][T28990] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1727.102389][T28996] bridge0: port 2(hsr0) entered blocking state [ 1727.113106][T28996] bridge0: port 2(hsr0) entered disabled state [ 1727.132927][T28996] hsr0: entered allmulticast mode [ 1727.161573][T28996] hsr_slave_0: entered allmulticast mode [ 1727.175346][T28996] hsr_slave_1: entered allmulticast mode [ 1727.341349][T28996] bridge0: port 2(hsr0) entered blocking state [ 1727.351034][T28996] bridge0: port 2(hsr0) entered forwarding state [ 1727.579389][T29005] validate_nla: 21 callbacks suppressed [ 1727.579410][T29005] netlink: 'syz.1.7321': attribute type 19 has an invalid length. [ 1727.852032][T18390] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1727.913936][T29011] netlink: 'syz.0.7323': attribute type 10 has an invalid length. [ 1727.926688][T29011] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1728.064892][T29013] netlink: 'syz.2.7322': attribute type 12 has an invalid length. [ 1728.094143][T29013] __nla_validate_parse: 9 callbacks suppressed [ 1728.094160][T29013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7322'. [ 1728.440504][T29020] netlink: 'syz.0.7326': attribute type 4 has an invalid length. [ 1728.459605][T29020] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7326'. [ 1728.671150][T29020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7326'. [ 1729.015885][T29031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7328'. [ 1729.196672][T29034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7329'. [ 1729.425702][T29037] netlink: 'syz.0.7332': attribute type 19 has an invalid length. [ 1729.446720][T29037] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7332'. [ 1729.692177][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1729.709258][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1729.718059][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1729.727194][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1729.737384][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1729.744858][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1729.771364][T29040] netlink: 'syz.0.7333': attribute type 10 has an invalid length. [ 1729.779800][T29040] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1729.929136][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.022965][T29044] netlink: 'syz.0.7335': attribute type 10 has an invalid length. [ 1730.032013][T29044] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1730.156524][ T5778] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1730.166914][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.213811][T29047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7341'. [ 1730.282730][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.302453][T29051] netlink: 'syz.0.7336': attribute type 10 has an invalid length. [ 1730.311463][T29051] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7336'. [ 1730.332798][T29051] bridge0: port 3(hsr0) entered blocking state [ 1730.340819][T29051] bridge0: port 3(hsr0) entered disabled state [ 1730.357916][T29051] hsr0: entered allmulticast mode [ 1730.364804][T29051] hsr_slave_0: entered allmulticast mode [ 1730.371310][T29051] hsr_slave_1: entered allmulticast mode [ 1730.389951][T29051] bridge0: port 3(hsr0) entered blocking state [ 1730.397075][T29051] bridge0: port 3(hsr0) entered forwarding state [ 1730.435777][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.443512][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.454034][ T60] bond0: (slave netdevsim0): Releasing backup interface [ 1730.462319][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1730.471516][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1730.483417][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.611880][T29039] chnl_net:caif_netlink_parms(): no params data found [ 1730.850416][T29058] netlink: 'syz.0.7337': attribute type 10 has an invalid length. [ 1731.063621][T29039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.105350][T29039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.123717][T29039] bridge_slave_0: entered allmulticast mode [ 1731.148422][T29039] bridge_slave_0: entered promiscuous mode [ 1731.240528][T29069] netlink: 'syz.1.7340': attribute type 25 has an invalid length. [ 1731.262685][T29039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.286779][T29039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.307745][T29039] bridge_slave_1: entered allmulticast mode [ 1731.346519][T29039] bridge_slave_1: entered promiscuous mode [ 1731.373938][T29077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7340'. [ 1731.676755][T29079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7342'. [ 1731.796568][ T5778] Bluetooth: hci1: command tx timeout [ 1731.813335][T29039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.832095][T29039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1731.883996][T29039] team0: Port device team_slave_0 added [ 1731.893367][T29039] team0: Port device team_slave_1 added [ 1732.094565][T29088] hsr0: left allmulticast mode [ 1732.103253][T29088] hsr_slave_0: left allmulticast mode [ 1732.112075][ T5778] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1732.122951][T29088] hsr_slave_1: left allmulticast mode [ 1732.130967][T29088] bridge0: port 2(hsr0) entered disabled state [ 1732.161586][T29088] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1732.213291][T29039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.220773][T29039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1732.247285][T29039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.260953][T29039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.276771][T29039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1732.336470][T29039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.635114][T29109] validate_nla: 4 callbacks suppressed [ 1732.635131][T29109] netlink: 'syz.1.7349': attribute type 1 has an invalid length. [ 1732.663686][T29039] hsr_slave_0: entered promiscuous mode [ 1732.689942][T29039] hsr_slave_1: entered promiscuous mode [ 1732.703821][T29039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1732.718293][T29039] Cannot create hsr debugfs directory [ 1733.321720][T29116] netlink: 'syz.0.7351': attribute type 19 has an invalid length. [ 1733.346694][T29116] __nla_validate_parse: 2 callbacks suppressed [ 1733.346715][T29116] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7351'. [ 1733.669716][T29120] netlink: 'syz.2.7352': attribute type 25 has an invalid length. [ 1733.702777][T29120] netlink: 'syz.2.7352': attribute type 3 has an invalid length. [ 1733.755643][ T60] hsr_slave_0: left promiscuous mode [ 1733.780846][ T60] hsr_slave_1: left promiscuous mode [ 1733.829134][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1733.861018][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.877616][ T5778] Bluetooth: hci1: command tx timeout [ 1733.890335][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.936281][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.989790][ T60] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1734.019287][ T60] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1734.044474][ T60] batman_adv: batadv0: Interface deactivated: vlan1 [ 1734.064019][ T60] batman_adv: batadv0: Removing interface: vlan1 [ 1734.089958][ T60] hsr0: left allmulticast mode [ 1734.095982][ T60] bridge0: port 3(hsr0) entered disabled state [ 1734.162189][ T60] bond0: left allmulticast mode [ 1734.176533][ T60] bond_slave_1: left allmulticast mode [ 1734.192518][ T60] bridge_slave_1: left allmulticast mode [ 1734.213524][ T60] bridge0: port 2(bond0) entered disabled state [ 1734.249272][ T60] bridge_slave_0: left allmulticast mode [ 1734.255537][ T60] bridge_slave_0: left promiscuous mode [ 1734.262493][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.416194][ T60] veth1_vlan: left allmulticast mode [ 1734.425976][ T60] veth1_vlan: left promiscuous mode [ 1734.432631][ T60] veth0_vlan: left promiscuous mode [ 1735.623584][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1735.674971][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1735.721918][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1735.732504][ T60] bond_slave_1 (unregistering): left promiscuous mode [ 1735.824649][ T60] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1735.836048][ T60] bridge_slave_1 (unregistering): left promiscuous mode [ 1735.962530][ T5778] Bluetooth: hci1: command tx timeout [ 1736.154525][ T60] bond0 (unregistering): Released all slaves [ 1736.282337][T29120] netlink: 'syz.2.7352': attribute type 10 has an invalid length. [ 1736.291253][T29120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7352'. [ 1736.301656][T29128] netlink: 'syz.0.7353': attribute type 12 has an invalid length. [ 1736.312801][T29128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7353'. [ 1737.107295][T29039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1737.180870][T29039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1737.228917][T29039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1737.267372][T29039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1737.500320][T29039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1737.570167][T29160] netlink: 'syz.1.7359': attribute type 10 has an invalid length. [ 1737.578854][T29160] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1737.650702][T29039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1737.715999][T17794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.723277][T17794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1737.755726][T29164] netlink: 'syz.2.7360': attribute type 19 has an invalid length. [ 1737.772470][T29164] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7360'. [ 1737.800909][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.808099][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1737.942048][T29039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1737.973805][T29039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1738.026530][ T5778] Bluetooth: hci1: command tx timeout [ 1738.042669][T29170] netlink: 'syz.1.7361': attribute type 10 has an invalid length. [ 1738.071918][T29170] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1738.367689][T29177] netlink: 'syz.2.7363': attribute type 25 has an invalid length. [ 1738.375844][T29177] netlink: 'syz.2.7363': attribute type 3 has an invalid length. [ 1738.431149][T29177] netlink: 'syz.2.7363': attribute type 10 has an invalid length. [ 1738.458332][T29177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7363'. [ 1738.702149][T29186] netlink: 'syz.0.7365': attribute type 25 has an invalid length. [ 1738.727806][T29186] netlink: 'syz.0.7365': attribute type 3 has an invalid length. [ 1738.779167][T29188] netlink: 'syz.0.7365': attribute type 10 has an invalid length. [ 1738.800991][T29188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1738.970344][T29039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1739.094700][T29039] veth0_vlan: entered promiscuous mode [ 1739.109963][T29039] veth1_vlan: entered promiscuous mode [ 1739.182386][T29039] veth0_macvtap: entered promiscuous mode [ 1739.206182][T29039] veth1_macvtap: entered promiscuous mode [ 1739.252870][T29039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.286582][T29039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.343463][T29039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.395003][T29039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.416265][T29039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.427269][T29039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.445148][T29039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1739.455741][T29203] netlink: 'syz.0.7368': attribute type 10 has an invalid length. [ 1739.474289][T29203] hsr0: left allmulticast mode [ 1739.480591][T29203] hsr_slave_0: left allmulticast mode [ 1739.486953][T29203] hsr_slave_1: left allmulticast mode [ 1739.493662][T29203] bridge0: port 3(hsr0) entered disabled state [ 1739.532698][T29203] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1739.557864][T29206] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7369'. [ 1739.585178][T29039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.602159][T29039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.612577][T29039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.624735][T29039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.635637][T29039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.647877][T29039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.678389][T29039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.700657][T29039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.711653][T29039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.721027][T29039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.731075][T29039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.902620][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.952962][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.025359][T29223] netlink: 'syz.0.7371': attribute type 10 has an invalid length. [ 1740.035009][T29223] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1740.073497][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.101980][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.467866][T29240] hsr0: entered promiscuous mode [ 1740.473384][T29240] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1740.584308][T29235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7374'. [ 1740.739926][T29231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7375'. [ 1741.118384][T29249] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1741.236176][T29254] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7380'. [ 1741.294470][T29254] bridge0: port 2(hsr0) entered blocking state [ 1741.333928][T29254] bridge0: port 2(hsr0) entered disabled state [ 1741.404147][T29254] hsr0: entered allmulticast mode [ 1741.427651][T29254] hsr_slave_0: entered allmulticast mode [ 1741.433855][T29254] hsr_slave_1: entered allmulticast mode [ 1741.475564][T29254] bridge0: port 2(hsr0) entered blocking state [ 1741.482938][T29254] bridge0: port 2(hsr0) entered forwarding state [ 1741.512804][T29258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1741.805380][T29269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7384'. [ 1741.861622][T29273] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7385'. [ 1741.873400][T29269] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1741.890428][T29273] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1741.891367][T29269] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.891550][T29269] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1742.195427][T29283] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1742.583438][T29286] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7390'. [ 1742.815615][T29300] validate_nla: 13 callbacks suppressed [ 1742.815628][T29300] netlink: 'syz.2.7394': attribute type 10 has an invalid length. [ 1742.960643][T29300] hsr0: left allmulticast mode [ 1742.976858][T29300] hsr_slave_0: left allmulticast mode [ 1743.011030][T29300] hsr_slave_1: left allmulticast mode [ 1743.017406][T29300] bridge0: port 2(hsr0) entered disabled state [ 1743.051799][T29300] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1743.094537][T29302] netlink: 'syz.1.7395': attribute type 10 has an invalid length. [ 1743.103216][T29302] hsr0: left allmulticast mode [ 1743.108589][T29302] hsr_slave_0: left allmulticast mode [ 1743.114079][T29302] hsr_slave_1: left allmulticast mode [ 1743.121107][T29302] bridge0: port 2(hsr0) entered disabled state [ 1743.131850][T29302] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1743.283514][T29306] netlink: 'syz.2.7397': attribute type 25 has an invalid length. [ 1743.293354][T29306] netlink: 'syz.2.7397': attribute type 3 has an invalid length. [ 1743.572045][T29314] netlink: 'syz.0.7401': attribute type 10 has an invalid length. [ 1743.580639][T29314] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1743.842031][T29323] netlink: 'syz.0.7404': attribute type 19 has an invalid length. [ 1743.876591][T29323] __nla_validate_parse: 1 callbacks suppressed [ 1743.876612][T29323] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1744.074650][T29326] netlink: 'syz.3.7405': attribute type 12 has an invalid length. [ 1744.118104][T29326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7405'. [ 1744.421304][T29334] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7408'. [ 1745.075968][T29344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7409'. [ 1745.117915][T29347] netlink: 'syz.1.7410': attribute type 10 has an invalid length. [ 1745.189560][T29347] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1745.242706][T29348] netlink: 'syz.2.7412': attribute type 10 has an invalid length. [ 1745.274348][T29348] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1745.344972][T29350] netlink: 'syz.3.7413': attribute type 10 has an invalid length. [ 1745.356880][T29350] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7413'. [ 1745.375558][T29350] bridge0: port 3(hsr0) entered blocking state [ 1745.384364][T29350] bridge0: port 3(hsr0) entered disabled state [ 1745.402643][T29350] hsr0: entered allmulticast mode [ 1745.415380][T29350] hsr_slave_0: entered allmulticast mode [ 1745.433018][T29350] hsr_slave_1: entered allmulticast mode [ 1745.531111][T29350] bridge0: port 3(hsr0) entered blocking state [ 1745.538669][T29350] bridge0: port 3(hsr0) entered forwarding state [ 1746.193366][T29364] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7416'. [ 1746.504411][T29369] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7417'. [ 1747.224733][T29379] sit0: entered allmulticast mode [ 1747.375812][T29380] sit0: entered promiscuous mode [ 1747.467879][T29374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7418'. [ 1748.407916][T29392] validate_nla: 2 callbacks suppressed [ 1748.407940][T29392] netlink: 'syz.1.7422': attribute type 10 has an invalid length. [ 1748.422478][T29392] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1748.442724][T29398] netlink: 'syz.0.7426': attribute type 19 has an invalid length. [ 1748.459308][T29398] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7426'. [ 1748.489522][T29400] netlink: 'syz.3.7423': attribute type 10 has an invalid length. [ 1748.498621][T29400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7423'. [ 1748.512722][T29400] batman_adv: batadv0: Adding interface: vlan1 [ 1748.523295][T29400] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.573229][T29400] batman_adv: batadv0: Interface activated: vlan1 [ 1748.973113][T29402] netlink: 'syz.1.7428': attribute type 19 has an invalid length. [ 1748.982073][T29402] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7428'. [ 1749.483031][T29416] netlink: 'syz.0.7431': attribute type 10 has an invalid length. [ 1749.513256][T29416] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1749.545256][T29414] netlink: 'syz.2.7432': attribute type 10 has an invalid length. [ 1750.142867][T29429] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7434'. [ 1750.203025][T29426] netlink: 'syz.1.7436': attribute type 10 has an invalid length. [ 1750.230027][T29426] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1750.252957][T29431] netlink: 'syz.3.7437': attribute type 10 has an invalid length. [ 1750.306282][T29431] hsr0: left allmulticast mode [ 1750.312406][T29431] hsr_slave_0: left allmulticast mode [ 1750.321473][T29431] hsr_slave_1: left allmulticast mode [ 1750.327691][T29431] bridge0: port 3(hsr0) entered disabled state [ 1750.353466][T29431] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1750.459838][T29433] netlink: 'syz.2.7438': attribute type 19 has an invalid length. [ 1750.469484][T29433] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7438'. [ 1750.808069][T29442] netlink: 'syz.2.7441': attribute type 19 has an invalid length. [ 1750.825584][T29442] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1751.170804][T29446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.233777][T29446] bridge_slave_1: left allmulticast mode [ 1751.243581][T29446] bridge_slave_1: left promiscuous mode [ 1751.254234][T29446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.460482][T29446] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1751.473606][T29454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7446'. [ 1751.828508][T29459] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7448'. [ 1752.071396][T29470] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1752.386678][T29476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7455'. [ 1752.425583][T29472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7456'. [ 1752.662416][T29483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7459'. [ 1753.343924][T29493] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.7463'. [ 1753.583349][T29504] validate_nla: 10 callbacks suppressed [ 1753.583368][T29504] netlink: 'syz.1.7466': attribute type 10 has an invalid length. [ 1753.787729][T29504] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1753.829466][T29506] netlink: 'syz.3.7470': attribute type 25 has an invalid length. [ 1753.855197][T29506] netlink: 'syz.3.7470': attribute type 3 has an invalid length. [ 1753.876235][T29506] netlink: 'syz.3.7470': attribute type 10 has an invalid length. [ 1754.310725][T29516] __nla_validate_parse: 1 callbacks suppressed [ 1754.310743][T29516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7471'. [ 1754.329379][T29517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7472'. [ 1754.652131][T29520] netlink: 'syz.0.7475': attribute type 19 has an invalid length. [ 1754.660976][T29520] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7475'. [ 1754.719131][T29523] netlink: 'syz.3.7476': attribute type 10 has an invalid length. [ 1754.735004][T29523] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7476'. [ 1754.744752][T29523] bridge0: port 2(hsr0) entered blocking state [ 1754.751768][T29523] bridge0: port 2(hsr0) entered disabled state [ 1754.758781][T29523] hsr0: entered allmulticast mode [ 1754.763938][T29523] hsr_slave_0: entered allmulticast mode [ 1754.770737][T29523] hsr_slave_1: entered allmulticast mode [ 1754.810390][T29523] bridge0: port 2(hsr0) entered blocking state [ 1754.816805][T29523] bridge0: port 2(hsr0) entered forwarding state [ 1755.049891][T29527] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7478'. [ 1755.276552][T29536] netlink: 'syz.3.7480': attribute type 10 has an invalid length. [ 1755.313126][T29536] hsr0: left allmulticast mode [ 1755.332384][T29536] hsr_slave_0: left allmulticast mode [ 1755.348620][T29536] hsr_slave_1: left allmulticast mode [ 1755.371373][T29536] bridge0: port 2(hsr0) entered disabled state [ 1755.381191][T29536] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1755.395928][T29534] netlink: 'syz.0.7481': attribute type 10 has an invalid length. [ 1755.406970][T29534] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1755.491124][T29538] netlink: 'syz.2.7482': attribute type 25 has an invalid length. [ 1755.515513][T29538] netlink: 'syz.2.7482': attribute type 3 has an invalid length. [ 1755.560240][T29541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7482'. [ 1755.847086][T29545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1756.431078][T29557] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1756.641117][T29560] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7488'. [ 1756.662928][T29560] bridge0: port 2(hsr0) entered blocking state [ 1756.737579][T29560] bridge0: port 2(hsr0) entered disabled state [ 1756.799737][T29560] hsr0: entered allmulticast mode [ 1756.805351][T29560] hsr_slave_0: entered allmulticast mode [ 1756.827220][T29560] hsr_slave_1: entered allmulticast mode [ 1757.147372][T29560] bridge0: port 2(hsr0) entered blocking state [ 1757.154524][T29560] bridge0: port 2(hsr0) entered forwarding state [ 1757.237412][T29567] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1758.054516][T29589] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1758.735922][T29587] validate_nla: 6 callbacks suppressed [ 1758.735962][T29587] netlink: 'syz.3.7494': attribute type 19 has an invalid length. [ 1758.772313][T29587] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7494'. [ 1758.939557][T29601] netlink: 'syz.1.7496': attribute type 10 has an invalid length. [ 1759.344656][T29613] netlink: 'syz.2.7501': attribute type 19 has an invalid length. [ 1759.364953][T29613] __nla_validate_parse: 1 callbacks suppressed [ 1759.364973][T29613] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7501'. [ 1759.554604][T29618] netlink: 'syz.1.7500': attribute type 10 has an invalid length. [ 1759.571983][T29618] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1760.194239][T29629] netlink: 'syz.2.7505': attribute type 10 has an invalid length. [ 1760.207295][T29629] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1760.642668][T29633] netlink: 'syz.2.7508': attribute type 10 has an invalid length. [ 1760.662550][T29633] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7508'. [ 1760.682845][T29633] bridge0: port 2(hsr0) entered blocking state [ 1760.692544][T29633] bridge0: port 2(hsr0) entered disabled state [ 1760.707361][T29633] hsr0: entered allmulticast mode [ 1760.714490][T29633] hsr_slave_0: entered allmulticast mode [ 1760.728035][T29633] hsr_slave_1: entered allmulticast mode [ 1760.832996][T29633] bridge0: port 2(hsr0) entered blocking state [ 1760.839685][T29633] bridge0: port 2(hsr0) entered forwarding state [ 1760.955922][T29639] netlink: 'syz.0.7507': attribute type 10 has an invalid length. [ 1760.975749][T29643] netlink: 'syz.1.7509': attribute type 10 has an invalid length. [ 1760.996852][T29643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1761.598753][T29656] netlink: 'syz.2.7514': attribute type 3 has an invalid length. [ 1761.641163][T29654] netlink: 'syz.1.7513': attribute type 19 has an invalid length. [ 1761.667314][T29654] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7513'. [ 1761.978658][T29664] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1763.301045][T29682] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1764.203449][T29699] validate_nla: 3 callbacks suppressed [ 1764.203477][T29699] netlink: 'syz.0.7526': attribute type 10 has an invalid length. [ 1764.220249][T29699] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1764.234737][T29695] netlink: 'syz.1.7525': attribute type 19 has an invalid length. [ 1764.333081][T29695] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7525'. [ 1764.342471][T29701] netlink: 'syz.2.7528': attribute type 25 has an invalid length. [ 1764.370380][T29701] netlink: 'syz.2.7528': attribute type 3 has an invalid length. [ 1764.396638][T29703] netlink: 'syz.2.7528': attribute type 10 has an invalid length. [ 1764.404580][T29703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7528'. [ 1764.597695][T29711] netlink: 'syz.1.7531': attribute type 10 has an invalid length. [ 1764.775110][T29717] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7533'. [ 1765.310374][T29726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1765.326790][T29726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1765.337549][T29726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1765.540721][T29732] netlink: 'syz.3.7537': attribute type 10 has an invalid length. [ 1765.598582][T29732] hsr0: left allmulticast mode [ 1765.609067][T29732] hsr_slave_0: left allmulticast mode [ 1765.622086][T29732] hsr_slave_1: left allmulticast mode [ 1765.642578][T29732] bridge0: port 2(hsr0) entered disabled state [ 1765.664734][T29732] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1765.752663][T29734] netlink: 'syz.2.7540': attribute type 10 has an invalid length. [ 1765.762549][T29734] hsr0: left allmulticast mode [ 1765.772488][T29734] hsr_slave_0: left allmulticast mode [ 1765.779731][T29734] hsr_slave_1: left allmulticast mode [ 1765.786639][T29734] bridge0: port 2(hsr0) entered disabled state [ 1765.857735][T29734] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1765.906785][T29736] netlink: 'syz.0.7539': attribute type 10 has an invalid length. [ 1765.922733][T29736] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1766.046260][T29740] netlink: 'syz.1.7541': attribute type 10 has an invalid length. [ 1766.422755][T29750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7545'. [ 1766.822116][T29756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7546'. [ 1767.127176][T29764] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1767.299271][T29763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7549'. [ 1767.673273][T29771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7551'. [ 1767.797155][T29773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7552'. [ 1768.404142][T29783] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1770.244580][T29790] validate_nla: 11 callbacks suppressed [ 1770.244624][T29790] netlink: 'syz.2.7558': attribute type 10 has an invalid length. [ 1770.339710][T29790] __nla_validate_parse: 1 callbacks suppressed [ 1770.339756][T29790] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7558'. [ 1770.412498][T29790] bridge0: port 2(hsr0) entered blocking state [ 1770.428931][T29790] bridge0: port 2(hsr0) entered disabled state [ 1770.443558][T29790] hsr0: entered allmulticast mode [ 1770.455668][T29790] hsr_slave_0: entered allmulticast mode [ 1770.472021][T29790] hsr_slave_1: entered allmulticast mode [ 1770.560401][T29790] bridge0: port 2(hsr0) entered blocking state [ 1770.567750][T29790] bridge0: port 2(hsr0) entered forwarding state [ 1770.608798][T29797] netlink: 'syz.3.7559': attribute type 10 has an invalid length. [ 1770.664754][T29797] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1770.718189][T29795] netlink: 'syz.1.7561': attribute type 25 has an invalid length. [ 1770.737508][T29795] netlink: 'syz.1.7561': attribute type 3 has an invalid length. [ 1770.759186][T29800] netlink: 'syz.1.7561': attribute type 10 has an invalid length. [ 1770.782126][T29800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7561'. [ 1771.275438][T29814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7564'. [ 1771.471308][T29817] netlink: 'syz.0.7566': attribute type 10 has an invalid length. [ 1771.558843][T29820] netlink: 'syz.1.7567': attribute type 10 has an invalid length. [ 1771.570356][T29820] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1771.780217][T29822] netlink: 'syz.0.7577': attribute type 10 has an invalid length. [ 1771.805360][T29824] netlink: 'syz.1.7568': attribute type 25 has an invalid length. [ 1771.815252][T29824] netlink: 'syz.1.7568': attribute type 3 has an invalid length. [ 1771.833573][T29824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7568'. [ 1772.189633][T29827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7569'. [ 1772.233650][T29832] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7573'. [ 1772.272340][T29832] bridge0: port 2(hsr0) entered blocking state [ 1772.298121][T29832] bridge0: port 2(hsr0) entered disabled state [ 1772.308353][T29832] hsr0: entered allmulticast mode [ 1772.313973][T29832] hsr_slave_0: entered allmulticast mode [ 1772.320542][T29832] hsr_slave_1: entered allmulticast mode [ 1772.399794][T29832] bridge0: port 2(hsr0) entered blocking state [ 1772.407260][T29832] bridge0: port 2(hsr0) entered forwarding state [ 1772.444468][T29828] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1772.684119][T29845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7579'. [ 1772.827986][T29846] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1773.260609][T29859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7584'. [ 1773.414407][T29864] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1773.579377][T29870] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7588'. [ 1773.608168][T29870] bridge0: port 2(hsr0) entered blocking state [ 1773.616220][T29870] bridge0: port 2(hsr0) entered disabled state [ 1773.625730][T29870] hsr0: entered allmulticast mode [ 1773.632616][T29870] hsr_slave_0: entered allmulticast mode [ 1773.648919][T29870] hsr_slave_1: entered allmulticast mode [ 1773.675779][T29870] bridge0: port 2(hsr0) entered blocking state [ 1773.683152][T29870] bridge0: port 2(hsr0) entered forwarding state [ 1773.696043][T29872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7596'. [ 1774.178276][T29881] hsr0: left allmulticast mode [ 1774.183147][T29881] hsr_slave_0: left allmulticast mode [ 1774.226655][T29881] hsr_slave_1: left allmulticast mode [ 1774.232388][T29881] bridge0: port 2(hsr0) entered disabled state [ 1774.246100][T29881] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1774.469199][T29888] hsr0: left allmulticast mode [ 1774.474230][T29888] hsr_slave_0: left allmulticast mode [ 1774.486581][T29888] hsr_slave_1: left allmulticast mode [ 1774.497859][T29888] bridge0: port 2(hsr0) entered disabled state [ 1774.554035][T29888] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1774.589311][T29894] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1774.891115][T29912] bridge0: port 2(hsr0) entered blocking state [ 1774.915103][T29912] bridge0: port 2(hsr0) entered disabled state [ 1774.924214][T29912] hsr0: entered allmulticast mode [ 1774.930494][T29912] hsr_slave_0: entered allmulticast mode [ 1774.939766][T29912] hsr_slave_1: entered allmulticast mode [ 1774.962692][T29912] bridge0: port 2(hsr0) entered blocking state [ 1774.969652][T29912] bridge0: port 2(hsr0) entered forwarding state [ 1775.234523][T29924] hsr0: left allmulticast mode [ 1775.244750][T29924] hsr_slave_0: left allmulticast mode [ 1775.250766][T29924] hsr_slave_1: left allmulticast mode [ 1775.257500][T29924] bridge0: port 2(hsr0) entered disabled state [ 1775.269157][T29924] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1775.775835][T29931] validate_nla: 22 callbacks suppressed [ 1775.775854][T29931] netlink: 'syz.2.7611': attribute type 25 has an invalid length. [ 1775.831107][T29931] netlink: 'syz.2.7611': attribute type 3 has an invalid length. [ 1775.882631][T29935] netlink: 'syz.2.7611': attribute type 10 has an invalid length. [ 1775.947561][T29935] __nla_validate_parse: 3 callbacks suppressed [ 1775.947581][T29935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7611'. [ 1776.078701][T29936] netlink: 'syz.3.7612': attribute type 10 has an invalid length. [ 1776.114061][T29936] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1776.439509][T29944] netlink: 'syz.3.7616': attribute type 10 has an invalid length. [ 1776.893572][T29949] netlink: 'syz.1.7617': attribute type 10 has an invalid length. [ 1776.901721][T29949] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1776.939205][T29950] netlink: 'syz.0.7615': attribute type 10 has an invalid length. [ 1776.959018][T29950] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7615'. [ 1776.974050][T29950] bridge0: port 3(hsr0) entered blocking state [ 1776.994512][T29950] bridge0: port 3(hsr0) entered disabled state [ 1777.032848][T29950] hsr0: entered allmulticast mode [ 1777.046576][T29950] hsr_slave_0: entered allmulticast mode [ 1777.052942][T29950] hsr_slave_1: entered allmulticast mode [ 1777.102390][T29950] bridge0: port 3(hsr0) entered blocking state [ 1777.109929][T29950] bridge0: port 3(hsr0) entered forwarding state [ 1778.230596][T29968] netlink: 'syz.2.7622': attribute type 25 has an invalid length. [ 1778.245616][T29968] netlink: 'syz.2.7622': attribute type 3 has an invalid length. [ 1778.261215][T29969] FAULT_INJECTION: forcing a failure. [ 1778.261215][T29969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.273774][T29968] netlink: 'syz.2.7622': attribute type 10 has an invalid length. [ 1778.293441][T29968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7622'. [ 1778.301772][T29969] CPU: 1 PID: 29969 Comm: syz.3.7623 Not tainted syzkaller #0 [ 1778.309960][T29969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1778.320060][T29969] Call Trace: [ 1778.323382][T29969] [ 1778.326446][T29969] dump_stack_lvl+0x18c/0x250 [ 1778.331193][T29969] ? show_regs_print_info+0x20/0x20 [ 1778.336444][T29969] ? load_image+0x420/0x420 [ 1778.341038][T29969] ? __might_fault+0xaa/0x120 [ 1778.345795][T29969] ? __lock_acquire+0x7d80/0x7d80 [ 1778.350875][T29969] should_fail_ex+0x394/0x4c0 [ 1778.355594][T29969] _copy_from_user+0x2f/0xe0 [ 1778.360218][T29969] ___sys_sendmsg+0x1c7/0x360 [ 1778.364937][T29969] ? __sys_sendmsg+0x2b0/0x2b0 [ 1778.369780][T29969] __se_sys_sendmsg+0x1d0/0x2c0 [ 1778.374664][T29969] ? __x64_sys_sendmsg+0x80/0x80 [ 1778.379656][T29969] do_syscall_64+0x55/0xb0 [ 1778.384105][T29969] ? clear_bhb_loop+0x40/0x90 [ 1778.388820][T29969] ? clear_bhb_loop+0x40/0x90 [ 1778.393530][T29969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1778.399457][T29969] RIP: 0033:0x7f89faf9e0d9 [ 1778.403902][T29969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.423536][T29969] RSP: 002b:00007f89f91f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1778.431987][T29969] RAX: ffffffffffffffda RBX: 00007f89fb225fa0 RCX: 00007f89faf9e0d9 [ 1778.440018][T29969] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000005 [ 1778.448026][T29969] RBP: 00007f89f91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.456036][T29969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.464045][T29969] R13: 00007f89fb226038 R14: 00007f89fb225fa0 R15: 00007ffc04aab6a8 [ 1778.472065][T29969] [ 1778.668793][ T5778] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1779.093920][T29985] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1779.111663][T29980] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1779.384801][T29994] hsr0: left allmulticast mode [ 1779.445908][T29994] hsr_slave_0: left allmulticast mode [ 1779.455385][T29994] hsr_slave_1: left allmulticast mode [ 1779.497153][T29994] bridge0: port 3(hsr0) entered disabled state [ 1779.576732][T29994] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1779.642614][T29999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7630'. [ 1780.160253][T30003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7634'. [ 1780.747566][T18390] Bluetooth: hci4: command 0x0406 tx timeout [ 1780.920016][T30010] validate_nla: 4 callbacks suppressed [ 1780.920036][T30010] netlink: 'syz.0.7636': attribute type 25 has an invalid length. [ 1780.942429][T30010] netlink: 'syz.0.7636': attribute type 3 has an invalid length. [ 1780.973199][T30010] netlink: 'syz.0.7636': attribute type 10 has an invalid length. [ 1781.045184][T30010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7636'. [ 1781.170060][T30015] netlink: 'syz.1.7638': attribute type 10 has an invalid length. [ 1781.189594][T30015] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1781.472441][T30020] netlink: 'syz.3.7641': attribute type 10 has an invalid length. [ 1781.519845][T30020] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7641'. [ 1781.542032][T30020] bridge0: port 2(hsr0) entered blocking state [ 1781.551144][T30020] bridge0: port 2(hsr0) entered disabled state [ 1781.561537][T30020] hsr0: entered allmulticast mode [ 1781.567328][T30020] hsr_slave_0: entered allmulticast mode [ 1781.577023][T30020] hsr_slave_1: entered allmulticast mode [ 1781.723737][T30020] bridge0: port 2(hsr0) entered blocking state [ 1781.734066][T30020] bridge0: port 2(hsr0) entered forwarding state [ 1782.692310][T30028] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7640'. [ 1782.959735][T30039] netlink: 'syz.3.7645': attribute type 10 has an invalid length. [ 1782.968857][T30039] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7645'. [ 1783.520170][T30045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7647'. [ 1783.742877][T30050] netlink: 'syz.1.7649': attribute type 25 has an invalid length. [ 1783.752817][T30050] netlink: 'syz.1.7649': attribute type 3 has an invalid length. [ 1783.787745][T30050] netlink: 'syz.1.7649': attribute type 10 has an invalid length. [ 1783.797521][T30050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7649'. [ 1784.579949][T30056] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7651'. [ 1785.313741][T30072] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7654'. [ 1785.478747][T30076] FAULT_INJECTION: forcing a failure. [ 1785.478747][T30076] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.515831][T30076] CPU: 1 PID: 30076 Comm: syz.3.7656 Not tainted syzkaller #0 [ 1785.523402][T30076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1785.533524][T30076] Call Trace: [ 1785.536856][T30076] [ 1785.539845][T30076] dump_stack_lvl+0x18c/0x250 [ 1785.544596][T30076] ? show_regs_print_info+0x20/0x20 [ 1785.549891][T30076] ? load_image+0x420/0x420 [ 1785.554498][T30076] ? __might_sleep+0xe0/0xe0 [ 1785.559155][T30076] ? __lock_acquire+0x7d80/0x7d80 [ 1785.564232][T30076] should_fail_ex+0x394/0x4c0 [ 1785.568962][T30076] should_failslab+0x9/0x20 [ 1785.573510][T30076] slab_pre_alloc_hook+0x59/0x300 [ 1785.578583][T30076] ? __get_vm_area_node+0x125/0x370 [ 1785.583825][T30076] __kmem_cache_alloc_node+0x53/0x250 [ 1785.589260][T30076] ? __get_vm_area_node+0x125/0x370 [ 1785.594499][T30076] kmalloc_node_trace+0x26/0xe0 [ 1785.599402][T30076] __get_vm_area_node+0x125/0x370 [ 1785.604482][T30076] __vmalloc_node_range+0x36f/0x1320 [ 1785.609815][T30076] ? netlink_sendmsg+0x602/0xbf0 [ 1785.614792][T30076] ? netlink_insert+0x1094/0x1390 [ 1785.619968][T30076] ? netlink_insert+0x2ba/0x1390 [ 1785.624954][T30076] ? free_vm_area+0x50/0x50 [ 1785.629547][T30076] ? netlink_sendmsg+0x602/0xbf0 [ 1785.634526][T30076] vmalloc+0x79/0x90 [ 1785.638469][T30076] ? netlink_sendmsg+0x602/0xbf0 [ 1785.643445][T30076] netlink_sendmsg+0x602/0xbf0 [ 1785.648285][T30076] ? netlink_getsockopt+0x590/0x590 [ 1785.653522][T30076] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1785.659107][T30076] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1785.664435][T30076] ? security_socket_sendmsg+0x80/0xa0 [ 1785.669935][T30076] ? netlink_getsockopt+0x590/0x590 [ 1785.675171][T30076] ____sys_sendmsg+0x61b/0x980 [ 1785.679985][T30076] ? __asan_memset+0x22/0x40 [ 1785.684715][T30076] ? __sys_sendmsg_sock+0x30/0x30 [ 1785.689800][T30076] ? __import_iovec+0x5f2/0x850 [ 1785.694709][T30076] ? import_iovec+0x73/0xa0 [ 1785.699263][T30076] ___sys_sendmsg+0x2a6/0x360 [ 1785.703973][T30076] ? get_pid_task+0x20/0x1e0 [ 1785.708614][T30076] ? __sys_sendmsg+0x2b0/0x2b0 [ 1785.713454][T30076] ? __lock_acquire+0x7d80/0x7d80 [ 1785.718578][T30076] __se_sys_sendmsg+0x1d0/0x2c0 [ 1785.723491][T30076] ? __x64_sys_sendmsg+0x80/0x80 [ 1785.728500][T30076] ? lockdep_hardirqs_on+0x98/0x150 [ 1785.733743][T30076] do_syscall_64+0x55/0xb0 [ 1785.738192][T30076] ? clear_bhb_loop+0x40/0x90 [ 1785.742905][T30076] ? clear_bhb_loop+0x40/0x90 [ 1785.747624][T30076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1785.753559][T30076] RIP: 0033:0x7f89faf9e0d9 [ 1785.758012][T30076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.777658][T30076] RSP: 002b:00007f89f91f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1785.786112][T30076] RAX: ffffffffffffffda RBX: 00007f89fb225fa0 RCX: 00007f89faf9e0d9 [ 1785.794120][T30076] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1785.802216][T30076] RBP: 00007f89f91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.810220][T30076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.818219][T30076] R13: 00007f89fb226038 R14: 00007f89fb225fa0 R15: 00007ffc04aab6a8 [ 1785.826250][T30076] [ 1785.851380][T30076] syz.3.7656: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1785.906949][T30076] CPU: 0 PID: 30076 Comm: syz.3.7656 Not tainted syzkaller #0 [ 1785.914543][T30076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1785.924691][T30076] Call Trace: [ 1785.928059][T30076] [ 1785.931076][T30076] dump_stack_lvl+0x18c/0x250 [ 1785.935872][T30076] ? show_regs_print_info+0x20/0x20 [ 1785.941177][T30076] ? load_image+0x420/0x420 [ 1785.945821][T30076] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1785.952332][T30076] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1785.958942][T30076] warn_alloc+0x246/0x340 [ 1785.963359][T30076] ? __get_vm_area_node+0x125/0x370 [ 1785.968690][T30076] ? zone_watermark_ok_safe+0x230/0x230 [ 1785.974318][T30076] ? rcu_is_watching+0x15/0xb0 [ 1785.979188][T30076] ? __get_vm_area_node+0x356/0x370 [ 1785.984508][T30076] __vmalloc_node_range+0x394/0x1320 [ 1785.989864][T30076] ? netlink_insert+0x1094/0x1390 [ 1785.995039][T30076] ? netlink_insert+0x2ba/0x1390 [ 1786.000075][T30076] ? free_vm_area+0x50/0x50 [ 1786.004704][T30076] ? netlink_sendmsg+0x602/0xbf0 [ 1786.009709][T30076] vmalloc+0x79/0x90 [ 1786.013689][T30076] ? netlink_sendmsg+0x602/0xbf0 [ 1786.018704][T30076] netlink_sendmsg+0x602/0xbf0 [ 1786.023583][T30076] ? netlink_getsockopt+0x590/0x590 [ 1786.028889][T30076] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1786.034526][T30076] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1786.039911][T30076] ? security_socket_sendmsg+0x80/0xa0 [ 1786.045428][T30076] ? netlink_getsockopt+0x590/0x590 [ 1786.050715][T30076] ____sys_sendmsg+0x61b/0x980 [ 1786.055580][T30076] ? __asan_memset+0x22/0x40 [ 1786.060255][T30076] ? __sys_sendmsg_sock+0x30/0x30 [ 1786.065381][T30076] ? __import_iovec+0x5f2/0x850 [ 1786.070382][T30076] ? import_iovec+0x73/0xa0 [ 1786.075078][T30076] ___sys_sendmsg+0x2a6/0x360 [ 1786.079853][T30076] ? get_pid_task+0x20/0x1e0 [ 1786.084539][T30076] ? __sys_sendmsg+0x2b0/0x2b0 [ 1786.089459][T30076] ? __lock_acquire+0x7d80/0x7d80 [ 1786.094701][T30076] __se_sys_sendmsg+0x1d0/0x2c0 [ 1786.099662][T30076] ? __x64_sys_sendmsg+0x80/0x80 [ 1786.104779][T30076] ? lockdep_hardirqs_on+0x98/0x150 [ 1786.110137][T30076] do_syscall_64+0x55/0xb0 [ 1786.114643][T30076] ? clear_bhb_loop+0x40/0x90 [ 1786.119403][T30076] ? clear_bhb_loop+0x40/0x90 [ 1786.124159][T30076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1786.130152][T30076] RIP: 0033:0x7f89faf9e0d9 [ 1786.134649][T30076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.154347][T30076] RSP: 002b:00007f89f91f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1786.162876][T30076] RAX: ffffffffffffffda RBX: 00007f89fb225fa0 RCX: 00007f89faf9e0d9 [ 1786.170941][T30076] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1786.179013][T30076] RBP: 00007f89f91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.187075][T30076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.195131][T30076] R13: 00007f89fb226038 R14: 00007f89fb225fa0 R15: 00007ffc04aab6a8 [ 1786.203269][T30076] [ 1786.217468][T30076] Mem-Info: [ 1786.221256][T30076] active_anon:6315 inactive_anon:0 isolated_anon:0 [ 1786.221256][T30076] active_file:21343 inactive_file:40621 isolated_file:0 [ 1786.221256][T30076] unevictable:768 dirty:262 writeback:0 [ 1786.221256][T30076] slab_reclaimable:11049 slab_unreclaimable:93025 [ 1786.221256][T30076] mapped:25182 shmem:1361 pagetables:552 [ 1786.221256][T30076] sec_pagetables:0 bounce:0 [ 1786.221256][T30076] kernel_misc_reclaimable:0 [ 1786.221256][T30076] free:1342313 free_pcp:5176 free_cma:0 [ 1786.275310][T30076] Node 0 active_anon:25360kB inactive_anon:0kB active_file:85372kB inactive_file:162276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100728kB dirty:1048kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11016kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 1786.327239][T30076] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1786.397579][T30076] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.400484][T30081] netlink: 'syz.0.7659': attribute type 25 has an invalid length. [ 1786.458467][T30081] netlink: 'syz.0.7659': attribute type 3 has an invalid length. [ 1786.474775][T30083] netlink: 'syz.0.7659': attribute type 10 has an invalid length. [ 1786.486503][T30076] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1786.492435][T30076] Node 0 DMA32 free:1452448kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25320kB inactive_anon:0kB active_file:85372kB inactive_file:161444kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:7824kB local_pcp:1548kB free_cma:0kB [ 1786.538965][T30083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7659'. [ 1786.550654][T30076] lowmem_reserve[]: 0 0 0 0 0 [ 1786.555483][T30076] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.582922][T30076] lowmem_reserve[]: 0 0 0 0 0 [ 1786.587772][T30076] Node 1 Normal free:3901220kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13216kB local_pcp:0kB free_cma:0kB [ 1786.688675][T30076] lowmem_reserve[]: 0 0 0 0 0 [ 1786.703796][T30076] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1786.726495][T30076] Node 0 DMA32: 2134*4kB (UME) 1521*8kB (UME) 1132*16kB (UME) 968*32kB (UME) 882*64kB (UME) 419*128kB (UME) 125*256kB (UM) 95*512kB (UME) 44*1024kB (UM) 24*2048kB (UME) 268*4096kB (UM) = 1452448kB [ 1786.750502][T30076] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1786.789827][T30076] Node 1 Normal: 243*4kB (UME) 67*8kB (UME) 34*16kB (UME) 205*32kB (UME) 66*64kB (UME) 14*128kB (UE) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3901220kB [ 1786.836686][T30076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.871423][T30076] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1786.887962][T30076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.904337][T30076] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1786.914024][T30076] 63325 total pagecache pages [ 1786.928609][T30076] 0 pages in swap cache [ 1786.933043][T30076] Free swap = 124996kB [ 1786.946441][T30076] Total swap = 124996kB [ 1786.952250][T30076] 2097051 pages RAM [ 1786.956191][T30076] 0 pages HighMem/MovableOnly [ 1786.968844][T30076] 416955 pages reserved [ 1786.973060][T30076] 0 pages cma reserved [ 1786.996626][T30093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7661'. [ 1787.137778][T30096] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7662'. [ 1787.338441][T30097] netlink: 'syz.3.7664': attribute type 10 has an invalid length. [ 1787.360565][T30097] hsr0: left allmulticast mode [ 1787.372022][T30097] hsr_slave_0: left allmulticast mode [ 1787.384179][T30097] hsr_slave_1: left allmulticast mode [ 1787.402180][T30097] bridge0: port 2(hsr0) entered disabled state [ 1787.432162][T30097] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1787.624290][T30102] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7666'. [ 1787.898361][T30109] netlink: 'syz.1.7668': attribute type 10 has an invalid length. [ 1787.918925][T30109] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7668'. [ 1787.939901][T30109] bridge0: port 2(hsr0) entered blocking state [ 1787.964315][T30109] bridge0: port 2(hsr0) entered disabled state [ 1787.988450][T30109] hsr0: entered allmulticast mode [ 1787.994132][T30109] hsr_slave_0: entered allmulticast mode [ 1788.005376][T30109] hsr_slave_1: entered allmulticast mode [ 1788.058323][T30109] bridge0: port 2(hsr0) entered blocking state [ 1788.065719][T30109] bridge0: port 2(hsr0) entered forwarding state [ 1789.010714][T30132] netlink: 'syz.2.7676': attribute type 10 has an invalid length. [ 1789.038478][T30132] hsr0: left allmulticast mode [ 1789.056533][T30132] hsr_slave_0: left allmulticast mode [ 1789.062228][T30132] hsr_slave_1: left allmulticast mode [ 1789.073534][T30132] bridge0: port 2(hsr0) entered disabled state [ 1789.106789][T30132] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1789.136350][T30141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7677'. [ 1789.153821][T30138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7679'. [ 1789.500763][T30149] netlink: 'syz.1.7682': attribute type 9 has an invalid length. [ 1789.516709][T30149] netlink: 391 bytes leftover after parsing attributes in process `syz.1.7682'. [ 1789.530049][T30149] netlink: 'syz.1.7682': attribute type 9 has an invalid length. [ 1789.540290][T30149] netlink: 391 bytes leftover after parsing attributes in process `syz.1.7682'. [ 1789.724428][T30157] FAULT_INJECTION: forcing a failure. [ 1789.724428][T30157] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.737467][T30157] CPU: 1 PID: 30157 Comm: syz.1.7684 Not tainted syzkaller #0 [ 1789.745092][T30157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1789.755198][T30157] Call Trace: [ 1789.758547][T30157] [ 1789.761542][T30157] dump_stack_lvl+0x18c/0x250 [ 1789.766284][T30157] ? show_regs_print_info+0x20/0x20 [ 1789.771531][T30157] ? load_image+0x420/0x420 [ 1789.776445][T30157] ? __might_sleep+0xe0/0xe0 [ 1789.781093][T30157] ? __lock_acquire+0x7d80/0x7d80 [ 1789.786190][T30157] should_fail_ex+0x394/0x4c0 [ 1789.790938][T30157] should_failslab+0x9/0x20 [ 1789.795504][T30157] slab_pre_alloc_hook+0x59/0x300 [ 1789.800589][T30157] ? sctp_add_bind_addr+0x8c/0x360 [ 1789.805751][T30157] __kmem_cache_alloc_node+0x53/0x250 [ 1789.811219][T30157] ? sctp_add_bind_addr+0x8c/0x360 [ 1789.816393][T30157] kmalloc_trace+0x2a/0xe0 [ 1789.820878][T30157] sctp_add_bind_addr+0x8c/0x360 [ 1789.825957][T30157] sctp_bind_addr_copy+0xb3/0x3c0 [ 1789.831027][T30157] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1789.837488][T30157] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1789.842836][T30157] ? __sctp_connect+0xd80/0xd80 [ 1789.847746][T30157] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1789.853151][T30157] ? _local_bh_enable+0xa0/0xa0 [ 1789.858030][T30157] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1789.863871][T30157] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1789.869712][T30157] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1789.875290][T30157] ? security_sctp_bind_connect+0x89/0xb0 [ 1789.881053][T30157] sctp_sendmsg+0x1519/0x27b0 [ 1789.885803][T30157] ? sctp_getsockopt+0xb60/0xb60 [ 1789.890776][T30157] ? aa_af_perm+0x330/0x330 [ 1789.895323][T30157] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1789.901773][T30157] ? sock_rps_record_flow+0x19/0x3f0 [ 1789.907100][T30157] ? inet_sendmsg+0x7e/0x2a0 [ 1789.911739][T30157] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1789.917071][T30157] ? inet_send_prepare+0x250/0x250 [ 1789.922229][T30157] ____sys_sendmsg+0x61b/0x980 [ 1789.927029][T30157] ? __asan_memset+0x22/0x40 [ 1789.931658][T30157] ? __sys_sendmsg_sock+0x30/0x30 [ 1789.936713][T30157] ? __import_iovec+0x5f2/0x850 [ 1789.941603][T30157] ? import_iovec+0x73/0xa0 [ 1789.946143][T30157] ___sys_sendmsg+0x2a6/0x360 [ 1789.950851][T30157] ? get_pid_task+0x20/0x1e0 [ 1789.955480][T30157] ? __sys_sendmsg+0x2b0/0x2b0 [ 1789.960291][T30157] ? __lock_acquire+0x7d80/0x7d80 [ 1789.965366][T30157] __se_sys_sendmsg+0x1d0/0x2c0 [ 1789.970251][T30157] ? __x64_sys_sendmsg+0x80/0x80 [ 1789.975229][T30157] ? lockdep_hardirqs_on+0x98/0x150 [ 1789.980465][T30157] do_syscall_64+0x55/0xb0 [ 1789.984906][T30157] ? clear_bhb_loop+0x40/0x90 [ 1789.989614][T30157] ? clear_bhb_loop+0x40/0x90 [ 1789.994344][T30157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.000268][T30157] RIP: 0033:0x7fd69959e0d9 [ 1790.004715][T30157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.024349][T30157] RSP: 002b:00007fd69a3b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1790.032795][T30157] RAX: ffffffffffffffda RBX: 00007fd699825fa0 RCX: 00007fd69959e0d9 [ 1790.040798][T30157] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1790.048802][T30157] RBP: 00007fd69a3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.056802][T30157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.064888][T30157] R13: 00007fd699826038 R14: 00007fd699825fa0 R15: 00007ffd1a06a188 [ 1790.072896][T30157] [ 1790.278195][T30159] netlink: 'syz.0.7685': attribute type 10 has an invalid length. [ 1790.287809][T30159] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1790.303034][T30161] netlink: 'syz.1.7686': attribute type 10 has an invalid length. [ 1790.318090][T30161] hsr0: left allmulticast mode [ 1790.323189][T30161] hsr_slave_0: left allmulticast mode [ 1790.356608][T30161] hsr_slave_1: left allmulticast mode [ 1790.363778][T30161] bridge0: port 2(hsr0) entered disabled state [ 1790.412099][T30161] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1790.757865][T30171] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7691'. [ 1790.822610][T30172] bridge0: port 3(hsr0) entered blocking state [ 1790.851822][T30172] bridge0: port 3(hsr0) entered disabled state [ 1790.865110][T30172] hsr0: entered allmulticast mode [ 1790.875349][T30172] hsr_slave_0: entered allmulticast mode [ 1790.882264][T30172] hsr_slave_1: entered allmulticast mode [ 1790.918938][T30172] bridge0: port 3(hsr0) entered blocking state [ 1790.928241][T30172] bridge0: port 3(hsr0) entered forwarding state [ 1791.872179][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.878677][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.983771][T30191] __nla_validate_parse: 3 callbacks suppressed [ 1791.983809][T30191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7695'. [ 1792.035756][T30196] validate_nla: 1 callbacks suppressed [ 1792.035793][T30196] netlink: 'syz.2.7697': attribute type 10 has an invalid length. [ 1792.057761][T30196] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1792.150669][T30198] netlink: 'syz.1.7698': attribute type 10 has an invalid length. [ 1792.172473][T30198] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1792.469683][T30202] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7701'. [ 1792.694051][T30208] netlink: 'syz.0.7705': attribute type 10 has an invalid length. [ 1792.710502][T30208] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7705'. [ 1793.888225][T30222] netlink: 'syz.0.7716': attribute type 10 has an invalid length. [ 1793.898629][T30222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7716'. [ 1794.030444][T30223] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7708'. [ 1794.093455][T30224] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7717'. [ 1794.186835][T30228] netlink: 'syz.2.7709': attribute type 10 has an invalid length. [ 1794.194976][T30228] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1794.324604][T30230] netlink: 'syz.0.7710': attribute type 10 has an invalid length. [ 1794.339715][T30230] hsr0: left allmulticast mode [ 1794.344859][T30230] hsr_slave_0: left allmulticast mode [ 1794.361621][T30230] hsr_slave_1: left allmulticast mode [ 1794.368770][T30230] bridge0: port 3(hsr0) entered disabled state [ 1794.414657][T30230] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1794.513309][T30237] netlink: 'syz.3.7712': attribute type 10 has an invalid length. [ 1794.536805][T30237] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1794.690349][T30245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7713'. [ 1794.767504][T30242] netlink: 'syz.0.7714': attribute type 25 has an invalid length. [ 1794.782574][T30242] netlink: 'syz.0.7714': attribute type 3 has an invalid length. [ 1794.795878][T30242] netlink: 'syz.0.7714': attribute type 10 has an invalid length. [ 1794.810721][T30242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7714'. [ 1795.166248][T30251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7720'. [ 1795.830063][T30259] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7724'. [ 1795.861023][T30259] bridge0: port 3(hsr0) entered blocking state [ 1795.893227][T30259] bridge0: port 3(hsr0) entered disabled state [ 1795.922374][T30259] hsr0: entered allmulticast mode [ 1795.935570][T30259] hsr_slave_0: entered allmulticast mode [ 1795.956674][T30259] hsr_slave_1: entered allmulticast mode [ 1796.023317][T30259] bridge0: port 3(hsr0) entered blocking state [ 1796.030701][T30259] bridge0: port 3(hsr0) entered forwarding state [ 1796.374957][T30275] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1796.934588][T30289] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1797.364889][T30297] validate_nla: 10 callbacks suppressed [ 1797.364910][T30297] netlink: 'syz.1.7738': attribute type 10 has an invalid length. [ 1797.675549][T30302] netlink: 'syz.3.7739': attribute type 10 has an invalid length. [ 1797.699189][T30302] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1797.754053][T30303] netlink: 'syz.1.7740': attribute type 10 has an invalid length. [ 1797.806929][T30303] __nla_validate_parse: 3 callbacks suppressed [ 1797.806974][T30303] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7740'. [ 1797.921854][T30303] bridge0: port 2(hsr0) entered blocking state [ 1797.987395][T30303] bridge0: port 2(hsr0) entered disabled state [ 1798.095542][T30303] hsr0: entered allmulticast mode [ 1798.146582][T30303] hsr_slave_0: entered allmulticast mode [ 1798.250052][T30303] hsr_slave_1: entered allmulticast mode [ 1798.463603][T30303] bridge0: port 2(hsr0) entered blocking state [ 1798.471406][T30303] bridge0: port 2(hsr0) entered forwarding state [ 1798.546146][T30310] netlink: 'syz.3.7742': attribute type 25 has an invalid length. [ 1798.562604][T30310] netlink: 'syz.3.7742': attribute type 3 has an invalid length. [ 1798.582895][T30312] netlink: 'syz.3.7742': attribute type 10 has an invalid length. [ 1798.612860][T30312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7742'. [ 1798.678040][T30315] netlink: 'syz.2.7743': attribute type 10 has an invalid length. [ 1799.134380][T30331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7747'. [ 1799.681334][T30337] netlink: 'syz.2.7750': attribute type 10 has an invalid length. [ 1799.695716][T30337] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1800.033453][T30341] netlink: 'syz.0.7752': attribute type 10 has an invalid length. [ 1800.097068][T30344] netlink: 'syz.2.7753': attribute type 10 has an invalid length. [ 1800.118537][T30344] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1800.184101][T30348] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7754'. [ 1800.205020][T30348] bridge0: port 2(hsr0) entered blocking state [ 1800.215759][T30348] bridge0: port 2(hsr0) entered disabled state [ 1800.224509][T30348] hsr0: entered allmulticast mode [ 1800.246716][T30348] hsr_slave_0: entered allmulticast mode [ 1800.254442][T30348] hsr_slave_1: entered allmulticast mode [ 1800.311747][T30348] bridge0: port 2(hsr0) entered blocking state [ 1800.319390][T30348] bridge0: port 2(hsr0) entered forwarding state [ 1800.337794][T30346] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7762'. [ 1800.921792][T30368] hsr0: left allmulticast mode [ 1800.937597][T30368] hsr_slave_0: left allmulticast mode [ 1800.943264][T30368] hsr_slave_1: left allmulticast mode [ 1800.960312][T30368] bridge0: port 2(hsr0) entered disabled state [ 1801.015607][T30368] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1801.846957][T30379] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1801.998366][T30382] hsr0: left allmulticast mode [ 1802.027338][T30382] hsr_slave_0: left allmulticast mode [ 1802.033003][T30382] hsr_slave_1: left allmulticast mode [ 1802.077842][T30382] bridge0: port 3(hsr0) entered disabled state [ 1802.158319][T30382] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1802.308146][T30386] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7766'. [ 1802.657678][T30395] validate_nla: 7 callbacks suppressed [ 1802.657790][T30395] netlink: 'syz.0.7768': attribute type 10 has an invalid length. [ 1802.797107][T30398] netlink: 'syz.3.7769': attribute type 10 has an invalid length. [ 1802.807005][T30398] hsr0: left allmulticast mode [ 1802.819286][T30398] hsr_slave_0: left allmulticast mode [ 1802.824821][T30398] hsr_slave_1: left allmulticast mode [ 1802.840338][T30398] bridge0: port 2(hsr0) entered disabled state [ 1802.861261][T30398] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1803.258249][T30415] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7776'. [ 1803.298342][T30408] netlink: 'syz.2.7775': attribute type 25 has an invalid length. [ 1803.306834][T30408] netlink: 'syz.2.7775': attribute type 3 has an invalid length. [ 1803.320467][T30408] netlink: 'syz.2.7775': attribute type 10 has an invalid length. [ 1803.328872][T30408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1803.417946][T30414] netlink: 'syz.1.7777': attribute type 25 has an invalid length. [ 1803.426231][T30414] netlink: 'syz.1.7777': attribute type 3 has an invalid length. [ 1803.464329][T30414] netlink: 'syz.1.7777': attribute type 10 has an invalid length. [ 1803.474397][T30414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7777'. [ 1803.556244][T30419] netlink: 'syz.0.7778': attribute type 10 has an invalid length. [ 1803.566011][T30419] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7778'. [ 1803.590310][T30419] bridge0: port 3(hsr0) entered blocking state [ 1803.598594][T30419] bridge0: port 3(hsr0) entered disabled state [ 1803.606972][T30419] hsr0: entered allmulticast mode [ 1803.612381][T30419] hsr_slave_0: entered allmulticast mode [ 1803.625334][T30419] hsr_slave_1: entered allmulticast mode [ 1803.654508][T30419] bridge0: port 3(hsr0) entered blocking state [ 1803.662021][T30419] bridge0: port 3(hsr0) entered forwarding state [ 1803.889463][T30424] netlink: 'syz.2.7781': attribute type 10 has an invalid length. [ 1804.468398][T30432] hsr0: left allmulticast mode [ 1804.515919][T30432] hsr_slave_0: left allmulticast mode [ 1804.547258][T30432] hsr_slave_1: left allmulticast mode [ 1804.552973][T30432] bridge0: port 3(hsr0) entered disabled state [ 1804.682659][T30432] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1804.781879][T30440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7782'. [ 1805.251016][T30450] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7788'. [ 1805.264641][T30450] bridge0: port 2(hsr0) entered blocking state [ 1805.281112][T30450] bridge0: port 2(hsr0) entered disabled state [ 1805.308322][T30450] hsr0: entered allmulticast mode [ 1805.313719][T30450] hsr_slave_0: entered allmulticast mode [ 1805.341213][T30450] hsr_slave_1: entered allmulticast mode [ 1805.390181][T30450] bridge0: port 2(hsr0) entered blocking state [ 1805.397363][T30450] bridge0: port 2(hsr0) entered forwarding state [ 1805.411505][T30453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7787'. [ 1805.440553][T30456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7789'. [ 1805.676351][T30460] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1805.967767][T30461] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7791'. [ 1806.087215][T30466] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7792'. [ 1806.458993][T30472] hsr0: left allmulticast mode [ 1806.464208][T30472] hsr_slave_0: left allmulticast mode [ 1806.485377][T30472] hsr_slave_1: left allmulticast mode [ 1806.514662][T30472] bridge0: port 2(hsr0) entered disabled state [ 1806.627836][T30472] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1806.937941][T30481] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1807.278625][T30488] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1807.966969][T30504] validate_nla: 24 callbacks suppressed [ 1807.967004][T30504] netlink: 'syz.0.7810': attribute type 10 has an invalid length. [ 1807.995598][T30504] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1808.213988][T30509] netlink: 'syz.2.7812': attribute type 10 has an invalid length. [ 1808.226961][T30509] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1808.390366][T30511] netlink: 'syz.0.7814': attribute type 25 has an invalid length. [ 1808.419028][T30511] netlink: 'syz.0.7814': attribute type 3 has an invalid length. [ 1808.460683][T30513] netlink: 'syz.3.7815': attribute type 10 has an invalid length. [ 1808.476163][T30515] netlink: 'syz.0.7814': attribute type 10 has an invalid length. [ 1808.484469][T30515] __nla_validate_parse: 8 callbacks suppressed [ 1808.484484][T30515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7814'. [ 1808.558433][T30516] netlink: 'syz.2.7816': attribute type 25 has an invalid length. [ 1808.572852][T30516] netlink: 'syz.2.7816': attribute type 3 has an invalid length. [ 1808.583518][T30516] netlink: 'syz.2.7816': attribute type 10 has an invalid length. [ 1808.591845][T30516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7816'. [ 1808.833395][T30518] netlink: 'syz.1.7818': attribute type 10 has an invalid length. [ 1808.844547][T30518] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1809.605417][T30540] sctp: [Deprecated]: syz.3.7824 (pid 30540) Use of int in max_burst socket option deprecated. [ 1809.605417][T30540] Use struct sctp_assoc_value instead [ 1809.652038][T30540] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.7824'. [ 1810.007013][T30542] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1810.500764][T30550] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7826'. [ 1810.727450][T30555] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1811.475373][T30567] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7833'. [ 1811.523206][T30566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7834'. [ 1812.012461][T30580] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7840'. [ 1812.024230][T30580] bridge0: port 2(hsr0) entered blocking state [ 1812.048313][T30580] bridge0: port 2(hsr0) entered disabled state [ 1812.069064][T30580] hsr0: entered allmulticast mode [ 1812.074534][T30580] hsr_slave_0: entered allmulticast mode [ 1812.083568][T30580] hsr_slave_1: entered allmulticast mode [ 1812.159041][T30580] bridge0: port 2(hsr0) entered blocking state [ 1812.167352][T30580] bridge0: port 2(hsr0) entered forwarding state [ 1812.287016][T30584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7841'. [ 1812.318014][T30588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7839'. [ 1812.433576][T30592] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7842'. [ 1813.308869][T30605] validate_nla: 17 callbacks suppressed [ 1813.308887][T30605] netlink: 'syz.1.7847': attribute type 25 has an invalid length. [ 1813.351711][T30605] netlink: 'syz.1.7847': attribute type 3 has an invalid length. [ 1813.368342][T30605] netlink: 'syz.1.7847': attribute type 10 has an invalid length. [ 1813.507652][T30609] netlink: 'syz.0.7849': attribute type 10 has an invalid length. [ 1813.516219][T30609] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1813.591500][T30613] netlink: 'syz.3.7850': attribute type 10 has an invalid length. [ 1813.703656][T18390] Bluetooth: Frame is too long (len 149, expected len 4) [ 1814.006239][T30621] __nla_validate_parse: 3 callbacks suppressed [ 1814.006264][T30621] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7854'. [ 1814.033047][T30624] netlink: 'syz.3.7855': attribute type 10 has an invalid length. [ 1814.043112][T30624] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7855'. [ 1814.070409][T30624] bridge0: port 2(hsr0) entered blocking state [ 1814.106894][T30624] bridge0: port 2(hsr0) entered disabled state [ 1814.115372][T30624] hsr0: entered allmulticast mode [ 1814.156730][T30624] hsr_slave_0: entered allmulticast mode [ 1814.162677][T30624] hsr_slave_1: entered allmulticast mode [ 1814.331829][T30624] bridge0: port 2(hsr0) entered blocking state [ 1814.339774][T30624] bridge0: port 2(hsr0) entered forwarding state [ 1814.392179][T30619] netlink: 'syz.0.7853': attribute type 10 has an invalid length. [ 1814.410486][T30619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1814.449643][T30628] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7856'. [ 1814.474114][T30628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1815.364523][T18390] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1815.445943][T30646] netlink: 'syz.2.7861': attribute type 10 has an invalid length. [ 1815.475224][T30646] hsr0: left allmulticast mode [ 1815.481087][T30646] hsr_slave_0: left allmulticast mode [ 1815.496489][T30646] hsr_slave_1: left allmulticast mode [ 1815.514184][T30646] bridge0: port 2(hsr0) entered disabled state [ 1815.542065][T30646] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1815.612772][T30651] netlink: 'syz.0.7863': attribute type 10 has an invalid length. [ 1815.848866][T30654] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7865'. [ 1815.922838][T30656] FAULT_INJECTION: forcing a failure. [ 1815.922838][T30656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.938208][T30656] CPU: 0 PID: 30656 Comm: syz.0.7866 Not tainted syzkaller #0 [ 1815.945737][T30656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1815.955841][T30656] Call Trace: [ 1815.959155][T30656] [ 1815.962099][T30656] dump_stack_lvl+0x18c/0x250 [ 1815.967066][T30656] ? show_regs_print_info+0x20/0x20 [ 1815.972300][T30656] ? load_image+0x420/0x420 [ 1815.976841][T30656] ? __lock_acquire+0x7d80/0x7d80 [ 1815.981908][T30656] ? snprintf+0xe9/0x140 [ 1815.986203][T30656] should_fail_ex+0x394/0x4c0 [ 1815.990939][T30656] _copy_to_user+0x2f/0xa0 [ 1815.995395][T30656] simple_read_from_buffer+0xe7/0x150 [ 1816.000810][T30656] proc_fail_nth_read+0x1e8/0x260 [ 1816.005905][T30656] ? proc_fault_inject_write+0x360/0x360 [ 1816.011596][T30656] ? fsnotify_perm+0x271/0x5e0 [ 1816.016431][T30656] ? proc_fault_inject_write+0x360/0x360 [ 1816.022124][T30656] vfs_read+0x298/0x990 [ 1816.026332][T30656] ? kernel_read+0x1e0/0x1e0 [ 1816.030982][T30656] ? __fget_files+0x28/0x460 [ 1816.035623][T30656] ? __fget_files+0x3fc/0x460 [ 1816.040365][T30656] ? __fdget_pos+0x2a3/0x330 [ 1816.045012][T30656] ? ksys_read+0x74/0x260 [ 1816.049419][T30656] ksys_read+0x151/0x260 [ 1816.053724][T30656] ? vfs_write+0x9a0/0x9a0 [ 1816.058196][T30656] ? lockdep_hardirqs_on+0x98/0x150 [ 1816.063441][T30656] do_syscall_64+0x55/0xb0 [ 1816.067889][T30656] ? clear_bhb_loop+0x40/0x90 [ 1816.072632][T30656] ? clear_bhb_loop+0x40/0x90 [ 1816.077333][T30656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.083250][T30656] RIP: 0033:0x7f267775e90e [ 1816.087695][T30656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1816.107420][T30656] RSP: 002b:00007f267862dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1816.115866][T30656] RAX: ffffffffffffffda RBX: 00007f267862e6c0 RCX: 00007f267775e90e [ 1816.123864][T30656] RDX: 000000000000000f RSI: 00007f267862e0a0 RDI: 0000000000000005 [ 1816.131863][T30656] RBP: 00007f267862e090 R08: 0000000000000000 R09: 0000000000000000 [ 1816.139875][T30656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1816.147879][T30656] R13: 00007f2677a26038 R14: 00007f2677a25fa0 R15: 00007ffebd727d18 [ 1816.155891][T30656] [ 1816.308418][T30658] netlink: 'syz.0.7867': attribute type 10 has an invalid length. [ 1816.327446][T30658] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7867'. [ 1816.345382][T30658] bridge0: port 3(hsr0) entered blocking state [ 1816.362791][T30658] bridge0: port 3(hsr0) entered disabled state [ 1816.399469][T30658] hsr0: entered allmulticast mode [ 1816.405203][T30658] hsr_slave_0: entered allmulticast mode [ 1816.415439][T30658] hsr_slave_1: entered allmulticast mode [ 1816.501514][T30658] bridge0: port 3(hsr0) entered blocking state [ 1816.508299][T30658] bridge0: port 3(hsr0) entered forwarding state [ 1816.634883][T30670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7868'. [ 1816.665355][T30665] syzkaller0: entered promiscuous mode [ 1816.687064][T30665] syzkaller0: entered allmulticast mode [ 1816.920602][T30679] IPv6: pim6reg1: Disabled Multicast RS [ 1816.948629][T30678] hsr0: left allmulticast mode [ 1816.956308][T30678] hsr_slave_0: left allmulticast mode [ 1816.969148][T30678] hsr_slave_1: left allmulticast mode [ 1816.976449][T30678] bridge0: port 2(hsr0) entered disabled state [ 1817.011808][T30678] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1817.373027][T30689] FAULT_INJECTION: forcing a failure. [ 1817.373027][T30689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1817.402455][T30689] CPU: 0 PID: 30689 Comm: syz.3.7875 Not tainted syzkaller #0 [ 1817.410021][T30689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1817.420218][T30689] Call Trace: [ 1817.423543][T30689] [ 1817.426612][T30689] dump_stack_lvl+0x18c/0x250 [ 1817.431353][T30689] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1817.437574][T30689] ? show_regs_print_info+0x20/0x20 [ 1817.442823][T30689] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1817.449040][T30689] ? dump_stack+0x9/0x20 [ 1817.453344][T30689] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 1817.458884][T30689] should_fail_ex+0x394/0x4c0 [ 1817.463652][T30689] _copy_from_user+0x2f/0xe0 [ 1817.468762][T30689] __sys_bpf+0x23e/0x890 [ 1817.473041][T30689] ? read_tsc+0x9/0x20 [ 1817.477144][T30689] ? bpf_link_show_fdinfo+0x390/0x390 [ 1817.482568][T30689] ? lock_chain_count+0x20/0x20 [ 1817.487446][T30689] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1817.493468][T30689] __x64_sys_bpf+0x7c/0x90 [ 1817.497918][T30689] do_syscall_64+0x55/0xb0 [ 1817.502362][T30689] ? clear_bhb_loop+0x40/0x90 [ 1817.507079][T30689] ? clear_bhb_loop+0x40/0x90 [ 1817.511800][T30689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1817.517732][T30689] RIP: 0033:0x7f89faf9e0d9 [ 1817.522178][T30689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.541816][T30689] RSP: 002b:00007f89f91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1817.550267][T30689] RAX: ffffffffffffffda RBX: 00007f89fb226090 RCX: 00007f89faf9e0d9 [ 1817.558278][T30689] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1817.566284][T30689] RBP: 00007f89f91d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.574288][T30689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1817.582296][T30689] R13: 00007f89fb226128 R14: 00007f89fb226090 R15: 00007ffc04aab6a8 [ 1817.590320][T30689] [ 1817.703149][T30692] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7876'. [ 1817.723480][T30692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1817.947628][T30695] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7877'. [ 1818.162506][T30700] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.7879'. [ 1818.354747][T30704] validate_nla: 5 callbacks suppressed [ 1818.354861][T30704] netlink: 'syz.3.7881': attribute type 10 has an invalid length. [ 1818.475900][T30708] netlink: 'syz.0.7883': attribute type 10 has an invalid length. [ 1818.490430][T30708] hsr0: left allmulticast mode [ 1818.501541][T30708] hsr_slave_0: left allmulticast mode [ 1818.511189][T30708] hsr_slave_1: left allmulticast mode [ 1818.520899][T30708] bridge0: port 3(hsr0) entered disabled state [ 1818.806876][T30708] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1818.871167][T30712] FAULT_INJECTION: forcing a failure. [ 1818.871167][T30712] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.885306][T30713] netlink: 'syz.1.7882': attribute type 10 has an invalid length. [ 1818.905436][T30712] CPU: 0 PID: 30712 Comm: syz.3.7884 Not tainted syzkaller #0 [ 1818.912985][T30712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1818.923063][T30712] Call Trace: [ 1818.926355][T30712] [ 1818.929351][T30712] dump_stack_lvl+0x18c/0x250 [ 1818.934049][T30712] ? show_regs_print_info+0x20/0x20 [ 1818.939268][T30712] ? load_image+0x420/0x420 [ 1818.943798][T30712] ? __might_sleep+0xe0/0xe0 [ 1818.948408][T30712] ? __lock_acquire+0x7d80/0x7d80 [ 1818.953456][T30712] should_fail_ex+0x394/0x4c0 [ 1818.958175][T30712] should_failslab+0x9/0x20 [ 1818.962772][T30712] slab_pre_alloc_hook+0x59/0x300 [ 1818.967864][T30712] ? lockdep_hardirqs_on+0x98/0x150 [ 1818.973108][T30712] kmem_cache_alloc_node+0x5e/0x310 [ 1818.978333][T30712] ? __alloc_skb+0x103/0x2c0 [ 1818.982966][T30712] __alloc_skb+0x103/0x2c0 [ 1818.987400][T30712] netlink_ack+0x377/0x1160 [ 1818.991930][T30712] ? netlink_dump+0xec0/0xec0 [ 1818.996620][T30712] ? perf_trace_lock+0xfc/0x3b0 [ 1819.001493][T30712] netlink_rcv_skb+0x2b3/0x4c0 [ 1819.006272][T30712] ? rtnetlink_bind+0x80/0x80 [ 1819.010993][T30712] ? netlink_ack+0x1160/0x1160 [ 1819.015911][T30712] ? __lock_acquire+0x7d80/0x7d80 [ 1819.020986][T30712] ? netlink_deliver_tap+0x2e/0x1b0 [ 1819.026257][T30712] netlink_unicast+0x7b1/0x930 [ 1819.031073][T30712] netlink_sendmsg+0x8d0/0xbf0 [ 1819.035877][T30712] ? netlink_getsockopt+0x590/0x590 [ 1819.041113][T30712] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1819.046721][T30712] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1819.052058][T30712] ? security_socket_sendmsg+0x80/0xa0 [ 1819.057554][T30712] ? netlink_getsockopt+0x590/0x590 [ 1819.062796][T30712] ____sys_sendmsg+0x61b/0x980 [ 1819.067606][T30712] ? __asan_memset+0x22/0x40 [ 1819.072234][T30712] ? __sys_sendmsg_sock+0x30/0x30 [ 1819.077285][T30712] ? __import_iovec+0x5f2/0x850 [ 1819.082187][T30712] ? import_iovec+0x73/0xa0 [ 1819.086752][T30712] ___sys_sendmsg+0x2a6/0x360 [ 1819.091480][T30712] ? __sys_sendmsg+0x2b0/0x2b0 [ 1819.096303][T30712] ? __lock_acquire+0x7d80/0x7d80 [ 1819.101388][T30712] __se_sys_sendmsg+0x1d0/0x2c0 [ 1819.106278][T30712] ? __x64_sys_sendmsg+0x80/0x80 [ 1819.111261][T30712] ? lockdep_hardirqs_on+0x98/0x150 [ 1819.116499][T30712] do_syscall_64+0x55/0xb0 [ 1819.120947][T30712] ? clear_bhb_loop+0x40/0x90 [ 1819.125657][T30712] ? clear_bhb_loop+0x40/0x90 [ 1819.130372][T30712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1819.136304][T30712] RIP: 0033:0x7f89faf9e0d9 [ 1819.140749][T30712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1819.160389][T30712] RSP: 002b:00007f89f91f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1819.168838][T30712] RAX: ffffffffffffffda RBX: 00007f89fb225fa0 RCX: 00007f89faf9e0d9 [ 1819.176847][T30712] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1819.184849][T30712] RBP: 00007f89f91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.192846][T30712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.200847][T30712] R13: 00007f89fb226038 R14: 00007f89fb225fa0 R15: 00007ffc04aab6a8 [ 1819.208860][T30712] [ 1819.339724][T30715] netlink: 'syz.3.7885': attribute type 10 has an invalid length. [ 1819.611407][T30719] __nla_validate_parse: 2 callbacks suppressed [ 1819.611453][T30719] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7887'. [ 1819.769517][T30723] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7888'. [ 1820.144673][T30734] mac80211_hwsim hwsim76 .3ãc¤±: renamed from wlan1 (while UP) [ 1820.361358][T30739] netlink: 'syz.0.7893': attribute type 10 has an invalid length. [ 1820.369910][T30739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7893'. [ 1820.644712][T30743] netlink: 'syz.2.7895': attribute type 10 has an invalid length. [ 1820.654043][T30743] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1820.863787][T30747] netlink: 'syz.3.7896': attribute type 10 has an invalid length. [ 1821.012626][T30750] netlink: 'syz.1.7897': attribute type 25 has an invalid length. [ 1821.021264][T30750] netlink: 'syz.1.7897': attribute type 3 has an invalid length. [ 1821.043665][T30750] netlink: 'syz.1.7897': attribute type 10 has an invalid length. [ 1821.061787][T30750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7897'. [ 1821.174169][T30752] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7898'. [ 1822.301282][T30769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7903'. [ 1822.481893][T30772] FAULT_INJECTION: forcing a failure. [ 1822.481893][T30772] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.525530][T30772] CPU: 0 PID: 30772 Comm: syz.3.7904 Not tainted syzkaller #0 [ 1822.533140][T30772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1822.543300][T30772] Call Trace: [ 1822.546693][T30772] [ 1822.549721][T30772] dump_stack_lvl+0x18c/0x250 [ 1822.554522][T30772] ? show_regs_print_info+0x20/0x20 [ 1822.559829][T30772] ? load_image+0x420/0x420 [ 1822.564458][T30772] ? __might_sleep+0xe0/0xe0 [ 1822.569680][T30772] ? __lock_acquire+0x7d80/0x7d80 [ 1822.574848][T30772] should_fail_ex+0x394/0x4c0 [ 1822.579702][T30772] should_failslab+0x9/0x20 [ 1822.584342][T30772] slab_pre_alloc_hook+0x59/0x300 [ 1822.589479][T30772] ? cpuset_write_resmask+0x1f7/0x1fb0 [ 1822.595020][T30772] ? cpuset_write_resmask+0x1f7/0x1fb0 [ 1822.600539][T30772] __kmem_cache_alloc_node+0x53/0x250 [ 1822.606008][T30772] ? cpuset_write_resmask+0x1f7/0x1fb0 [ 1822.611530][T30772] __kmalloc_node_track_caller+0xa4/0x230 [ 1822.617368][T30772] kmemdup+0x2b/0x70 [ 1822.621405][T30772] cpuset_write_resmask+0x1f7/0x1fb0 [ 1822.626814][T30772] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1822.633469][T30772] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1822.639906][T30772] ? cpuset_common_seq_show+0x250/0x250 [ 1822.645544][T30772] ? rcu_is_watching+0x15/0xb0 [ 1822.650439][T30772] ? cpuset_common_seq_show+0x250/0x250 [ 1822.656084][T30772] cgroup_file_write+0x2cd/0x6a0 [ 1822.661132][T30772] ? kernfs_fop_write_iter+0x1dc/0x520 [ 1822.666735][T30772] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1822.671947][T30772] ? __virt_addr_valid+0x10c/0x380 [ 1822.677145][T30772] ? __virt_addr_valid+0x10c/0x380 [ 1822.682401][T30772] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1822.687599][T30772] kernfs_fop_write_iter+0x3a4/0x520 [ 1822.693007][T30772] vfs_write+0x474/0x9a0 [ 1822.697376][T30772] ? file_end_write+0x250/0x250 [ 1822.702339][T30772] ? __fget_files+0x3fc/0x460 [ 1822.707148][T30772] ? __fdget_pos+0x2a3/0x330 [ 1822.711813][T30772] ? ksys_write+0x74/0x260 [ 1822.716338][T30772] ksys_write+0x151/0x260 [ 1822.720790][T30772] ? __ia32_sys_read+0x90/0x90 [ 1822.725677][T30772] ? lockdep_hardirqs_on+0x98/0x150 [ 1822.730988][T30772] do_syscall_64+0x55/0xb0 [ 1822.735508][T30772] ? clear_bhb_loop+0x40/0x90 [ 1822.740260][T30772] ? clear_bhb_loop+0x40/0x90 [ 1822.745025][T30772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1822.750998][T30772] RIP: 0033:0x7f89faf9e0d9 [ 1822.755498][T30772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1822.775186][T30772] RSP: 002b:00007f89f91f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1822.783690][T30772] RAX: ffffffffffffffda RBX: 00007f89fb225fa0 RCX: 00007f89faf9e0d9 [ 1822.791742][T30772] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 1822.799790][T30772] RBP: 00007f89f91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1822.807845][T30772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1822.815895][T30772] R13: 00007f89fb226038 R14: 00007f89fb225fa0 R15: 00007ffc04aab6a8 [ 1822.824017][T30772] [ 1823.125219][T30772] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7904'. [ 1823.135023][T30772] bridge_slave_1: default FDB implementation only supports local addresses [ 1823.272014][T30783] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1823.518626][T30788] validate_nla: 2 callbacks suppressed [ 1823.518652][T30788] netlink: 'syz.0.7907': attribute type 10 has an invalid length. [ 1823.558691][T30787] netlink: 'syz.3.7908': attribute type 10 has an invalid length. [ 1823.571694][T30787] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7908'. [ 1823.595422][T30787] bridge0: port 2(hsr0) entered blocking state [ 1823.604138][T30787] bridge0: port 2(hsr0) entered disabled state [ 1823.622150][T30787] hsr0: entered allmulticast mode [ 1823.627961][T30787] hsr_slave_0: entered allmulticast mode [ 1823.634039][T30787] hsr_slave_1: entered allmulticast mode [ 1823.663870][T30787] bridge0: port 2(hsr0) entered blocking state [ 1823.672894][T30787] bridge0: port 2(hsr0) entered forwarding state [ 1823.717710][T30792] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7909'. [ 1823.990660][T30797] netlink: 'syz.1.7911': attribute type 10 has an invalid length. [ 1824.003866][T30797] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1824.252389][T30799] netlink: 'syz.2.7912': attribute type 10 has an invalid length. [ 1824.283745][T30799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7912'. [ 1824.311957][T30804] netlink: 'syz.0.7914': attribute type 10 has an invalid length. [ 1824.848728][T30814] __nla_validate_parse: 2 callbacks suppressed [ 1824.848768][T30814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7916'. [ 1825.116584][T30817] netlink: 'syz.0.7918': attribute type 10 has an invalid length. [ 1825.677575][T30826] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1825.893194][T30828] netlink: 'syz.2.7922': attribute type 10 has an invalid length. [ 1825.936577][T30828] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7922'. [ 1825.949997][T30828] bridge0: port 2(hsr0) entered blocking state [ 1825.994053][T30828] bridge0: port 2(hsr0) entered disabled state [ 1826.013277][T30828] hsr0: entered allmulticast mode [ 1826.026801][T30828] hsr_slave_0: entered allmulticast mode [ 1826.033094][T30828] hsr_slave_1: entered allmulticast mode [ 1826.138513][T30828] bridge0: port 2(hsr0) entered blocking state [ 1826.146473][T30828] bridge0: port 2(hsr0) entered forwarding state [ 1826.175975][T30830] netlink: 'syz.0.7921': attribute type 10 has an invalid length. [ 1826.212451][T30830] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1826.338404][T30837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7923'. [ 1826.803368][T30845] netlink: 'syz.0.7927': attribute type 10 has an invalid length. [ 1826.820194][T30845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1826.848241][T30843] netlink: 'syz.3.7926': attribute type 10 has an invalid length. [ 1826.867393][T30843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7926'. [ 1827.085136][T30851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7930'. [ 1827.117407][T30849] hsr0: left allmulticast mode [ 1827.122721][T30849] hsr_slave_0: left allmulticast mode [ 1827.142999][T30849] hsr_slave_1: left allmulticast mode [ 1827.156746][T30849] bridge0: port 2(hsr0) entered disabled state [ 1827.203059][T30849] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1827.402195][T30862] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7931'. [ 1827.546222][T30860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7932'. [ 1827.689607][T30868] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7934'. [ 1828.849850][T30884] validate_nla: 6 callbacks suppressed [ 1828.849873][T30884] netlink: 'syz.3.7939': attribute type 10 has an invalid length. [ 1828.904808][T30887] netlink: 'syz.0.7941': attribute type 10 has an invalid length. [ 1828.925178][T30889] netlink: 'syz.2.7940': attribute type 25 has an invalid length. [ 1828.939216][T30889] netlink: 'syz.2.7940': attribute type 3 has an invalid length. [ 1828.953984][T30889] netlink: 'syz.2.7940': attribute type 10 has an invalid length. [ 1829.701878][T30900] netlink: 'syz.2.7945': attribute type 21 has an invalid length. [ 1829.718911][T30900] netlink: 'syz.2.7945': attribute type 1 has an invalid length. [ 1829.787288][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 1829.890790][T30902] __nla_validate_parse: 4 callbacks suppressed [ 1829.890810][T30902] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.7945'. [ 1830.247769][T30905] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.7946'. [ 1830.304966][T30905] IPv6: Can't replace route, no match found [ 1830.559777][T30917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7949'. [ 1830.705208][T30922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1830.777954][T30921] netlink: 'syz.0.7951': attribute type 10 has an invalid length. [ 1830.797488][T30921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7951'. [ 1830.994949][T30924] netlink: 'syz.0.7952': attribute type 10 has an invalid length. [ 1831.173332][T30926] netlink: 'syz.0.7953': attribute type 25 has an invalid length. [ 1831.193850][T30926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7953'. [ 1831.738374][T30934] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1833.267968][T30943] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7957'. [ 1833.293342][T30943] bridge0: port 2(hsr0) entered blocking state [ 1833.301915][T30943] bridge0: port 2(hsr0) entered disabled state [ 1833.310444][T30943] hsr0: entered allmulticast mode [ 1833.315932][T30943] hsr_slave_0: entered allmulticast mode [ 1833.326628][T30943] hsr_slave_1: entered allmulticast mode [ 1833.389353][T30943] bridge0: port 2(hsr0) entered blocking state [ 1833.396762][T30943] bridge0: port 2(hsr0) entered forwarding state [ 1833.818867][T30962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7964'. [ 1833.907954][T30966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7963'. [ 1834.015213][T30958] validate_nla: 8 callbacks suppressed [ 1834.015254][T30958] netlink: 'syz.1.7962': attribute type 10 has an invalid length. [ 1834.077611][T30958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7962'. [ 1834.328633][T30972] netlink: 'syz.0.7967': attribute type 10 has an invalid length. [ 1834.338298][T30972] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1834.670953][T30977] IPv6: Can't replace route, no match found [ 1835.144362][T30987] netlink: 'syz.0.7971': attribute type 10 has an invalid length. [ 1835.173866][T30987] __nla_validate_parse: 2 callbacks suppressed [ 1835.173923][T30987] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7971'. [ 1835.197242][T30987] bridge0: port 3(hsr0) entered blocking state [ 1835.206203][T30987] bridge0: port 3(hsr0) entered disabled state [ 1835.218355][T30987] hsr0: entered allmulticast mode [ 1835.225472][T30987] hsr_slave_0: entered allmulticast mode [ 1835.255814][T30987] hsr_slave_1: entered allmulticast mode [ 1835.408057][T30987] bridge0: port 3(hsr0) entered blocking state [ 1835.418033][T30997] FAULT_INJECTION: forcing a failure. [ 1835.418033][T30997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1835.418457][T30987] bridge0: port 3(hsr0) entered forwarding state [ 1835.445349][T30997] CPU: 0 PID: 30997 Comm: syz.1.7975 Not tainted syzkaller #0 [ 1835.452887][T30997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1835.462999][T30997] Call Trace: [ 1835.466328][T30997] [ 1835.469313][T30997] dump_stack_lvl+0x18c/0x250 [ 1835.474048][T30997] ? show_regs_print_info+0x20/0x20 [ 1835.479303][T30997] ? load_image+0x420/0x420 [ 1835.483870][T30997] ? __lock_acquire+0x7d80/0x7d80 [ 1835.488963][T30997] should_fail_ex+0x394/0x4c0 [ 1835.493685][T30997] _copy_from_user+0x2f/0xe0 [ 1835.498318][T30997] __copy_msghdr+0x388/0x560 [ 1835.502972][T30997] ___sys_sendmsg+0x214/0x360 [ 1835.507689][T30997] ? __sys_sendmsg+0x2b0/0x2b0 [ 1835.512507][T30997] ? __lock_acquire+0x7d80/0x7d80 [ 1835.517591][T30997] __se_sys_sendmsg+0x1d0/0x2c0 [ 1835.522478][T30997] ? __x64_sys_sendmsg+0x80/0x80 [ 1835.527468][T30997] ? lockdep_hardirqs_on+0x98/0x150 [ 1835.532711][T30997] do_syscall_64+0x55/0xb0 [ 1835.537159][T30997] ? clear_bhb_loop+0x40/0x90 [ 1835.541878][T30997] ? clear_bhb_loop+0x40/0x90 [ 1835.546590][T30997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1835.552514][T30997] RIP: 0033:0x7fd69959e0d9 [ 1835.556961][T30997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1835.576601][T30997] RSP: 002b:00007fd69a3b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1835.585047][T30997] RAX: ffffffffffffffda RBX: 00007fd699825fa0 RCX: 00007fd69959e0d9 [ 1835.593139][T30997] RDX: 00000000000009fc RSI: 0000200000001180 RDI: 0000000000000003 [ 1835.601144][T30997] RBP: 00007fd69a3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1835.609156][T30997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1835.617165][T30997] R13: 00007fd699826038 R14: 00007fd699825fa0 R15: 00007ffd1a06a188 [ 1835.625219][T30997] [ 1835.672644][T30993] netlink: 'syz.2.7973': attribute type 10 has an invalid length. [ 1835.682561][T30991] netlink: 'syz.3.7974': attribute type 25 has an invalid length. [ 1835.733339][T30991] netlink: 'syz.3.7974': attribute type 3 has an invalid length. [ 1835.755152][T30995] netlink: 'syz.3.7974': attribute type 10 has an invalid length. [ 1835.766720][T30995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7974'. [ 1835.899867][T31001] netlink: 'syz.1.7976': attribute type 10 has an invalid length. [ 1835.911791][T31001] hsr0: left allmulticast mode [ 1835.920074][T31001] hsr_slave_0: left allmulticast mode [ 1835.925953][T31001] hsr_slave_1: left allmulticast mode [ 1835.954556][T31001] bridge0: port 2(hsr0) entered disabled state [ 1835.994985][T31001] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1836.114827][T31003] netlink: 'syz.0.7977': attribute type 10 has an invalid length. [ 1836.147512][T31003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7977'. [ 1836.177094][T31008] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7978'. [ 1836.287321][T31011] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7979'. [ 1836.934054][T31013] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.7980'. [ 1836.973193][T31013] IPv6: Can't replace route, no match found [ 1837.122190][T31016] netlink: 'syz.0.7988': attribute type 10 has an invalid length. [ 1837.148427][T31016] hsr0: left allmulticast mode [ 1837.153716][T31016] hsr_slave_0: left allmulticast mode [ 1837.163635][T31016] hsr_slave_1: left allmulticast mode [ 1837.178456][T31016] bridge0: port 3(hsr0) entered disabled state [ 1837.216331][T31016] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1837.244372][T31020] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7981'. [ 1837.405522][T31021] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7982'. [ 1837.745712][T31030] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7985'. [ 1838.460006][T31034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7986'. [ 1838.996826][T31048] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1839.277148][T31064] validate_nla: 9 callbacks suppressed [ 1839.277202][T31064] netlink: 'syz.2.7998': attribute type 10 has an invalid length. [ 1839.293123][T31064] bridge0: port 2(hsr0) entered blocking state [ 1839.301071][T31064] bridge0: port 2(hsr0) entered disabled state [ 1839.312780][T31064] hsr0: entered allmulticast mode [ 1839.318567][T31064] hsr_slave_0: entered allmulticast mode [ 1839.324986][T31064] hsr_slave_1: entered allmulticast mode [ 1839.384304][T31064] bridge0: port 2(hsr0) entered blocking state [ 1839.391655][T31064] bridge0: port 2(hsr0) entered forwarding state [ 1839.846000][T31078] netlink: 'syz.2.8000': attribute type 10 has an invalid length. [ 1840.035111][T31077] netlink: 'syz.1.8001': attribute type 25 has an invalid length. [ 1840.078624][T31077] netlink: 'syz.1.8001': attribute type 3 has an invalid length. [ 1840.098753][T31077] netlink: 'syz.1.8001': attribute type 10 has an invalid length. [ 1840.245258][T31087] FAULT_INJECTION: forcing a failure. [ 1840.245258][T31087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1840.265746][T31087] CPU: 0 PID: 31087 Comm: syz.2.8003 Not tainted syzkaller #0 [ 1840.273262][T31087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1840.283374][T31087] Call Trace: [ 1840.286702][T31087] [ 1840.289673][T31087] dump_stack_lvl+0x18c/0x250 [ 1840.294419][T31087] ? show_regs_print_info+0x20/0x20 [ 1840.299668][T31087] ? load_image+0x420/0x420 [ 1840.304318][T31087] ? __might_fault+0xaa/0x120 [ 1840.307545][T31083] netlink: 'syz.0.8002': attribute type 10 has an invalid length. [ 1840.309033][T31087] ? __lock_acquire+0x7d80/0x7d80 [ 1840.309072][T31087] should_fail_ex+0x394/0x4c0 [ 1840.309110][T31087] _copy_from_user+0x2f/0xe0 [ 1840.309138][T31087] ___sys_sendmsg+0x1c7/0x360 [ 1840.309164][T31087] ? get_pid_task+0x20/0x1e0 [ 1840.323985][T31083] __nla_validate_parse: 6 callbacks suppressed [ 1840.324249][T31083] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8002'. [ 1840.326702][T31087] ? __sys_sendmsg+0x2b0/0x2b0 [ 1840.326755][T31087] ? __lock_acquire+0x7d80/0x7d80 [ 1840.326812][T31087] __se_sys_sendmsg+0x1d0/0x2c0 [ 1840.326841][T31087] ? __x64_sys_sendmsg+0x80/0x80 [ 1840.326883][T31087] ? lockdep_hardirqs_on+0x98/0x150 [ 1840.380717][T31087] do_syscall_64+0x55/0xb0 [ 1840.385183][T31087] ? clear_bhb_loop+0x40/0x90 [ 1840.385215][T31083] bridge0: port 3(hsr0) entered blocking state [ 1840.389891][T31087] ? clear_bhb_loop+0x40/0x90 [ 1840.389928][T31087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1840.389953][T31087] RIP: 0033:0x7fd50459e0d9 [ 1840.389973][T31087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1840.389994][T31087] RSP: 002b:00007fd5053b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1840.390019][T31087] RAX: ffffffffffffffda RBX: 00007fd504826090 RCX: 00007fd50459e0d9 [ 1840.390035][T31087] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1840.390051][T31087] RBP: 00007fd5053b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1840.390066][T31087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1840.390080][T31087] R13: 00007fd504826128 R14: 00007fd504826090 R15: 00007ffd5eec2968 [ 1840.390114][T31087] [ 1840.508900][T31083] bridge0: port 3(hsr0) entered disabled state [ 1840.546249][T31083] hsr0: entered allmulticast mode [ 1840.562580][T31083] hsr_slave_0: entered allmulticast mode [ 1840.573087][T31083] hsr_slave_1: entered allmulticast mode [ 1840.669559][T31083] bridge0: port 3(hsr0) entered blocking state [ 1840.676850][T31083] bridge0: port 3(hsr0) entered forwarding state [ 1840.717017][T31094] netlink: 'syz.3.8004': attribute type 10 has an invalid length. [ 1840.746226][T31094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8004'. [ 1840.955708][T31096] sit0: entered allmulticast mode [ 1841.017199][T31099] FAULT_INJECTION: forcing a failure. [ 1841.017199][T31099] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.066516][T31099] CPU: 0 PID: 31099 Comm: syz.3.8007 Not tainted syzkaller #0 [ 1841.074056][T31099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1841.084159][T31099] Call Trace: [ 1841.087484][T31099] [ 1841.090462][T31099] dump_stack_lvl+0x18c/0x250 [ 1841.095199][T31099] ? show_regs_print_info+0x20/0x20 [ 1841.100455][T31099] ? load_image+0x420/0x420 [ 1841.105024][T31099] ? __might_sleep+0xe0/0xe0 [ 1841.109670][T31099] ? __lock_acquire+0x7d80/0x7d80 [ 1841.114771][T31099] should_fail_ex+0x394/0x4c0 [ 1841.119526][T31099] should_failslab+0x9/0x20 [ 1841.122336][T31105] ªªªªªª: renamed from vlan0 (while UP) [ 1841.124071][T31099] slab_pre_alloc_hook+0x59/0x300 [ 1841.124112][T31099] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1841.140502][T31099] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1841.146432][T31099] __kmem_cache_alloc_node+0x53/0x250 [ 1841.151873][T31099] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1841.157745][T31099] __kmalloc+0xa7/0x240 [ 1841.161964][T31099] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1841.167582][T31099] ? tomoyo_domain+0xd6/0x120 [ 1841.172374][T31099] tomoyo_path_number_perm+0x248/0x5e0 [ 1841.177928][T31099] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1841.183623][T31099] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1841.189170][T31099] ? ksys_write+0x1d2/0x260 [ 1841.193780][T31099] ? __fget_files+0x28/0x460 [ 1841.198448][T31099] security_file_ioctl+0x70/0xa0 [ 1841.203450][T31099] __se_sys_ioctl+0x48/0x170 [ 1841.208131][T31099] do_syscall_64+0x55/0xb0 [ 1841.212601][T31099] ? clear_bhb_loop+0x40/0x90 [ 1841.217337][T31099] ? clear_bhb_loop+0x40/0x90 [ 1841.222074][T31099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1841.228049][T31099] RIP: 0033:0x7f89faf9e0d9 [ 1841.232539][T31099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.252218][T31099] RSP: 002b:00007f89f91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1841.260695][T31099] RAX: ffffffffffffffda RBX: 00007f89fb226090 RCX: 00007f89faf9e0d9 [ 1841.268717][T31099] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 1841.276732][T31099] RBP: 00007f89f91d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.284755][T31099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.292794][T31099] R13: 00007f89fb226128 R14: 00007f89fb226090 R15: 00007ffc04aab6a8 [ 1841.300835][T31099] [ 1841.347175][T31096] sit0: entered promiscuous mode [ 1841.382071][T31099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1841.612866][T31111] netlink: 'syz.1.8009': attribute type 10 has an invalid length. [ 1841.625386][T31111] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1841.844009][T31117] netlink: 'syz.3.8011': attribute type 10 has an invalid length. [ 1841.861751][T31120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8010'. [ 1841.965603][T31122] netlink: 'syz.2.8013': attribute type 25 has an invalid length. [ 1841.978700][T31122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8013'. [ 1842.797334][T31140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1843.352401][T31149] FAULT_INJECTION: forcing a failure. [ 1843.352401][T31149] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.369677][T31149] CPU: 1 PID: 31149 Comm: syz.2.8021 Not tainted syzkaller #0 [ 1843.377225][T31149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1843.387321][T31149] Call Trace: [ 1843.390632][T31149] [ 1843.393594][T31149] dump_stack_lvl+0x18c/0x250 [ 1843.398318][T31149] ? show_regs_print_info+0x20/0x20 [ 1843.403590][T31149] ? load_image+0x420/0x420 [ 1843.408160][T31149] ? __lock_acquire+0x7d80/0x7d80 [ 1843.413235][T31149] should_fail_ex+0x394/0x4c0 [ 1843.417963][T31149] should_failslab+0x9/0x20 [ 1843.422518][T31149] slab_pre_alloc_hook+0x59/0x300 [ 1843.427685][T31149] ? security_sk_alloc+0x4b/0x130 [ 1843.432763][T31149] ? security_sk_alloc+0x4b/0x130 [ 1843.437823][T31149] __kmem_cache_alloc_node+0x53/0x250 [ 1843.443250][T31149] ? security_sk_alloc+0x4b/0x130 [ 1843.448320][T31149] __kmalloc+0xa7/0x240 [ 1843.452522][T31149] ? sk_prot_alloc+0xe7/0x210 [ 1843.457244][T31149] security_sk_alloc+0x4b/0x130 [ 1843.462135][T31149] sk_prot_alloc+0x101/0x210 [ 1843.466768][T31149] ? sk_alloc+0x24/0x350 [ 1843.471056][T31149] sk_alloc+0x3a/0x350 [ 1843.475165][T31149] ? bpf_ctx_init+0x154/0x190 [ 1843.479891][T31149] bpf_prog_test_run_skb+0x371/0x18f0 [ 1843.485300][T31149] ? __fget_files+0x28/0x460 [ 1843.489929][T31149] ? __fget_files+0x3fc/0x460 [ 1843.494661][T31149] ? cpu_online+0x60/0x60 [ 1843.499030][T31149] bpf_prog_test_run+0x31f/0x390 [ 1843.504008][T31149] __sys_bpf+0x49d/0x890 [ 1843.508283][T31149] ? bpf_link_show_fdinfo+0x390/0x390 [ 1843.513705][T31149] ? lock_chain_count+0x20/0x20 [ 1843.518604][T31149] __x64_sys_bpf+0x7c/0x90 [ 1843.523060][T31149] do_syscall_64+0x55/0xb0 [ 1843.527510][T31149] ? clear_bhb_loop+0x40/0x90 [ 1843.532217][T31149] ? clear_bhb_loop+0x40/0x90 [ 1843.536931][T31149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1843.542853][T31149] RIP: 0033:0x7fd50459e0d9 [ 1843.547307][T31149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.567134][T31149] RSP: 002b:00007fd5053da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1843.575826][T31149] RAX: ffffffffffffffda RBX: 00007fd504825fa0 RCX: 00007fd50459e0d9 [ 1843.583831][T31149] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1843.591831][T31149] RBP: 00007fd5053da090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.599839][T31149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.607864][T31149] R13: 00007fd504826038 R14: 00007fd504825fa0 R15: 00007ffd5eec2968 [ 1843.615902][T31149] [ 1843.852715][T31157] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8024'. [ 1843.890983][T31158] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8023'. [ 1844.069614][T31162] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1844.168032][T31166] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8027'. [ 1844.251890][T31171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8028'. [ 1847.340883][T31189] validate_nla: 8 callbacks suppressed [ 1847.340928][T31189] netlink: 'syz.0.8034': attribute type 10 has an invalid length. [ 1847.355683][T31189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8034'. [ 1847.675932][T31202] netlink: 'syz.3.8037': attribute type 10 has an invalid length. [ 1847.706697][T31202] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8037'. [ 1847.847177][T31208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8039'. [ 1847.989145][T31210] netlink: 'syz.0.8049': attribute type 10 has an invalid length. [ 1847.997933][T31210] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8049'. [ 1848.329124][T31216] netlink: 'syz.1.8042': attribute type 10 has an invalid length. [ 1848.339217][T31216] netlink: 'syz.1.8042': attribute type 19 has an invalid length. [ 1848.349422][T31216] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8042'. [ 1848.381865][T31221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8044'. [ 1848.392746][T31221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8044'. [ 1848.403786][T31221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8044'. [ 1848.446745][T31219] netlink: 'syz.3.8043': attribute type 10 has an invalid length. [ 1848.455198][T31219] hsr0: left allmulticast mode [ 1848.465058][T31219] hsr_slave_0: left allmulticast mode [ 1848.471984][T31219] hsr_slave_1: left allmulticast mode [ 1848.480620][T31219] bridge0: port 2(hsr0) entered disabled state [ 1848.520126][T31219] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1848.738080][T31227] netlink: 'syz.1.8046': attribute type 10 has an invalid length. [ 1848.746355][T31227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8046'. [ 1849.395532][T31239] netlink: 'syz.1.8051': attribute type 10 has an invalid length. [ 1849.407301][T31239] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1849.511686][T31241] netlink: 'syz.3.8053': attribute type 10 has an invalid length. [ 1849.532392][T31241] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8053'. [ 1849.549522][T31241] bridge0: port 2(hsr0) entered blocking state [ 1849.563946][T31241] bridge0: port 2(hsr0) entered disabled state [ 1849.577508][T31241] hsr0: entered allmulticast mode [ 1849.584500][T31241] hsr_slave_0: entered allmulticast mode [ 1849.597202][T31241] hsr_slave_1: entered allmulticast mode [ 1849.655245][T31241] bridge0: port 2(hsr0) entered blocking state [ 1849.662739][T31241] bridge0: port 2(hsr0) entered forwarding state [ 1850.766692][T31262] netlink: 'syz.2.8055': attribute type 10 has an invalid length. [ 1851.119691][T31273] bridge0: port 2(hsr0) entered disabled state [ 1851.126440][T31273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.145758][T31273] bridge0: entered allmulticast mode [ 1851.238431][T31273] hsr0: left allmulticast mode [ 1851.249865][T31273] hsr_slave_0: left allmulticast mode [ 1851.263031][T31273] hsr_slave_1: left allmulticast mode [ 1851.278732][T31273] bridge0: port 2(hsr0) entered disabled state [ 1851.425124][T31273] bridge_slave_0: left allmulticast mode [ 1851.430997][T31273] bridge_slave_0: left promiscuous mode [ 1851.441842][T31273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.318000][T31283] hsr0: left allmulticast mode [ 1852.331886][T31283] hsr_slave_0: left allmulticast mode [ 1852.346805][T31283] hsr_slave_1: left allmulticast mode [ 1852.353739][T31283] bridge0: port 3(hsr0) entered disabled state [ 1852.488378][T31283] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1852.563345][T31286] validate_nla: 3 callbacks suppressed [ 1852.563385][T31286] netlink: 'syz.3.8065': attribute type 10 has an invalid length. [ 1852.601184][T31286] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1853.017119][T31302] netlink: 'syz.2.8070': attribute type 10 has an invalid length. [ 1853.035615][T31300] netlink: 'syz.3.8069': attribute type 10 has an invalid length. [ 1853.064813][T31300] netlink: 'syz.3.8069': attribute type 19 has an invalid length. [ 1853.093214][T31300] __nla_validate_parse: 2 callbacks suppressed [ 1853.093233][T31300] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8069'. [ 1853.235851][T31305] netlink: 'syz.0.8071': attribute type 25 has an invalid length. [ 1853.246146][T31305] netlink: 'syz.0.8071': attribute type 3 has an invalid length. [ 1853.273209][T31305] netlink: 'syz.0.8071': attribute type 10 has an invalid length. [ 1853.293347][T31305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8071'. [ 1853.333515][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.341185][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.581463][T31307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8072'. [ 1853.630965][T31311] FAULT_INJECTION: forcing a failure. [ 1853.630965][T31311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.680126][T31313] bridge0: port 3(batadv0) entered disabled state [ 1853.687896][T31313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.688369][T31311] CPU: 1 PID: 31311 Comm: syz.3.8073 Not tainted syzkaller #0 [ 1853.702481][T31311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1853.712602][T31311] Call Trace: [ 1853.715948][T31311] [ 1853.718937][T31311] dump_stack_lvl+0x18c/0x250 [ 1853.723724][T31311] ? show_regs_print_info+0x20/0x20 [ 1853.728989][T31311] ? load_image+0x420/0x420 [ 1853.733549][T31311] ? __might_fault+0xaa/0x120 [ 1853.738268][T31311] ? __lock_acquire+0x7d80/0x7d80 [ 1853.743351][T31311] should_fail_ex+0x394/0x4c0 [ 1853.748082][T31311] _copy_from_iter+0x1cd/0x1290 [ 1853.752980][T31311] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1853.758403][T31311] ? setid_policy_lookup+0x24/0x550 [ 1853.763660][T31311] ? copyout_mc+0x70/0x70 [ 1853.768036][T31311] ? __virt_addr_valid+0x10c/0x380 [ 1853.773295][T31311] ? __virt_addr_valid+0x10c/0x380 [ 1853.778470][T31311] ? __virt_addr_valid+0x10c/0x380 [ 1853.783679][T31311] ? __check_object_size+0x4fc/0xa40 [ 1853.789024][T31311] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 1853.794809][T31311] ? skb_put+0x112/0x210 [ 1853.799108][T31311] queue_oob+0x14d/0x540 [ 1853.803404][T31311] ? scm_stat_add+0xc0/0xc0 [ 1853.807955][T31311] ? trace_event_raw_event_lock+0x240/0x240 [ 1853.813938][T31311] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 1853.820063][T31311] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 1853.826358][T31311] unix_stream_sendmsg+0xaf3/0xbf0 [ 1853.831542][T31311] ? aa_af_perm+0x330/0x330 [ 1853.836092][T31311] ? __might_fault+0xaa/0x120 [ 1853.840816][T31311] ? unix_show_fdinfo+0x280/0x280 [ 1853.845964][T31311] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1853.852439][T31311] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1853.858033][T31311] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1853.863361][T31311] ? security_socket_sendmsg+0x80/0xa0 [ 1853.868857][T31311] ? unix_show_fdinfo+0x280/0x280 [ 1853.873925][T31311] ____sys_sendmsg+0x61b/0x980 [ 1853.878751][T31311] ? __sys_sendmsg_sock+0x30/0x30 [ 1853.883815][T31311] ? __import_iovec+0x5f2/0x850 [ 1853.888730][T31311] ? import_iovec+0x73/0xa0 [ 1853.893287][T31311] ___sys_sendmsg+0x2a6/0x360 [ 1853.898011][T31311] ? __sys_sendmsg+0x2b0/0x2b0 [ 1853.902849][T31311] ? __lock_acquire+0x7d80/0x7d80 [ 1853.907959][T31311] __se_sys_sendmsg+0x1d0/0x2c0 [ 1853.912853][T31311] ? __x64_sys_sendmsg+0x80/0x80 [ 1853.917866][T31311] ? lockdep_hardirqs_on+0x98/0x150 [ 1853.923114][T31311] do_syscall_64+0x55/0xb0 [ 1853.927569][T31311] ? clear_bhb_loop+0x40/0x90 [ 1853.932308][T31311] ? clear_bhb_loop+0x40/0x90 [ 1853.937034][T31311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1853.942968][T31311] RIP: 0033:0x7f89faf9e0d9 [ 1853.947449][T31311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.967100][T31311] RSP: 002b:00007f89f91f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1853.975560][T31311] RAX: ffffffffffffffda RBX: 00007f89fb225fa0 RCX: 00007f89faf9e0d9 [ 1853.983574][T31311] RDX: 0000000010044001 RSI: 0000200000000200 RDI: 0000000000000004 [ 1853.991586][T31311] RBP: 00007f89f91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1853.999591][T31311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1854.007600][T31311] R13: 00007f89fb226038 R14: 00007f89fb225fa0 R15: 00007ffc04aab6a8 [ 1854.015638][T31311] [ 1854.047262][T31313] bridge0: entered allmulticast mode [ 1854.126310][T31313] bridge0: port 3(batadv0) entered disabled state [ 1854.178468][T31313] bridge_slave_0: left allmulticast mode [ 1854.202105][T31313] bridge_slave_0: left promiscuous mode [ 1854.224311][T31313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.322189][T31316] netlink: 'syz.0.8075': attribute type 10 has an invalid length. [ 1854.331999][T31316] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1854.345267][T31319] netlink: 'syz.3.8077': attribute type 10 has an invalid length. [ 1854.355504][T31319] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1854.387062][T31322] netlink: 'syz.2.8076': attribute type 10 has an invalid length. [ 1854.407802][T31322] hsr0: left allmulticast mode [ 1854.412799][T31322] hsr_slave_0: left allmulticast mode [ 1854.446836][T31322] hsr_slave_1: left allmulticast mode [ 1854.453793][T31322] bridge0: port 2(hsr0) entered disabled state [ 1854.521406][T31322] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1855.427811][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 1855.487981][T31342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8082'. [ 1855.701908][T31352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8084'. [ 1855.785233][T31354] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1855.838745][T31356] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1857.057553][T31369] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8091'. [ 1857.354577][T31378] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8093'. [ 1857.474675][T31375] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1857.548664][T31380] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8094'. [ 1857.900362][T31382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8096'. [ 1858.026214][T31392] validate_nla: 10 callbacks suppressed [ 1858.026254][T31392] netlink: 'syz.1.8099': attribute type 10 has an invalid length. [ 1858.057168][T31392] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1858.174847][T31397] netlink: 'syz.0.8101': attribute type 10 has an invalid length. [ 1858.184356][T31397] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1858.674374][T31402] netlink: 'syz.0.8102': attribute type 10 has an invalid length. [ 1859.038399][T31408] netlink: 'syz.3.8104': attribute type 10 has an invalid length. [ 1859.073688][T31408] netlink: 'syz.3.8104': attribute type 19 has an invalid length. [ 1859.103653][T31408] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8104'. [ 1859.113332][T31404] netlink: 'syz.2.8103': attribute type 10 has an invalid length. [ 1859.122417][T31404] netlink: 'syz.2.8103': attribute type 19 has an invalid length. [ 1859.136621][T31404] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8103'. [ 1859.245726][T31412] netlink: 'syz.0.8106': attribute type 10 has an invalid length. [ 1859.259449][T31412] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8106'. [ 1859.316801][T31412] bridge0: port 3(hsr0) entered blocking state [ 1859.350777][T31412] bridge0: port 3(hsr0) entered disabled state [ 1859.365003][T31412] hsr0: entered allmulticast mode [ 1859.370726][T31412] hsr_slave_0: entered allmulticast mode [ 1859.381662][T31412] hsr_slave_1: entered allmulticast mode [ 1859.430389][T31412] bridge0: port 3(hsr0) entered blocking state [ 1859.431389][T31420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8109'. [ 1859.437821][T31412] bridge0: port 3(hsr0) entered forwarding state [ 1859.488060][T31420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8109'. [ 1859.515505][T31423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8109'. [ 1859.708160][T31420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8109'. [ 1859.750601][T31429] FAULT_INJECTION: forcing a failure. [ 1859.750601][T31429] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.765291][T31425] netlink: 'syz.1.8110': attribute type 10 has an invalid length. [ 1859.765601][T31425] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1859.790068][T31431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8111'. [ 1859.790742][T31429] CPU: 0 PID: 31429 Comm: syz.0.8112 Not tainted syzkaller #0 [ 1859.806641][T31429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1859.816744][T31429] Call Trace: [ 1859.820077][T31429] [ 1859.823059][T31429] dump_stack_lvl+0x18c/0x250 [ 1859.827832][T31429] ? show_regs_print_info+0x20/0x20 [ 1859.833094][T31429] ? load_image+0x420/0x420 [ 1859.837671][T31429] ? __lock_acquire+0x7d80/0x7d80 [ 1859.842755][T31429] should_fail_ex+0x394/0x4c0 [ 1859.847539][T31429] should_failslab+0x9/0x20 [ 1859.852092][T31429] slab_pre_alloc_hook+0x59/0x300 [ 1859.857186][T31429] ? security_sk_alloc+0x4b/0x130 [ 1859.862242][T31429] ? security_sk_alloc+0x4b/0x130 [ 1859.867297][T31429] __kmem_cache_alloc_node+0x53/0x250 [ 1859.872713][T31429] ? security_sk_alloc+0x4b/0x130 [ 1859.877776][T31429] __kmalloc+0xa7/0x240 [ 1859.881966][T31429] ? sk_prot_alloc+0xe7/0x210 [ 1859.886688][T31429] security_sk_alloc+0x4b/0x130 [ 1859.891575][T31429] sk_prot_alloc+0x101/0x210 [ 1859.896208][T31429] ? sk_alloc+0x24/0x350 [ 1859.900503][T31429] sk_alloc+0x3a/0x350 [ 1859.904618][T31429] bpf_prog_test_run_skb+0x371/0x18f0 [ 1859.910033][T31429] ? __fget_files+0x28/0x460 [ 1859.914657][T31429] ? __fget_files+0x3fc/0x460 [ 1859.919380][T31429] ? cpu_online+0x60/0x60 [ 1859.923755][T31429] bpf_prog_test_run+0x31f/0x390 [ 1859.928727][T31429] __sys_bpf+0x49d/0x890 [ 1859.933026][T31429] ? bpf_link_show_fdinfo+0x390/0x390 [ 1859.938447][T31429] ? lock_chain_count+0x20/0x20 [ 1859.943347][T31429] __x64_sys_bpf+0x7c/0x90 [ 1859.947795][T31429] do_syscall_64+0x55/0xb0 [ 1859.952240][T31429] ? clear_bhb_loop+0x40/0x90 [ 1859.956948][T31429] ? clear_bhb_loop+0x40/0x90 [ 1859.961661][T31429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1859.967590][T31429] RIP: 0033:0x7f267779e0d9 [ 1859.972038][T31429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.991696][T31429] RSP: 002b:00007f267862e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1860.000151][T31429] RAX: ffffffffffffffda RBX: 00007f2677a25fa0 RCX: 00007f267779e0d9 [ 1860.008157][T31429] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1860.016157][T31429] RBP: 00007f267862e090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.024156][T31429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.032151][T31429] R13: 00007f2677a26038 R14: 00007f2677a25fa0 R15: 00007ffebd727d18 [ 1860.040162][T31429] [ 1860.311527][T31435] netlink: 'syz.2.8114': attribute type 10 has an invalid length. [ 1860.900773][T31440] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8115'. [ 1861.024254][T31450] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8117'. [ 1861.895165][T31460] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1862.038137][T31462] hsr0: left allmulticast mode [ 1862.043543][T31462] hsr_slave_0: left allmulticast mode [ 1862.058762][T31462] hsr_slave_1: left allmulticast mode [ 1862.066854][T31462] bridge0: port 3(hsr0) entered disabled state [ 1862.150861][T31462] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1862.217001][T31468] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1863.048475][T31486] validate_nla: 9 callbacks suppressed [ 1863.048517][T31486] netlink: 'syz.3.8132': attribute type 10 has an invalid length. [ 1863.285982][T31488] netlink: 'syz.1.8130': attribute type 10 has an invalid length. [ 1863.318455][T31488] netlink: 'syz.1.8130': attribute type 19 has an invalid length. [ 1863.460001][T31491] netlink: 'syz.2.8134': attribute type 10 has an invalid length. [ 1863.597741][T31495] netlink: 'syz.3.8135': attribute type 10 has an invalid length. [ 1863.617275][T31495] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1863.677437][T31499] netlink: 'syz.1.8136': attribute type 10 has an invalid length. [ 1863.685610][T31499] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1864.263158][T31496] delete_channel: no stack [ 1864.656152][T31518] netlink: 'syz.0.8143': attribute type 10 has an invalid length. [ 1864.675995][T31518] __nla_validate_parse: 4 callbacks suppressed [ 1864.676039][T31518] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8143'. [ 1864.708387][T31518] bridge0: port 3(hsr0) entered blocking state [ 1864.715865][T31518] bridge0: port 3(hsr0) entered disabled state [ 1864.725475][T31518] hsr0: entered allmulticast mode [ 1864.734124][T31518] hsr_slave_0: entered allmulticast mode [ 1864.741562][T31518] hsr_slave_1: entered allmulticast mode [ 1864.765615][T31518] bridge0: port 3(hsr0) entered blocking state [ 1864.772460][T31518] bridge0: port 3(hsr0) entered forwarding state [ 1864.793119][T31514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8141'. [ 1865.073302][T31530] netlink: 'syz.1.8145': attribute type 10 has an invalid length. [ 1865.165480][T31529] netlink: 'syz.3.8146': attribute type 10 has an invalid length. [ 1865.189589][T31529] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1868.210704][T31537] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 1868.268909][T31537] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 1868.799286][T31547] netlink: 'syz.0.8151': attribute type 25 has an invalid length. [ 1868.825057][T31547] netlink: 'syz.0.8151': attribute type 3 has an invalid length. [ 1868.873686][T31547] netlink: 'syz.0.8151': attribute type 10 has an invalid length. [ 1868.896654][T31547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8151'. [ 1869.369585][T31553] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8154'. [ 1869.668454][T31559] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8156'. [ 1870.848344][T31571] netlink: 'syz.1.8158': attribute type 10 has an invalid length. [ 1871.153019][T18390] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1871.273348][T31578] netlink: 'syz.2.8159': attribute type 10 has an invalid length. [ 1871.299031][T31578] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8159'. [ 1871.321073][T31578] bridge0: port 2(hsr0) entered blocking state [ 1871.364881][T31578] bridge0: port 2(hsr0) entered disabled state [ 1871.417313][T31578] hsr0: entered allmulticast mode [ 1871.436633][T31578] hsr_slave_0: entered allmulticast mode [ 1871.488890][T31578] hsr_slave_1: entered allmulticast mode [ 1871.587101][T31578] bridge0: port 2(hsr0) entered blocking state [ 1871.594419][T31578] bridge0: port 2(hsr0) entered forwarding state [ 1871.790570][T31583] netlink: 'syz.1.8160': attribute type 10 has an invalid length. [ 1871.832542][T31583] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1872.011381][T31589] netlink: 'syz.0.8161': attribute type 10 has an invalid length. [ 1872.051183][T31589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8161'. [ 1872.213860][T31593] netlink: set zone limit has 8 unknown bytes [ 1872.456723][T31597] netlink: 'syz.0.8164': attribute type 25 has an invalid length. [ 1872.470082][T31597] netlink: 'syz.0.8164': attribute type 3 has an invalid length. [ 1872.486663][T31597] netlink: 'syz.0.8164': attribute type 10 has an invalid length. [ 1872.506932][T31597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8164'. [ 1872.695282][T31603] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8166'. [ 1873.226726][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 1873.448104][T31610] FAULT_INJECTION: forcing a failure. [ 1873.448104][T31610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1873.508993][T31610] CPU: 1 PID: 31610 Comm: syz.0.8170 Not tainted syzkaller #0 [ 1873.516577][T31610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1873.526716][T31610] Call Trace: [ 1873.530076][T31610] [ 1873.533088][T31610] dump_stack_lvl+0x18c/0x250 [ 1873.537877][T31610] ? show_regs_print_info+0x20/0x20 [ 1873.543147][T31610] ? load_image+0x420/0x420 [ 1873.547769][T31610] ? __might_fault+0xaa/0x120 [ 1873.552548][T31610] ? __lock_acquire+0x7d80/0x7d80 [ 1873.557675][T31610] should_fail_ex+0x394/0x4c0 [ 1873.562461][T31610] _copy_from_user+0x2f/0xe0 [ 1873.567135][T31610] __sys_bpf+0x23e/0x890 [ 1873.571469][T31610] ? bpf_link_show_fdinfo+0x390/0x390 [ 1873.576977][T31610] ? lock_chain_count+0x20/0x20 [ 1873.581950][T31610] __x64_sys_bpf+0x7c/0x90 [ 1873.586462][T31610] do_syscall_64+0x55/0xb0 [ 1873.590961][T31610] ? clear_bhb_loop+0x40/0x90 [ 1873.595712][T31610] ? clear_bhb_loop+0x40/0x90 [ 1873.600477][T31610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1873.606453][T31610] RIP: 0033:0x7f267779e0d9 [ 1873.610948][T31610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1873.630638][T31610] RSP: 002b:00007f267862e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1873.639144][T31610] RAX: ffffffffffffffda RBX: 00007f2677a25fa0 RCX: 00007f267779e0d9 [ 1873.647195][T31610] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000001 [ 1873.655268][T31610] RBP: 00007f267862e090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.663311][T31610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.671388][T31610] R13: 00007f2677a26038 R14: 00007f2677a25fa0 R15: 00007ffebd727d18 [ 1873.679491][T31610] [ 1874.356113][T31621] validate_nla: 1 callbacks suppressed [ 1874.380647][T31621] netlink: 'syz.1.8172': attribute type 10 has an invalid length. [ 1874.467076][T31621] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8172'. [ 1874.783365][T31625] netlink: 'syz.3.8174': attribute type 10 has an invalid length. [ 1874.806998][T31625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8174'. [ 1875.723597][T31636] netlink: 'syz.0.8178': attribute type 25 has an invalid length. [ 1875.746658][T31636] netlink: 'syz.0.8178': attribute type 3 has an invalid length. [ 1875.799498][T31636] netlink: 'syz.0.8178': attribute type 10 has an invalid length. [ 1875.818148][T31636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8178'. [ 1876.079025][T31639] netlink: 'syz.3.8179': attribute type 10 has an invalid length. [ 1876.126232][T31639] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8179'. [ 1876.252716][T31642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8180'. [ 1876.379295][T31646] can: request_module (can-proto-0) failed. [ 1876.410448][T31646] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1876.512068][T31651] netlink: 'syz.2.8190': attribute type 10 has an invalid length. [ 1876.527394][T31651] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8190'. [ 1877.111214][T31657] netlink: 'syz.2.8183': attribute type 10 has an invalid length. [ 1877.187078][T31657] hsr0: left allmulticast mode [ 1877.191988][T31657] hsr_slave_0: left allmulticast mode [ 1877.226911][T31657] hsr_slave_1: left allmulticast mode [ 1877.269190][T31657] bridge0: port 2(hsr0) entered disabled state [ 1877.362031][T31657] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1877.929543][T31666] FAULT_INJECTION: forcing a failure. [ 1877.929543][T31666] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.949082][T31661] netlink: 'syz.1.8184': attribute type 10 has an invalid length. [ 1877.966689][T31666] CPU: 0 PID: 31666 Comm: syz.2.8186 Not tainted syzkaller #0 [ 1877.974261][T31666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1877.978414][T31661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8184'. [ 1877.984361][T31666] Call Trace: [ 1877.984378][T31666] [ 1877.984395][T31666] dump_stack_lvl+0x18c/0x250 [ 1877.984454][T31666] ? show_regs_print_info+0x20/0x20 [ 1877.984498][T31666] ? load_image+0x420/0x420 [ 1877.984555][T31666] ? __lock_acquire+0x7d80/0x7d80 [ 1877.984619][T31666] should_fail_ex+0x394/0x4c0 [ 1877.984690][T31666] should_failslab+0x9/0x20 [ 1877.984729][T31666] slab_pre_alloc_hook+0x59/0x300 [ 1877.984779][T31666] ? security_sk_alloc+0x4b/0x130 [ 1877.984812][T31666] ? security_sk_alloc+0x4b/0x130 [ 1877.984842][T31666] __kmem_cache_alloc_node+0x53/0x250 [ 1877.984903][T31666] ? security_sk_alloc+0x4b/0x130 [ 1877.984933][T31666] __kmalloc+0xa7/0x240 [ 1878.058764][T31666] ? sk_prot_alloc+0xe7/0x210 [ 1878.063518][T31666] security_sk_alloc+0x4b/0x130 [ 1878.068437][T31666] sk_prot_alloc+0x101/0x210 [ 1878.073091][T31666] ? sk_alloc+0x24/0x350 [ 1878.077400][T31666] sk_alloc+0x3a/0x350 [ 1878.081526][T31666] ? bpf_ctx_init+0x154/0x190 [ 1878.086274][T31666] bpf_prog_test_run_skb+0x371/0x18f0 [ 1878.091711][T31666] ? __fget_files+0x28/0x460 [ 1878.096375][T31666] ? __fget_files+0x3fc/0x460 [ 1878.101148][T31666] ? cpu_online+0x60/0x60 [ 1878.105544][T31666] bpf_prog_test_run+0x31f/0x390 [ 1878.110559][T31666] __sys_bpf+0x49d/0x890 [ 1878.114864][T31666] ? bpf_link_show_fdinfo+0x390/0x390 [ 1878.120339][T31666] ? lock_chain_count+0x20/0x20 [ 1878.125269][T31666] __x64_sys_bpf+0x7c/0x90 [ 1878.129744][T31666] do_syscall_64+0x55/0xb0 [ 1878.134210][T31666] ? clear_bhb_loop+0x40/0x90 [ 1878.138957][T31666] ? clear_bhb_loop+0x40/0x90 [ 1878.143700][T31666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1878.149647][T31666] RIP: 0033:0x7fd50459e0d9 [ 1878.154121][T31666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1878.173802][T31666] RSP: 002b:00007fd5053da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1878.182275][T31666] RAX: ffffffffffffffda RBX: 00007fd504825fa0 RCX: 00007fd50459e0d9 [ 1878.190317][T31666] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1878.198340][T31666] RBP: 00007fd5053da090 R08: 0000000000000000 R09: 0000000000000000 [ 1878.206368][T31666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1878.214392][T31666] R13: 00007fd504826038 R14: 00007fd504825fa0 R15: 00007ffd5eec2968 [ 1878.222461][T31666] [ 1878.607481][T31669] netlink: 'syz.0.8187': attribute type 10 has an invalid length. [ 1882.117462][T31687] netlink: 'syz.2.8192': attribute type 10 has an invalid length. [ 1882.160255][T31687] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8192'. [ 1882.169969][T31687] bridge0: port 2(hsr0) entered blocking state [ 1882.189471][T31687] bridge0: port 2(hsr0) entered disabled state [ 1882.197192][T31687] hsr0: entered allmulticast mode [ 1882.226781][T31687] hsr_slave_0: entered allmulticast mode [ 1882.232510][T31687] hsr_slave_1: entered allmulticast mode [ 1882.242268][T31687] bridge0: port 2(hsr0) entered blocking state [ 1882.248668][T31687] bridge0: port 2(hsr0) entered forwarding state [ 1882.438607][T31691] netlink: 'syz.0.8194': attribute type 10 has an invalid length. [ 1883.451095][T31700] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1883.525093][T31714] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1883.583261][T31712] can: request_module (can-proto-0) failed. [ 1886.068288][T31725] netlink: 'syz.3.8202': attribute type 10 has an invalid length. [ 1886.087148][T31725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8202'. [ 1886.147504][T31728] netlink: 'syz.0.8201': attribute type 10 has an invalid length. [ 1886.166532][T31728] hsr0: left allmulticast mode [ 1886.182622][T31728] hsr_slave_0: left allmulticast mode [ 1886.190190][T31728] hsr_slave_1: left allmulticast mode [ 1886.195869][T31728] bridge0: port 3(hsr0) entered disabled state [ 1886.258846][T31728] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1886.319428][T31730] netlink: 'syz.2.8203': attribute type 10 has an invalid length. [ 1886.338720][T31730] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8203'. [ 1886.360598][T31732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8204'. [ 1887.470145][T31748] netlink: 'syz.1.8209': attribute type 10 has an invalid length. [ 1887.803346][T31751] netlink: 'syz.3.8210': attribute type 10 has an invalid length. [ 1888.033814][T31753] netlink: 'syz.1.8211': attribute type 10 has an invalid length. [ 1888.077755][T31753] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1888.421505][T31764] netlink: 'syz.3.8215': attribute type 10 has an invalid length. [ 1888.461500][T31764] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8215'. [ 1888.625338][T31760] netlink: 'syz.2.8213': attribute type 10 has an invalid length. [ 1888.644872][T31760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1888.751384][T31765] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1888.916643][T31770] netlink: 'syz.3.8216': attribute type 10 has an invalid length. [ 1888.924832][T31770] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1889.236806][T31784] netlink: 'syz.1.8226': attribute type 10 has an invalid length. [ 1889.244715][T31784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8226'. [ 1889.398159][T31782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8219'. [ 1889.747467][T31790] netlink: 'syz.0.8220': attribute type 10 has an invalid length. [ 1890.435482][T31802] netlink: 'syz.0.8223': attribute type 10 has an invalid length. [ 1890.453168][T31807] netlink: 'syz.3.8225': attribute type 10 has an invalid length. [ 1890.499808][T31807] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8225'. [ 1890.585928][T31809] hsr0: left allmulticast mode [ 1890.591378][T31809] hsr_slave_0: left allmulticast mode [ 1890.598961][T31809] hsr_slave_1: left allmulticast mode [ 1890.604781][T31809] bridge0: port 2(hsr0) entered disabled state [ 1890.632980][T31809] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1890.779368][T31812] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1891.019690][T31818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8231'. [ 1891.125480][T31820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8232'. [ 1891.232120][T31822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8233'. [ 1892.501664][T31847] validate_nla: 8 callbacks suppressed [ 1892.501703][T31847] netlink: 'syz.2.8241': attribute type 10 has an invalid length. [ 1892.521519][T31847] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1892.694085][T31849] netlink: 'syz.1.8242': attribute type 10 has an invalid length. [ 1892.732156][T31849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8242'. [ 1892.774109][T31851] netlink: 'syz.0.8244': attribute type 25 has an invalid length. [ 1892.784750][T31851] netlink: 'syz.0.8244': attribute type 3 has an invalid length. [ 1892.805060][T31851] netlink: 'syz.0.8244': attribute type 10 has an invalid length. [ 1892.816643][T31851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8244'. [ 1893.173091][T31862] netlink: 'syz.1.8246': attribute type 10 has an invalid length. [ 1893.185849][T31862] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1893.485503][T31868] netlink: 'syz.0.8249': attribute type 10 has an invalid length. [ 1893.666100][T31874] netlink: 'syz.2.8252': attribute type 21 has an invalid length. [ 1893.682893][T31874] netlink: 'syz.2.8252': attribute type 1 has an invalid length. [ 1893.693611][T31874] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.8252'. [ 1893.830076][T31877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8253'. [ 1893.924732][T31879] netlink: 'syz.2.8254': attribute type 10 has an invalid length. [ 1893.935089][T31879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8254'. [ 1894.165073][T31883] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1894.259232][T31885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8257'. [ 1894.545822][T31891] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8260'. [ 1894.577167][T31891] bridge0: port 2(hsr0) entered blocking state [ 1894.597731][T31891] bridge0: port 2(hsr0) entered disabled state [ 1894.605778][T31891] hsr0: entered allmulticast mode [ 1894.640198][T31891] hsr_slave_0: entered allmulticast mode [ 1894.646282][T31891] hsr_slave_1: entered allmulticast mode [ 1894.685926][T31891] bridge0: port 2(hsr0) entered blocking state [ 1894.693377][T31891] bridge0: port 2(hsr0) entered forwarding state [ 1894.963337][T31907] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1895.132562][T31913] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1895.299994][T31917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8268'. [ 1895.474853][T31925] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8270'. [ 1895.520583][T31924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1896.124963][T31935] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1896.245635][T31939] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1896.659531][T31946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8279'. [ 1896.686267][T31948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8280'. [ 1903.376036][T31970] validate_nla: 19 callbacks suppressed [ 1903.376057][T31970] netlink: 'syz.3.8287': attribute type 10 has an invalid length. [ 1905.152025][T31972] netlink: 'syz.1.8288': attribute type 10 has an invalid length. [ 1905.201116][T31972] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1905.801501][T31979] netlink: 'syz.0.8290': attribute type 10 has an invalid length. [ 1905.825931][T31981] netlink: 'syz.1.8291': attribute type 10 has an invalid length. [ 1905.847894][T31981] __nla_validate_parse: 1 callbacks suppressed [ 1905.847914][T31981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8291'. [ 1906.414211][T31988] netlink: 'syz.0.8293': attribute type 10 has an invalid length. [ 1906.422442][T31988] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1906.919897][T31998] FAULT_INJECTION: forcing a failure. [ 1906.919897][T31998] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.943607][T31998] CPU: 0 PID: 31998 Comm: syz.0.8296 Not tainted syzkaller #0 [ 1906.951173][T31998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1906.961304][T31998] Call Trace: [ 1906.964649][T31998] [ 1906.967656][T31998] dump_stack_lvl+0x18c/0x250 [ 1906.972711][T31998] ? show_regs_print_info+0x20/0x20 [ 1906.977992][T31998] ? load_image+0x420/0x420 [ 1906.982605][T31998] ? __might_sleep+0xe0/0xe0 [ 1906.987307][T31998] ? __lock_acquire+0x7d80/0x7d80 [ 1906.992441][T31998] should_fail_ex+0x394/0x4c0 [ 1906.997251][T31998] should_failslab+0x9/0x20 [ 1907.001846][T31998] slab_pre_alloc_hook+0x59/0x300 [ 1907.006973][T31998] ? kvmalloc_node+0x70/0x180 [ 1907.011739][T31998] ? kvmalloc_node+0x70/0x180 [ 1907.016495][T31998] __kmem_cache_alloc_node+0x53/0x250 [ 1907.021979][T31998] ? kvmalloc_node+0x70/0x180 [ 1907.026733][T31998] __kmalloc_node+0xa6/0x240 [ 1907.031397][T31998] kvmalloc_node+0x70/0x180 [ 1907.035960][T31998] page_pool_create+0x1eb/0x5c0 [ 1907.040884][T31998] bpf_test_run_xdp_live+0x203/0x1b30 [ 1907.046347][T31998] ? 0xffffffffa0004740 [ 1907.050575][T31998] ? 0xffffffffa0004740 [ 1907.054781][T31998] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1907.060755][T31998] ? xdp_convert_md_to_buff+0x330/0x330 [ 1907.066490][T31998] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1907.072818][T31998] ? _copy_from_user+0xa5/0xe0 [ 1907.077648][T31998] ? bpf_test_init+0x119/0x140 [ 1907.082462][T31998] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1907.087986][T31998] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1907.093419][T31998] ? __lock_acquire+0x7d80/0x7d80 [ 1907.098535][T31998] ? dev_put+0x80/0x80 [ 1907.102705][T31998] ? dev_put+0x80/0x80 [ 1907.106837][T31998] bpf_prog_test_run+0x31f/0x390 [ 1907.111853][T31998] __sys_bpf+0x49d/0x890 [ 1907.116164][T31998] ? bpf_link_show_fdinfo+0x390/0x390 [ 1907.121636][T31998] ? lock_chain_count+0x20/0x20 [ 1907.126613][T31998] __x64_sys_bpf+0x7c/0x90 [ 1907.131112][T31998] do_syscall_64+0x55/0xb0 [ 1907.135582][T31998] ? clear_bhb_loop+0x40/0x90 [ 1907.140310][T31998] ? clear_bhb_loop+0x40/0x90 [ 1907.145046][T31998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1907.150987][T31998] RIP: 0033:0x7f267779e0d9 [ 1907.155450][T31998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1907.175109][T31998] RSP: 002b:00007f267862e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1907.183599][T31998] RAX: ffffffffffffffda RBX: 00007f2677a25fa0 RCX: 00007f267779e0d9 [ 1907.191625][T31998] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1907.199650][T31998] RBP: 00007f267862e090 R08: 0000000000000000 R09: 0000000000000000 [ 1907.207666][T31998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1907.215699][T31998] R13: 00007f2677a26038 R14: 00007f2677a25fa0 R15: 00007ffebd727d18 [ 1907.223774][T31998] [ 1907.243865][T31998] page_pool_create() gave up with errno -12 [ 1907.555780][T32003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8297'. [ 1910.537222][T32008] netlink: 'syz.3.8299': attribute type 10 has an invalid length. [ 1910.545213][T32008] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1910.562852][T32011] netlink: 'syz.0.8300': attribute type 25 has an invalid length. [ 1910.571649][T32011] netlink: 'syz.0.8300': attribute type 3 has an invalid length. [ 1910.583002][T32012] netlink: 'syz.0.8300': attribute type 10 has an invalid length. [ 1910.591087][T32012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1910.833815][T32020] netlink: 'syz.0.8303': attribute type 39 has an invalid length. [ 1911.220461][T32020] hsr_slave_1 (unregistering): left promiscuous mode [ 1911.325934][T32016] netlink: 'syz.1.8301': attribute type 10 has an invalid length. [ 1911.778637][T32028] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1911.923576][T32028] netlink: 'syz.3.8305': attribute type 21 has an invalid length. [ 1911.968862][T32028] netlink: 'syz.3.8305': attribute type 6 has an invalid length. [ 1911.981678][T32028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1911.996466][T32036] netlink: 'syz.1.8304': attribute type 10 has an invalid length. [ 1912.039135][T32036] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1912.474149][T32042] netlink: 'syz.0.8309': attribute type 2 has an invalid length. [ 1912.501414][T32042] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8309'. [ 1912.539008][T32041] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1912.665540][T32042] sit0: left promiscuous mode [ 1912.998595][T18390] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1913.009440][T18390] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1913.017593][T18390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1913.028295][T18390] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1913.047247][T18390] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1913.054811][T18390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1913.646045][T32048] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8310'. [ 1913.827678][T32054] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1913.984180][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.111440][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.172021][T32045] chnl_net:caif_netlink_parms(): no params data found [ 1914.228364][T32062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8313'. [ 1914.294943][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.371003][T32070] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.8314'. [ 1914.438480][T32069] hsr_slave_1 (unregistering): left promiscuous mode [ 1914.651575][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.670023][T32077] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.8316'. [ 1914.696972][T32079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8316'. [ 1914.752434][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.763413][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.919493][T32045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.947483][T32045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.954771][T32045] bridge_slave_0: entered allmulticast mode [ 1914.965780][T32045] bridge_slave_0: entered promiscuous mode [ 1914.976186][T32045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.983827][T32045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.991814][T32045] bridge_slave_1: entered allmulticast mode [ 1914.999588][T32045] bridge_slave_1: entered promiscuous mode [ 1915.015049][T32084] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1915.111202][T32045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1915.144231][T32089] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8318'. [ 1915.171672][T32045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1915.226748][T18390] Bluetooth: hci3: command tx timeout [ 1915.323507][T32045] team0: Port device team_slave_0 added [ 1915.340118][T32045] team0: Port device team_slave_1 added [ 1915.508351][T32045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1915.521571][T32045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1915.554861][T32045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1915.610917][T32045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1915.623637][T32045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1915.659207][T32045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1915.892896][T32045] hsr_slave_0: entered promiscuous mode [ 1915.899804][T32045] hsr_slave_1: entered promiscuous mode [ 1915.906226][T32045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1915.915871][T32045] Cannot create hsr debugfs directory [ 1916.338016][T32045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1916.349101][T32045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1916.360315][T32045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1916.404753][ T42] hsr_slave_0: left promiscuous mode [ 1916.411204][ T42] hsr_slave_1: left promiscuous mode [ 1916.432641][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1916.442047][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1916.458500][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1916.465953][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1916.477617][ T42] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1916.484974][ T42] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1916.494520][ T42] batman_adv: batadv0: Interface deactivated: vlan1 [ 1916.501621][ T42] batman_adv: batadv0: Removing interface: vlan1 [ 1916.509263][ T42] hsr0: left allmulticast mode [ 1916.514322][ T42] bridge0: port 2(hsr0) entered disabled state [ 1916.523099][ T42] bridge_slave_0: left allmulticast mode [ 1916.529059][ T42] bridge_slave_0: left promiscuous mode [ 1916.534838][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.571629][ T42] veth1_macvtap: left promiscuous mode [ 1916.577368][ T42] veth0_macvtap: left promiscuous mode [ 1916.583061][ T42] veth1_vlan: left promiscuous mode [ 1916.590854][ T42] veth0_vlan: left promiscuous mode [ 1917.281776][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1917.307354][T18390] Bluetooth: hci3: command tx timeout [ 1917.338583][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1917.383568][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1917.432166][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1917.481952][ T42] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1917.789570][ T42] bond0 (unregistering): Released all slaves [ 1917.901671][T32045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1918.200451][T32045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1918.245394][T32045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1918.273143][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.280385][ T9885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1918.309702][T13411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.316935][T13411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1918.656242][T32045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.019408][T32045] veth0_vlan: entered promiscuous mode [ 1919.036150][T32045] veth1_vlan: entered promiscuous mode [ 1919.082233][T32045] veth0_macvtap: entered promiscuous mode [ 1919.092839][T32045] veth1_macvtap: entered promiscuous mode [ 1919.114517][T32045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1919.125298][T32045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.137015][T32045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1919.148914][T32045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.161322][T32045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1919.176537][T32045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.193118][T32045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1919.205268][T32045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.220638][T32045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.231457][T32045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.248076][T32045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.258374][T32045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.269617][T32045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.287549][T32045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1919.313422][T32045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.328822][T32045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.341184][T32045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.351852][T32045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.387159][T18390] Bluetooth: hci3: command tx timeout [ 1919.493994][T17792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.523495][T17792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.565560][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.580927][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1921.476545][T18390] Bluetooth: hci3: command tx timeout [ 1976.199655][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.206097][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.629763][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.636159][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.711543][T18390] Bluetooth: hci3: command 0x0406 tx timeout [ 2099.070843][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.077465][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.511321][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.520277][ T1292] ieee802154 phy1 wpan1: encryption failed: -22